$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json) Hash identifier: ddtb6VWv5xSMDAl8M42oW+QmkLV8nafNWYgiczLNxDM= Subject key identifier: F5:79:E3:A4:F5:4D:47:EC:85:64:0B:7B:D6:A4:4B:F2:3A:FF:02:35 Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft Manifest number: 0C8E Signing time: Wed 02 Jul 2025 18:26:44 +0000 Manifest this update: Wed 02 Jul 2025 18:26:43 +0000 Manifest next update: Wed 09 Jul 2025 18:26:43 +0000 Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: c9F7dyuEMYBwsVM3TGf1724LTgFNBnkyRa5Tz1QEgNE=) 2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: HyFNgnjZWsveyr1t+EGS0rR5D+l88ZMNMytH+WMJ+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Validity Not Before: Jul 2 18:26:43 2025 GMT Not After : Jul 9 18:26:43 2025 GMT Subject: CN=686579e4-fa0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8c:6a:36:9c:92:b5:2f:64:31:c2:fc:90:25: 7b:b5:1d:06:25:df:09:17:c4:5a:a5:a1:b1:4a:ba: fe:16:4b:9f:a7:6e:fa:01:8e:b2:1a:66:d7:49:ca: 52:51:d7:26:cc:fe:8b:8e:4c:6f:97:76:0e:dc:04: dd:89:6f:1d:d3:b1:21:48:2b:83:5a:5d:41:3e:22: 60:20:e3:65:25:26:e1:1b:46:2e:c7:bd:f7:a4:bf: 1f:07:42:98:dd:d2:29:66:1c:50:a0:8d:f9:df:88: 47:ee:53:17:9f:6e:00:a3:0d:ac:1f:5c:63:af:bd: 58:10:e3:e7:f7:fd:7f:f5:59:88:9d:0e:18:e6:9c: 37:70:f6:f6:63:85:85:bd:05:15:d0:7f:e6:21:2a: 57:7b:47:ec:da:4d:6d:d7:66:6f:a3:de:97:5a:0b: f1:32:a0:c0:6a:bb:ca:cc:e3:c1:d1:ea:48:57:dd: a3:e2:59:19:86:d4:22:5d:f1:58:de:bd:48:bf:4e: 2d:e0:a0:9b:55:f6:64:d5:f3:c6:68:e8:8c:1f:d5: ca:0e:45:54:c9:4b:a2:e6:fa:7a:6d:25:32:8a:e3: 7e:e8:bf:d3:35:6c:c7:d6:62:04:0d:2d:09:28:04: ac:b4:65:28:f6:ce:b2:96:33:16:96:a8:9a:8d:b2: 01:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:79:E3:A4:F5:4D:47:EC:85:64:0B:7B:D6:A4:4B:F2:3A:FF:02:35 X509v3 Authority Key Identifier: keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:0d:01:c0:83:17:ee:2e:d2:83:ba:c3:5b:42:3e:60:a9:53: b0:f9:e4:53:c6:b8:e6:1b:ea:c4:e0:bf:52:91:c3:bf:d3:5b: aa:a9:54:e2:8d:c2:a9:4a:ba:56:7b:c7:d0:8d:f9:6e:18:2b: c2:42:50:b2:33:78:48:bb:29:a7:6e:f1:0d:df:83:9d:dd:8e: a4:fa:2c:b3:f0:a9:6c:6d:fc:28:be:bb:7f:33:3b:29:7b:3e: 2f:a6:61:b7:eb:41:71:72:53:b4:0f:41:1b:7f:74:df:25:8f: 21:61:48:f6:2a:3f:1c:2b:62:cb:92:44:0a:89:73:dc:a6:f5: ed:5f:98:f9:17:4f:35:db:48:fe:8e:64:79:75:e0:20:4c:59: 59:11:00:bd:24:db:d5:d4:9f:99:ad:44:38:d0:30:8a:e8:f0: 4b:82:50:fa:82:0e:db:74:88:c2:14:66:d8:ff:a6:81:d2:33: 8b:69:2c:1f:e2:2c:f8:18:15:0b:fe:f7:f3:e7:15:e5:38:11: 79:49:a0:04:6a:b7:b2:21:7c:30:cf:72:76:2d:c9:03:e8:17: 25:67:4c:c4:16:d4:27:f1:82:58:7f:61:d4:93:47:51:b5:5e: 90:0f:3a:01:47:c1:e2:72:ac:6a:ef:62:50:8f:33:bd:5c:a1: d0:ce:51:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw RkM3RTcyNDcwHhcNMjUwNzAyMTgyNjQzWhcNMjUwNzA5MTgyNjQzWjAYMRYwFAYD VQQDEw02ODY1NzllNC1mYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oxqNpyStS9kMcL8kCV7tR0GJd8JF8RapaGxSrr+Fkufp276AY6yGmbXScpS UdcmzP6Ljkxvl3YO3ATdiW8d07EhSCuDWl1BPiJgIONlJSbhG0Yux733pL8fB0KY 3dIpZhxQoI3534hH7lMXn24Aow2sH1xjr71YEOPn9/1/9VmInQ4Y5pw3cPb2Y4WF vQUV0H/mISpXe0fs2k1t12Zvo96XWgvxMqDAarvKzOPB0epIV92j4lkZhtQiXfFY 3r1Iv04t4KCbVfZk1fPGaOiMH9XKDkVUyUui5vp6bSUyiuN+6L/TNWzH1mIEDS0J KASstGUo9s6yljMWlqiajbIBdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPV546T1 TUfshWQLe9akS/I6/wI1MB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5 NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4 bkZBaGtvc0R2SVVQeC1ja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRDQHAgxfuLtKDusNbQj5gqVOw+eRTxrjmG+rE4L9SkcO/01uqqVTi jcKpSrpWe8fQjfluGCvCQlCyM3hIuymnbvEN34Od3Y6k+iyz8Klsbfwovrt/Mzsp ez4vpmG360FxclO0D0Ebf3TfJY8hYUj2Kj8cK2LLkkQKiXPcpvXtX5j5F08120j+ jmR5deAgTFlZEQC9JNvV1J+ZrUQ40DCK6PBLglD6gg7bdIjCFGbY/6aB0jOLaSwf 4iz4GBUL/vfz5xXlOBF5SaAEareyIXwwz3J2LckD6BclZ0zEFtQn8YJYf2HUk0dR tV6QDzoBR8Hicqxq72JQjzO9XKHQzlHZ -----END CERTIFICATE-----Generated at Wed Jul 2 23:12:47 2025 by rpki-client