$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json) Hash identifier: qG6hRldWitBuR5qHFeaFwbl0BgGXXM1Chyi9P+g1+5E= Subject key identifier: 9C:96:61:1E:BF:1C:96:77:26:C7:53:29:4A:47:62:10:81:91:26:0A Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Certificate serial: 0CA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft Manifest number: 0CA1 Signing time: Fri 08 Aug 2025 18:25:33 +0000 Manifest this update: Fri 08 Aug 2025 18:25:33 +0000 Manifest next update: Fri 15 Aug 2025 18:25:33 +0000 Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: 5Pr+WAIuuHcwCRWQR24mteY2mqNeXsWuoJaPtGY66/w=) 2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: HyFNgnjZWsveyr1t+EGS0rR5D+l88ZMNMytH+WMJ+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3240 (0xca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Validity Not Before: Aug 8 18:25:33 2025 GMT Not After : Aug 15 18:25:33 2025 GMT Subject: CN=6896411d-50b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:a9:06:78:0b:57:d1:0a:3c:5c:42:5b:48: ce:5e:9c:2d:57:e6:d6:cc:95:95:28:ec:92:28:96: e2:11:3d:aa:b4:65:b2:0d:21:8f:97:3f:8c:f3:77: 4e:46:4a:f6:d3:d6:8d:05:c5:d0:8f:0d:11:42:e8: 87:41:f7:22:67:e1:ba:53:7c:20:4d:57:6e:2a:10: 57:1c:b6:35:97:05:8b:ce:0c:d4:f2:75:45:94:cf: 70:9a:f1:fc:05:ae:fc:70:56:ae:59:6e:2c:c2:b4: 57:64:16:9a:96:1a:b4:95:8b:4d:10:42:5a:37:6a: 54:00:ae:8b:c6:4d:65:4c:06:cc:e9:f6:c6:71:9e: 1c:b4:a8:57:d3:fc:be:02:db:68:bd:fa:6d:1e:60: 51:da:d0:f8:59:82:af:a3:ec:b8:fa:32:7f:25:f1: 23:43:3d:aa:b9:0d:55:e5:e1:ce:3a:d6:28:a9:90: 6d:f2:ea:2a:b4:11:d0:a6:9a:a4:d4:2c:6b:81:f8: c9:5b:4d:3c:7e:11:d0:08:78:eb:95:81:56:9e:35: c9:fc:d4:5d:4e:9d:0b:de:79:bd:10:e3:17:ed:be: 02:56:39:51:12:ea:64:68:6c:8b:45:3a:79:44:89: 80:dd:37:60:cd:52:15:c9:d1:75:5a:f6:e0:c2:7c: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:96:61:1E:BF:1C:96:77:26:C7:53:29:4A:47:62:10:81:91:26:0A X509v3 Authority Key Identifier: keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:62:4d:7a:76:19:91:1a:41:7a:66:7e:30:ab:04:33:75:8c: 2d:2f:11:f2:6b:0f:83:33:79:ee:22:73:b0:b4:15:fb:7e:bd: 23:74:56:0d:c0:18:b6:b1:4d:9f:7e:02:23:04:ad:f7:b4:3e: 85:23:a6:dc:c1:02:61:10:6d:97:b1:da:45:79:a5:0b:20:b0: 29:77:73:ac:d3:db:54:bf:48:b5:ba:84:2f:35:19:aa:83:68: 24:7e:a1:e2:09:f3:e3:c1:07:92:0e:cf:51:a5:bd:ea:6c:39: 76:cf:93:36:bc:6d:30:be:6b:2b:34:d0:ad:0a:2e:29:59:3f: 33:a5:4a:b2:40:3a:47:87:e7:96:69:ec:68:62:88:d3:ee:27: a2:72:71:b0:db:71:68:41:aa:87:16:d1:76:39:66:66:c3:0a: d1:67:af:ec:e4:ff:8e:2f:fe:3a:79:17:c8:52:d6:b3:3b:e9: 4c:84:fd:47:e1:df:ac:b8:15:e5:04:1e:c2:4a:fc:e7:01:14: 96:b9:40:8d:ae:23:ee:90:66:c8:69:4d:b4:06:16:6f:cd:65: 25:c6:06:1c:6c:f0:89:99:1b:ca:be:d9:d5:d9:f8:64:c3:cc: 59:72:37:94:ff:bb:42:74:c7:b1:1d:b8:66:87:d6:de:5b:8e: d9:9d:36:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw RkM3RTcyNDcwHhcNMjUwODA4MTgyNTMzWhcNMjUwODE1MTgyNTMzWjAYMRYwFAYD VQQDEw02ODk2NDExZC01MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwqpBngLV9EKPFxCW0jOXpwtV+bWzJWVKOySKJbiET2qtGWyDSGPlz+M83dO Rkr209aNBcXQjw0RQuiHQfciZ+G6U3wgTVduKhBXHLY1lwWLzgzU8nVFlM9wmvH8 Ba78cFauWW4swrRXZBaalhq0lYtNEEJaN2pUAK6Lxk1lTAbM6fbGcZ4ctKhX0/y+ AttovfptHmBR2tD4WYKvo+y4+jJ/JfEjQz2quQ1V5eHOOtYoqZBt8uoqtBHQppqk 1CxrgfjJW008fhHQCHjrlYFWnjXJ/NRdTp0L3nm9EOMX7b4CVjlREupkaGyLRTp5 RImA3TdgzVIVydF1WvbgwnwEwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyWYR6/ HJZ3JsdTKUpHYhCBkSYKMB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5 NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4 bkZBaGtvc0R2SVVQeC1ja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmYk16dhmRGkF6Zn4wqwQzdYwtLxHyaw+DM3nuInOwtBX7fr0jdFYN wBi2sU2ffgIjBK33tD6FI6bcwQJhEG2XsdpFeaULILApd3Os09tUv0i1uoQvNRmq g2gkfqHiCfPjwQeSDs9Rpb3qbDl2z5M2vG0wvmsrNNCtCi4pWT8zpUqyQDpHh+eW aexoYojT7ieicnGw23FoQaqHFtF2OWZmwwrRZ6/s5P+OL/46eRfIUtazO+lMhP1H 4d+suBXlBB7CSvznARSWuUCNriPukGbIaU20BhZvzWUlxgYcbPCJmRvKvtnV2fhk w8xZcjeU/7tCdMexHbhmh9beW47ZnTb9 -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:40 2025 by rpki-client