$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json) Hash identifier: sZK7GpmBBd69nFqeiRv3z95TYI+ce7IT6wcteXJdDls= Subject key identifier: 1B:03:6E:2B:0C:5F:8D:D0:77:27:0A:0C:B3:EC:DE:CE:2B:31:49:CC Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft Manifest number: 067A Signing time: Fri 18 Jul 2025 22:51:50 +0000 Manifest this update: Fri 18 Jul 2025 22:51:49 +0000 Manifest next update: Fri 25 Jul 2025 22:51:49 +0000 Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: lteKPEs4bozs1CJlMvBo61JngnXRxW4Cb1NJz1csLjs=) 2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: UmpNsLSA9Ui51AS15ByfrZUIY+Ti/Tm6lpZ+BOTEjUM=) 3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: AzXEXHZ2GSh0FqrG3g/oL2focj1abqbuG/Rv3t+SJwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: Jul 18 22:51:49 2025 GMT Not After : Jul 25 22:51:49 2025 GMT Subject: CN=687ad005-7344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:cb:ca:2a:50:a8:0a:da:36:d9:a3:b6:f8: d3:c3:9a:3a:6e:9b:f6:93:c6:6d:92:74:9b:8b:08: bf:5e:a4:71:d7:b0:f7:78:af:48:12:5e:d4:53:3a: b5:67:2c:d3:9e:65:fe:b7:9d:50:15:3c:a8:b0:f1: eb:9b:5f:7d:be:df:8b:63:54:ef:a0:e4:ca:a3:97: 7e:66:4b:5d:74:cc:3c:7d:12:a2:63:59:01:16:1b: 62:fd:d0:4f:50:d4:52:97:cd:e6:ee:9e:e4:83:1f: d9:e1:c6:71:d5:84:29:55:c7:d7:d7:3d:1a:50:45: c4:5e:8a:bc:b4:27:a0:f4:c5:0c:cb:63:1f:c7:03: e3:0b:c7:aa:bb:a2:93:6e:b4:77:0f:5c:82:bb:c9: 0f:09:e0:de:96:8b:28:e7:f2:32:f9:3b:f2:c9:94: 5f:bd:eb:68:03:5b:43:bd:85:2f:36:0c:f2:ee:8c: 6c:69:b7:51:47:79:e9:90:02:2d:a4:0e:61:0b:53: 7c:dc:ab:d8:b0:1a:72:07:34:fb:4f:58:01:50:2f: 04:c0:68:0c:26:54:bc:11:ca:6f:dc:69:3a:0e:6b: 5f:89:2f:88:3c:82:34:d4:c1:0d:af:6f:50:72:53: 10:c0:ed:a6:3c:b7:af:d9:2d:21:d7:be:1c:2d:bc: 85:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:03:6E:2B:0C:5F:8D:D0:77:27:0A:0C:B3:EC:DE:CE:2B:31:49:CC X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:06:37:f4:d5:3d:6a:4d:2b:fb:ac:78:16:26:5a:b4:ae:ec: 1f:69:9f:17:5e:c2:26:b6:7e:73:ab:a9:e5:3e:f8:23:06:38: 96:16:5f:0f:36:8c:76:27:3d:fc:df:31:21:40:76:3d:de:06: 50:fd:45:af:86:62:7d:e4:6a:e3:62:f3:00:c4:b8:e8:4b:bb: 9d:2a:b0:95:8c:62:ac:f1:08:84:13:c9:35:e6:15:43:36:1d: 6e:a7:96:37:a7:40:1f:7d:38:68:27:83:32:b2:c1:8a:0a:2c: cb:c1:e4:e5:e8:da:dc:c9:3b:9f:60:e1:6c:2b:58:01:b0:f6: f7:b3:f9:4f:08:c1:0b:ac:3a:a5:7e:f3:19:8a:ca:cb:3c:d0: e5:af:b8:97:ae:6f:4e:7e:ce:f6:71:38:df:07:b2:5c:6a:54: 5c:b5:90:ec:ab:52:d3:85:ce:ef:55:8e:1a:99:54:53:94:09: 2a:4e:e8:e7:63:d3:7c:f9:a1:e2:dd:58:5e:a7:26:4f:08:a9: f6:35:72:f2:4c:59:ee:5e:0f:9b:23:0b:4a:a8:ae:18:ce:69: 0e:67:31:2a:79:9b:eb:06:62:8d:ba:85:9a:b6:02:f6:25:96: 93:0f:22:4a:a1:27:2c:e8:f0:a1:cb:b4:4d:f0:e4:e8:3f:40: 08:80:05:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUwNzE4MjI1MTQ5WhcNMjUwNzI1MjI1MTQ5WjAYMRYwFAYD VQQDEw02ODdhZDAwNS03MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH/LyipQqAraNtmjtvjTw5o6bpv2k8ZtknSbiwi/XqRx17D3eK9IEl7UUzq1 ZyzTnmX+t51QFTyosPHrm199vt+LY1TvoOTKo5d+ZktddMw8fRKiY1kBFhti/dBP UNRSl83m7p7kgx/Z4cZx1YQpVcfX1z0aUEXEXoq8tCeg9MUMy2MfxwPjC8equ6KT brR3D1yCu8kPCeDeloso5/Iy+TvyyZRfvetoA1tDvYUvNgzy7oxsabdRR3npkAIt pA5hC1N83KvYsBpyBzT7T1gBUC8EwGgMJlS8Ecpv3Gk6DmtfiS+IPII01MENr29Q clMQwO2mPLev2S0h174cLbyFmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsDbisM X43QdycKDLPs3s4rMUnMMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0IyQS9FMDFDN0E4NDkwRTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5i Y1ZZVFNzZVBrY0l6dVRrcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVBjf01T1qTSv7rHgWJlq0ruwfaZ8XXsImtn5zq6nlPvgjBjiWFl8P Nox2Jz383zEhQHY93gZQ/UWvhmJ95GrjYvMAxLjoS7udKrCVjGKs8QiEE8k15hVD Nh1up5Y3p0AffThoJ4MyssGKCizLweTl6NrcyTufYOFsK1gBsPb3s/lPCMELrDql fvMZisrLPNDlr7iXrm9Ofs72cTjfB7JcalRctZDsq1LThc7vVY4amVRTlAkqTujn Y9N8+aHi3VhepyZPCKn2NXLyTFnuXg+bIwtKqK4YzmkOZzEqeZvrBmKNuoWatgL2 JZaTDyJKoScs6PChy7RN8OToP0AIgAV1 -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:34 2025 by rpki-client