$ rpki-client -vvf rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft File: fcRirz5ieKghiQWhs-fbN_LveoI.mft (raw, json) Hash identifier: 46lC5w4HJ6IpQuZmyLz4R7pHrnPcB8wWmzh5Bs6siYA= Subject key identifier: 44:CA:22:27:12:81:57:4B:24:D4:BC:76:30:75:10:A1:D4:BB:C3:47 Authority key identifier: 7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 Certificate issuer: /CN=A915B598/serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft Manifest number: 0C5E Signing time: Fri 18 Jul 2025 18:31:37 +0000 Manifest this update: Fri 18 Jul 2025 18:31:36 +0000 Manifest next update: Fri 25 Jul 2025 18:31:36 +0000 Files and hashes: 1: fcRirz5ieKghiQWhs-fbN_LveoI.crl (hash: 71lhqIE5wI5ggQyZlmtHwnNDhZ+kWD1ERAw/ithIKiw=) 2: ED6D9A0C047211EAA9BAFB77C4F9AE02.roa (hash: VMA/DaW08DK9v/lxWPtZwnO804CFumuELv89I609LTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B598, serialNumber=7DC462AF3E6278A8218905A1B3E7DB37F2EF7A82 Validity Not Before: Jul 18 18:31:36 2025 GMT Not After : Jul 25 18:31:36 2025 GMT Subject: CN=687a9309-2c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:f7:c9:e3:c4:ad:0b:80:f0:51:91:65:59: 0b:38:ed:b8:03:c8:77:9d:ec:92:ce:db:78:4d:1b: aa:7f:75:63:27:13:d2:98:c7:26:e2:90:76:ec:e4: 5d:52:8b:32:e1:29:ef:d3:3f:29:db:87:2c:48:ce: 98:6c:70:95:04:08:bb:8e:34:77:a7:7f:b7:e9:2d: c6:21:5a:bc:6e:de:84:f8:bb:76:7d:7e:f8:14:ed: f8:46:e5:39:59:56:fe:2f:cb:14:ca:7a:b1:3a:7f: f1:da:44:7c:08:72:1e:8f:95:14:a9:00:ee:45:a9: 63:69:37:2b:d4:ef:da:cc:ff:7e:87:9d:64:76:98: 77:8a:fd:fb:8c:48:ce:58:ae:01:60:dd:02:9a:87: 92:6a:e8:b5:66:83:7e:ed:c1:9b:72:d1:fc:c2:61: 60:ee:39:59:5a:58:f1:16:64:a9:af:30:15:95:d9: 03:ee:79:8e:89:1a:d9:ab:4f:dc:e6:e0:20:7a:12: 06:01:c6:b9:60:3e:59:95:21:71:13:59:7a:a7:5c: 71:37:29:15:11:de:aa:fd:c8:90:71:be:4d:c8:2d: 01:1a:ab:8d:cd:01:cd:88:ec:3c:e7:38:85:6d:15: c3:fc:20:b0:6d:b1:fe:78:79:cc:93:0c:dc:24:b9: 9c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CA:22:27:12:81:57:4B:24:D4:BC:76:30:75:10:A1:D4:BB:C3:47 X509v3 Authority Key Identifier: keyid:7D:C4:62:AF:3E:62:78:A8:21:89:05:A1:B3:E7:DB:37:F2:EF:7A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcRirz5ieKghiQWhs-fbN_LveoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B598/812CE9D4047111EAB6AD8775C4F9AE02/fcRirz5ieKghiQWhs-fbN_LveoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:02:a1:e1:e6:6e:55:15:43:b3:b8:b7:d0:b9:17:ed:24:49: 