$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft File: F4L8LE0koOJkDRWzGQ3umPNrjzw.mft (raw, json) Hash identifier: 2uMHgwnhY+aZMWCmZjXUGMx+JTLAQGr++qSp7Os3Evg= Subject key identifier: 65:1F:CD:B1:23:60:47:CB:91:66:D8:8F:6F:62:D4:D8:52:20:9B:DA Authority key identifier: 17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C Certificate issuer: /CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft Manifest number: 364D Signing time: Mon 30 Jun 2025 16:25:41 +0000 Manifest this update: Mon 30 Jun 2025 16:25:41 +0000 Manifest next update: Mon 07 Jul 2025 16:25:41 +0000 Files and hashes: 1: F4L8LE0koOJkDRWzGQ3umPNrjzw.crl (hash: GqcwczqbvTbaN9x13mxrB6ElbAud/hyVFSe3GFr+BAo=) 2: 23C2512042CE11F0A606855EC4F9AE02.roa (hash: 3Q6WShQMdAqz05Q0bkZ+VlUenPoKdZmhd7NqMagZtlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E, serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Validity Not Before: Jun 30 16:25:41 2025 GMT Not After : Jul 7 16:25:41 2025 GMT Subject: CN=6862ba85-11d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:8b:c9:62:86:c9:35:ad:80:e1:62:e4:e4: c4:c9:6c:42:37:18:f0:5b:f4:4b:bc:12:1c:2f:1a: 90:9a:78:32:74:cc:69:9d:5d:8e:c0:bf:89:42:c6: 07:73:54:cb:ac:d2:23:f4:85:01:3f:c2:e3:cd:c4: 82:6f:18:60:65:90:cf:fc:91:63:16:ea:8a:6e:59: da:9f:cd:0f:74:c1:21:c3:c4:9d:d7:60:5b:7b:53: 2e:34:08:9d:10:17:48:90:bd:b1:f1:9b:b4:8e:fa: 03:6c:af:9c:05:25:26:1d:d6:41:d6:75:7f:8d:93: 08:e6:79:f4:f1:57:36:8f:48:e6:e2:b7:4e:3f:e5: 64:b1:ed:f6:16:e6:b7:26:c3:a5:a3:03:ba:8f:fc: 50:48:2a:08:76:71:4e:a2:78:98:69:0e:71:28:a8: fd:07:de:af:80:68:d9:3a:52:1a:d0:52:88:80:0e: 42:f1:28:94:f2:3d:5d:0b:85:cc:88:b6:e3:ec:50: e3:6c:5e:13:7c:a8:04:e7:13:77:0c:b6:91:52:1e: be:45:5e:7b:4a:67:16:81:01:df:2f:0d:28:c3:1d: 34:16:f7:24:a4:92:39:bb:8e:4c:27:68:03:e6:6e: 15:d2:89:f6:f7:b5:eb:5c:db:1b:c9:90:28:55:c4: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1F:CD:B1:23:60:47:CB:91:66:D8:8F:6F:62:D4:D8:52:20:9B:DA X509v3 Authority Key Identifier: keyid:17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ee:f4:e3:71:fe:8c:07:99:1a:d7:76:3d:58:8a:2c:86:39: d4:2f:d2:e3:ef:ef:03:45:50:72:85:35:6c:72:8c:ec:17:52: 0a:4e:64:1f:20:35:e5:a9:08:d2:37:85:17:ee:87:54:04:f8: de:95:64:13:17:67:b6:53:cd:a5:3b:f3:97:b7:fb:91:df:04: 8d:ed:24:2c:2a:60:10:de:bd:0d:0d:b4:c8:fa:66:3d:2f:5e: 4b:96:c7:28:a6:e1:0c:6f:43:dc:82:7d:d7:b1:3f:92:eb:78: 85:ee:25:cb:91:da:9f:e4:9c:d9:8f:a5:8f:1d:07:93:83:a5: 69:21:cc:6f:f0:15:72:11:31:04:1c:26:09:bb:4e:97:a6:a9: a7:90:9b:c3:94:83:81:6f:06:30:e8:60:42:8c:34:55:e3:1c: 43:01:ee:4e:47:0b:f7:b6:1f:9a:bb:a7:a5:ff:24:2c:39:56: 29:52:e3:5a:61:65:7d:06:94:7b:d4:ca:aa:cd:ce:e3:8d:32: 4b:ff:20:09:3a:f4:4e:88:0f:71:34:f6:a4:23:32:8e:e5:ed: ce:70:b1:8f:11:32:b3:f3:4c:30:ae:fb:32:ef:58:c2:ca:b9: d8:b9:9e:a4:69:f4:b7:20:ba:0b:b9:9b:af:18:f1:ae:a6:72: 3d:2f:28:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDE3ODJGQzJDNEQyNEEwRTI2NDBEMTVCMzE5MERFRTk4 RjM2QjhGM0MwHhcNMjUwNjMwMTYyNTQxWhcNMjUwNzA3MTYyNTQxWjAYMRYwFAYD VQQDEw02ODYyYmE4NS0xMWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHKLyWKGyTWtgOFi5OTEyWxCNxjwW/RLvBIcLxqQmngydMxpnV2OwL+JQsYH c1TLrNIj9IUBP8LjzcSCbxhgZZDP/JFjFuqKblnan80PdMEhw8Sd12Bbe1MuNAid EBdIkL2x8Zu0jvoDbK+cBSUmHdZB1nV/jZMI5nn08Vc2j0jm4rdOP+Vkse32Fua3 JsOlowO6j/xQSCoIdnFOoniYaQ5xKKj9B96vgGjZOlIa0FKIgA5C8SiU8j1dC4XM iLbj7FDjbF4TfKgE5xN3DLaRUh6+RV57SmcWgQHfLw0owx00FvckpJI5u45MJ2gD 5m4V0on297XrXNsbyZAoVcRQewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUfzbEj YEfLkWbYj29i1NhSIJvaMB8GA1UdIwQYMBaAFBeC/CxNJKDiZA0VsxkN7pjza488 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29PSmtEUld6R1EzdW1QTnJq encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0TDhMRTBrb09Ka0RSV3pHUTN1bVBOcmp6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29P SmtEUld6R1EzdW1QTnJqencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz7vTjcf6MB5ka13Y9WIoshjnUL9Lj7+8DRVByhTVscozsF1IKTmQf IDXlqQjSN4UX7odUBPjelWQTF2e2U82lO/OXt/uR3wSN7SQsKmAQ3r0NDbTI+mY9 L15LlscopuEMb0Pcgn3XsT+S63iF7iXLkdqf5JzZj6WPHQeTg6VpIcxv8BVyETEE HCYJu06XpqmnkJvDlIOBbwYw6GBCjDRV4xxDAe5ORwv3th+au6el/yQsOVYpUuNa YWV9BpR71Mqqzc7jjTJL/yAJOvROiA9xNPakIzKO5e3OcLGPETKz80wwrvsy71jC yrnYuZ6kafS3ILoLuZuvGPGupnI9LyiR -----END CERTIFICATE-----Generated at Wed Jul 2 13:39:15 2025 by rpki-client