$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: pWyfNZcDqF64+h2Gh2vwGa1by0zKckeashcTPjfBcYg= Subject key identifier: 83:06:95:2B:B3:B2:B8:79:95:2F:07:5B:A6:6E:72:14:B4:C6:E7:50 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 0A26 Signing time: Sat 26 Apr 2025 19:34:38 +0000 Manifest this update: Sat 26 Apr 2025 19:34:37 +0000 Manifest next update: Sat 03 May 2025 19:34:37 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: 6K+MX1TovFsqMPWdr5wDVY7quUwkAgj1IdxfdpARFKo=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Apr 26 19:34:37 2025 GMT Not After : May 3 19:34:37 2025 GMT Subject: CN=680d354e-7304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:1d:a7:94:08:f8:e3:67:a2:55:52:94:36: 2f:c6:88:0b:ad:91:68:b0:b7:e9:e8:00:6b:d5:a6: 66:6d:14:b7:15:b2:ad:93:e3:8c:a7:71:04:d7:77: 4d:94:e8:bc:ae:89:8f:09:26:3f:56:29:98:be:13: 06:1c:86:a4:26:95:89:b5:37:ff:c5:19:8a:07:99: 3d:dc:51:20:5f:35:f2:00:d7:b9:b5:c2:44:77:9e: 56:27:cd:f8:60:cd:84:28:0c:b8:cc:dd:e8:20:5a: 1b:f7:cf:93:ff:4f:09:ed:f6:e4:0c:24:94:0d:00: bf:19:b7:8f:ca:74:42:8c:23:57:16:db:b7:2a:dc: 04:fb:da:da:3a:83:09:b0:d9:44:9f:67:ba:31:57: 7b:66:23:44:a4:e0:21:c8:75:2d:da:f1:9e:fc:6b: 25:5c:bf:e5:87:b1:86:8a:1d:1b:0d:cb:c2:2f:a9: 41:36:86:19:ce:9b:6d:b0:0e:23:64:dc:b0:bc:bc: 93:08:dc:3b:47:3f:78:e4:89:8f:53:82:d8:ee:25: 20:a6:d2:b3:e1:ff:c4:8e:b1:e2:30:4d:1d:82:4f: 05:b7:b8:d1:b1:b9:a5:1b:16:dd:9d:54:e6:85:e6: 4f:83:76:84:d4:f7:de:70:74:2c:cc:c6:6d:ef:21: e4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:06:95:2B:B3:B2:B8:79:95:2F:07:5B:A6:6E:72:14:B4:C6:E7:50 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:75:cd:cb:44:c0:48:c3:f6:96:17:d8:28:01:22:d6:54:6a: 3c:e0:da:b0:97:31:1a:d8:46:ee:f3:13:dc:7e:20:4b:fe:5b: 1d:5b:5c:ca:3f:0a:74:20:86:17:7c:0f:55:2b:64:6d:c1:39: 52:03:1f:bb:c1:2c:66:25:86:91:a7:b6:dc:08:71:52:86:98: de:6a:27:65:65:3d:ed:0b:cb:12:3f:5f:ae:10:89:b5:9d:2c: 10:4b:51:6b:a0:f8:79:f9:b8:f7:2e:06:69:10:54:88:c6:9b: 93:39:27:ce:7e:92:b3:55:33:5d:9b:f1:c6:5c:9c:0b:78:d0: f0:7c:e5:38:4d:a6:21:cd:01:3f:73:11:31:59:86:25:0e:8c: cd:5c:97:9a:f0:72:37:a5:4d:f9:79:61:e2:12:95:e2:36:f0: 3d:96:26:1b:06:2a:a2:c8:d1:d0:e3:bd:79:e6:52:c4:11:38: 35:58:23:46:09:16:ad:bc:0d:70:48:9d:75:99:b1:f9:41:2b: e1:4d:c7:34:42:db:73:9d:04:5d:5e:45:c0:44:c4:a1:b7:04: e3:4c:ac:83:87:3c:88:f7:f7:d5:ba:5e:23:54:16:ea:64:3e: 5d:90:d8:a9:34:01:50:f6:9d:37:03:5d:c2:9e:f9:f7:f5:73: 34:9f:4e:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUwNDI2MTkzNDM3WhcNMjUwNTAzMTkzNDM3WjAYMRYwFAYD VQQDEw02ODBkMzU0ZS03MzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsModp5QI+ONnolVSlDYvxogLrZFosLfp6ABr1aZmbRS3FbKtk+OMp3EE13dN lOi8romPCSY/VimYvhMGHIakJpWJtTf/xRmKB5k93FEgXzXyANe5tcJEd55WJ834 YM2EKAy4zN3oIFob98+T/08J7fbkDCSUDQC/GbePynRCjCNXFtu3KtwE+9raOoMJ sNlEn2e6MVd7ZiNEpOAhyHUt2vGe/GslXL/lh7GGih0bDcvCL6lBNoYZzpttsA4j ZNywvLyTCNw7Rz945ImPU4LY7iUgptKz4f/EjrHiME0dgk8Ft7jRsbmlGxbdnVTm heZPg3aE1PfecHQszMZt7yHkgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMGlSuz srh5lS8HW6ZuchS0xudQMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJdc3LRMBIw/aWF9goASLWVGo84NqwlzEa2Ebu8xPcfiBL/lsdW1zK Pwp0IIYXfA9VK2RtwTlSAx+7wSxmJYaRp7bcCHFShpjeaidlZT3tC8sSP1+uEIm1 nSwQS1FroPh5+bj3LgZpEFSIxpuTOSfOfpKzVTNdm/HGXJwLeNDwfOU4TaYhzQE/ cxExWYYlDozNXJea8HI3pU35eWHiEpXiNvA9liYbBiqiyNHQ47155lLEETg1WCNG CRatvA1wSJ11mbH5QSvhTcc0QttznQRdXkXARMShtwTjTKyDhzyI9/fVul4jVBbq ZD5dkNipNAFQ9p03A13Cnvn39XM0n07q -----END CERTIFICATE-----Generated at Mon Apr 28 17:36:35 2025 by rpki-client