$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft File: FFiKS-nrikuZgtGyXesMYHOK77s.mft (raw, json) Hash identifier: 94okAWlDMoJ2Gp3Hu0aRi6cHaWSkL3Fm/Yb5AEWyeAE= Subject key identifier: 23:D8:F8:66:36:F7:E8:2C:2B:79:F7:76:D7:17:4C:8A:7D:5D:C3:90 Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft Manifest number: 028B Signing time: Fri 13 Jun 2025 01:07:06 +0000 Manifest this update: Fri 13 Jun 2025 01:07:06 +0000 Manifest next update: Fri 20 Jun 2025 01:07:06 +0000 Files and hashes: 1: FFiKS-nrikuZgtGyXesMYHOK77s.crl (hash: rOouxN+AAHXFB2qfCWjTDX/+89syoH8Q8VrzfN2eokc=) 2: 4D942BCE08A011ED8AD21272C4F9AE02.roa (hash: iDFagkC2Pymx0vGTcmD2EJOCYX1V6KpanyYL5KLSRf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: Jun 13 01:07:06 2025 GMT Not After : Jun 20 01:07:06 2025 GMT Subject: CN=684b79ba-c904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:6b:8c:bd:0c:66:6d:28:20:ca:10:80:2a: 67:66:77:df:c2:b2:b9:94:4b:a7:f5:c5:7e:6c:45: 74:29:b7:1e:62:5b:c3:01:6c:00:ca:b0:1a:fb:c2: c4:b7:f1:4f:e1:a1:df:52:3c:a3:1f:36:05:ce:e0: 02:ef:d2:51:7a:cb:d3:8e:8a:7e:94:20:99:fe:af: 89:96:be:3f:c0:fd:ad:47:a1:8a:11:16:a4:ce:d9: 80:f8:01:5b:5f:a3:e7:77:0e:75:23:45:dc:f7:52: ba:31:2c:42:e7:6a:a9:e1:e0:63:8f:ad:4f:02:70: ae:ae:5d:6d:9f:71:31:cb:e3:51:8e:cf:c2:7a:61: c0:85:f4:96:a4:c8:c8:b6:25:8e:b4:07:fa:08:c1: 84:fb:4d:96:9d:1e:bd:ec:6d:0b:6a:94:53:12:fc: 4e:0e:24:9f:1e:ab:4f:bc:cb:f3:fd:99:67:3b:86: da:f5:7d:76:17:0e:50:60:79:66:e6:fa:99:e2:d4: 71:d3:71:f9:5e:1d:3b:f5:39:90:2a:71:83:b7:5d: 04:d0:af:19:fb:05:3a:7a:58:d9:c5:41:84:3f:18: 58:58:c7:e0:e7:da:9d:fd:31:cf:fe:bd:6c:ed:c4: 0f:1e:19:37:77:33:85:d0:ae:90:14:2f:e3:b4:89: 32:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D8:F8:66:36:F7:E8:2C:2B:79:F7:76:D7:17:4C:8A:7D:5D:C3:90 X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:0d:c4:23:2a:54:ac:0f:b3:26:da:39:13:d4:40:69:9a:1d: 9e:26:2a:24:aa:31:4d:7e:c6:aa:ac:43:9a:25:b6:6f:84:bb: ec:76:58:37:70:27:e3:1e:c5:58:99:56:1a:c6:5a:8f:78:4e: 3e:29:a2:79:8e:af:21:1f:93:b3:b7:e0:7a:52:f6:c1:a2:d0: fe:ea:c2:c3:c8:f4:d2:a9:dd:d7:25:0e:05:0a:a8:c0:7c:70: 41:83:b3:67:4a:08:54:aa:8c:88:21:eb:fb:e0:d2:8d:78:24: c9:da:bd:8e:43:5a:a8:e7:ad:88:d6:ea:12:7e:31:42:6d:cc: 4e:86:ba:67:ed:95:f9:15:56:de:9b:13:67:a0:5a:59:12:49: 27:d3:8b:b5:8d:44:7b:fc:9e:d2:2e:4b:d1:5e:3b:6a:f5:21: b6:05:ea:3f:33:bd:09:ab:99:8d:9b:15:0e:f6:f1:cd:fb:44: ed:1f:b7:b3:10:0d:1f:38:76:5e:79:7f:34:81:27:10:02:1a: df:85:c9:c0:60:9b:12:8f:c1:8f:b2:d3:c6:af:a3:01:fe:50: 47:04:8d:82:0d:c9:7b:8b:0e:dc:48:a3:b1:37:08:dc:f9:d6: 80:47:85:09:e2:dd:20:29:1f:80:97:67:55:c0:98:66:48:9f: 5e:41:d4:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjUwNjEzMDEwNzA2WhcNMjUwNjIwMDEwNzA2WjAYMRYwFAYD VQQDEw02ODRiNzliYS1jOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJdrjL0MZm0oIMoQgCpnZnffwrK5lEun9cV+bEV0KbceYlvDAWwAyrAa+8LE t/FP4aHfUjyjHzYFzuAC79JResvTjop+lCCZ/q+Jlr4/wP2tR6GKERakztmA+AFb X6Pndw51I0Xc91K6MSxC52qp4eBjj61PAnCurl1tn3Exy+NRjs/CemHAhfSWpMjI tiWOtAf6CMGE+02WnR697G0LapRTEvxODiSfHqtPvMvz/ZlnO4ba9X12Fw5QYHlm 5vqZ4tRx03H5Xh079TmQKnGDt10E0K8Z+wU6eljZxUGEPxhYWMfg59qd/THP/r1s 7cQPHhk3dzOF0K6QFC/jtIkycwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPY+GY2 9+gsK3n3dtcXTIp9XcOQMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNFNC82OUNDQjVCQzA4OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlr dVpndEd5WGVzTVlIT0s3N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJDcQjKlSsD7Mm2jkT1EBpmh2eJiokqjFNfsaqrEOaJbZvhLvsdlg3 cCfjHsVYmVYaxlqPeE4+KaJ5jq8hH5Ozt+B6UvbBotD+6sLDyPTSqd3XJQ4FCqjA fHBBg7NnSghUqoyIIev74NKNeCTJ2r2OQ1qo562I1uoSfjFCbcxOhrpn7ZX5FVbe mxNnoFpZEkkn04u1jUR7/J7SLkvRXjtq9SG2Beo/M70Jq5mNmxUO9vHN+0TtH7ez EA0fOHZeeX80gScQAhrfhcnAYJsSj8GPstPGr6MB/lBHBI2CDcl7iw7cSKOxNwjc +daAR4UJ4t0gKR+Al2dVwJhmSJ9eQdTe -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:46 2025 by rpki-client