$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: AFzc9S/v4wdtJ2DyodZkC02aWaaceGk2ZV7W3NYl5J0= Subject key identifier: 73:C6:15:EC:4D:C9:66:44:F5:2A:4B:C5:B2:5A:FB:61:29:B6:1E:24 Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 022A Signing time: Fri 13 Jun 2025 01:25:39 +0000 Manifest this update: Fri 13 Jun 2025 01:25:39 +0000 Manifest next update: Fri 20 Jun 2025 01:25:39 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: hHd7xeK0evFVLm0gSBvjF4bjqsZRcfGbV7v2F1nBbI4=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: ONxSWlWsPlzS3F23WNJvpVx69ftE7+2igW4xzmclKbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB, serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Validity Not Before: Jun 13 01:25:39 2025 GMT Not After : Jun 20 01:25:39 2025 GMT Subject: CN=684b7e13-8530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:e9:21:bb:b9:b1:7b:08:ab:9c:65:4c:fa: 8e:07:bd:e9:87:d8:ad:b2:69:06:65:4f:df:55:a9: 1d:79:be:ec:65:c1:6e:63:2c:75:30:ec:0e:12:7d: d9:9a:cb:d7:82:6b:5e:2c:e6:b0:90:18:d7:bf:b3: a6:20:32:44:a1:5b:20:1d:ad:f3:f4:b5:33:f6:48: e3:52:6a:4c:e4:ef:33:6b:5d:97:3f:a4:68:20:eb: 83:89:99:1d:94:67:fe:9f:04:89:1e:0f:9c:1f:be: 65:5a:ae:0a:2e:f7:a0:88:be:b3:51:88:53:00:39: a8:0b:38:08:5a:f7:9e:81:b8:e8:4b:86:a3:15:f2: 73:76:1a:e6:d8:e3:72:83:48:ec:19:db:40:3a:9d: 09:de:3c:49:80:6f:97:68:95:10:d3:67:2d:55:ea: 23:be:ab:ea:ce:0f:9e:b3:b1:9b:1d:01:63:c3:3f: 67:24:3b:eb:3b:b2:c1:51:db:f5:9b:93:a1:d0:7c: a6:10:fd:64:ee:e5:4f:0e:ca:8f:04:50:e4:10:06: f5:aa:ad:65:94:aa:d3:70:92:aa:24:ea:43:ed:3a: eb:6b:5b:c2:ea:c8:1f:4a:83:a7:8f:09:ed:53:04: da:0f:93:dd:c5:76:4c:e3:a5:fb:91:9c:6a:64:6c: bc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C6:15:EC:4D:C9:66:44:F5:2A:4B:C5:B2:5A:FB:61:29:B6:1E:24 X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:0b:ba:80:1e:f3:95:c5:3a:43:91:37:52:69:8a:d1:0b:66: f4:f6:a0:1f:1b:02:be:b4:b3:a7:12:5f:72:0f:a4:a8:f0:d2: 0b:29:a1:03:50:94:44:7d:97:4c:58:b4:1f:fa:37:f9:9f:8a: 75:46:d7:4e:00:e0:a6:8a:50:96:db:f3:3a:fc:9f:52:32:41: ba:3f:1e:f3:19:85:d6:06:12:9c:a0:2d:ba:73:e4:fc:16:1a: b8:e9:96:a8:90:30:8f:9e:63:a5:7b:8b:0d:ce:37:5f:cd:c9: e0:4d:78:07:46:4d:50:79:a5:6c:de:9f:7c:d2:21:06:15:c2: d3:dc:64:af:90:65:e9:b0:4d:4a:b2:b9:11:23:ff:77:86:be: 5b:cb:27:59:59:08:28:77:1d:ee:0b:c2:ec:82:8f:7c:15:eb: dc:72:6d:3a:9f:dc:39:be:06:30:93:83:b8:06:cf:4c:49:6c: a4:5a:5f:d5:33:47:cc:c5:57:72:67:c8:7c:76:97:ad:9d:eb: 40:04:d1:8d:31:11:61:3c:93:14:6c:1b:b4:b2:19:3e:98:a2: 6f:69:25:f7:f7:a9:c8:1c:a2:0d:36:45:0b:94:e8:31:46:3b: 15:b5:2e:1f:e9:9d:29:76:cf:26:b6:9a:8a:50:7c:d3:47:38: 44:85:d0:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjUwNjEzMDEyNTM5WhcNMjUwNjIwMDEyNTM5WjAYMRYwFAYD VQQDEw02ODRiN2UxMy04NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZ3pIbu5sXsIq5xlTPqOB73ph9itsmkGZU/fVakdeb7sZcFuYyx1MOwOEn3Z msvXgmteLOawkBjXv7OmIDJEoVsgHa3z9LUz9kjjUmpM5O8za12XP6RoIOuDiZkd lGf+nwSJHg+cH75lWq4KLvegiL6zUYhTADmoCzgIWveegbjoS4ajFfJzdhrm2ONy g0jsGdtAOp0J3jxJgG+XaJUQ02ctVeojvqvqzg+es7GbHQFjwz9nJDvrO7LBUdv1 m5Oh0HymEP1k7uVPDsqPBFDkEAb1qq1llKrTcJKqJOpD7Trra1vC6sgfSoOnjwnt UwTaD5PdxXZM46X7kZxqZGy8cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPGFexN yWZE9SpLxbJa+2Epth4kMB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzC7qAHvOVxTpDkTdSaYrRC2b09qAfGwK+tLOnEl9yD6So8NILKaED UJREfZdMWLQf+jf5n4p1RtdOAOCmilCW2/M6/J9SMkG6Px7zGYXWBhKcoC26c+T8 Fhq46ZaokDCPnmOle4sNzjdfzcngTXgHRk1QeaVs3p980iEGFcLT3GSvkGXpsE1K srkRI/93hr5byydZWQgodx3uC8Lsgo98Fevccm06n9w5vgYwk4O4Bs9MSWykWl/V M0fMxVdyZ8h8dpetnetABNGNMRFhPJMUbBu0shk+mKJvaSX396nIHKINNkULlOgx RjsVtS4f6Z0pds8mtpqKUHzTRzhEhdCg -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:01 2025 by rpki-client