$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft File: fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json) Hash identifier: XVOm1PF3Dhn9lQfHhFkhYkMTidi9C8IwSxIwdnsyE+E= Subject key identifier: 56:ED:48:30:EB:7E:7C:E6:3C:93:FF:EE:82:B6:04:ED:EA:7A:CA:40 Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 Certificate issuer: /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Certificate serial: 0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft Manifest number: 0C4C Signing time: Thu 12 Jun 2025 18:13:12 +0000 Manifest this update: Thu 12 Jun 2025 18:13:11 +0000 Manifest next update: Thu 19 Jun 2025 18:13:11 +0000 Files and hashes: 1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: Z/XFZUeFG0U3SRHZDxMXqj89aRyAofVY3/bIQZRmfoY=) 2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: VMA/DaW08DK9v/lxWPtZwnO804CFumuELv89I609LTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3155 (0xc53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Validity Not Before: Jun 12 18:13:11 2025 GMT Not After : Jun 19 18:13:11 2025 GMT Subject: CN=684b18b8-8697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:9b:0e:b3:2a:ee:47:75:c3:9a:11:c1:ff: 44:ec:f3:df:12:58:64:aa:03:9d:90:f6:d5:d5:72: e0:2d:9e:97:46:31:11:bd:5b:6e:c4:5f:a6:fc:c1: 11:e4:cd:87:e9:65:4e:51:66:e6:b4:27:7d:0a:2d: 2f:7e:e2:50:6d:90:48:86:25:7f:42:63:d6:b3:ac: f8:e6:a3:07:f0:73:60:52:15:67:e6:7e:3a:7b:5e: 3e:c0:dc:f3:8f:70:da:8c:f2:32:f7:97:35:35:05: 45:c4:6e:4f:ae:d9:57:68:53:43:d7:fa:21:f0:a3: 9c:19:0b:d8:24:5d:7b:f6:1f:d0:de:9c:db:b7:49: ff:c7:fa:e0:b5:cc:0a:89:70:02:83:ca:33:02:83: 65:30:60:9d:71:21:29:38:70:71:1f:de:30:c1:0e: 91:72:03:b9:4e:2d:8a:18:9c:a4:e8:6b:b7:f7:7c: 91:98:3e:b9:d8:30:59:1e:8d:54:37:05:f2:ac:3f: f0:09:f4:bf:82:98:0c:95:96:97:e8:51:5b:f8:86: 75:0c:12:6f:97:03:92:d3:b7:b3:02:95:87:05:11: ab:b7:a1:ee:dd:5c:d2:11:94:78:93:e6:b9:7e:3d: c9:36:6e:a9:08:91:4d:88:ac:4e:05:85:f0:49:19: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:ED:48:30:EB:7E:7C:E6:3C:93:FF:EE:82:B6:04:ED:EA:7A:CA:40 X509v3 Authority Key Identifier: keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:fe:19:57:15:91:b1:6b:06:ac:4f:9e:b8:19:77:70:0f:37: 10:6e:eb:36:69:08:a9:7c:ef:06:c1:b4:53:30:f4:6a:0e:47: 47:3f:82:7b:18:3f:68:ab:a4:2f:f6:6e:5d:d0:0c:41:ad:44: 84:93:f7:01:5a:69:ef:2e:39:af:10:ef:36:14:b5:ce:9c:6d: d9:62:e5:56:cf:71:1f:02:2f:29:d1:0b:3c:df:9b:f2:7a:7c: 87:ef:02:bd:fc:a3:8b:c7:a1:7c:cb:41:1c:2f:a0:0a:62:ea: d5:63:4f:40:61:06:fe:cb:10:e5:43:2b:6b:ea:88:98:7d:8e: a6:3a:3a:8b:3c:de:7f:db:71:a1:0c:e1:4a:83:6d:95:2e:92: 62:f6:42:11:ac:e1:d9:b8:55:fa:77:5d:25:e7:70:1e:0f:db: cd:be:56:e0:8e:8d:ca:83:62:8f:7f:b0:8f:6f:3e:14:d4:76: 6d:1c:64:5e:3c:79:51:6f:a9:de:cf:3f:85:05:43:83:d8:5d: 40:c8:17:62:18:ab:b0:ef:1d:9a:6f:6b:4c:7d:b0:09:5d:e6: d3:e5:29:3e:fa:3f:4f:eb:9a:05:94:7f:53:0e:88:c0:72:64: 2d:ae:4f:33:bd:77:fe:89:44:22:3d:54:17:c0:f6:47:40:dc: 59:45:3b:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1OTgxMTAvBgNVBAUTKDdEQzQ2MkFGM0U2Mjc4QTgyMTg5MDVBMUIzRTdEQjM3 RjJFRjdBODIwHhcNMjUwNjEyMTgxMzExWhcNMjUwNjE5MTgxMzExWjAYMRYwFAYD VQQDEw02ODRiMThiOC04Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10CbDrMq7kd1w5oRwf9E7PPfElhkqgOdkPbV1XLgLZ6XRjERvVtuxF+m/MER 5M2H6WVOUWbmtCd9Ci0vfuJQbZBIhiV/QmPWs6z45qMH8HNgUhVn5n46e14+wNzz j3DajPIy95c1NQVFxG5PrtlXaFND1/oh8KOcGQvYJF179h/Q3pzbt0n/x/rgtcwK iXACg8ozAoNlMGCdcSEpOHBxH94wwQ6RcgO5Ti2KGJyk6Gu393yRmD652DBZHo1U NwXyrD/wCfS/gpgMlZaX6FFb+IZ1DBJvlwOS07ezApWHBRGrt6Hu3VzSEZR4k+a5 fj3JNm6pCJFNiKxOBYXwSRlDKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbtSDDr fnzmPJP/7oK2BO3qespAMB8GA1UdIwQYMBaAFH3EYq8+YnioIYkFobPn2zfy73qC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU5OC84MTJDRTlENDA0 NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVLZ2hpUVdocy1mYk5fTHZl b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjUmlyejVpZUtnaGlRV2hzLWZiTl9MdmVvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU5OC84MTJDRTlENDA0NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVL Z2hpUVdocy1mYk5fTHZlb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn/hlXFZGxawasT564GXdwDzcQbus2aQipfO8GwbRTMPRqDkdHP4J7 GD9oq6Qv9m5d0AxBrUSEk/cBWmnvLjmvEO82FLXOnG3ZYuVWz3EfAi8p0Qs835vy enyH7wK9/KOLx6F8y0EcL6AKYurVY09AYQb+yxDlQytr6oiYfY6mOjqLPN5/23Gh DOFKg22VLpJi9kIRrOHZuFX6d10l53AeD9vNvlbgjo3Kg2KPf7CPbz4U1HZtHGRe PHlRb6nezz+FBUOD2F1AyBdiGKuw7x2ab2tMfbAJXebT5Sk++j9P65oFlH9TDojA cmQtrk8zvXf+iUQiPVQXwPZHQNxZRTtM -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:24 2025 by rpki-client