$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json) Hash identifier: 4IOXhP/I3rzUuo7r2clURN8DmIa7eGJRkOhIhqpzYqY= Subject key identifier: AA:8E:CF:30:54:3A:4C:2C:D1:19:14:78:EE:5B:9D:F9:26:95:96:6E Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft Manifest number: 05FD Signing time: Mon 12 May 2025 22:40:41 +0000 Manifest this update: Mon 12 May 2025 22:40:41 +0000 Manifest next update: Mon 19 May 2025 22:40:41 +0000 Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: P1YamAreB/Im8L68g35M5bowjciDNIEvLXx+EUcbANk=) 2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Validity Not Before: May 12 22:40:41 2025 GMT Not After : May 19 22:40:41 2025 GMT Subject: CN=682278e9-93b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:97:77:0f:e0:4e:85:51:dc:7a:a1:ab:20: cf:43:ac:a4:df:e2:0b:3f:b8:be:ec:66:2a:2b:81: ca:70:3e:ca:fd:73:9b:d5:2d:42:ae:9e:3a:f0:b0: 14:c3:73:d7:00:f8:da:a2:9a:bc:79:75:5b:06:f3: e2:5c:0d:03:fb:86:3a:28:3b:a5:7a:7c:bf:83:41: f4:f1:69:48:28:a4:b3:6a:3f:f9:09:a6:30:ff:41: 25:7b:1b:41:67:b2:23:3a:57:0f:a4:7b:0d:d9:61: 42:83:6b:71:c7:fc:cb:c0:a4:15:05:4f:31:89:d9: 42:a5:1b:40:5c:8c:dd:32:37:fa:f7:e2:4e:35:ed: 89:8e:43:db:c1:87:b8:ac:5e:b8:d6:f6:61:16:27: 74:41:fa:bd:82:81:89:e6:0b:4e:f7:1d:16:74:64: 2f:2a:44:e7:68:bc:42:6f:bf:2e:e2:67:c0:b5:4c: 5f:d6:4d:32:6c:b3:6b:4c:65:62:14:d7:45:34:91: 74:89:de:91:aa:8d:85:bf:0f:ad:6b:9d:dc:0d:d6: 51:d0:b1:54:5b:ae:60:26:df:cd:33:75:4a:37:92: 09:c2:bc:cf:90:ec:cd:8a:a7:a5:4a:94:53:43:6d: 14:30:43:de:44:19:39:2d:9f:89:0a:f5:83:1c:40: 98:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8E:CF:30:54:3A:4C:2C:D1:19:14:78:EE:5B:9D:F9:26:95:96:6E X509v3 Authority Key Identifier: keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a0:e2:da:04:6d:ad:63:2e:55:fe:c3:d1:7c:c0:5c:16:fb: b6:4c:b9:bd:6f:fd:b7:37:66:a0:4c:ad:9b:52:42:4f:d0:33: 45:a1:d0:84:54:3e:0e:6e:48:f6:43:d0:1a:45:df:e6:c9:f3: ac:55:1d:85:ba:ec:2b:14:19:e5:01:1c:01:1c:2a:4e:f4:77: 6b:68:13:8b:38:64:c0:b4:3d:82:81:dc:db:66:0a:69:b3:a5: 1b:e2:41:a4:16:ef:23:f4:32:f2:b9:f2:8d:29:c7:b0:41:19: 99:10:90:50:b3:08:f2:e5:64:3b:72:a5:75:b0:03:c2:5f:c3: 5f:35:bc:8e:bb:25:10:e9:80:3f:8c:5d:d9:56:1a:2f:c7:58: 9a:a6:25:11:e9:fd:f3:36:2f:9f:61:87:a4:af:ce:37:e6:12: d3:5b:cb:4b:1c:29:45:73:aa:c0:9b:b3:2f:6a:fe:f1:5f:31: c5:48:ea:be:ba:10:6c:37:19:56:03:a5:63:1b:00:20:5a:fa: 49:3c:2a:10:38:0e:f5:c9:24:e8:be:55:f6:01:06:87:0c:9d: 80:47:9c:ba:89:00:4c:5d:22:e5:0e:36:7f:e7:da:09:45:c2: be:e6:48:32:55:76:78:be:de:c0:a4:29:13:fc:37:ad:8f:a7: 75:26:44:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1 MzIwNzM2NDgwHhcNMjUwNTEyMjI0MDQxWhcNMjUwNTE5MjI0MDQxWjAYMRYwFAYD VQQDEw02ODIyNzhlOS05M2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJaXdw/gToVR3HqhqyDPQ6yk3+ILP7i+7GYqK4HKcD7K/XOb1S1Crp468LAU w3PXAPjaopq8eXVbBvPiXA0D+4Y6KDuleny/g0H08WlIKKSzaj/5CaYw/0ElextB Z7IjOlcPpHsN2WFCg2txx/zLwKQVBU8xidlCpRtAXIzdMjf69+JONe2JjkPbwYe4 rF641vZhFid0Qfq9goGJ5gtO9x0WdGQvKkTnaLxCb78u4mfAtUxf1k0ybLNrTGVi FNdFNJF0id6Rqo2Fvw+ta53cDdZR0LFUW65gJt/NM3VKN5IJwrzPkOzNiqelSpRT Q20UMEPeRBk5LZ+JCvWDHECYPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqOzzBU Okws0RkUeO5bnfkmlZZuMB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2 ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj TWxRZW1PVjFveHhUSUhOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJoOLaBG2tYy5V/sPRfMBcFvu2TLm9b/23N2agTK2bUkJP0DNFodCE VD4Obkj2Q9AaRd/myfOsVR2FuuwrFBnlARwBHCpO9HdraBOLOGTAtD2CgdzbZgpp s6Ub4kGkFu8j9DLyufKNKcewQRmZEJBQswjy5WQ7cqV1sAPCX8NfNbyOuyUQ6YA/ jF3ZVhovx1iapiUR6f3zNi+fYYekr8435hLTW8tLHClFc6rAm7Mvav7xXzHFSOq+ uhBsNxlWA6VjGwAgWvpJPCoQOA71ySTovlX2AQaHDJ2AR5y6iQBMXSLlDjZ/59oJ RcK+5kgyVXZ4vt7ApCkT/Detj6d1JkSf -----END CERTIFICATE-----Generated at Wed May 14 08:07:08 2025 by rpki-client