$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json) Hash identifier: Hr8PtedjliNZlGG642QqfXLAD6oLJnRRtvPQD2ZatmA= Subject key identifier: 3F:A1:F1:40:ED:8B:7F:C4:1B:89:94:CF:E9:F5:51:43:ED:2A:D7:E1 Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft Manifest number: DC Signing time: Fri 25 Apr 2025 04:36:45 +0000 Manifest this update: Fri 25 Apr 2025 04:36:45 +0000 Manifest next update: Fri 02 May 2025 04:36:45 +0000 Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: lDIcHhZQKbWHwjNxNldbhKSetykqe0WUhIvL3cgr59Q=) 2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: nZ8knmFU4g4M4hAXkEi+bsMV/nWOaZQY4l6coiYGg+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Validity Not Before: Apr 25 04:36:45 2025 GMT Not After : May 2 04:36:45 2025 GMT Subject: CN=680b115d-acfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:d4:39:8c:74:b4:65:8c:0e:32:3e:88:f5: 5e:86:fb:3c:3e:6b:34:53:26:3a:3a:fe:95:25:cb: e3:2e:14:70:6c:56:aa:55:fd:f3:c6:fb:a3:4e:9b: 63:67:d7:fc:1e:b1:9b:cd:a8:85:68:71:a7:1d:3a: 7e:05:f5:bf:3f:b7:1d:ea:ab:a8:b5:50:c9:91:0b: 51:32:33:dc:d0:75:2f:e0:9e:8f:10:90:5b:d2:a2: b2:8d:5c:ab:0d:91:7a:f5:ff:19:c1:36:7c:ae:56: 19:74:45:6e:c9:7c:f6:83:3f:da:0a:f0:d2:30:5a: 49:87:0e:ea:eb:f4:2d:91:b5:b7:b1:c2:0a:b0:93: 58:ab:bc:a8:fe:15:ba:9a:66:53:c3:89:8c:60:b9: e3:1b:c5:99:da:63:db:52:68:fd:4b:a7:e3:a0:69: ad:33:4c:41:42:95:9f:5e:32:13:3f:c6:03:8c:3f: 46:24:ce:ed:c8:62:57:88:4f:da:61:b7:ed:40:73: fb:a7:64:58:a0:e2:d4:6d:f5:15:0d:f0:f8:88:1d: 1d:1e:14:00:e8:4e:c5:76:88:14:80:05:83:21:73: 49:f2:46:1b:35:04:6d:6d:17:0c:ce:2c:32:ef:2f: 50:e9:22:dd:7a:b8:87:3c:df:63:0d:43:dc:34:22: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A1:F1:40:ED:8B:7F:C4:1B:89:94:CF:E9:F5:51:43:ED:2A:D7:E1 X509v3 Authority Key Identifier: keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1e:c9:f3:6d:ae:ea:65:e4:0b:2d:31:a4:20:ee:52:34:7d: 66:28:bf:9a:84:11:b0:b0:e5:ac:ec:5c:44:cb:1c:72:8f:21: 9f:19:c3:4b:e6:89:5e:3e:20:8a:cc:e4:79:2d:8b:2a:39:47: 4d:e1:73:5c:ad:0e:2a:61:c3:14:7d:2c:80:8c:76:57:e8:ca: 61:03:b5:68:d3:fe:bf:ba:ae:70:2c:8c:9d:12:d2:ac:39:d3: 90:8a:fd:a7:60:e7:cb:65:cb:d5:e8:4c:55:8b:a7:b0:ce:5e: fb:8b:cb:68:33:18:e3:5d:76:e3:ca:68:94:75:46:0c:a9:74: 76:49:ea:12:be:f6:f8:de:ff:c2:c6:cf:e5:fa:62:c3:41:28: 6c:0f:29:97:a2:92:d4:7f:9d:3f:7e:a9:9e:6d:6d:0a:48:ef: 01:d1:e6:70:36:cd:b2:58:76:17:8f:c2:09:85:75:f2:34:a8: 68:ce:90:49:dc:f7:8c:30:04:0b:33:8c:0c:02:8b:73:6e:00: 20:27:ef:7d:e4:d0:7a:34:2e:a8:70:f0:d4:7d:35:ee:55:29: 0a:e6:4d:00:2f:8a:b5:9c:01:cc:84:9b:0c:d1:1c:3a:8e:6e: f5:67:c9:e3:ee:7c:33:62:13:26:78:9a:36:42:da:09:53:0a: 1e:54:37:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz MUVFRjU3N0EwHhcNMjUwNDI1MDQzNjQ1WhcNMjUwNTAyMDQzNjQ1WjAYMRYwFAYD VQQDEw02ODBiMTE1ZC1hY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobPUOYx0tGWMDjI+iPVehvs8Pms0UyY6Ov6VJcvjLhRwbFaqVf3zxvujTptj Z9f8HrGbzaiFaHGnHTp+BfW/P7cd6quotVDJkQtRMjPc0HUv4J6PEJBb0qKyjVyr DZF69f8ZwTZ8rlYZdEVuyXz2gz/aCvDSMFpJhw7q6/QtkbW3scIKsJNYq7yo/hW6 mmZTw4mMYLnjG8WZ2mPbUmj9S6fjoGmtM0xBQpWfXjITP8YDjD9GJM7tyGJXiE/a YbftQHP7p2RYoOLUbfUVDfD4iB0dHhQA6E7FdogUgAWDIXNJ8kYbNQRtbRcMziwy 7y9Q6SLderiHPN9jDUPcNCKUZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+h8UDt i3/EG4mUz+n1UUPtKtfhMB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy80QkQwRTVGOEQzN0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdm a0txR3lhNndqTjB4N3ZWM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/Hsnzba7qZeQLLTGkIO5SNH1mKL+ahBGwsOWs7FxEyxxyjyGfGcNL 5olePiCKzOR5LYsqOUdN4XNcrQ4qYcMUfSyAjHZX6MphA7Vo0/6/uq5wLIydEtKs OdOQiv2nYOfLZcvV6ExVi6ewzl77i8toMxjjXXbjymiUdUYMqXR2SeoSvvb43v/C xs/l+mLDQShsDymXopLUf50/fqmebW0KSO8B0eZwNs2yWHYXj8IJhXXyNKhozpBJ 3PeMMAQLM4wMAotzbgAgJ+995NB6NC6ocPDUfTXuVSkK5k0AL4q1nAHMhJsM0Rw6 jm71Z8nj7nwzYhMmeJo2QtoJUwoeVDcN -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:18 2025 by rpki-client