$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft File: sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft (raw, json) Hash identifier: LiPU6o87nXDTyU5RMotIdey9OhJnbBjPTflmcPvj1l0= Subject key identifier: EE:65:A2:17:BC:68:87:27:7E:C1:3B:15:EE:ED:08:C1:95:18:81:CE Authority key identifier: B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB Certificate issuer: /CN=A914FA25/serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft Manifest number: 0DEF Signing time: Wed 18 Jun 2025 18:46:47 +0000 Manifest this update: Wed 18 Jun 2025 18:46:46 +0000 Manifest next update: Wed 25 Jun 2025 18:46:46 +0000 Files and hashes: 1: sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl (hash: vZ1pYTLTGBaCEsWi94YyG8uHf+He0kNVKuOx0w2+o0U=) 2: 16D76086A0A811EF88ED2026C4F9AE02.roa (hash: xXVPh1g488DDZ2eC7px+JMoDM3ZGXGyVRE09L+pr9Pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 18:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25, serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB Validity Not Before: Jun 18 18:46:46 2025 GMT Not After : Jun 25 18:46:46 2025 GMT Subject: CN=68530997-da72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:f9:56:60:cb:a7:df:70:80:7f:4d:b1:b4: e2:a9:97:ce:b9:33:e6:cc:88:2d:9d:1d:2d:2d:57: e1:13:53:93:c9:98:10:b8:43:9f:90:ab:ec:c0:34: e5:04:b8:f9:1b:4d:04:9e:e1:a3:77:00:c9:44:5a: d0:0e:b9:67:08:87:a5:8c:cf:73:a8:3f:9d:ae:7f: 8e:3c:09:be:68:7e:22:2d:0c:74:ba:c8:78:27:dd: 59:a1:f4:25:67:86:7c:fa:29:84:da:a3:a4:d1:dd: 40:a3:b9:69:81:6c:87:77:bc:e7:ea:3c:a6:1a:93: 9d:23:97:a7:da:30:e8:4c:f5:57:f0:a6:3b:5f:61: 74:59:9d:b6:40:71:0f:6c:91:df:04:3a:f0:e4:05: ae:53:f4:49:a6:a5:db:79:dd:0b:b8:b1:1b:a8:1f: 11:c2:34:4f:68:11:26:1f:7a:cc:d7:da:c5:c6:e1: 9a:80:96:1f:02:29:3b:da:ac:aa:87:07:3a:15:f0: c1:84:4b:12:cc:bf:1e:40:14:a6:12:3b:5d:a5:56: b3:dd:4b:1c:4d:49:49:15:56:1f:03:35:2b:89:79: 80:59:6b:c3:56:57:ad:56:d1:39:cf:4d:d7:36:c3: e4:fe:0e:bf:19:5c:59:62:5b:fe:60:4c:0b:59:8b: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:65:A2:17:BC:68:87:27:7E:C1:3B:15:EE:ED:08:C1:95:18:81:CE X509v3 Authority Key Identifier: keyid:B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:bb:b1:9a:b6:f0:49:25:4b:ca:f6:89:36:39:23:cb:41:95: aa:ba:ba:c6:95:7b:24:52:f5:86:b2:13:05:17:13:ae:b5:bf: 44:08:06:53:1f:cd:21:df:1c:e6:b6:c9:1f:80:72:fc:7c:7d: 41:28:d7:09:b7:1c:fb:41:77:4d:61:5d:50:c1:82:bf:18:42: 42:c8:00:17:cf:74:00:ef:d4:c5:ec:28:62:14:c0:b4:df:3e: ae:47:18:77:4f:43:b2:38:5b:c5:4e:0a:5b:a1:3c:be:90:93: bf:7a:b3:89:bc:5f:c5:d9:48:af:14:8f:46:72:7e:74:b3:13: f6:57:73:7b:bb:d7:c2:0c:87:25:df:16:bd:d2:18:5a:69:d4: 65:78:53:d6:55:46:82:44:60:ba:19:35:f7:61:56:00:7e:8b: 34:86:a4:fb:c2:d7:a2:ea:ea:f0:df:3b:8a:71:6e:02:3a:c4: ce:e4:46:7e:38:62:5e:32:71:1b:aa:8b:ed:35:95:de:f5:97: 98:12:48:5b:81:87:9c:2f:9e:e0:e9:9b:2c:f4:7e:c2:f9:3e: 64:e4:ab:b5:d0:df:5f:16:65:f3:59:aa:18:ab:c5:eb:f9:a0: 2d:af:7a:14:5b:e8:c2:0c:d3:47:b9:30:cf:61:21:0d:45:30: 25:2d:c5:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKEIwMDE0QTgzMDZDNTJFNDA0RjY3Q0EyRjhFNTg2RjlC ODY4RThDQUIwHhcNMjUwNjE4MTg0NjQ2WhcNMjUwNjI1MTg0NjQ2WjAYMRYwFAYD VQQDEw02ODUzMDk5Ny1kYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2L5VmDLp99wgH9NsbTiqZfOuTPmzIgtnR0tLVfhE1OTyZgQuEOfkKvswDTl BLj5G00EnuGjdwDJRFrQDrlnCIeljM9zqD+drn+OPAm+aH4iLQx0ush4J91ZofQl Z4Z8+imE2qOk0d1Ao7lpgWyHd7zn6jymGpOdI5en2jDoTPVX8KY7X2F0WZ22QHEP bJHfBDrw5AWuU/RJpqXbed0LuLEbqB8RwjRPaBEmH3rM19rFxuGagJYfAik72qyq hwc6FfDBhEsSzL8eQBSmEjtdpVaz3UscTUlJFVYfAzUriXmAWWvDVletVtE5z03X NsPk/g6/GVxZYlv+YEwLWYt5mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5lohe8 aIcnfsE7Fe7tCMGVGIHOMB8GA1UdIwQYMBaAFLABSoMGxS5AT2fKL45Yb5uGjoyr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9zQUZLZ3diRkxrQlBaOG92amxodm00YU9q S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NBRktnd2JGTGtCUFo4b3ZqbGh2bTRhT2pLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9zQUZLZ3diRkxr QlBaOG92amxodm00YU9qS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5u7GatvBJJUvK9ok2OSPLQZWqurrGlXskUvWGshMFFxOutb9ECAZT H80h3xzmtskfgHL8fH1BKNcJtxz7QXdNYV1QwYK/GEJCyAAXz3QA79TF7ChiFMC0 3z6uRxh3T0OyOFvFTgpboTy+kJO/erOJvF/F2UivFI9Gcn50sxP2V3N7u9fCDIcl 3xa90hhaadRleFPWVUaCRGC6GTX3YVYAfos0hqT7wtei6urw3zuKcW4COsTO5EZ+ OGJeMnEbqovtNZXe9ZeYEkhbgYecL57g6Zss9H7C+T5k5Ku10N9fFmXzWaoYq8Xr +aAtr3oUW+jCDNNHuTDPYSENRTAlLcXu -----END CERTIFICATE-----Generated at Thu Jun 19 00:20:34 2025 by rpki-client