$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft File: FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json) Hash identifier: Dq/nhtSQjcXL7rNd+YgfDcjYHzuW9A0ifAHwzivc+94= Subject key identifier: 23:8F:38:C6:50:63:6B:D3:E5:E7:35:02:F3:E3:42:DF:4A:0E:33:8E Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Certificate serial: 0ACC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft Manifest number: 0AC4 Signing time: Thu 12 Jun 2025 19:15:57 +0000 Manifest this update: Thu 12 Jun 2025 19:15:57 +0000 Manifest next update: Thu 19 Jun 2025 19:15:57 +0000 Files and hashes: 1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: bKOnm/D1jOCMwuZAqbZpSzcnAklsm+bBxXF3JVON/TY=) 2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: kJMo9RQs1RmR4jKIjh2FdUcRITpXXdCWCEKsh+3zIHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2764 (0xacc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Validity Not Before: Jun 12 19:15:57 2025 GMT Not After : Jun 19 19:15:57 2025 GMT Subject: CN=684b276d-0357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:15:56:96:d8:bf:c6:1a:8a:af:37:4b:54: 90:39:4a:38:2c:20:55:6e:f5:f2:6d:dd:24:5b:e8: 33:3c:b5:6f:86:07:6d:a3:1a:12:57:2b:fc:f3:58: a2:12:5b:d3:6d:7f:e0:a1:4c:25:10:76:5f:22:a4: 29:b5:81:bb:09:a1:e2:3a:c9:10:a6:4f:69:53:c1: 2f:10:7a:8e:2a:a8:ef:68:b3:4c:dd:f3:60:d8:f5: b9:f4:ed:59:fe:61:9c:d0:ba:a7:8f:a5:76:5c:72: ae:13:80:28:f7:0e:06:19:0d:a4:be:a4:dd:39:71: 15:30:c7:fc:c9:41:a5:cc:f4:ac:73:a4:de:28:a2: 93:9a:90:67:a3:17:d8:bc:a6:99:c9:64:53:6e:05: b3:3e:37:08:34:36:2b:d5:2e:92:6b:9e:32:f5:9e: 2f:8e:77:e9:9b:ea:18:aa:b2:8f:b3:32:ce:49:e4: 38:12:f8:59:c7:e6:63:e6:e9:65:3e:3e:bd:31:10: 8c:40:c0:a0:de:e7:be:6e:fc:3a:53:6e:e7:78:4f: c3:50:43:d8:04:62:b7:7f:a2:f8:f3:a3:5d:a5:76: ad:5c:ef:1f:a6:7d:28:f2:0b:df:11:ca:bb:ec:2f: 6c:6b:04:92:4d:40:ab:6a:e0:96:61:02:33:41:5c: d4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8F:38:C6:50:63:6B:D3:E5:E7:35:02:F3:E3:42:DF:4A:0E:33:8E X509v3 Authority Key Identifier: keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:bb:fb:0a:b3:43:fb:54:08:f4:ff:8b:52:83:12:38:d8:52: 07:f5:5b:a2:18:7c:eb:92:02:35:36:b8:6d:4e:89:0d:3d:2e: 9f:32:5c:15:d1:f5:fb:62:63:2b:8d:53:07:ff:e5:50:44:73: c7:fa:88:b5:04:b0:e5:61:43:37:79:3d:b9:57:cc:52:8a:cc: ae:8e:40:2a:a2:72:f3:dd:bf:67:05:c3:b1:e0:fe:f3:b9:80: 7e:ab:24:df:80:96:f1:2f:05:7f:c8:0f:fc:f9:68:c0:98:21: ee:bd:b3:36:55:95:02:54:7e:cf:0a:55:5a:77:24:62:66:16: b7:f1:ff:8a:1f:39:47:a6:d3:db:9e:e7:e3:4c:ab:5c:db:65: a9:c9:4b:a0:68:70:f5:6a:8f:2d:9b:5d:29:b8:41:36:9d:23: af:1a:78:e9:6e:ba:3e:cb:ff:41:b9:b5:0c:86:aa:9c:79:7a: 28:3e:6b:ed:01:7b:41:c4:09:a9:ca:2c:ab:ab:3f:c3:ab:43: a0:65:2e:51:19:02:bd:19:2e:fd:b6:da:74:37:50:05:78:a9: 6a:01:0b:f2:28:6f:c1:d3:23:08:03:75:fa:37:1b:d2:e8:0d: 76:a5:30:be:64:25:f0:99:ce:75:04:8b:a5:0d:7c:47:52:08: 9e:e5:44:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY4QTExMTAvBgNVBAUTKDE1MkEzQjQzMjI1Q0ZBMkM1RjhERTI3QTlBNjg5M0Qz QjIzRjVERTMwHhcNMjUwNjEyMTkxNTU3WhcNMjUwNjE5MTkxNTU3WjAYMRYwFAYD VQQDEw02ODRiMjc2ZC0wMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TAVVpbYv8Yaiq83S1SQOUo4LCBVbvXybd0kW+gzPLVvhgdtoxoSVyv881ii ElvTbX/goUwlEHZfIqQptYG7CaHiOskQpk9pU8EvEHqOKqjvaLNM3fNg2PW59O1Z /mGc0Lqnj6V2XHKuE4Ao9w4GGQ2kvqTdOXEVMMf8yUGlzPSsc6TeKKKTmpBnoxfY vKaZyWRTbgWzPjcINDYr1S6Sa54y9Z4vjnfpm+oYqrKPszLOSeQ4EvhZx+Zj5ull Pj69MRCMQMCg3ue+bvw6U27neE/DUEPYBGK3f6L486NdpXatXO8fpn0o8gvfEcq7 7C9sawSSTUCrauCWYQIzQVzUWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOPOMZQ Y2vT5ec1AvPjQt9KDjOOMB8GA1UdIwQYMBaAFBUqO0MiXPosX43ieppok9OyP13j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjhBMS8yRTFDQzY0NDUx MTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1peGZqZUo2bW1pVDA3SV9Y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTbzdReUpjLWl4ZmplSjZtbWlUMDdJX1hlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjhBMS8yRTFDQzY0NDUxMTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1p eGZqZUo2bW1pVDA3SV9YZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0u/sKs0P7VAj0/4tSgxI42FIH9VuiGHzrkgI1NrhtTokNPS6fMlwV 0fX7YmMrjVMH/+VQRHPH+oi1BLDlYUM3eT25V8xSisyujkAqonLz3b9nBcOx4P7z uYB+qyTfgJbxLwV/yA/8+WjAmCHuvbM2VZUCVH7PClVadyRiZha38f+KHzlHptPb nufjTKtc22WpyUugaHD1ao8tm10puEE2nSOvGnjpbro+y/9BubUMhqqceXooPmvt AXtBxAmpyiyrqz/Dq0OgZS5RGQK9GS79ttp0N1AFeKlqAQvyKG/B0yMIA3X6NxvS 6A12pTC+ZCXwmc51BIulDXxHUgie5UQd -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:54 2025 by rpki-client