$ rpki-client -vvf rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft File: fvtg2-isjcfDKzQJTcvj-mYiH6E.mft (raw, json) Hash identifier: eRMiDej9okd1BEaBBwSPj3nx2oOVevBUfcBIoPn5l44= Subject key identifier: A1:0F:0C:3B:58:89:E9:8D:4B:E7:F0:7D:34:8A:08:5F:A4:22:92:18 Authority key identifier: 7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1 Certificate issuer: /CN=A9166CD3/serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1 Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft Manifest number: 0380 Signing time: Fri 25 Apr 2025 00:39:06 +0000 Manifest this update: Fri 25 Apr 2025 00:39:05 +0000 Manifest next update: Fri 02 May 2025 00:39:05 +0000 Files and hashes: 1: fvtg2-isjcfDKzQJTcvj-mYiH6E.crl (hash: h6Y0Y7vZDOO+uFaGq8hFuhGTfqeuO5z++xab6XDCWEc=) 2: 49B77AF49F8911EC8270CE39C4F9AE02.roa (hash: A4cA8YN7jcZngdZa3tpI+IpUHK4WS+VtSTZQ60gb8Cc=) 3: 52EBB7524AE611EEB1E51972C4F9AE02.roa (hash: wld/ogIBPh3DW/laqIddglVEpnzlKpHA4pEqwL9PJOE=) 4: 465066A44AD811EEB55E2071C4F9AE02.roa (hash: rooAY+QwHq+MWUAdb5diehizwCwb4BdEaaA2+5EIoQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166CD3, serialNumber=7EFB60DBE8AC8DC7C32B34094DCBE3FA66221FA1 Validity Not Before: Apr 25 00:39:05 2025 GMT Not After : May 2 00:39:05 2025 GMT Subject: CN=680ad9a9-ac9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f4:65:81:d0:a4:07:d7:3b:37:f7:cc:89:99: d1:11:c4:fd:1b:1f:70:73:50:a2:6f:6f:4d:67:d9: 4f:e1:e0:e0:c5:97:ae:6b:0d:67:78:4e:a5:d8:d4: 32:2c:02:5d:f5:78:79:59:15:bd:fc:d3:ca:18:0f: 98:e9:b4:97:38:69:3e:20:c3:fc:61:ff:57:60:65: 66:45:93:ca:4f:ae:ee:b2:22:18:fc:de:d4:c1:81: af:4d:7f:f9:53:34:46:7b:2b:e7:f3:c3:fa:76:01: 9a:3f:5f:77:ec:5b:f2:dc:fa:a9:27:00:37:76:b9: f5:7f:d2:53:af:3a:d1:69:d5:d4:b1:4b:b4:44:41: da:61:b1:f5:48:99:46:bc:35:5e:30:1c:51:b6:af: 22:10:ed:c9:01:68:32:20:60:f2:b4:44:79:dc:1b: 16:7d:35:1b:c2:8c:25:07:c1:3d:70:1a:d3:f5:10: 14:6b:25:c9:2f:07:1e:c7:e6:3b:ef:78:fb:2b:7c: 2d:09:d0:54:08:92:df:98:02:a5:be:6e:c9:7e:f0: 62:7f:07:a4:47:9f:e4:7f:ea:4f:ed:82:d2:f8:1b: 39:e7:ac:a7:60:fb:a8:57:28:40:d9:85:d1:eb:42: 5c:61:4c:86:ff:02:d5:f6:fc:76:b5:e0:30:86:42: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0F:0C:3B:58:89:E9:8D:4B:E7:F0:7D:34:8A:08:5F:A4:22:92:18 X509v3 Authority Key Identifier: keyid:7E:FB:60:DB:E8:AC:8D:C7:C3:2B:34:09:4D:CB:E3:FA:66:22:1F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvtg2-isjcfDKzQJTcvj-mYiH6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166CD3/F69BCD4C9F8411EC93695531C4F9AE02/fvtg2-isjcfDKzQJTcvj-mYiH6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:70:4d:91:1b:ef:53:6c:7d:ea:da:81:48:f3:4c:9a:fc:f6: 