$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft File: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft (raw, json) Hash identifier: vmwxRa9gwj1ivSp1QdprVkdlawlfS9ewCJk/0foT3Mg= Subject key identifier: DF:0C:A5:38:F3:79:66:19:43:8B:9C:CF:F0:F1:F7:3C:D6:40:1A:69 Authority key identifier: F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 Certificate issuer: /CN=A912FBD5/serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft Manifest number: 064D Signing time: Fri 20 Jun 2025 22:21:47 +0000 Manifest this update: Fri 20 Jun 2025 22:21:47 +0000 Manifest next update: Fri 27 Jun 2025 22:21:47 +0000 Files and hashes: 1: 8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl (hash: B9qvHwvs/eYnqYrBZXTuU/2KFTlUUFzo+XJDq7Omp/Y=) 2: C0D6C00E8E5511EBA9EA9977C4F9AE02.roa (hash: eq7ObcirvoR6TZzb3RsSpe6IDa+SDjtPX6j3VgoghJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 22:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBD5, serialNumber=F05BBD26D4DE08F6588CB7FAFFB1830FABC37167 Validity Not Before: Jun 20 22:21:47 2025 GMT Not After : Jun 27 22:21:47 2025 GMT Subject: CN=6855defb-9795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:e7:da:eb:af:31:cd:67:e2:a9:ee:b3:59: c0:be:9b:14:52:ab:ee:29:37:a1:05:0f:e3:77:0e: e0:8e:65:b1:21:c7:77:85:45:6f:ae:98:a0:c1:f3: f1:dc:82:23:de:df:f9:0a:f3:4b:b0:39:7a:69:4f: 1f:75:1f:aa:af:81:47:6e:2a:04:14:22:ff:de:db: 51:ba:d6:4e:62:52:06:3d:fc:4b:b9:10:4f:17:63: 65:d4:f7:d6:fc:e6:32:a5:81:7f:72:52:1b:53:05: 0a:ed:dc:f3:fd:6e:4e:d6:be:66:35:fe:d5:6e:e7: 85:ee:65:f1:bc:81:4a:3e:56:3a:5d:cf:cc:54:10: 7c:ea:ef:3c:a3:2d:1d:5e:e7:d3:94:cc:0e:16:d1: 1b:3e:2a:4e:ea:01:ca:ed:08:52:72:ae:57:05:d7: d9:c5:fa:e6:07:a4:33:36:9d:22:54:1a:22:53:c4: 8e:40:4d:b8:fe:b5:20:fa:b8:67:c2:1b:a0:ab:e8: 58:64:10:f1:e1:f2:3a:8a:f7:a9:5e:d5:dc:fb:b0: bc:be:ac:3f:77:78:9a:5d:4e:69:2c:5c:f3:82:16: 6c:94:5b:82:ba:2e:17:4e:29:23:fb:17:91:5c:2c: 89:33:85:24:80:2d:e6:7c:5f:70:8b:d8:04:f0:2f: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0C:A5:38:F3:79:66:19:43:8B:9C:CF:F0:F1:F7:3C:D6:40:1A:69 X509v3 Authority Key Identifier: keyid:F0:5B:BD:26:D4:DE:08:F6:58:8C:B7:FA:FF:B1:83:0F:AB:C3:71:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD5/0D26D4A08E5411EB93308A75C4F9AE02/8Fu9JtTeCPZYjLf6_7GDD6vDcWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0f:d3:b0:81:1a:55:1b:51:55:05:d3:ca:f7:61:6b:29:b9: 