$ rpki-client -vvf rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft File: cFErPTLQXcMlQemOV1oxxTIHNkg.mft (raw, json) Hash identifier: Mr9NP24ywvzSXNRRhIt4MD0BEKnv/DBLPQVvoI8mjW4= Subject key identifier: 64:DF:60:27:22:F0:8D:75:D9:A3:6F:DA:68:07:F3:F8:9F:33:47:D3 Authority key identifier: 70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 Certificate issuer: /CN=A918D75D/serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Certificate serial: 0611 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft Manifest number: 060C Signing time: Thu 12 Jun 2025 22:28:34 +0000 Manifest this update: Thu 12 Jun 2025 22:28:34 +0000 Manifest next update: Thu 19 Jun 2025 22:28:34 +0000 Files and hashes: 1: cFErPTLQXcMlQemOV1oxxTIHNkg.crl (hash: 2LMDMCFRNkGNcnsaJOqPrtG2UfPONYq8ruLgLUl/6os=) 2: D0763FECA68A11EB9F23D74FC4F9AE02.roa (hash: otn7zJrk0PPbtnlH9qLQ0UvTzJRXUBW5NBaU6fJKloc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D75D, serialNumber=70512B3D32D05DC32541E98E575A31C532073648 Validity Not Before: Jun 12 22:28:34 2025 GMT Not After : Jun 19 22:28:34 2025 GMT Subject: CN=684b5492-d56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:b3:b1:c4:d3:15:31:08:1f:f7:6d:f9:f7: 5a:e7:b4:57:e4:5a:d7:7b:f2:e9:69:3b:c3:f7:26: d7:26:be:ed:4c:0a:7d:e4:69:0c:d6:1e:a3:0d:0b: 81:9f:89:99:9d:37:af:88:06:43:e0:6a:67:93:6c: 37:1f:ce:23:e4:fc:44:06:3d:64:34:d2:0e:72:50: 45:f1:da:f7:ed:03:1c:7e:0e:f3:19:28:68:6c:a0: 1d:27:ef:02:d5:dc:7e:f9:7c:7e:bf:6c:dc:ae:bb: c4:1d:11:b6:53:9e:d4:47:05:76:46:e6:c0:ae:a0: 7d:c2:87:b6:3b:5d:a5:83:15:8e:ae:17:3c:16:00: 48:41:44:b4:19:b0:c4:87:3f:6c:4e:8e:19:07:1e: 36:a6:0a:72:d7:ca:2e:bb:44:0c:b3:cf:9c:ad:79: bb:20:42:71:7c:8f:72:6c:83:b2:e6:3c:ac:0c:69: 53:c2:84:3a:3a:3e:76:11:30:8c:ea:75:56:6e:f9: ad:3b:af:89:c4:10:4e:2d:a6:e0:18:d3:09:88:5e: 00:2d:61:2f:8e:b8:dd:71:68:fe:25:a9:69:4d:70: 15:eb:86:3d:41:19:50:ea:3c:84:58:11:ae:41:72: 6c:32:2c:25:16:b0:a6:8c:f5:48:43:68:47:0e:af: 49:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DF:60:27:22:F0:8D:75:D9:A3:6F:DA:68:07:F3:F8:9F:33:47:D3 X509v3 Authority Key Identifier: keyid:70:51:2B:3D:32:D0:5D:C3:25:41:E9:8E:57:5A:31:C5:32:07:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFErPTLQXcMlQemOV1oxxTIHNkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D75D/7E272F7CA68911EBA44B024FC4F9AE02/cFErPTLQXcMlQemOV1oxxTIHNkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:32:f4:a0:29:bd:d4:78:23:d2:35:97:f8:96:b0:5e:48:1f: cb:e4:2e:55:5f:82:0c:58:7d:7b:55:2d:5d:cc:a3:1e:8a:8d: 28:01:6b:53:55:41:93:4c:78:9b:d2:77:bf:ef:9d:cc:e6:9a: f0:e1:ac:29:2a:5d:63:08:1c:c6:d3:81:cd:2b:dd:f7:e2:50: 1a:68:4b:52:e9:38:1f:2e:d5:3d:6a:91:1d:5a:be:f7:8c:10: fe:6f:f4:d6:f4:24:f9:e0:01:2e:60:d5:ee:b0:fa:5f:cb:42: 74:85:b0:a8:24:c2:48:ed:e0:91:96:1b:19:61:1a:10:e0:12: ed:54:11:83:e9:7e:4b:68:06:ab:b7:70:c5:d0:23:61:21:3d: 04:9e:f1:d1:b2:ad:ae:23:4d:b4:9a:e4:7e:d4:df:c0:13:64: dc:af:00:8b:b3:7d:2a:cf:41:47:4b:70:d0:0c:76:81:45:32: bb:78:3f:16:48:0a:d3:a2:82:96:39:12:8e:2e:25:ad:e9:a0: ce:16:7d:7c:35:27:a4:5b:c8:37:0d:02:f4:c1:4d:b2:3a:7c: 99:2e:d1:fb:8e:79:fb:e4:25:48:bf:d2:ad:10:2d:24:b3:9b: c8:56:b0:79:fc:f3:97:37:29:1d:0b:e3:49:e8:09:9b:de:5a: 69:06:ad:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3NUQxMTAvBgNVBAUTKDcwNTEyQjNEMzJEMDVEQzMyNTQxRTk4RTU3NUEzMUM1 MzIwNzM2NDgwHhcNMjUwNjEyMjIyODM0WhcNMjUwNjE5MjIyODM0WjAYMRYwFAYD VQQDEw02ODRiNTQ5Mi1kNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq+zscTTFTEIH/dt+fda57RX5FrXe/LpaTvD9ybXJr7tTAp95GkM1h6jDQuB n4mZnTeviAZD4Gpnk2w3H84j5PxEBj1kNNIOclBF8dr37QMcfg7zGShobKAdJ+8C 1dx++Xx+v2zcrrvEHRG2U57URwV2RubArqB9woe2O12lgxWOrhc8FgBIQUS0GbDE hz9sTo4ZBx42pgpy18ouu0QMs8+crXm7IEJxfI9ybIOy5jysDGlTwoQ6Oj52ETCM 6nVWbvmtO6+JxBBOLabgGNMJiF4ALWEvjrjdcWj+JalpTXAV64Y9QRlQ6jyEWBGu QXJsMiwlFrCmjPVIQ2hHDq9JbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTfYCci 8I112aNv2mgH8/ifM0fTMB8GA1UdIwQYMBaAFHBRKz0y0F3DJUHpjldaMcUyBzZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc1RC83RTI3MkY3Q0E2 ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhjTWxRZW1PVjFveHhUSUhO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGRXJQVExRWGNNbFFlbU9WMW94eFRJSE5rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDc1RC83RTI3MkY3Q0E2ODkxMUVCQTQ0QjAyNEZDNEY5QUUwMi9jRkVyUFRMUVhj TWxRZW1PVjFveHhUSUhOa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcMvSgKb3UeCPSNZf4lrBeSB/L5C5VX4IMWH17VS1dzKMeio0oAWtT VUGTTHib0ne/753M5prw4awpKl1jCBzG04HNK9334lAaaEtS6TgfLtU9apEdWr73 jBD+b/TW9CT54AEuYNXusPpfy0J0hbCoJMJI7eCRlhsZYRoQ4BLtVBGD6X5LaAar t3DF0CNhIT0EnvHRsq2uI020muR+1N/AE2TcrwCLs30qz0FHS3DQDHaBRTK7eD8W SArTooKWORKOLiWt6aDOFn18NSekW8g3DQL0wU2yOnyZLtH7jnn75CVIv9KtEC0k s5vIVrB5/POXNykdC+NJ6Amb3lppBq3G -----END CERTIFICATE-----Generated at Sat Jun 14 19:20:37 2025 by rpki-client