$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: SWJqwWc+gdkvyyfeyXVuL96Ehfch5BdzUtFNZoyw3wE= Subject key identifier: 68:BE:6E:51:15:9C:AE:70:5E:6D:AE:31:4B:F8:22:EA:49:E5:AE:8F Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A3C Signing time: Thu 12 Jun 2025 19:32:16 +0000 Manifest this update: Thu 12 Jun 2025 19:32:16 +0000 Manifest next update: Thu 19 Jun 2025 19:32:16 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: KcEfpp7X65ZFCfcT/ADlOjMBfL6gq7f65yVjHi6QehA=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2627 (0xa43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Jun 12 19:32:16 2025 GMT Not After : Jun 19 19:32:16 2025 GMT Subject: CN=684b2b40-f6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:ce:57:2e:90:ea:3f:cc:b8:0c:4c:2c:69: e5:db:a4:40:43:43:7e:2b:ad:3d:db:ec:c1:c8:5f: 94:45:69:e3:b4:ed:67:7e:0a:cf:8b:69:2e:bd:02: f5:63:09:d8:f3:4c:e9:ea:bb:2d:62:ef:4d:17:80: b8:64:f5:bd:6e:2e:78:ed:a7:5a:45:87:c1:2e:33: ab:8f:e2:b0:95:17:dd:af:11:a2:10:5d:27:50:59: 87:d6:d9:0e:f5:72:22:f0:05:5b:e4:18:51:2b:b2: 74:ae:d2:10:2f:f2:0a:2a:0c:4c:b0:f3:46:ed:27: 12:a3:a3:73:e2:ef:0c:84:5b:3a:dd:37:51:96:20: 53:0b:99:9d:0e:3a:63:2c:33:61:f4:ba:3d:bf:59: 21:40:69:51:b7:4c:2d:46:5f:e9:27:ad:e8:8e:8d: 55:94:ca:7e:44:bf:f5:22:87:b7:39:77:bc:64:55: a9:bd:8f:08:1b:6d:cb:6e:49:15:f9:bd:60:cb:37: 02:1c:9c:89:7c:27:02:d5:99:85:5e:b3:84:24:f0: 41:6b:7f:34:34:cd:25:20:ce:54:3c:af:31:80:d4: 2a:71:1a:07:19:dd:42:17:07:2e:74:d0:56:08:ab: 15:ca:94:80:ee:ea:5e:10:6a:70:08:62:c0:af:19: 5f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BE:6E:51:15:9C:AE:70:5E:6D:AE:31:4B:F8:22:EA:49:E5:AE:8F X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b7:66:f4:36:ea:2a:d8:38:57:c9:d1:f5:7d:11:29:e1:b4: b6:35:bc:5c:98:16:7c:e7:88:5a:73:9b:b2:01:48:a0:bf:b2: 49:26:9b:ed:38:7c:bb:ce:de:56:fd:82:10:80:92:4b:22:b7: 3f:ae:5e:f0:8b:41:7f:e1:0b:4a:3a:6f:cc:93:09:fa:bb:86: 84:1d:61:22:fd:87:d3:a5:95:db:d8:ac:c8:c2:88:2c:64:d7: 67:ee:1c:b5:f4:fd:ba:73:c2:43:c8:1d:6e:5f:14:71:de:c7: 9a:8a:82:ae:58:68:f1:48:9c:cc:c9:85:14:d5:a6:d2:0b:cf: 81:b6:15:4d:99:c4:45:66:6c:a6:3c:3c:f9:01:ef:6b:ac:96: 8c:3d:74:01:50:e9:35:47:7d:69:b6:23:34:57:9a:4b:f7:ff: cf:d8:ec:43:06:83:3f:46:b8:19:fa:0f:f7:1e:43:e0:b4:b7: b0:c1:1d:d8:bc:4d:ac:9a:25:f3:f2:4d:48:54:c5:c9:7a:91: b9:b7:5a:31:3c:de:c9:32:7d:ae:2a:0d:13:c0:76:ff:ad:f4: f4:c5:60:64:e2:62:d8:c9:ea:d1:94:ab:1b:18:88:a1:1a:fa: 27:77:6f:de:43:8b:53:c7:cd:77:79:8d:e5:fd:27:cf:38:95: 5b:de:00:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUwNjEyMTkzMjE2WhcNMjUwNjE5MTkzMjE2WjAYMRYwFAYD VQQDEw02ODRiMmI0MC1mNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRHOVy6Q6j/MuAxMLGnl26RAQ0N+K6092+zByF+URWnjtO1nfgrPi2kuvQL1 YwnY80zp6rstYu9NF4C4ZPW9bi547adaRYfBLjOrj+KwlRfdrxGiEF0nUFmH1tkO 9XIi8AVb5BhRK7J0rtIQL/IKKgxMsPNG7ScSo6Nz4u8MhFs63TdRliBTC5mdDjpj LDNh9Lo9v1khQGlRt0wtRl/pJ63ojo1VlMp+RL/1Ioe3OXe8ZFWpvY8IG23LbkkV +b1gyzcCHJyJfCcC1ZmFXrOEJPBBa380NM0lIM5UPK8xgNQqcRoHGd1CFwcudNBW CKsVypSA7upeEGpwCGLArxlfgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi+blEV nK5wXm2uMUv4IupJ5a6PMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBct2b0Nuoq2DhXydH1fREp4bS2NbxcmBZ854hac5uyAUigv7JJJpvt OHy7zt5W/YIQgJJLIrc/rl7wi0F/4QtKOm/Mkwn6u4aEHWEi/YfTpZXb2KzIwogs ZNdn7hy19P26c8JDyB1uXxRx3seaioKuWGjxSJzMyYUU1abSC8+BthVNmcRFZmym PDz5Ae9rrJaMPXQBUOk1R31ptiM0V5pL9//P2OxDBoM/RrgZ+g/3HkPgtLewwR3Y vE2smiXz8k1IVMXJepG5t1oxPN7JMn2uKg0TwHb/rfT0xWBk4mLYyerRlKsbGIih Gvond2/eQ4tTx813eY3l/SfPOJVb3gCq -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:18 2025 by rpki-client