7c:b6:3c:a6:f9:3b:48:ab:0a:48:8c:8b:92:af:de:85:ff:15: 0d:fd:d2:79:99:b1:5c:15:eb:68:62:1a:45:e8:de:8c:46:2a: 34:bf:e4:59:45:b1:2a:cb:28:85:ca:9c:61:77:b6:9f:f7:55: 55:cc:cd:66:d8:76:16:78:e8:d1:3b:27:0b:26:8c:77:53:6d: 2a:49:fd:53:92:2c:fa:1c:b9:1d:1b:6c:a6:1f:46:36:77:50: 16:94:e7:59:f4:a9:2e:0d:82:73:d9:81:d0:fe:4e:6f:70:35: 1f:a1:f1:f6:38:4f:a9:37:07:ec:9f:ba:aa:44:37:42:14:01: b7:1f:63:8e:2b:a4:6a:5f:b1:0e:2d:62:1e:b0:74:45:66:59: 54:22:c3:37:7c:fd:24:0f:30:ac:11:ef:f7:4e:03:b4:ca:94: 9a:e4:ba:59:19:2e:10:9a:12:b6:63:80:90:d3:bf:de:ce:28: de:85:e4:28:46:ba:47:bf:a0:89:bc:33:08:d0:82:0a:ff:a4: 99:ae:be:e0:86:58:6a:37:1b:54:ec:bc:20:5d:0f:b3:20:66: 59:ad:d5:b2:d9:43:3e:ff:4e:bb:0b:f8:0d:b5:63:95:18:e1: 0e:10:f9:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCRDUxMTAvBgNVBAUTKEYwNUJCRDI2RDRERTA4RjY1ODhDQjdGQUZGQjE4MzBG QUJDMzcxNjcwHhcNMjUwNjIwMjIyMTQ3WhcNMjUwNjI3MjIyMTQ3WjAYMRYwFAYD VQQDEw02ODU1ZGVmYi05Nzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTnn2uuvMc1n4qnus1nAvpsUUqvuKTehBQ/jdw7gjmWxIcd3hUVvrpigwfPx 3IIj3t/5CvNLsDl6aU8fdR+qr4FHbioEFCL/3ttRutZOYlIGPfxLuRBPF2Nl1PfW /OYypYF/clIbUwUK7dzz/W5O1r5mNf7VbueF7mXxvIFKPlY6Xc/MVBB86u88oy0d XufTlMwOFtEbPipO6gHK7QhScq5XBdfZxfrmB6QzNp0iVBoiU8SOQE24/rUg+rhn whugq+hYZBDx4fI6ivepXtXc+7C8vqw/d3iaXU5pLFzzghZslFuCui4XTikj+xeR XCyJM4UkgC3mfF9wi9gE8C+JywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8MpTjz eWYZQ4ucz/Dx9zzWQBppMB8GA1UdIwQYMBaAFPBbvSbU3gj2WIy3+v+xgw+rw3Fn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJENS8wRDI2RDRBMDhF NTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQWllqTGY2XzdHREQ2dkRj V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhGdTlKdFRlQ1BaWWpMZjZfN0dERDZ2RGNXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkJENS8wRDI2RDRBMDhFNTQxMUVCOTMzMDhBNzVDNEY5QUUwMi84RnU5SnRUZUNQ WllqTGY2XzdHREQ2dkRjV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9D9OwgRpVG1FVBdPK92FrKbl8tjym+TtIqwpIjIuSr96F/xUN/dJ5 mbFcFetoYhpF6N6MRio0v+RZRbEqyyiFypxhd7af91VVzM1m2HYWeOjROycLJox3 U20qSf1Tkiz6HLkdG2ymH0Y2d1AWlOdZ9KkuDYJz2YHQ/k5vcDUfofH2OE+pNwfs n7qqRDdCFAG3H2OOK6RqX7EOLWIesHRFZllUIsM3fP0kDzCsEe/3TgO0ypSa5LpZ GS4QmhK2Y4CQ07/ezijeheQoRrpHv6CJvDMI0IIK/6SZrr7ghlhqNxtU7LwgXQ+z IGZZrdWy2UM+/067C/gNtWOVGOEOEPm0 -----END CERTIFICATE-----Generated at Sun Jun 22 01:22:41 2025 by rpki-client