$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft File: fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json) Hash identifier: ncNlJYnBM2aOQdsPSplOcgcW0t8PEADmJCK/xjKYMjM= Subject key identifier: A0:8F:4D:8C:9E:BC:A3:5A:77:54:41:3E:81:73:5F:D8:D7:E0:E6:A8 Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 Certificate issuer: /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft Manifest number: 0C56 Signing time: Wed 02 Jul 2025 18:35:40 +0000 Manifest this update: Wed 02 Jul 2025 18:35:40 +0000 Manifest next update: Wed 09 Jul 2025 18:35:40 +0000 Files and hashes: 1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: XX5OsMvRHg8v5P3GXwtSD/PBAqUQKa0XIlh9MDgqCo4=) 2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: VMA/DaW08DK9v/lxWPtZwnO804CFumuELv89I609LTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Validity Not Before: Jul 2 18:35:40 2025 GMT Not After : Jul 9 18:35:40 2025 GMT Subject: CN=68657bfc-d2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:7f:2a:6f:99:f0:8a:15:7f:25:1e:73:c0: 41:7e:3c:19:13:34:58:76:74:cf:d5:e7:91:d6:f5: 10:b4:b3:a7:40:5a:d7:96:45:f5:76:e9:b4:fb:db: fa:54:8a:cd:c4:01:f8:5b:eb:df:e4:30:8b:06:87: 57:11:d2:77:12:28:ce:be:26:2e:f9:19:d6:b6:4b: 26:d9:d3:05:bc:32:fb:97:d1:47:1d:b6:8a:3e:3c: 12:40:9c:9c:3f:10:8f:d9:df:db:d9:38:e9:40:e7: a9:a3:9d:97:d7:3c:0c:c4:cb:b5:da:b9:66:6e:49: 74:49:da:75:93:26:77:c5:bd:97:58:3e:64:9c:3d: 79:57:d8:c0:8a:32:e6:d4:29:66:f8:90:6b:7f:5c: e6:01:e5:03:c1:dd:2c:19:30:15:d5:b1:fe:6e:a9: 66:a5:ec:7b:0f:78:70:ac:e8:32:11:c3:16:a5:26: 28:37:93:95:e8:cf:98:bd:dd:94:d1:6e:ec:8f:73: 1b:28:45:03:a6:a4:98:68:40:21:59:32:eb:4e:dc: a2:e0:8c:b6:d7:32:ce:a8:e1:e9:32:21:a0:90:17: 07:ef:64:4c:6a:3f:47:e2:44:0a:28:56:e8:f4:77: fa:1e:97:ca:5a:c4:af:ee:8b:b5:ca:67:c3:2a:fb: 36:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:4D:8C:9E:BC:A3:5A:77:54:41:3E:81:73:5F:D8:D7:E0:E6:A8 X509v3 Authority Key Identifier: keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:5f:8f:ea:5b:ba:d8:0f:72:a2:49:ba:a6:dd:6b:ea:ca:9c: 8d:74:a1:18:7d:39:e7:c3:4c:1f:9e:74:b2:34:4f:9d:12:e6: 3c:d4:41:9e:1d:9c:1c:cb:7d:25:3b:37:43:02:b1:25:6a:77: 9f:02:a1:7e:4f:6d:0d:0d:5d:1f:2f:06:f6:c2:db:72:7d:f9: ad:fe:1f:86:43:83:02:47:f0:df:51:19:52:9c:c8:ca:50:16: b3:1d:68:67:e9:cb:04:71:8e:cf:06:2a:03:e2:0e:79:49:2c: c9:1a:50:eb:f2:a9:e3:b1:2f:06:5a:57:3d:88:cf:d2:53:6a: 5b:85:67:0d:6a:60:5a:69:eb:ee:a1:90:2a:61:de:e5:28:a0: f8:d6:e8:69:72:07:c4:3a:a9:54:1f:80:3d:cf:3b:83:f8:2e: b4:0e:3c:47:64:5a:d1:69:50:b2:7f:59:10:bb:1f:ce:9f:ca: e4:58:a7:5d:85:6d:d7:6d:af:6e:39:3e:2f:3b:8c:0e:86:ce: 6f:8e:7d:d5:15:14:b1:1b:e0:74:66:c8:e4:08:9f:2b:3c:31: 09:ee:84:95:df:d2:21:1f:19:5c:92:a4:23:2e:e4:19:65:e8: 8e:e1:1e:e5:58:7b:6b:3d:c1:87:ca:0b:b7:70:cc:69:8d:49: 9a:3d:07:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1OTgxMTAvBgNVBAUTKDdEQzQ2MkFGM0U2Mjc4QTgyMTg5MDVBMUIzRTdEQjM3 RjJFRjdBODIwHhcNMjUwNzAyMTgzNTQwWhcNMjUwNzA5MTgzNTQwWjAYMRYwFAYD VQQDEw02ODY1N2JmYy1kMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdd/Km+Z8IoVfyUec8BBfjwZEzRYdnTP1eeR1vUQtLOnQFrXlkX1dum0+9v6 VIrNxAH4W+vf5DCLBodXEdJ3EijOviYu+RnWtksm2dMFvDL7l9FHHbaKPjwSQJyc PxCP2d/b2TjpQOepo52X1zwMxMu12rlmbkl0Sdp1kyZ3xb2XWD5knD15V9jAijLm 1Clm+JBrf1zmAeUDwd0sGTAV1bH+bqlmpex7D3hwrOgyEcMWpSYoN5OV6M+Yvd2U 0W7sj3MbKEUDpqSYaEAhWTLrTtyi4Iy21zLOqOHpMiGgkBcH72RMaj9H4kQKKFbo 9Hf6HpfKWsSv7ou1ymfDKvs2/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCPTYye vKNad1RBPoFzX9jX4OaoMB8GA1UdIwQYMBaAFH3EYq8+YnioIYkFobPn2zfy73qC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU5OC84MTJDRTlENDA0 NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVLZ2hpUVdocy1mYk5fTHZl b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjUmlyejVpZUtnaGlRV2hzLWZiTl9MdmVvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU5OC84MTJDRTlENDA0NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVL Z2hpUVdocy1mYk5fTHZlb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4X4/qW7rYD3KiSbqm3WvqypyNdKEYfTnnw0wfnnSyNE+dEuY81EGe HZwcy30lOzdDArElanefAqF+T20NDV0fLwb2wttyffmt/h+GQ4MCR/DfURlSnMjK UBazHWhn6csEcY7PBioD4g55SSzJGlDr8qnjsS8GWlc9iM/SU2pbhWcNamBaaevu oZAqYd7lKKD41uhpcgfEOqlUH4A9zzuD+C60DjxHZFrRaVCyf1kQux/On8rkWKdd hW3Xba9uOT4vO4wOhs5vjn3VFRSxG+B0ZsjkCJ8rPDEJ7oSV39IhHxlckqQjLuQZ ZeiO4R7lWHtrPcGHygu3cMxpjUmaPQcF -----END CERTIFICATE-----Generated at Thu Jul 3 17:52:41 2025 by rpki-client