90:8a:59:42:40:de:95:25:49:dd:e2:59:a3:14:4a:39:6f:a2: 7d:ae:bc:d0:1e:d0:7d:e5:07:8c:08:53:42:3d:55:aa:3a:31: 4d:08:56:da:58:ea:06:dd:85:6d:1d:46:f6:d8:cc:c3:b5:64: 54:fb:62:20:41:79:d5:7d:8f:e5:7f:02:f4:0b:d3:22:3f:9e: 67:6b:3e:f3:d6:b3:2e:35:52:2e:4d:ea:8e:dc:3e:05:44:fd: 9f:ae:ca:e3:db:e9:2f:ed:a1:53:97:05:4d:f7:9e:3e:04:4d: 5c:ab:30:bb:64:a5:93:77:d3:eb:80:f5:e5:b7:41:77:2a:cf: 71:5a:07:d8:f0:a1:52:47:7b:bd:2f:4d:11:f9:bc:f3:24:e1: c7:5c:03:c8:05:62:11:f2:33:f2:79:95:a8:63:c5:06:d4:46: 6e:66:d7:10:e5:f8:c9:0d:97:15:65:89:3b:1d:24:08:ab:20: 5e:14:dc:35:38:89:73:82:3b:d9:b2:5a:1a:4d:94:61:62:76: 93:ea:0c:79:82:7f:1a:bd:d9:ad:85:ec:09:00:c5:2d:3a:66: b1:8a:7b:7e:70:5d:9b:00:2f:a7:08:4a:eb:42:e9:03:aa:6d: e6:25:d6:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjZDRDMxMTAvBgNVBAUTKDdFRkI2MERCRThBQzhEQzdDMzJCMzQwOTREQ0JFM0ZB NjYyMjFGQTEwHhcNMjUwNDI1MDAzOTA1WhcNMjUwNTAyMDAzOTA1WjAYMRYwFAYD VQQDEw02ODBhZDlhOS1hYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/RlgdCkB9c7N/fMiZnREcT9Gx9wc1Cib29NZ9lP4eDgxZeuaw1neE6l2NQy LAJd9Xh5WRW9/NPKGA+Y6bSXOGk+IMP8Yf9XYGVmRZPKT67usiIY/N7UwYGvTX/5 UzRGeyvn88P6dgGaP1937Fvy3PqpJwA3drn1f9JTrzrRadXUsUu0REHaYbH1SJlG vDVeMBxRtq8iEO3JAWgyIGDytER53BsWfTUbwowlB8E9cBrT9RAUayXJLwcex+Y7 73j7K3wtCdBUCJLfmAKlvm7JfvBifwekR5/kf+pP7YLS+Bs556ynYPuoVyhA2YXR 60JcYUyG/wLV9vx2teAwhkKcDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEPDDtY iemNS+fwfTSKCF+kIpIYMB8GA1UdIwQYMBaAFH77YNvorI3Hwys0CU3L4/pmIh+h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkNEMy9GNjlCQ0Q0QzlG ODQxMUVDOTM2OTU1MzFDNEY5QUUwMi9mdnRnMi1pc2pjZkRLelFKVGN2ai1tWWlI NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z2dGcyLWlzamNmREt6UUpUY3ZqLW1ZaUg2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkNEMy9GNjlCQ0Q0QzlGODQxMUVDOTM2OTU1MzFDNEY5QUUwMi9mdnRnMi1pc2pj ZkRLelFKVGN2ai1tWWlINkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWcE2RG+9TbH3q2oFI80ya/PaQillCQN6VJUnd4lmjFEo5b6J9rrzQ HtB95QeMCFNCPVWqOjFNCFbaWOoG3YVtHUb22MzDtWRU+2IgQXnVfY/lfwL0C9Mi P55naz7z1rMuNVIuTeqO3D4FRP2frsrj2+kv7aFTlwVN954+BE1cqzC7ZKWTd9Pr gPXlt0F3Ks9xWgfY8KFSR3u9L00R+bzzJOHHXAPIBWIR8jPyeZWoY8UG1EZuZtcQ 5fjJDZcVZYk7HSQIqyBeFNw1OIlzgjvZsloaTZRhYnaT6gx5gn8avdmthewJAMUt Omaxint+cF2bAC+nCErrQukDqm3mJdaG -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:40 2025 by rpki-client