$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json) Hash identifier: 2DcJ89l3p++RCyH45iIpPz6glkW3RlC2QFKiyN4+7zA= Subject key identifier: B4:86:3B:89:F3:85:F1:87:BA:C7:60:00:9F:DA:58:C8:5A:21:7D:D1 Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Certificate serial: 0CAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft Manifest number: 0CA8 Signing time: Fri 22 Aug 2025 18:18:57 +0000 Manifest this update: Fri 22 Aug 2025 18:18:57 +0000 Manifest next update: Fri 29 Aug 2025 18:18:57 +0000 Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: xi69fCRve6ijZK1xZLMGacAsxNaTVRhgIf42sxOSMAY=) 2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: HyFNgnjZWsveyr1t+EGS0rR5D+l88ZMNMytH+WMJ+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3247 (0xcaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Validity Not Before: Aug 22 18:18:57 2025 GMT Not After : Aug 29 18:18:57 2025 GMT Subject: CN=68a8b491-8786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:0d:3f:c4:86:74:86:e6:e5:6c:92:bb:17: bf:bd:47:3c:a9:c9:97:76:f7:a4:9e:06:44:a5:62: 95:cf:d4:bc:b0:f4:29:ab:0a:8b:78:0a:59:10:f7: 5e:9d:21:94:0e:72:6c:55:2e:70:eb:f0:f2:4f:ae: e8:60:4f:e4:cd:f0:44:9d:d9:95:63:2e:3f:87:ba: dd:7a:6b:0c:7d:9b:d0:f6:d0:bd:48:ba:87:86:9a: 05:23:8f:23:1e:b3:81:c8:fb:3f:2e:67:08:11:e6: 93:45:8d:60:71:55:6a:10:3d:19:56:9b:42:00:fb: 7d:f8:f5:8f:c7:99:7f:54:e0:5a:6c:85:f0:6b:63: a3:d6:29:8d:05:4e:ea:b8:d0:ef:2d:36:f0:dc:01: 73:29:ab:78:a3:43:4e:18:28:83:02:4c:83:36:95: cf:35:6b:7f:38:4c:ab:9e:20:41:ff:34:a8:7f:c2: 6e:36:60:08:63:54:63:92:11:24:b1:4a:84:91:49: 6e:75:d3:f4:cf:c8:09:e9:32:f1:d5:d9:4f:70:0e: e3:e2:46:18:a9:01:22:2c:94:4a:f5:ec:c4:54:d9: 55:c7:fa:23:e3:b1:38:d0:66:eb:16:74:3e:ab:47: 93:a3:d3:f9:7f:1d:40:83:db:4f:14:22:ad:cc:2c: fc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:86:3B:89:F3:85:F1:87:BA:C7:60:00:9F:DA:58:C8:5A:21:7D:D1 X509v3 Authority Key Identifier: keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:94:13:6a:bc:d5:38:ac:f9:13:94:e7:e3:d7:a4:c8:9a:69: 0a:62:e2:8d:62:b7:7b:a9:5b:9a:01:fe:74:6f:79:f3:df:47: 07:46:76:e5:d2:b1:30:a3:0f:a7:96:61:03:fb:1c:9c:05:92: 8b:a8:5e:2e:37:2c:e7:34:4c:b7:64:1a:0e:a6:61:4c:36:05: 90:3f:25:d2:88:75:76:7a:b9:c0:bb:fd:dc:95:29:31:11:07: b7:a9:03:57:fa:dc:31:c9:59:65:77:36:2c:69:e8:6e:06:b2: b6:6f:e3:2e:d2:f1:e6:7b:8e:85:13:15:95:d3:bc:26:3e:c4: 5b:7f:9d:8b:b2:0d:bd:b4:49:c7:ba:e8:93:8b:a4:e9:53:0c: d6:9f:e7:98:22:34:4d:dd:1b:3d:3c:29:b1:26:42:7e:f2:cf: 44:71:72:b6:50:5a:5b:71:4e:59:c7:77:b9:17:f5:95:b7:07: 47:d5:f5:ee:bc:79:b6:c7:f6:23:ec:0a:bd:1e:33:9a:a9:93: a5:a7:ab:f5:ea:4e:10:bb:8f:53:05:37:8e:4f:3a:cb:11:11: 47:91:fa:9e:44:10:f5:22:58:f9:1c:46:3a:54:fe:6d:e3:e2: 78:d6:3b:40:bf:24:2a:4c:b4:b1:a5:04:b7:d0:20:74:c8:5c: ae:5e:12:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw RkM3RTcyNDcwHhcNMjUwODIyMTgxODU3WhcNMjUwODI5MTgxODU3WjAYMRYwFAYD VQQDEw02OGE4YjQ5MS04Nzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFsNP8SGdIbm5WySuxe/vUc8qcmXdvekngZEpWKVz9S8sPQpqwqLeApZEPde nSGUDnJsVS5w6/DyT67oYE/kzfBEndmVYy4/h7rdemsMfZvQ9tC9SLqHhpoFI48j HrOByPs/LmcIEeaTRY1gcVVqED0ZVptCAPt9+PWPx5l/VOBabIXwa2Oj1imNBU7q uNDvLTbw3AFzKat4o0NOGCiDAkyDNpXPNWt/OEyrniBB/zSof8JuNmAIY1RjkhEk sUqEkUluddP0z8gJ6TLx1dlPcA7j4kYYqQEiLJRK9ezEVNlVx/oj47E40GbrFnQ+ q0eTo9P5fx1Ag9tPFCKtzCz87wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSGO4nz hfGHusdgAJ/aWMhaIX3RMB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5 NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4 bkZBaGtvc0R2SVVQeC1ja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrlBNqvNU4rPkTlOfj16TImmkKYuKNYrd7qVuaAf50b3nz30cHRnbl 0rEwow+nlmED+xycBZKLqF4uNyznNEy3ZBoOpmFMNgWQPyXSiHV2ernAu/3clSkx EQe3qQNX+twxyVlldzYsaehuBrK2b+Mu0vHme46FExWV07wmPsRbf52Lsg29tEnH uuiTi6TpUwzWn+eYIjRN3Rs9PCmxJkJ+8s9EcXK2UFpbcU5Zx3e5F/WVtwdH1fXu vHm2x/Yj7Aq9HjOaqZOlp6v16k4Qu49TBTeOTzrLERFHkfqeRBD1Ilj5HEY6VP5t 4+J41jtAvyQqTLSxpQS30CB0yFyuXhJY -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:32 2025 by rpki-client