$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: QiXxi7NyG/LkGVGVL2pTqL3N9OkLNNVYwHvcCfT54uY= Subject key identifier: B5:F6:EF:E5:2E:63:65:52:0C:4F:68:D1:DE:EF:B6:A6:3A:A5:20:29 Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 01FB Signing time: Sat 23 Aug 2025 02:32:52 +0000 Manifest this update: Sat 23 Aug 2025 02:32:51 +0000 Manifest next update: Sat 30 Aug 2025 02:32:51 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: sZ8kW59hI9rCWYW2Sy1udFDN6ngf72OM1tIP+TPWfQ4=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: ZvVWR24fiTgTKL1AgxjjU+8hvOzH690FD/ftf9Pub2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Validity Not Before: Aug 23 02:32:51 2025 GMT Not After : Aug 30 02:32:51 2025 GMT Subject: CN=68a92853-8742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:71:45:8f:5e:a8:1e:51:8d:aa:3d:48:e8:41: cb:dd:11:50:16:c8:e6:11:6f:b5:89:73:5f:d9:e4: 16:10:ee:a8:f1:81:9b:55:b7:d0:e4:34:84:17:ea: db:0e:07:d0:83:ef:4e:24:c7:f7:3a:93:5f:b9:22: d1:7c:63:fc:24:e8:b5:37:2d:85:a6:02:43:2d:68: 1d:1f:7e:f5:7d:63:32:f6:7f:01:26:44:ae:8c:80: 26:00:0a:0c:30:ec:22:81:03:6d:f0:9b:f3:79:41: dc:2c:b0:a2:ba:19:9e:3d:fa:ba:e6:c3:ee:4f:d8: 16:31:eb:0f:59:03:ca:14:f4:05:a7:3e:36:3b:a0: a0:73:1c:a3:9a:bf:04:d4:53:3b:e8:55:fd:59:05: 80:1d:85:17:92:f7:25:34:9e:16:05:cb:49:bd:a6: ff:2b:fe:76:b0:30:d8:f3:49:20:4d:54:82:33:2f: 47:76:da:5e:70:6e:ba:92:76:b5:81:ee:5e:13:b9: 8d:9c:c7:fd:51:b2:a4:99:33:7b:8f:03:f6:6d:e7: 9f:db:e2:4d:f5:59:ee:b3:eb:2f:15:f0:20:26:38: 12:98:a6:43:d2:41:dd:98:6b:a8:4b:26:6d:9a:d9: 7e:34:6d:8a:4e:af:8b:0f:fb:ee:9a:23:d5:af:f3: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F6:EF:E5:2E:63:65:52:0C:4F:68:D1:DE:EF:B6:A6:3A:A5:20:29 X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b4:54:5b:c3:ba:e8:79:37:d5:c3:6c:a9:ac:32:24:1f:4a: ef:a9:2f:ea:9d:3e:1e:18:73:68:c8:85:e4:58:f4:56:69:46: d4:86:eb:bc:50:3b:fe:96:12:32:df:58:52:6d:2e:d7:b1:c1: 68:59:fc:53:f4:47:11:64:2d:9b:60:66:19:a6:e8:bd:64:2b: af:be:ae:73:01:18:ae:1c:30:7c:df:f6:aa:f4:f9:20:eb:98: 86:c1:a7:b2:3e:44:49:fd:4d:8b:93:f0:f6:ef:bd:94:2d:17: 41:c9:0d:c7:47:bc:00:35:8a:f5:73:c5:f1:76:c6:eb:6c:82: a4:cd:08:ab:e6:eb:d1:65:47:58:f6:c0:86:e5:b4:47:af:bc: 70:ee:e3:c7:ac:14:eb:a9:fd:b9:b9:ed:6d:16:a1:72:9e:9d: 43:8e:aa:7f:94:66:3b:29:4b:4f:00:3b:2f:cd:ce:b5:5b:6f: c2:b8:59:14:de:9e:06:13:be:b7:58:6a:43:7b:74:aa:c6:1c: 52:1c:38:d1:90:c7:9c:e3:07:67:83:76:9f:8b:52:c6:38:ab: c4:28:19:48:26:93:d3:6d:6d:2b:38:47:23:7b:3b:ca:b9:bf: 78:a5:a0:84:03:9a:53:20:cf:ec:ff:3a:89:3c:9b:24:ca:fa: 26:61:58:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjUwODIzMDIzMjUxWhcNMjUwODMwMDIzMjUxWjAYMRYwFAYD VQQDEw02OGE5Mjg1My04NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03FFj16oHlGNqj1I6EHL3RFQFsjmEW+1iXNf2eQWEO6o8YGbVbfQ5DSEF+rb DgfQg+9OJMf3OpNfuSLRfGP8JOi1Ny2FpgJDLWgdH371fWMy9n8BJkSujIAmAAoM MOwigQNt8JvzeUHcLLCiuhmePfq65sPuT9gWMesPWQPKFPQFpz42O6Cgcxyjmr8E 1FM76FX9WQWAHYUXkvclNJ4WBctJvab/K/52sDDY80kgTVSCMy9HdtpecG66kna1 ge5eE7mNnMf9UbKkmTN7jwP2beef2+JN9Vnus+svFfAgJjgSmKZD0kHdmGuoSyZt mtl+NG2KTq+LD/vumiPVr/NBvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX27+Uu Y2VSDE9o0d7vtqY6pSApMB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9tFRbw7roeTfVw2yprDIkH0rvqS/qnT4eGHNoyIXkWPRWaUbUhuu8 UDv+lhIy31hSbS7XscFoWfxT9EcRZC2bYGYZpui9ZCuvvq5zARiuHDB83/aq9Pkg 65iGwaeyPkRJ/U2Lk/D2772ULRdByQ3HR7wANYr1c8XxdsbrbIKkzQir5uvRZUdY 9sCG5bRHr7xw7uPHrBTrqf25ue1tFqFynp1Djqp/lGY7KUtPADsvzc61W2/CuFkU 3p4GE763WGpDe3SqxhxSHDjRkMec4wdng3afi1LGOKvEKBlIJpPTbW0rOEcjezvK ub94paCEA5pTIM/s/zqJPJskyvomYVj8 -----END CERTIFICATE-----Generated at Sun Aug 24 07:21:01 2025 by rpki-client