$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: cZK8LmOWWL6zP0chT20eehrcD7uF+oZcnt0G8Rzf89Q= Subject key identifier: 10:E5:30:95:DF:18:CE:5A:BF:7F:49:33:8D:31:10:C6:1B:05:6C:72 Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 01E0 Signing time: Tue 01 Jul 2025 03:06:07 +0000 Manifest this update: Tue 01 Jul 2025 03:06:07 +0000 Manifest next update: Tue 08 Jul 2025 03:06:07 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: XaV+4j2ando5eIpaxqYy5xuLdxkbFMAsgr+H2BECseQ=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: ZvVWR24fiTgTKL1AgxjjU+8hvOzH690FD/ftf9Pub2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Validity Not Before: Jul 1 03:06:07 2025 GMT Not After : Jul 8 03:06:07 2025 GMT Subject: CN=6863509f-ef8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:6a:28:23:fa:a8:ec:31:84:f0:36:25:83: 21:af:08:b4:b7:bd:e6:da:7e:94:99:1d:0b:b3:bf: a5:62:89:d2:a1:40:af:b4:aa:d1:9e:f8:4c:3e:4c: 08:35:29:b7:78:0a:0c:90:14:9f:14:8b:cc:25:41: e4:4c:79:65:59:45:77:22:36:97:c5:98:7d:e0:52: a6:3c:eb:db:f9:7b:af:5e:91:c5:23:9c:a4:4f:1a: 49:36:21:8b:90:cd:e6:3d:d5:6c:dc:86:d2:e1:21: a2:a2:2a:2e:20:e2:04:4e:4b:06:8b:a5:90:2e:6b: 59:f3:eb:be:50:ad:4d:71:66:81:31:50:fa:2d:cc: a4:cf:f0:e4:ee:5a:9f:e4:3c:90:18:1b:d0:4d:42: 12:de:fc:6a:37:be:ea:12:4b:35:fd:08:85:46:9e: 52:9d:c8:1b:52:16:78:9c:ae:05:5a:9d:54:7e:ae: 60:f7:21:b6:c2:76:93:08:01:66:60:e8:95:e7:f7: c6:bb:a0:3a:82:5f:a8:b3:fd:a9:0e:f3:e6:f8:a9: 25:93:d8:ac:2d:ff:ce:f3:9c:e4:d5:da:23:ae:f4: b6:6d:e7:97:a2:6e:38:31:04:4f:af:50:be:a3:06: 99:22:72:78:05:66:c1:d0:0a:a0:c8:e2:6e:b7:f4: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E5:30:95:DF:18:CE:5A:BF:7F:49:33:8D:31:10:C6:1B:05:6C:72 X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:04:21:91:2e:80:b1:1a:a8:24:07:a8:23:4e:0f:e0:a2:6f: 5f:a3:8a:28:14:35:c7:a2:38:69:15:af:e1:d6:8f:38:92:ef: ee:2b:d0:bd:f5:0c:50:37:ef:15:fa:a3:ae:85:b2:86:37:7b: 93:da:e3:c3:16:04:4b:b2:52:da:aa:16:17:49:31:1c:45:f1: a2:31:1a:96:db:71:3b:8f:d1:74:eb:25:17:31:4d:4f:81:d7: cd:05:8e:8d:43:ec:84:3c:0e:cb:c3:f3:35:99:06:9e:6d:89: be:31:bb:25:15:2f:04:9a:30:cb:b0:56:85:7c:c1:c9:11:00: ca:44:6f:0b:d7:07:2b:5b:6e:d3:8d:4b:39:de:3d:9e:8d:36: 0e:34:b7:e6:f9:6a:4f:f6:40:55:6d:47:3c:02:3b:42:57:3a: a0:a1:64:68:f0:14:12:4b:9c:cf:aa:ff:87:b5:84:0d:4c:af: 86:d6:f6:da:66:86:87:a2:85:ef:76:89:bc:14:35:7d:fd:bb: 57:a5:ad:46:49:7c:7c:83:fe:d5:3d:ef:f5:f8:ca:a9:9f:20: c8:88:26:fb:44:11:6c:77:0e:34:14:b9:0f:85:c7:9b:57:62: 05:08:80:43:58:9e:41:6e:0f:81:ff:63:d9:b9:e0:78:6f:f4: 53:85:65:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjUwNzAxMDMwNjA3WhcNMjUwNzA4MDMwNjA3WjAYMRYwFAYD VQQDEw02ODYzNTA5Zi1lZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC1qKCP6qOwxhPA2JYMhrwi0t73m2n6UmR0Ls7+lYonSoUCvtKrRnvhMPkwI NSm3eAoMkBSfFIvMJUHkTHllWUV3IjaXxZh94FKmPOvb+XuvXpHFI5ykTxpJNiGL kM3mPdVs3IbS4SGioiouIOIETksGi6WQLmtZ8+u+UK1NcWaBMVD6Lcykz/Dk7lqf 5DyQGBvQTUIS3vxqN77qEks1/QiFRp5SncgbUhZ4nK4FWp1Ufq5g9yG2wnaTCAFm YOiV5/fGu6A6gl+os/2pDvPm+Kklk9isLf/O85zk1dojrvS2beeXom44MQRPr1C+ owaZInJ4BWbB0AqgyOJut/SeaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDlMJXf GM5av39JM40xEMYbBWxyMB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuBCGRLoCxGqgkB6gjTg/gom9fo4ooFDXHojhpFa/h1o84ku/uK9C9 9QxQN+8V+qOuhbKGN3uT2uPDFgRLslLaqhYXSTEcRfGiMRqW23E7j9F06yUXMU1P gdfNBY6NQ+yEPA7Lw/M1mQaebYm+MbslFS8EmjDLsFaFfMHJEQDKRG8L1wcrW27T jUs53j2ejTYONLfm+WpP9kBVbUc8AjtCVzqgoWRo8BQSS5zPqv+HtYQNTK+G1vba ZoaHooXvdom8FDV9/btXpa1GSXx8g/7VPe/1+MqpnyDIiCb7RBFsdw40FLkPhceb V2IFCIBDWJ5Bbg+B/2PZueB4b/RThWVt -----END CERTIFICATE-----Generated at Thu Jul 3 03:47:21 2025 by rpki-client