$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: AkBqjZtz/fVEeWfDrRSKAyu19PHvvqU7+Tw5IaEBMXw= Subject key identifier: 87:7B:19:B5:2F:E3:55:41:DA:B9:7E:F0:03:0E:0A:18:69:3B:6F:D7 Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 01F5 Signing time: Mon 11 Aug 2025 02:35:58 +0000 Manifest this update: Mon 11 Aug 2025 02:35:57 +0000 Manifest next update: Mon 18 Aug 2025 02:35:57 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: MgOA+pv1nn7UnSjX3H5X/K+hpt/gzGPih3UKEexY3Vo=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: ZvVWR24fiTgTKL1AgxjjU+8hvOzH690FD/ftf9Pub2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Validity Not Before: Aug 11 02:35:57 2025 GMT Not After : Aug 18 02:35:57 2025 GMT Subject: CN=6899570d-5945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:e7:4a:20:3f:e6:f4:e8:bc:c9:cd:ef:29: 90:00:f1:ba:05:cd:d8:31:c1:e3:3f:8f:b0:81:2a: 25:d9:de:84:46:19:26:dd:43:50:f9:0c:2b:05:4b: d9:23:15:79:ba:7f:90:9e:ec:db:be:21:70:8c:82: cc:1b:62:32:5b:32:3d:7d:0d:ab:11:88:fc:bd:48: 79:c9:d9:45:e7:4e:8d:37:e9:30:e9:0c:39:eb:4e: b0:f8:2a:07:b0:92:1a:ef:16:72:98:79:6c:1b:68: 91:99:ff:37:7d:10:70:84:76:3c:c7:43:e5:93:f1: 69:9b:9b:d3:1b:64:a2:60:a2:8a:f6:4d:22:dc:81: 22:bd:b1:3e:db:ae:50:ca:53:9c:e8:6d:b1:d4:a4: 0e:47:69:1b:1c:bf:e7:01:17:83:f6:c7:6a:71:e4: b6:42:22:18:43:8e:70:21:f2:60:67:28:b3:74:ad: 5d:e6:1b:38:a1:18:98:7f:71:55:4a:78:69:80:49: 2b:78:c3:68:48:f1:a9:16:f8:90:ad:ef:74:d6:a9: b5:5f:84:e5:20:4b:77:e6:63:06:85:51:47:90:d2: 73:cd:aa:64:0b:31:bb:c4:11:ba:a6:29:aa:4c:2c: ff:08:0c:6c:16:ea:96:72:51:3b:52:6a:8c:c8:2b: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7B:19:B5:2F:E3:55:41:DA:B9:7E:F0:03:0E:0A:18:69:3B:6F:D7 X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:02:63:91:f4:1c:ea:bf:a3:b2:51:b0:81:71:88:7f:f0:36: d8:af:37:8f:a5:fa:0b:b4:6f:81:00:0b:fe:86:fb:43:ed:38: d2:9f:c8:b2:e7:45:9e:8b:3e:21:80:f2:47:ed:b4:67:4b:d5: ea:9f:90:8e:e6:d7:63:c9:eb:21:0f:fc:8c:e5:97:6b:b3:3f: 66:68:77:e9:51:b2:da:2f:c3:97:aa:a1:fe:ce:5c:0a:1c:3e: 63:36:44:11:9a:07:b8:18:7b:6c:b4:4d:83:d6:df:5a:84:42: d1:5c:31:d6:57:17:88:cb:49:1b:f4:ef:f6:0d:ec:2e:ab:23: 6f:e1:12:47:5f:1d:4c:3e:44:06:a6:f0:79:3c:82:32:73:71: de:b8:c0:9d:25:76:03:6c:72:3d:ca:41:51:da:0a:da:09:95: df:f6:c9:a5:c9:ce:92:d3:24:ac:a1:d6:22:ff:22:1a:a0:d7: aa:a7:8f:57:ae:16:f6:bd:93:6a:3c:17:1b:a8:99:14:1f:c0: 6f:17:10:f0:1b:65:4b:41:33:55:97:20:1c:d9:75:8d:2c:0b: af:53:e0:12:5a:67:b1:79:a9:84:66:6b:5b:b4:f7:41:a1:5c: ce:a7:90:1e:76:79:e3:e9:eb:89:86:d0:f6:f6:0d:af:1b:16: 7f:47:d1:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjUwODExMDIzNTU3WhcNMjUwODE4MDIzNTU3WjAYMRYwFAYD VQQDEw02ODk5NTcwZC01OTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum/nSiA/5vTovMnN7ymQAPG6Bc3YMcHjP4+wgSol2d6ERhkm3UNQ+QwrBUvZ IxV5un+QnuzbviFwjILMG2IyWzI9fQ2rEYj8vUh5ydlF506NN+kw6Qw5606w+CoH sJIa7xZymHlsG2iRmf83fRBwhHY8x0Plk/Fpm5vTG2SiYKKK9k0i3IEivbE+265Q ylOc6G2x1KQOR2kbHL/nAReD9sdqceS2QiIYQ45wIfJgZyizdK1d5hs4oRiYf3FV SnhpgEkreMNoSPGpFviQre901qm1X4TlIEt35mMGhVFHkNJzzapkCzG7xBG6pimq TCz/CAxsFuqWclE7UmqMyCtaIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId7GbUv 41VB2rl+8AMOChhpO2/XMB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOAmOR9Bzqv6OyUbCBcYh/8DbYrzePpfoLtG+BAAv+hvtD7TjSn8iy 50Weiz4hgPJH7bRnS9Xqn5CO5tdjyeshD/yM5Zdrsz9maHfpUbLaL8OXqqH+zlwK HD5jNkQRmge4GHtstE2D1t9ahELRXDHWVxeIy0kb9O/2DewuqyNv4RJHXx1MPkQG pvB5PIIyc3HeuMCdJXYDbHI9ykFR2graCZXf9smlyc6S0ySsodYi/yIaoNeqp49X rhb2vZNqPBcbqJkUH8BvFxDwG2VLQTNVlyAc2XWNLAuvU+ASWmexeamEZmtbtPdB oVzOp5Aednnj6euJhtD29g2vGxZ/R9HF -----END CERTIFICATE-----Generated at Tue Aug 12 19:04:19 2025 by rpki-client