$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json) Hash identifier: bJVwwJEv8HFu6AasEaTQaeYv5Mr1zNQNmSJMrRSmk74= Subject key identifier: 11:C5:81:18:CB:2B:F6:AD:A8:D2:92:7E:8F:3E:22:3C:B8:F0:EA:87 Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 0691 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft Manifest number: 0671 Signing time: Mon 30 Jun 2025 22:56:07 +0000 Manifest this update: Mon 30 Jun 2025 22:56:07 +0000 Manifest next update: Mon 07 Jul 2025 22:56:07 +0000 Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: Hsl79xYKmW91f4hMyQ7zW9fEV9XM+lKivwiIrANI8Q0=) 2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: UmpNsLSA9Ui51AS15ByfrZUIY+Ti/Tm6lpZ+BOTEjUM=) 3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: AzXEXHZ2GSh0FqrG3g/oL2focj1abqbuG/Rv3t+SJwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: Jun 30 22:56:07 2025 GMT Not After : Jul 7 22:56:07 2025 GMT Subject: CN=68631607-2a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:98:73:af:b8:15:fa:9d:76:07:9c:d3:5c: 57:db:c4:20:bf:23:5f:cf:d6:b9:6c:1a:0b:31:32: 62:1d:69:02:5c:42:92:5a:3d:4c:6f:24:ef:c6:af: d0:df:4f:86:b9:c2:60:74:8b:1f:32:86:da:a5:cd: 4a:00:12:cf:44:64:34:dd:a0:e9:3c:90:6c:41:83: 3b:08:f0:d3:ea:2e:b8:19:0f:48:d1:dd:ab:13:92: 8c:31:6d:ee:eb:fd:85:d6:73:07:6b:f3:9d:68:a6: 28:03:87:e3:a4:99:cb:0a:79:0c:09:cd:de:50:b8: f5:86:1e:11:bd:0e:f5:e2:c9:4c:62:4d:48:b2:7f: 3f:ab:ef:27:8f:08:22:81:63:f5:e1:18:52:ce:c3: da:cc:7d:e4:da:50:f3:d3:57:93:75:c1:9a:ed:f5: 04:df:1e:69:cd:75:43:ba:30:38:11:46:bc:a9:cc: 4e:18:16:06:25:52:4c:60:b8:ed:48:99:8f:f7:e3: e4:9f:3b:5d:5e:25:00:ea:e8:6e:bc:35:53:94:ff: 42:02:df:65:45:a9:55:15:c0:97:a0:98:69:e8:5f: 29:2e:be:f4:20:74:6c:47:6d:ea:31:22:5c:0f:21: 12:b5:c0:f7:45:a7:1c:1f:c3:09:e9:78:60:49:90: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C5:81:18:CB:2B:F6:AD:A8:D2:92:7E:8F:3E:22:3C:B8:F0:EA:87 X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:f1:9a:c2:f6:0d:d3:4e:d6:06:22:f4:e2:9f:93:57:26:ad: d3:1e:64:a8:9e:81:e1:ec:3d:e0:f3:ad:ee:b8:64:a2:ca:ea: 2e:e5:35:08:1c:04:b2:7a:cb:e1:3a:ad:b1:54:f4:06:2b:57: 1e:38:18:3a:e9:0b:5f:6c:a3:8c:78:67:f3:fc:3e:af:9f:c9: b8:18:80:a7:b5:77:11:8c:c3:78:16:fb:12:6a:e9:75:92:66: 59:00:56:33:72:29:09:80:00:aa:b7:ea:6a:47:59:39:5d:8e: 4d:37:c5:83:67:55:93:7e:cf:18:bb:bb:f6:9d:a2:cd:8f:c7: d8:71:e2:40:d9:e6:c5:0c:cd:c7:39:16:9e:95:e0:59:40:87: 69:12:62:54:8a:60:7c:00:5a:1e:b4:15:d4:61:07:85:88:96: c3:26:91:af:d8:72:67:7c:77:41:b3:f6:8b:a6:c6:7a:3d:0b: 37:87:53:ca:e9:30:50:b1:4b:69:0b:4a:c4:24:fe:7a:ee:38: e0:2a:08:d8:a3:df:f6:90:61:f5:ba:7f:60:03:af:22:07:59: 27:68:8e:0f:a0:5e:fb:49:83:d9:20:c3:30:cd:85:5c:19:91: ec:9d:dd:ad:05:4c:61:a2:bd:e4:fa:45:ae:1e:17:4e:44:c1: 74:fc:7c:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUwNjMwMjI1NjA3WhcNMjUwNzA3MjI1NjA3WjAYMRYwFAYD VQQDEw02ODYzMTYwNy0yYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oqYc6+4Ffqddgec01xX28QgvyNfz9a5bBoLMTJiHWkCXEKSWj1MbyTvxq/Q 30+GucJgdIsfMobapc1KABLPRGQ03aDpPJBsQYM7CPDT6i64GQ9I0d2rE5KMMW3u 6/2F1nMHa/OdaKYoA4fjpJnLCnkMCc3eULj1hh4RvQ714slMYk1Isn8/q+8njwgi gWP14RhSzsPazH3k2lDz01eTdcGa7fUE3x5pzXVDujA4EUa8qcxOGBYGJVJMYLjt SJmP9+PknztdXiUA6uhuvDVTlP9CAt9lRalVFcCXoJhp6F8pLr70IHRsR23qMSJc DyEStcD3RaccH8MJ6XhgSZD0wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHFgRjL K/atqNKSfo8+Ijy48OqHMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0IyQS9FMDFDN0E4NDkwRTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5i Y1ZZVFNzZVBrY0l6dVRrcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj8ZrC9g3TTtYGIvTin5NXJq3THmSonoHh7D3g863uuGSiyuou5TUI HASyesvhOq2xVPQGK1ceOBg66QtfbKOMeGfz/D6vn8m4GICntXcRjMN4FvsSaul1 kmZZAFYzcikJgACqt+pqR1k5XY5NN8WDZ1WTfs8Yu7v2naLNj8fYceJA2ebFDM3H ORaeleBZQIdpEmJUimB8AFoetBXUYQeFiJbDJpGv2HJnfHdBs/aLpsZ6PQs3h1PK 6TBQsUtpC0rEJP567jjgKgjYo9/2kGH1un9gA68iB1knaI4PoF77SYPZIMMwzYVc GZHsnd2tBUxhor3k+kWuHhdORMF0/Hyc -----END CERTIFICATE-----Generated at Tue Jul 1 20:55:02 2025 by rpki-client