$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json) Hash identifier: 3Vfhh9OwzFOajHp5tgMEewbqQpEquws+YRUTDw66axc= Subject key identifier: 91:92:4D:C1:B5:02:F0:29:E8:F1:29:9F:72:8E:B2:33:B7:E0:B5:4E Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Certificate serial: 062E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft Manifest number: 0629 Signing time: Fri 08 Aug 2025 23:10:36 +0000 Manifest this update: Fri 08 Aug 2025 23:10:36 +0000 Manifest next update: Fri 15 Aug 2025 23:10:36 +0000 Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: IoeEE+M5r4LHgZYcqLC0gfv/yXPy/ZoHcH4VB6O5nI8=) 2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Validity Not Before: Aug 8 23:10:36 2025 GMT Not After : Aug 15 23:10:36 2025 GMT Subject: CN=689683ec-30aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:af:a5:39:6c:04:7a:a3:c4:0c:d6:81:ee: fe:eb:58:47:c5:18:54:1a:c3:ad:45:6e:62:97:fe: b0:8e:26:e7:0c:29:bd:f4:34:50:b9:27:4b:4a:7d: 92:1d:17:61:59:d9:41:4d:34:45:7b:9d:bd:66:a4: 56:a3:7e:2f:3c:09:d5:6f:89:3d:e9:9a:33:64:da: 60:83:a0:17:2e:8e:d1:04:cd:eb:8b:43:57:8e:b5: 00:da:dd:71:89:e3:ec:02:77:9f:b1:da:16:a5:84: 92:6e:d6:56:6e:9c:3c:49:fb:9c:c2:3e:b0:d5:b3: 68:02:72:31:0a:91:2f:cf:7a:e7:25:7f:26:c5:b1: 36:86:6b:05:c8:3b:91:b9:12:4c:22:63:68:c1:a9: 0b:13:3d:3d:d8:0b:60:2f:08:aa:58:e5:d1:b0:8e: bd:cd:72:69:12:c6:dc:4b:d8:37:02:86:eb:4e:a8: 83:ee:74:59:95:94:2e:11:34:5b:05:03:3c:ba:5a: 97:cf:4a:fb:19:72:8a:de:3c:c1:6c:7e:7a:54:1b: c4:be:e4:79:79:5d:47:43:e9:b1:32:e4:d5:5c:71: e6:bc:57:0d:f1:b3:59:35:f0:66:d5:58:b5:f9:ee: 23:f2:c4:96:0f:08:3b:58:2e:d7:1a:75:12:f2:ff: 84:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:92:4D:C1:B5:02:F0:29:E8:F1:29:9F:72:8E:B2:33:B7:E0:B5:4E X509v3 Authority Key Identifier: keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4d:ee:e3:3d:44:2e:89:b6:1b:82:a4:8b:36:79:f9:00:63: aa:dc:d5:0d:99:3d:b3:50:26:19:d5:da:48:a2:75:f2:5f:e0: d0:7e:22:a2:71:ad:5e:ab:f9:b0:27:7c:d5:45:06:21:9c:9c: 64:26:03:ee:7f:fa:03:af:30:3c:68:02:ac:f7:69:d2:75:13: f0:a3:ce:0b:19:b0:2b:2c:08:c7:82:f3:92:71:2b:3f:79:9e: 6b:c7:ae:d1:45:2e:11:57:8e:db:4c:32:04:aa:1a:ec:22:77: e8:67:67:9f:70:76:33:4b:ef:e1:91:09:31:9b:ed:d6:56:cd: b0:99:ec:49:af:85:e8:f2:f6:13:db:38:37:c4:77:d4:da:dc: 24:c7:db:70:9c:ef:09:53:10:b7:01:23:b4:d6:71:78:f4:27: 12:92:c6:37:f5:9e:87:91:cf:ee:fc:85:fd:90:fe:90:d4:16: 7c:08:cc:0a:c8:36:05:ac:4f:15:dc:70:18:90:a5:7c:ba:43: a8:59:e8:c9:bc:f3:fa:e5:58:02:08:49:b3:ae:4c:08:a5:dd: 01:af:25:dd:d7:e4:a4:62:a1:1c:54:fa:e6:a0:fd:0d:b7:58: d1:6e:c8:df:42:d6:7c:81:f2:e8:62:b6:35:81:1f:a3:9b:6e: 1b:44:b0:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1 MzIwNzM2NDgwHhcNMjUwODA4MjMxMDM2WhcNMjUwODE1MjMxMDM2WjAYMRYwFAYD VQQDEw02ODk2ODNlYy0zMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0W6vpTlsBHqjxAzWge7+61hHxRhUGsOtRW5il/6wjibnDCm99DRQuSdLSn2S HRdhWdlBTTRFe529ZqRWo34vPAnVb4k96ZozZNpgg6AXLo7RBM3ri0NXjrUA2t1x iePsAnefsdoWpYSSbtZWbpw8Sfucwj6w1bNoAnIxCpEvz3rnJX8mxbE2hmsFyDuR uRJMImNowakLEz092AtgLwiqWOXRsI69zXJpEsbcS9g3AobrTqiD7nRZlZQuETRb BQM8ulqXz0r7GXKK3jzBbH56VBvEvuR5eV1HQ+mxMuTVXHHmvFcN8bNZNfBm1Vi1 +e4j8sSWDwg7WC7XGnUS8v+EKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGSTcG1 AvAp6PEpn3KOsjO34LVOMB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2 ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj TWxRZW1PVjFveHhUSUhOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCITe7jPUQuibYbgqSLNnn5AGOq3NUNmT2zUCYZ1dpIonXyX+DQfiKi ca1eq/mwJ3zVRQYhnJxkJgPuf/oDrzA8aAKs92nSdRPwo84LGbArLAjHgvOScSs/ eZ5rx67RRS4RV47bTDIEqhrsInfoZ2efcHYzS+/hkQkxm+3WVs2wmexJr4Xo8vYT 2zg3xHfU2twkx9twnO8JUxC3ASO01nF49CcSksY39Z6Hkc/u/IX9kP6Q1BZ8CMwK yDYFrE8V3HAYkKV8ukOoWejJvPP65VgCCEmzrkwIpd0BryXd1+SkYqEcVPrmoP0N t1jRbsjfQtZ8gfLoYrY1gR+jm24bRLCE -----END CERTIFICATE-----Generated at Sun Aug 10 04:24:24 2025 by rpki-client