$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: UTAEsoFDPMSqK1+cFc3mZRgLYawYvQnyeN7ahea9ZBs= Subject key identifier: 1C:3E:FA:7A:DA:E4:DB:3F:2B:7E:1F:69:4A:06:B4:F8:9F:5A:E0:C4 Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: 0115 Signing time: Thu 19 Jun 2025 04:14:19 +0000 Manifest this update: Thu 19 Jun 2025 04:14:18 +0000 Manifest next update: Thu 26 Jun 2025 04:14:18 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: +Q6Wqey0566nxGy+jWS8w1GAFj7MQsrg/421QTSQ9c4=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: v8vLgjK5S+JdCLTZc8YYYPXnZStqFTZMOLbog1OTRVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: Jun 19 04:14:18 2025 GMT Not After : Jun 26 04:14:18 2025 GMT Subject: CN=68538e9a-efac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:74:9c:d3:40:2a:ed:54:54:19:da:f3:4a: ef:ff:54:45:d2:9f:bc:32:b8:8a:e1:25:fa:3a:75: c4:5e:c2:d6:7a:9e:8e:cd:b5:1a:aa:e3:4c:2e:c9: 7c:f5:f6:0d:35:68:44:4b:3c:eb:03:5c:26:b6:33: 5e:af:ff:51:30:f1:1f:60:96:db:3b:ef:70:fb:59: 00:4b:40:68:82:e6:88:cf:7d:da:23:c2:02:9c:fd: f2:18:d3:00:e0:7a:27:86:4d:4a:34:db:8e:cf:59: 26:c5:91:86:3e:ca:98:c2:0e:d4:96:7d:4f:b5:ea: 86:e5:fd:63:e0:01:1b:86:a2:03:07:4b:27:36:7a: b2:2d:10:1d:3e:7b:53:f6:ae:7c:0c:52:0e:96:2a: ec:c4:77:d6:ff:55:b9:41:44:aa:66:eb:00:e1:a9: 5d:b0:57:58:49:30:f2:90:62:cb:e6:29:a0:6f:7a: f5:d9:78:89:6f:36:90:2e:84:61:0b:72:b3:56:17: e0:90:6f:1f:ae:3e:07:60:4e:76:d7:9e:cd:46:0f: 64:a6:c5:50:a0:d6:84:c6:5c:6b:be:a6:84:b5:c5: 99:2b:85:d8:0e:bd:d2:35:8a:6e:85:2b:df:0c:f2: df:86:0e:b8:79:ee:3f:11:a7:31:9b:0d:1d:73:95: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3E:FA:7A:DA:E4:DB:3F:2B:7E:1F:69:4A:06:B4:F8:9F:5A:E0:C4 X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:9a:f2:e4:29:c2:96:5c:4a:16:f6:1b:7b:db:84:f8:49:56: 20:5a:62:21:ad:df:d4:bf:aa:98:bf:16:aa:68:ce:62:cc:9f: a1:80:4a:07:fc:76:36:47:8c:0c:cf:a8:49:86:61:35:9f:f9: 3b:d2:dc:7a:61:7b:1b:fc:70:50:8a:64:6b:07:3e:78:af:2e: 2d:2e:e7:4d:09:31:42:2d:cc:e8:bb:bb:93:39:8e:5b:6e:e1: 33:a3:02:db:63:25:fc:2b:19:17:c6:ce:bb:07:4a:bb:8a:e0: b0:63:f1:ea:16:64:63:60:7c:b5:84:e2:41:ae:c1:69:fb:8a: af:1a:c7:fc:e6:55:a5:ee:a7:e9:37:f0:03:4c:d0:3c:70:ad: 08:b5:92:37:81:bb:3c:c1:17:02:34:9d:8b:f0:8e:cb:a9:12: 8c:f1:d4:8b:61:1e:85:5d:ff:33:f9:03:9e:69:39:a5:88:3a: 02:7e:19:f8:68:c3:fd:ee:39:c6:9e:75:a8:80:4a:37:59:01: b1:9e:7a:97:eb:2d:aa:ab:aa:8d:94:7a:ca:08:0d:26:69:2d: 97:e1:fd:d2:b6:72:b2:df:43:70:22:23:f9:11:e6:0b:db:39: ed:e2:9d:4c:0a:45:e1:7b:6e:d7:0a:da:40:71:8a:59:14:58: 8d:78:53:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB QUExQjFCNDQwHhcNMjUwNjE5MDQxNDE4WhcNMjUwNjI2MDQxNDE4WjAYMRYwFAYD VQQDEw02ODUzOGU5YS1lZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVZ0nNNAKu1UVBna80rv/1RF0p+8MriK4SX6OnXEXsLWep6OzbUaquNMLsl8 9fYNNWhESzzrA1wmtjNer/9RMPEfYJbbO+9w+1kAS0BoguaIz33aI8ICnP3yGNMA 4Honhk1KNNuOz1kmxZGGPsqYwg7Uln1PteqG5f1j4AEbhqIDB0snNnqyLRAdPntT 9q58DFIOlirsxHfW/1W5QUSqZusA4aldsFdYSTDykGLL5imgb3r12XiJbzaQLoRh C3KzVhfgkG8frj4HYE52157NRg9kpsVQoNaExlxrvqaEtcWZK4XYDr3SNYpuhSvf DPLfhg64ee4/Eacxmw0dc5VcpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBw++nra 5Ns/K34faUoGtPifWuDEMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ Zk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYmvLkKcKWXEoW9ht724T4SVYgWmIhrd/Uv6qYvxaqaM5izJ+hgEoH /HY2R4wMz6hJhmE1n/k70tx6YXsb/HBQimRrBz54ry4tLudNCTFCLczou7uTOY5b buEzowLbYyX8KxkXxs67B0q7iuCwY/HqFmRjYHy1hOJBrsFp+4qvGsf85lWl7qfp N/ADTNA8cK0ItZI3gbs8wRcCNJ2L8I7LqRKM8dSLYR6FXf8z+QOeaTmliDoCfhn4 aMP97jnGnnWogEo3WQGxnnqX6y2qq6qNlHrKCA0maS2X4f3StnKy30NwIiP5EeYL 2znt4p1MCkXhe27XCtpAcYpZFFiNeFNy -----END CERTIFICATE-----Generated at Fri Jun 20 01:53:17 2025 by rpki-client