$ rpki-client -vvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft File: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft (raw, json) Hash identifier: LdbNs4cJJ1Nad14YwrpblINVGQoHTpa/fF5PJOoim0c= Subject key identifier: AD:2E:56:F7:CC:CF:F5:4B:6D:BF:65:0A:B1:A7:7B:40:D6:87:54:18 Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA Certificate issuer: /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA Certificate serial: 08B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft Manifest number: 08AD Signing time: Mon 16 Jun 2025 20:18:50 +0000 Manifest this update: Mon 16 Jun 2025 20:18:50 +0000 Manifest next update: Mon 23 Jun 2025 20:18:50 +0000 Files and hashes: 1: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl (hash: NImFBztlBviqwdWv1pOvnPRUfwaPIv1gcBRVgJMuQ2g=) 2: 4D2299ECF7C611EF92C34E4AC4F9AE02.roa (hash: vDSnr7GTN6AmKRXToXihl2BttDhcvVIF1CJ22BM3AS0=) 3: 1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa (hash: 6D+05PkkEBLLvv2UgX08yRx5GMb9vhbOIwJ+Ku99Ia0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919887F, serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA Validity Not Before: Jun 16 20:18:50 2025 GMT Not After : Jun 23 20:18:50 2025 GMT Subject: CN=68507c2a-841c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:bd:cf:18:49:29:29:e4:13:43:d4:3b:78: 66:53:36:31:fd:a5:2d:b3:c0:91:4d:21:31:f7:20: bc:16:fd:46:2b:9f:37:79:83:f8:ec:bb:af:ff:0f: 0f:2a:0b:06:ce:ab:93:67:ac:33:14:72:62:a0:5a: 45:9f:27:4a:aa:97:23:fe:68:5b:af:d2:f6:b1:dd: 41:7b:00:a1:b2:19:9c:34:a6:7e:36:6e:9a:ea:d8: c9:65:8b:f6:f3:df:c6:7b:58:ad:b9:3b:b9:7e:a0: b9:3c:41:d7:ac:c9:88:07:89:91:fb:05:54:51:f7: c4:7c:83:36:ba:a7:90:06:b0:c5:d8:84:cd:f7:51: 45:92:34:98:5b:5a:db:11:b7:1e:00:38:e2:1e:42: 05:f0:69:0c:43:22:70:66:00:f0:3e:45:a8:0f:7b: dc:e8:11:9b:ee:c2:f4:ba:d6:04:30:ee:00:91:93: 68:f4:57:20:e0:a3:64:f8:ec:cf:29:ad:dc:c4:97: b8:e1:af:6e:be:a5:24:a9:e6:07:c7:6c:5e:85:ff: 96:45:fa:07:9a:e0:f9:e7:8f:ff:63:53:fc:bf:65: 43:00:1f:d2:73:7b:1b:ec:97:cd:5c:ef:bf:87:03: b8:04:4b:55:e7:2c:f7:f8:01:0f:51:59:02:75:9b: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2E:56:F7:CC:CF:F5:4B:6D:BF:65:0A:B1:A7:7B:40:D6:87:54:18 X509v3 Authority Key Identifier: keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8c:87:e2:16:de:90:a5:37:87:82:c9:66:30:dd:dc:8a:f6: ef:ab:3c:d0:9f:4d:c5:e4:77:b3:a5:e4:d3:f0:bc:cf:5b:e3: a8:ca:ce:83:bd:24:d7:d8:10:7a:91:53:51:a9:d1:a8:27:a2: fb:13:47:b3:07:ee:e5:55:6c:44:a9:20:45:bd:a5:7f:68:00: 58:9d:dd:e9:ce:49:98:bb:d8:2f:cd:50:0d:05:4b:05:04:7e: f1:4b:ec:53:e7:04:2a:e4:11:6c:ea:b5:9a:53:20:ad:93:94: 90:a1:28:ea:62:dd:98:20:82:9b:ff:4b:28:5d:62:3f:4d:97: a8:d9:a6:bb:84:51:1b:07:16:d6:51:41:15:f7:97:6a:12:4d: 57:4d:cc:fa:86:a5:fc:d5:31:89:d6:96:ed:8c:e3:e5:19:e1: 3a:1f:b8:57:e5:08:9a:d6:2a:39:62:e0:d9:69:56:6e:2f:21: 98:3e:3d:1a:43:02:73:49:c3:c4:30:66:58:7b:cc:fa:a0:ff: f3:8e:75:94:c7:5f:23:99:63:cf:16:c0:b1:e6:56:07:69:a7: f5:4a:1b:88:45:ec:8e:f2:2b:6d:96:ca:44:c8:2b:7d:a4:a5: ec:d6:30:c1:84:f4:38:45:00:18:f4:29:7e:77:64:cd:35:1f: e3:8e:c3:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4N0YxMTAvBgNVBAUTKDE1NDZDMzM1QkVENUYyQTVFRUU1OEFFMEQyNjM2NzEx NTlEMjc4QkEwHhcNMjUwNjE2MjAxODUwWhcNMjUwNjIzMjAxODUwWjAYMRYwFAYD VQQDEw02ODUwN2MyYS04NDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhm9zxhJKSnkE0PUO3hmUzYx/aUts8CRTSEx9yC8Fv1GK583eYP47Luv/w8P KgsGzquTZ6wzFHJioFpFnydKqpcj/mhbr9L2sd1BewChshmcNKZ+Nm6a6tjJZYv2 89/Ge1ituTu5fqC5PEHXrMmIB4mR+wVUUffEfIM2uqeQBrDF2ITN91FFkjSYW1rb EbceADjiHkIF8GkMQyJwZgDwPkWoD3vc6BGb7sL0utYEMO4AkZNo9Fcg4KNk+OzP Ka3cxJe44a9uvqUkqeYHx2xehf+WRfoHmuD554//Y1P8v2VDAB/Sc3sb7JfNXO+/ hwO4BEtV5yz3+AEPUVkCdZvi1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0uVvfM z/VLbb9lCrGne0DWh1QYMB8GA1UdIwQYMBaAFBVGwzW+1fKl7uWK4NJjZxFZ0ni6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg3Ri9BQjU2OTk5OEI5 QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3VjhxWHU1WXJnMG1ObkVWblNl TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYkROYjdWOHFYdTVZcmcwbU5uRVZuU2VMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg3Ri9BQjU2OTk5OEI5QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3Vjhx WHU1WXJnMG1ObkVWblNlTG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxjIfiFt6QpTeHgslmMN3civbvqzzQn03F5HezpeTT8LzPW+Ooys6D vSTX2BB6kVNRqdGoJ6L7E0ezB+7lVWxEqSBFvaV/aABYnd3pzkmYu9gvzVANBUsF BH7xS+xT5wQq5BFs6rWaUyCtk5SQoSjqYt2YIIKb/0soXWI/TZeo2aa7hFEbBxbW UUEV95dqEk1XTcz6hqX81TGJ1pbtjOPlGeE6H7hX5Qia1io5YuDZaVZuLyGYPj0a QwJzScPEMGZYe8z6oP/zjnWUx18jmWPPFsCx5lYHaaf1ShuIReyO8ittlspEyCt9 pKXs1jDBhPQ4RQAY9Cl+d2TNNR/jjsPW -----END CERTIFICATE-----Generated at Wed Jun 18 06:37:46 2025 by rpki-client