$ rpki-client -vvf rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft File: 0fxphnCiQetFTVXFZ6paY1rwoGM.mft (raw, json) Hash identifier: FPCIj1Uj0UhhrMxO5G9s/0nF2n5lW/2vnmRyA3nsAAE= Subject key identifier: FB:05:6C:B5:1D:A5:AD:1F:3F:F4:27:A7:DF:50:DD:D0:BB:9D:CC:C8 Authority key identifier: D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 Certificate issuer: /CN=A918681B/serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft Manifest number: 0518 Signing time: Sun 10 Aug 2025 23:45:32 +0000 Manifest this update: Sun 10 Aug 2025 23:45:31 +0000 Manifest next update: Sun 17 Aug 2025 23:45:31 +0000 Files and hashes: 1: 0fxphnCiQetFTVXFZ6paY1rwoGM.crl (hash: z22u5t0tHOA65KDk5J4SsXlEsHZwGQELdXx/GDZ5u/Y=) 2: 5D4D3E261A3E11ECB42D0B80C4F9AE02.roa (hash: Am0tyv0SW/vQBy5lGTGy4TYfxwQ9Lc6UrqhzC51ywy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918681B, serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Validity Not Before: Aug 10 23:45:31 2025 GMT Not After : Aug 17 23:45:31 2025 GMT Subject: CN=68992f1b-265e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:e6:a8:58:2e:e4:56:3c:42:a5:eb:9c:20: a3:10:5f:b5:1a:c5:b4:d1:69:5a:ce:2a:ed:ba:b4: 8d:13:98:77:dd:ca:2e:6b:83:63:e0:a6:96:f3:8c: 80:25:64:80:2a:78:38:17:63:c9:73:27:50:de:6f: 71:10:0f:a4:0a:8b:08:5e:a2:58:96:ac:5a:0a:f3: 93:b0:03:92:6c:fc:0d:0e:68:43:7f:30:af:01:ef: 88:e4:78:07:84:b4:7b:2b:08:1e:bc:88:68:3b:7c: 01:07:19:77:b0:c1:fe:80:cd:18:16:7f:76:95:ab: 98:e2:8b:e9:7e:5d:74:e7:f7:2b:ee:a0:a2:38:0e: d1:c4:24:4f:ca:9e:8e:66:fb:f3:07:5e:42:77:f4: 70:c8:e4:a5:d0:32:c5:9f:94:90:d4:6e:31:e3:a1: 6b:7a:b4:4f:d6:72:b3:05:14:a1:e5:20:4c:27:c5: 34:36:c0:5d:31:43:2f:43:d1:85:23:d3:43:32:55: da:6c:c2:3c:0d:00:6a:c0:7d:f7:8d:f1:9e:ec:63: 45:ee:3b:78:a2:09:64:12:10:9d:2f:98:e9:3a:fb: fc:58:f1:e4:57:c0:c2:38:4a:89:a8:5e:f9:d1:ce: 4a:da:3e:2d:84:9a:41:95:8c:1a:9a:2d:ea:9d:60: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:6C:B5:1D:A5:AD:1F:3F:F4:27:A7:DF:50:DD:D0:BB:9D:CC:C8 X509v3 Authority Key Identifier: keyid:D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a6:41:a4:4a:0a:63:cd:c8:15:9b:f1:69:6d:33:fe:19:4a: d1:77:5c:c9:44:1c:bc:a7:ec:6a:70:94:62:de:14:f4:e3:de: 59:03:df:7b:17:fc:53:84:43:92:87:3e:d4:ce:d0:23:dc:a4: 85:1d:29:3a:8f:68:e2:6f:7f:0c:7d:33:09:1a:f8:4a:cb:de: 76:37:d2:dc:1e:55:fe:f9:94:05:5c:0b:42:9b:b8:65:98:e2: 9e:65:2e:d1:7b:23:7b:db:b3:0a:ed:0a:20:d8:cd:05:05:d1: ab:f9:69:50:40:55:4b:5c:5e:88:66:05:5c:c9:9e:fe:6c:c5: d1:e9:b3:f2:b4:3a:80:5a:67:68:42:60:6f:9a:a0:d2:0d:be: 94:2d:ba:0f:48:de:8f:2e:87:35:ad:5d:ca:f3:09:03:d7:27: bc:12:cc:98:31:3b:33:73:f2:7d:09:56:c1:cb:90:5f:c2:2a: 55:af:d7:45:35:99:e2:58:61:09:33:f3:5d:43:df:8e:f3:72: ea:9a:19:5f:b1:45:27:83:8a:1e:a2:e8:a2:6f:88:a8:04:c9: a5:09:77:a7:f1:9c:c8:e9:a9:a4:3e:47:78:be:98:b1:ff:e0: 48:45:26:23:e0:c3:88:98:69:05:90:af:43:21:57:00:f8:b8: 94:69:5b:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4MUIxMTAvBgNVBAUTKEQxRkM2OTg2NzBBMjQxRUI0NTRENTVDNTY3QUE1QTYz NUFGMEEwNjMwHhcNMjUwODEwMjM0NTMxWhcNMjUwODE3MjM0NTMxWjAYMRYwFAYD VQQDEw02ODk5MmYxYi0yNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEbmqFgu5FY8QqXrnCCjEF+1GsW00WlazirturSNE5h33coua4Nj4KaW84yA JWSAKng4F2PJcydQ3m9xEA+kCosIXqJYlqxaCvOTsAOSbPwNDmhDfzCvAe+I5HgH hLR7KwgevIhoO3wBBxl3sMH+gM0YFn92lauY4ovpfl105/cr7qCiOA7RxCRPyp6O ZvvzB15Cd/RwyOSl0DLFn5SQ1G4x46FrerRP1nKzBRSh5SBMJ8U0NsBdMUMvQ9GF I9NDMlXabMI8DQBqwH33jfGe7GNF7jt4oglkEhCdL5jpOvv8WPHkV8DCOEqJqF75 0c5K2j4thJpBlYwami3qnWBJJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsFbLUd pa0fP/Qnp99Q3dC7nczIMB8GA1UdIwQYMBaAFNH8aYZwokHrRU1VxWeqWmNa8KBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjgxQi9DNDNGQkQwNjFB M0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFldEZUVlhGWjZwYVkxcndv R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmeHBobkNpUWV0RlRWWEZaNnBhWTFyd29HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjgxQi9DNDNGQkQwNjFBM0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFl dEZUVlhGWjZwYVkxcndvR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtpkGkSgpjzcgVm/FpbTP+GUrRd1zJRBy8p+xqcJRi3hT0495ZA997 F/xThEOShz7UztAj3KSFHSk6j2jib38MfTMJGvhKy952N9LcHlX++ZQFXAtCm7hl mOKeZS7ReyN727MK7Qog2M0FBdGr+WlQQFVLXF6IZgVcyZ7+bMXR6bPytDqAWmdo QmBvmqDSDb6ULboPSN6PLoc1rV3K8wkD1ye8EsyYMTszc/J9CVbBy5BfwipVr9dF NZniWGEJM/NdQ9+O83LqmhlfsUUng4oeouiib4ioBMmlCXen8ZzI6amkPkd4vpix /+BIRSYj4MOImGkFkK9DIVcA+LiUaVsH -----END CERTIFICATE-----Generated at Mon Aug 11 05:09:24 2025 by rpki-client