$ rpki-client -vvf rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft File: 0fxphnCiQetFTVXFZ6paY1rwoGM.mft (raw, json) Hash identifier: WUVNGW3k44U7odMsF6xT5h1LJj84oAHXwS+IHeh/wyU= Subject key identifier: BA:04:D5:83:B3:C7:A1:A6:B4:59:F0:17:78:66:86:31:6D:14:12:00 Authority key identifier: D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 Certificate issuer: /CN=A918681B/serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Certificate serial: 0506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft Manifest number: 04FA Signing time: Thu 12 Jun 2025 23:19:12 +0000 Manifest this update: Thu 12 Jun 2025 23:19:12 +0000 Manifest next update: Thu 19 Jun 2025 23:19:12 +0000 Files and hashes: 1: 0fxphnCiQetFTVXFZ6paY1rwoGM.crl (hash: 2rLGxqwKY571crquiSFlyQuUvq7RMrX3N7BTlABWXiM=) 2: 5D4D3E261A3E11ECB42D0B80C4F9AE02.roa (hash: Am0tyv0SW/vQBy5lGTGy4TYfxwQ9Lc6UrqhzC51ywy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1286 (0x506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918681B, serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Validity Not Before: Jun 12 23:19:12 2025 GMT Not After : Jun 19 23:19:12 2025 GMT Subject: CN=684b6070-a969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:be:62:66:81:80:a0:df:7c:b2:8b:c8:67: 5c:e7:67:9b:2d:36:a6:ca:45:66:96:99:c1:01:70: c1:6f:a9:1a:7c:a2:0b:ec:0d:d3:5a:17:41:73:c0: 08:c3:6e:5f:01:02:10:f9:89:47:12:74:d9:57:55: 88:2c:1a:29:6e:4e:08:b5:93:cd:0c:2b:88:dd:d6: 3e:80:84:b7:e9:29:b0:50:c6:95:80:92:87:cc:84: 3c:c8:0b:b2:f1:51:95:aa:19:50:f3:58:ae:2c:de: b7:65:51:45:5e:1f:59:32:7c:d7:2c:a2:f6:2f:03: 62:a2:6a:f6:0d:43:be:a9:97:ef:dc:2d:3a:2b:2f: 28:27:3e:e0:03:29:a1:0f:59:89:ac:9f:ec:7c:c1: c7:ee:96:35:c8:66:83:39:ad:55:e3:80:0b:e8:33: 58:38:51:fa:ca:76:76:48:c2:b3:3f:89:53:17:be: aa:06:7c:f2:18:18:8d:10:03:91:70:cc:8b:5f:15: 6f:bf:80:95:09:01:a3:9e:13:29:d9:3c:04:3e:9b: 55:1f:c8:5c:3e:9c:e9:4d:8c:99:39:27:7e:45:e2: 68:56:b1:a6:f1:48:1d:2c:a8:a9:17:f4:66:09:1b: e2:0f:a6:4d:73:75:88:be:12:16:39:5d:b1:77:83: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:04:D5:83:B3:C7:A1:A6:B4:59:F0:17:78:66:86:31:6D:14:12:00 X509v3 Authority Key Identifier: keyid:D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:9a:ab:07:38:b1:47:f6:9c:98:a9:22:aa:60:b2:0a:87:68: a5:85:8d:71:25:54:f4:f6:b9:8b:de:fe:d9:9a:dc:a5:07:94: ae:ae:fc:c1:9b:6f:b6:c6:b7:e5:b8:fd:56:14:27:04:7a:ca: 39:ec:e5:34:fe:39:4f:a5:f2:a1:70:f4:92:76:15:8f:f4:c9: 11:49:33:90:ac:5b:58:e5:5e:bb:15:86:d4:6a:ae:f3:be:3c: 87:5d:5a:f7:d1:4a:cd:a8:28:47:2c:d1:73:98:9a:dd:7f:5e: 9a:6f:48:4f:89:d9:1b:cc:9d:9d:fb:bb:25:c9:90:21:8d:14: 46:51:4f:e3:7f:79:c9:93:57:38:44:8c:af:93:52:81:b4:f9: 32:57:c3:f9:bf:73:2d:19:8a:0b:3c:9c:53:5e:ad:72:67:a3: 19:15:11:bd:12:43:9d:70:72:ea:7c:93:43:8d:23:46:65:2a: b0:9c:52:2e:73:4e:0b:a0:79:71:01:ea:63:77:b2:da:4d:69: 68:06:44:ed:87:33:5c:95:fc:f4:0a:1c:04:d7:82:38:c9:c2: 03:c1:23:6b:25:49:f8:fc:f3:7b:2f:c3:30:97:e2:43:bd:98: bd:b3:40:78:41:d3:78:bf:3e:34:4c:48:38:91:a4:ff:b6:45: 2e:3b:16:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4MUIxMTAvBgNVBAUTKEQxRkM2OTg2NzBBMjQxRUI0NTRENTVDNTY3QUE1QTYz NUFGMEEwNjMwHhcNMjUwNjEyMjMxOTEyWhcNMjUwNjE5MjMxOTEyWjAYMRYwFAYD VQQDEw02ODRiNjA3MC1hOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4a+YmaBgKDffLKLyGdc52ebLTamykVmlpnBAXDBb6kafKIL7A3TWhdBc8AI w25fAQIQ+YlHEnTZV1WILBopbk4ItZPNDCuI3dY+gIS36SmwUMaVgJKHzIQ8yAuy 8VGVqhlQ81iuLN63ZVFFXh9ZMnzXLKL2LwNiomr2DUO+qZfv3C06Ky8oJz7gAymh D1mJrJ/sfMHH7pY1yGaDOa1V44AL6DNYOFH6ynZ2SMKzP4lTF76qBnzyGBiNEAOR cMyLXxVvv4CVCQGjnhMp2TwEPptVH8hcPpzpTYyZOSd+ReJoVrGm8UgdLKipF/Rm CRviD6ZNc3WIvhIWOV2xd4ORfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoE1YOz x6GmtFnwF3hmhjFtFBIAMB8GA1UdIwQYMBaAFNH8aYZwokHrRU1VxWeqWmNa8KBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjgxQi9DNDNGQkQwNjFB M0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFldEZUVlhGWjZwYVkxcndv R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmeHBobkNpUWV0RlRWWEZaNnBhWTFyd29HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjgxQi9DNDNGQkQwNjFBM0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFl dEZUVlhGWjZwYVkxcndvR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtmqsHOLFH9pyYqSKqYLIKh2ilhY1xJVT09rmL3v7ZmtylB5SurvzB m2+2xrfluP1WFCcEeso57OU0/jlPpfKhcPSSdhWP9MkRSTOQrFtY5V67FYbUaq7z vjyHXVr30UrNqChHLNFzmJrdf16ab0hPidkbzJ2d+7slyZAhjRRGUU/jf3nJk1c4 RIyvk1KBtPkyV8P5v3MtGYoLPJxTXq1yZ6MZFRG9EkOdcHLqfJNDjSNGZSqwnFIu c04LoHlxAepjd7LaTWloBkTthzNclfz0ChwE14I4ycIDwSNrJUn4/PN7L8Mwl+JD vZi9s0B4QdN4vz40TEg4kaT/tkUuOxa6 -----END CERTIFICATE-----Generated at Sat Jun 14 19:16:00 2025 by rpki-client