$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft File: rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json) Hash identifier: jEYuNIT6l0T4yHHABeVL8aRQ77UffxYFscdegw5UOk4= Subject key identifier: 96:18:A8:42:A9:B0:E6:1E:04:9F:87:43:50:13:01:F6:D3:63:66:AE Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Certificate serial: 0873 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft Manifest number: 086C Signing time: Wed 02 Jul 2025 20:56:35 +0000 Manifest this update: Wed 02 Jul 2025 20:56:35 +0000 Manifest next update: Wed 09 Jul 2025 20:56:35 +0000 Files and hashes: 1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: U2w+mNsLUWdlE4o0kA2mHF3ZWPegvyMJ5UyzllTEcqc=) 2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: p0a0nQBisH4VKwtpLEiKDNLpUVAu9yIvpOIZZoB51RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Validity Not Before: Jul 2 20:56:35 2025 GMT Not After : Jul 9 20:56:35 2025 GMT Subject: CN=68659d03-e3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:77:61:c4:f6:57:e1:33:97:59:b8:f9:35: b8:e7:48:9a:0e:34:f7:a4:50:65:4a:b3:53:ec:91: 59:00:85:16:87:82:21:96:bb:ad:b6:a3:4e:70:bd: 88:f6:50:f2:a2:d4:58:e9:55:70:46:d1:4a:9b:4a: b1:98:a7:2c:64:dd:89:55:80:5b:d8:cc:eb:ec:5c: 31:3f:d4:2f:b1:74:22:f8:fe:ef:de:73:52:de:ac: 30:51:b7:a7:9b:ca:fe:6a:be:cb:a7:d3:95:17:fd: 89:3c:ee:f7:c2:04:eb:cd:2d:89:8a:bf:1f:fe:8e: d6:43:84:9e:17:99:29:1b:8b:60:7b:ed:d3:b7:f5: b5:68:ef:2a:f9:2c:04:67:03:92:c1:77:bf:ac:d6: 75:54:33:ee:48:54:03:7b:fc:e0:34:57:ac:e3:48: a8:8e:f9:98:b3:60:c2:c0:b8:b5:8e:90:fa:26:63: 6d:8c:76:54:84:9a:79:ee:4a:7c:c6:08:ac:b2:4b: b2:29:e1:9e:d7:0d:3e:43:fd:14:1d:b2:0d:36:5f: 42:d4:3d:be:aa:84:a0:d4:31:7b:21:3d:22:74:13: 80:30:19:de:7c:0f:ab:36:40:3d:5e:d1:00:3c:97: 52:e7:83:de:b3:f8:9c:a8:72:df:47:f2:4a:7b:ff: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:18:A8:42:A9:B0:E6:1E:04:9F:87:43:50:13:01:F6:D3:63:66:AE X509v3 Authority Key Identifier: keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:39:02:29:a0:ec:55:66:fd:81:2f:8c:0b:b9:6a:53:6f:2d: 93:ac:e7:17:41:b3:7b:a3:7b:dc:75:23:f9:ce:51:6b:55:66: ca:42:3c:d9:70:48:65:fb:4b:0c:80:7b:4c:d0:84:fd:1c:3f: ac:c0:91:1c:45:01:f7:ee:90:93:ae:62:85:3d:00:17:f3:6d: 79:c2:68:4d:b3:28:43:bf:60:ee:a7:49:1c:e8:3d:06:48:fd: 5d:45:3b:18:93:ae:23:73:0b:c5:eb:41:dc:2c:df:6e:b6:62: 46:5a:50:9f:0c:0a:c3:6c:d7:fe:1b:c1:8d:2e:9f:dd:30:4f: 06:5b:da:4c:e7:8f:4c:f8:07:ba:9f:0b:5b:5c:5a:06:7f:25: 05:b3:87:bd:d2:cb:09:cc:83:91:11:01:8b:14:8e:e5:27:02: f5:5e:aa:50:02:e0:6f:2e:d6:72:d7:b6:89:d4:d2:8d:c0:cc: 28:5d:25:1d:f3:d9:da:b1:7b:e1:cd:1b:54:42:62:46:2d:1b: e8:e1:20:cf:be:79:53:08:0f:84:8a:20:ab:ef:35:f4:2d:18: a9:99:74:39:60:33:11:b1:d0:f6:11:6d:95:f3:88:f8:af:c4: ea:11:b9:23:9e:21:e8:11:73:10:00:d2:10:07:52:de:99:da: d1:04:48:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx Mjc5MTdBMkYwHhcNMjUwNzAyMjA1NjM1WhcNMjUwNzA5MjA1NjM1WjAYMRYwFAYD VQQDEw02ODY1OWQwMy1lM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunl3YcT2V+Ezl1m4+TW450iaDjT3pFBlSrNT7JFZAIUWh4IhlruttqNOcL2I 9lDyotRY6VVwRtFKm0qxmKcsZN2JVYBb2Mzr7FwxP9QvsXQi+P7v3nNS3qwwUben m8r+ar7Lp9OVF/2JPO73wgTrzS2Jir8f/o7WQ4SeF5kpG4tge+3Tt/W1aO8q+SwE ZwOSwXe/rNZ1VDPuSFQDe/zgNFes40iojvmYs2DCwLi1jpD6JmNtjHZUhJp57kp8 xgisskuyKeGe1w0+Q/0UHbINNl9C1D2+qoSg1DF7IT0idBOAMBnefA+rNkA9XtEA PJdS54Pes/icqHLfR/JKe/8WSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYYqEKp sOYeBJ+HQ1ATAfbTY2auMB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3 RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUJDMy8wRDQxRkU1Q0M3RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0 dV9aeEdYT0Vjak1TZVJlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVOQIpoOxVZv2BL4wLuWpTby2TrOcXQbN7o3vcdSP5zlFrVWbKQjzZ cEhl+0sMgHtM0IT9HD+swJEcRQH37pCTrmKFPQAX8215wmhNsyhDv2Dup0kc6D0G SP1dRTsYk64jcwvF60HcLN9utmJGWlCfDArDbNf+G8GNLp/dME8GW9pM549M+Ae6 nwtbXFoGfyUFs4e90ssJzIOREQGLFI7lJwL1XqpQAuBvLtZy17aJ1NKNwMwoXSUd 89nasXvhzRtUQmJGLRvo4SDPvnlTCA+EiiCr7zX0LRipmXQ5YDMRsdD2EW2V84j4 r8TqEbkjniHoEXMQANIQB1LemdrRBEh/ -----END CERTIFICATE-----Generated at Thu Jul 3 09:01:20 2025 by rpki-client