$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json) Hash identifier: y0MkuAIIsupHmqqcwQ+se8hx+TDUTKMfhemNWee/1vY= Subject key identifier: 45:9A:2F:B4:E2:80:C1:2B:9C:2F:C6:44:77:CC:20:60:9A:90:EC:D4 Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 06AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft Manifest number: 068C Signing time: Fri 22 Aug 2025 22:40:21 +0000 Manifest this update: Fri 22 Aug 2025 22:40:21 +0000 Manifest next update: Fri 29 Aug 2025 22:40:21 +0000 Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: h33vMNfZL6Q+7oK82Cqtzj4QJfeqbK3dqBmQHhe8GJU=) 2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: UmpNsLSA9Ui51AS15ByfrZUIY+Ti/Tm6lpZ+BOTEjUM=) 3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: AzXEXHZ2GSh0FqrG3g/oL2focj1abqbuG/Rv3t+SJwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: Aug 22 22:40:21 2025 GMT Not After : Aug 29 22:40:21 2025 GMT Subject: CN=68a8f1d5-4c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c2:c0:88:4b:fe:99:be:29:a7:1c:45:c9:a2: c9:19:00:03:31:f1:29:ac:8e:28:a2:ed:f2:fd:36: 52:3a:53:4a:10:24:6b:13:c5:1f:cc:3e:64:62:ad: 34:06:71:1d:68:15:27:32:4e:ad:ef:a2:8e:c6:60: 2a:13:81:d2:d7:76:50:38:a3:ae:ec:31:54:47:02: f2:21:26:6e:af:08:e1:d3:d1:d9:94:47:0b:59:ca: d8:7a:72:39:8d:eb:90:13:13:44:ce:0c:59:7f:50: 27:7e:99:b0:a0:90:2f:21:56:a7:8e:b7:f4:02:07: 35:a7:9e:4f:73:95:9d:53:e2:9e:41:c1:db:b0:8e: be:dc:a8:de:31:ee:03:9e:b0:2a:e7:d3:23:7c:da: d0:8c:d1:51:14:68:73:2b:c8:47:3e:1e:c2:a3:24: 58:11:c2:99:17:e3:64:29:d4:bc:75:e1:2f:d2:2a: aa:be:be:5b:24:e5:53:43:79:49:d4:66:28:a7:c0: 7d:ee:f5:78:c7:2b:fb:22:f4:d8:53:8d:30:90:9a: d2:b6:c7:34:b9:0a:ad:e0:2d:38:57:e5:4b:ea:ba: 3d:88:3f:80:a8:40:c5:23:ed:74:68:79:6e:a6:36: 6f:4a:92:ca:1e:ef:a2:89:bd:aa:cb:1b:04:cf:40: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9A:2F:B4:E2:80:C1:2B:9C:2F:C6:44:77:CC:20:60:9A:90:EC:D4 X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ff:cc:5c:69:49:83:ce:da:92:5b:ef:19:b0:50:78:d3:32: 8d:aa:1e:0a:f1:b4:91:c0:02:25:c5:c8:28:ce:fc:3e:88:cd: 6a:89:51:0d:a8:32:69:f4:2c:2c:0a:0e:8c:17:7e:1b:1f:a0: 9e:95:c0:00:51:30:cc:77:37:b3:1e:c8:c4:b4:bf:b4:a7:c2: b1:e8:23:10:37:c5:3c:3b:b9:7d:68:11:66:d0:d2:eb:ed:22: 7d:72:d9:1e:8c:1a:59:90:3d:18:c4:e6:ae:ba:fc:78:af:15: 20:5e:25:6c:0d:91:ac:f5:6e:04:1c:65:6c:4c:32:8c:67:76: a9:04:f0:fb:1f:03:b7:d8:05:e3:8a:92:20:5b:19:e3:1f:43: 4d:cb:f7:24:f6:c4:53:5b:8b:f4:0f:1c:51:35:ff:54:3f:f6: 8a:9d:bd:28:04:54:ec:8a:23:dd:8d:83:ae:a4:7a:d1:41:99: ce:a8:90:d4:0d:f8:9f:0c:f3:6e:9e:5e:fb:14:16:25:96:ad: 71:ec:d6:ef:f2:27:ee:e3:9b:88:58:c6:c6:31:bc:12:f5:8f: 40:b5:b6:88:2d:63:3b:bb:83:ec:2a:c8:ac:9e:1d:46:c0:db: fd:c1:50:b5:7d:78:00:b6:62:b9:81:26:18:22:2e:75:96:4d: 14:09:10:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUwODIyMjI0MDIxWhcNMjUwODI5MjI0MDIxWjAYMRYwFAYD VQQDEw02OGE4ZjFkNS00YzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7sLAiEv+mb4ppxxFyaLJGQADMfEprI4oou3y/TZSOlNKECRrE8UfzD5kYq00 BnEdaBUnMk6t76KOxmAqE4HS13ZQOKOu7DFURwLyISZurwjh09HZlEcLWcrYenI5 jeuQExNEzgxZf1AnfpmwoJAvIVanjrf0Agc1p55Pc5WdU+KeQcHbsI6+3KjeMe4D nrAq59MjfNrQjNFRFGhzK8hHPh7CoyRYEcKZF+NkKdS8deEv0iqqvr5bJOVTQ3lJ 1GYop8B97vV4xyv7IvTYU40wkJrStsc0uQqt4C04V+VL6ro9iD+AqEDFI+10aHlu pjZvSpLKHu+iib2qyxsEz0BPKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWaL7Ti gMErnC/GRHfMIGCakOzUMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0IyQS9FMDFDN0E4NDkwRTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5i Y1ZZVFNzZVBrY0l6dVRrcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr/8xcaUmDztqSW+8ZsFB40zKNqh4K8bSRwAIlxcgozvw+iM1qiVEN qDJp9CwsCg6MF34bH6CelcAAUTDMdzezHsjEtL+0p8Kx6CMQN8U8O7l9aBFm0NLr 7SJ9ctkejBpZkD0YxOauuvx4rxUgXiVsDZGs9W4EHGVsTDKMZ3apBPD7HwO32AXj ipIgWxnjH0NNy/ck9sRTW4v0DxxRNf9UP/aKnb0oBFTsiiPdjYOupHrRQZnOqJDU DfifDPNunl77FBYllq1x7Nbv8ifu45uIWMbGMbwS9Y9AtbaILWM7u4PsKsisnh1G wNv9wVC1fXgAtmK5gSYYIi51lk0UCRCD -----END CERTIFICATE-----Generated at Sat Aug 23 23:40:19 2025 by rpki-client