$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: 75p73c//QoMMVqOfZJ8ErdriCZHqbMRUkzzsC9ItiY8= Subject key identifier: 40:81:85:8F:80:72:ED:23:07:CE:41:D9:78:25:4F:8D:C7:69:E4:E8 Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 02AF Signing time: Sun 29 Jun 2025 01:08:00 +0000 Manifest this update: Sun 29 Jun 2025 01:08:00 +0000 Manifest next update: Sun 06 Jul 2025 01:08:00 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: K98rwVr5zcJa0jY2KbIz05oK7rL51MgGYUt88fVqw+A=) 2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: DeTJWRmDeKmiEdEbaqf7bVSh2DO8AXjNSQova+ZvrBU=) 3: A48E2B14A73B11EF9933C14AC4F9AE02.roa (hash: 8t/QNbC3I1YI/RM/UKLFEXuaXosMXERyao6X1hnUKlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: Jun 29 01:08:00 2025 GMT Not After : Jul 6 01:08:00 2025 GMT Subject: CN=686091f0-1626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:66:2e:32:5b:4e:c1:57:3d:e1:e0:42:2b: 9b:86:85:60:5d:1a:b8:c9:92:e8:0e:fe:92:cf:4d: 85:50:e6:36:f1:06:ab:de:6b:03:c7:3d:c7:94:02: b3:00:d0:98:cc:13:95:e9:b7:c3:18:18:7f:6c:38: b9:05:28:1d:09:56:d4:23:3d:75:1b:44:32:b9:cd: 26:36:e8:9c:cc:ea:f8:a4:46:c5:4a:2d:3c:97:0d: 44:18:71:3a:59:d3:ca:46:91:ea:60:ab:d0:ea:85: 35:e7:1a:c6:5e:97:89:89:4b:e2:3d:10:95:12:57: c1:49:e5:5a:4b:83:43:db:a7:d1:ea:f7:ff:cb:0b: 9e:b0:c2:0c:92:51:04:41:78:86:ce:a0:8f:14:ac: 8d:0e:a1:f0:4e:77:93:29:1e:14:37:89:a0:a6:e0: 29:15:cb:07:01:19:4c:ca:1d:82:aa:6a:47:df:1d: 04:82:62:4a:93:c2:0d:2e:1c:30:15:42:03:dd:6d: 12:6d:dd:b3:47:35:0e:c3:0c:07:a8:9a:92:6b:8c: 6a:09:d6:55:6e:bd:5b:4a:e4:dc:d0:ce:66:dd:c3: b0:af:f0:1c:63:11:e6:e9:0f:87:f5:7b:ab:93:25: 49:84:2d:db:dc:94:75:df:b9:a2:51:0c:97:98:37: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:81:85:8F:80:72:ED:23:07:CE:41:D9:78:25:4F:8D:C7:69:E4:E8 X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:58:66:76:58:9e:fa:71:05:98:32:f2:ec:75:27:06:0e:96: 35:0a:06:cc:da:db:1f:71:10:33:f9:d0:0a:34:4a:76:56:96: 80:f0:3c:7b:9f:62:29:dc:f5:52:f4:ee:98:09:f4:80:e6:9a: 84:ad:df:49:e3:ac:90:e6:cc:ac:cd:47:0e:4f:62:a0:ea:92: a3:c8:fb:93:27:46:9f:a4:bd:c2:f3:c3:da:06:a9:dc:0d:41: 30:9a:22:c7:06:69:91:13:cb:bb:fa:c4:b0:78:ce:13:26:b0: 19:77:75:87:c7:70:50:45:03:de:39:0e:ae:e3:25:14:ab:a4: bb:22:40:2d:ca:f1:81:07:5c:10:9d:a6:2f:65:e8:37:fb:03: fb:bf:d0:a2:06:82:9a:56:62:5e:5f:5f:4f:2e:21:14:d2:ed: 8d:e3:1b:87:2e:fa:b4:9b:6b:a3:da:8c:4d:28:c4:0c:fb:af: 2a:37:63:8c:4e:b5:16:ea:fd:ea:62:24:d5:07:a6:75:b6:6c: 76:2f:68:d7:c7:55:34:51:7c:13:f6:53:7c:73:7a:77:d0:aa: b8:25:d8:6e:15:6e:dc:df:77:d1:97:81:b6:56:6e:e3:e1:7f: 1e:22:b8:93:19:03:2d:25:cb:0c:fc:c4:7c:50:24:00:3d:56: 28:8a:d7:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjUwNjI5MDEwODAwWhcNMjUwNzA2MDEwODAwWjAYMRYwFAYD VQQDEw02ODYwOTFmMC0xNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqdmLjJbTsFXPeHgQiubhoVgXRq4yZLoDv6Sz02FUOY28Qar3msDxz3HlAKz ANCYzBOV6bfDGBh/bDi5BSgdCVbUIz11G0Qyuc0mNuiczOr4pEbFSi08lw1EGHE6 WdPKRpHqYKvQ6oU15xrGXpeJiUviPRCVElfBSeVaS4ND26fR6vf/ywuesMIMklEE QXiGzqCPFKyNDqHwTneTKR4UN4mgpuApFcsHARlMyh2CqmpH3x0EgmJKk8INLhww FUID3W0Sbd2zRzUOwwwHqJqSa4xqCdZVbr1bSuTc0M5m3cOwr/AcYxHm6Q+H9Xur kyVJhC3b3JR137miUQyXmDcB9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECBhY+A cu0jB85B2XglT43HaeToMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIWGZ2WJ76cQWYMvLsdScGDpY1CgbM2tsfcRAz+dAKNEp2VpaA8Dx7 n2Ip3PVS9O6YCfSA5pqErd9J46yQ5syszUcOT2Kg6pKjyPuTJ0afpL3C88PaBqnc DUEwmiLHBmmRE8u7+sSweM4TJrAZd3WHx3BQRQPeOQ6u4yUUq6S7IkAtyvGBB1wQ naYvZeg3+wP7v9CiBoKaVmJeX19PLiEU0u2N4xuHLvq0m2uj2oxNKMQM+68qN2OM TrUW6v3qYiTVB6Z1tmx2L2jXx1U0UXwT9lN8c3p30Kq4JdhuFW7c33fRl4G2Vm7j 4X8eIriTGQMtJcsM/MR8UCQAPVYoitdw -----END CERTIFICATE-----Generated at Mon Jun 30 14:51:10 2025 by rpki-client