$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json) Hash identifier: DVcT2bCOYrxQGU5V6REb7pBupyJz9iqUJBqLmvsjrY0= Subject key identifier: AB:38:18:38:E6:A5:BC:A7:4B:E5:23:CD:AA:BC:70:FE:2E:D2:58:22 Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Certificate serial: 0635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft Manifest number: 0630 Signing time: Fri 22 Aug 2025 22:54:34 +0000 Manifest this update: Fri 22 Aug 2025 22:54:34 +0000 Manifest next update: Fri 29 Aug 2025 22:54:34 +0000 Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: X/o6UORIjPGjNCOSMvQ0EIouZRE8ab+FHdKcq2waaAo=) 2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1589 (0x635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Validity Not Before: Aug 22 22:54:34 2025 GMT Not After : Aug 29 22:54:34 2025 GMT Subject: CN=68a8f52a-4aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:2a:96:e2:92:91:ac:b6:a0:c4:b0:be:57: b9:75:73:53:eb:1d:be:5b:f0:fb:9f:ee:a8:31:3d: 28:da:6a:7f:61:20:94:7a:ac:29:03:d2:0b:c8:ac: 09:9b:cc:87:df:3c:b0:f7:d6:1b:4e:a4:04:93:da: b0:03:59:d2:39:0e:94:f8:5c:30:a9:96:06:4a:f3: 1b:e7:ab:9c:dc:53:d4:d7:ce:67:2c:98:03:1f:7f: 28:03:0c:ee:3d:25:cb:20:56:b2:cc:58:90:48:17: 96:c7:4f:48:04:88:62:a3:87:7b:a0:25:97:cc:58: 21:a2:50:17:04:3c:a2:55:7d:b6:5d:55:c6:d4:fa: d2:0b:0f:d3:db:c2:d0:fc:80:4c:dc:69:d7:71:11: ed:9a:d0:46:de:69:cc:7c:a9:b7:57:74:65:4d:20: ca:c4:f3:22:7c:21:ad:68:e4:24:5c:51:44:39:7c: df:e7:a2:88:51:f8:37:31:a3:fa:84:46:90:23:a9: 6e:d7:be:d2:e9:55:c7:20:6b:57:b1:56:2a:f8:67: 51:cb:b2:be:b1:b2:17:28:31:64:48:88:90:49:04: a5:23:27:63:05:0e:39:7f:86:39:a3:0b:6f:83:fb: 7d:0d:fc:fb:07:82:93:55:13:57:dc:35:36:de:93: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:38:18:38:E6:A5:BC:A7:4B:E5:23:CD:AA:BC:70:FE:2E:D2:58:22 X509v3 Authority Key Identifier: keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:a7:42:24:7e:03:82:f5:9d:74:ff:fd:e5:b1:c5:70:da:fe: c5:6a:b4:40:76:42:c3:54:14:ac:25:98:91:67:20:4c:8e:8e: 79:ba:90:e8:4c:d0:1a:7c:f5:a9:d4:1e:b0:e4:5e:28:a7:46: 8a:2b:46:db:e6:71:11:26:f6:f2:61:6a:fb:a9:89:c3:f8:78: d4:ae:2d:32:de:5b:eb:6c:85:c2:e1:d0:18:74:a9:1a:18:93: c3:71:c1:c8:f3:8d:1d:09:fb:ce:96:d9:a4:34:70:9e:7b:96: 26:0b:df:a2:e9:00:1d:66:00:bb:57:be:1f:78:e9:93:6d:e7: 8b:a1:0c:74:0b:da:15:29:13:35:a0:2f:a0:08:32:f1:fe:9d: 28:eb:7f:15:a8:bf:ea:f8:fe:3d:1a:47:59:99:43:5d:70:8f: 95:9b:34:6c:f0:bd:9b:b6:8f:32:c9:81:fc:7a:cc:96:d3:72: 0a:18:a8:f0:a1:f9:e2:96:40:6f:da:f6:24:53:0f:ae:f5:10: 7c:50:82:16:93:93:d7:05:fb:85:ed:5b:ae:5c:98:67:d4:41: e4:04:8a:cb:6a:d9:4c:3a:d4:b1:6a:04:be:cb:ef:a9:7f:f7: d4:15:c0:9f:d5:86:93:a6:93:4b:da:b8:9d:d4:ae:4a:b5:4b: 76:00:35:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1 MzIwNzM2NDgwHhcNMjUwODIyMjI1NDM0WhcNMjUwODI5MjI1NDM0WjAYMRYwFAYD VQQDEw02OGE4ZjUyYS00YWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq4qluKSkay2oMSwvle5dXNT6x2+W/D7n+6oMT0o2mp/YSCUeqwpA9ILyKwJ m8yH3zyw99YbTqQEk9qwA1nSOQ6U+FwwqZYGSvMb56uc3FPU185nLJgDH38oAwzu PSXLIFayzFiQSBeWx09IBIhio4d7oCWXzFgholAXBDyiVX22XVXG1PrSCw/T28LQ /IBM3GnXcRHtmtBG3mnMfKm3V3RlTSDKxPMifCGtaOQkXFFEOXzf56KIUfg3MaP6 hEaQI6lu177S6VXHIGtXsVYq+GdRy7K+sbIXKDFkSIiQSQSlIydjBQ45f4Y5owtv g/t9Dfz7B4KTVRNX3DU23pN3cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKs4GDjm pbynS+Ujzaq8cP4u0lgiMB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2 ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj TWxRZW1PVjFveHhUSUhOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8p0IkfgOC9Z10//3lscVw2v7FarRAdkLDVBSsJZiRZyBMjo55upDo TNAafPWp1B6w5F4op0aKK0bb5nERJvbyYWr7qYnD+HjUri0y3lvrbIXC4dAYdKka GJPDccHI840dCfvOltmkNHCee5YmC9+i6QAdZgC7V74feOmTbeeLoQx0C9oVKRM1 oC+gCDLx/p0o638VqL/q+P49GkdZmUNdcI+VmzRs8L2bto8yyYH8esyW03IKGKjw ofnilkBv2vYkUw+u9RB8UIIWk5PXBfuF7VuuXJhn1EHkBIrLatlMOtSxagS+y++p f/fUFcCf1YaTppNL2rid1K5KtUt2ADV+ -----END CERTIFICATE-----Generated at Sun Aug 24 02:34:34 2025 by rpki-client