46:6b:3a:f8:6c:cb:a0:5f:6b:2e:c8:2b:58:2d:74:12:d3:0b: f3:27:cd:1c:a5:74:8e:f6:87:9d:fe:72:19:11:a2:83:2f:ca: df:bf:fb:56:3a:bf:21:08:52:67:ca:f7:f9:67:aa:12:82:3f: 70:1d:22:f5:33:67:46:85:dc:b2:3a:1a:61:4b:d2:30:5e:28: 7f:61:22:e6:66:d4:26:bc:6e:8f:34:63:1e:7a:ee:f4:74:b2: ad:85:63:87:62:47:78:3f:8c:b5:49:4b:2d:15:9a:3e:bd:d6: 3f:33:90:cc:c4:f0:85:2f:07:35:1d:6c:a5:10:8a:37:83:1e: 24:31:b6:c9:fd:f0:97:41:e4:4b:7b:53:47:2c:45:f7:23:55: 9f:7c:d2:b8:aa:a3:ae:26:af:45:0d:da:0e:7d:72:a6:0f:96: 20:51:fc:cc:8a:ae:e4:a6:9c:58:a2:f7:25:14:1f:1d:2d:a5: a9:cd:d4:50:03:4d:ec:76:83:42:20:a6:35:8b:a8:4b:12:c4: d4:e0:e4:c6:a2:0b:34:3e:c7:9e:4f:35:6f:55:55:76:19:da: 0e:7f:e0:64:f3:cc:c5:98:f1:2b:33:4a:65:27:8c:89:36:ef: 31:32:90:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1OTgxMTAvBgNVBAUTKDdEQzQ2MkFGM0U2Mjc4QTgyMTg5MDVBMUIzRTdEQjM3 RjJFRjdBODIwHhcNMjUwNzE4MTgzMTM2WhcNMjUwNzI1MTgzMTM2WjAYMRYwFAYD VQQDEw02ODdhOTMwOS0yYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLH3yePErQuA8FGRZVkLOO24A8h3neySztt4TRuqf3VjJxPSmMcm4pB27ORd Uosy4Snv0z8p24csSM6YbHCVBAi7jjR3p3+36S3GIVq8bt6E+Lt2fX74FO34RuU5 WVb+L8sUynqxOn/x2kR8CHIej5UUqQDuRaljaTcr1O/azP9+h51kdph3iv37jEjO WK4BYN0CmoeSaui1ZoN+7cGbctH8wmFg7jlZWljxFmSprzAVldkD7nmOiRrZq0/c 5uAgehIGAca5YD5ZlSFxE1l6p1xxNykVEd6q/ciQcb5NyC0BGquNzQHNiOw85ziF bRXD/CCwbbH+eHnMkwzcJLmcewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETKIicS gVdLJNS8djB1EKHUu8NHMB8GA1UdIwQYMBaAFH3EYq8+YnioIYkFobPn2zfy73qC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU5OC84MTJDRTlENDA0 NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVLZ2hpUVdocy1mYk5fTHZl b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjUmlyejVpZUtnaGlRV2hzLWZiTl9MdmVvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU5OC84MTJDRTlENDA0NzExMUVBQjZBRDg3NzVDNEY5QUUwMi9mY1Jpcno1aWVL Z2hpUVdocy1mYk5fTHZlb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmAqHh5m5VFUOzuLfQuRftJElGazr4bMugX2suyCtYLXQS0wvzJ80c pXSO9oed/nIZEaKDL8rfv/tWOr8hCFJnyvf5Z6oSgj9wHSL1M2dGhdyyOhphS9Iw Xih/YSLmZtQmvG6PNGMeeu70dLKthWOHYkd4P4y1SUstFZo+vdY/M5DMxPCFLwc1 HWylEIo3gx4kMbbJ/fCXQeRLe1NHLEX3I1WffNK4qqOuJq9FDdoOfXKmD5YgUfzM iq7kppxYovclFB8dLaWpzdRQA03sdoNCIKY1i6hLEsTU4OTGogs0PseeTzVvVVV2 GdoOf+Bk88zFmPErM0plJ4yJNu8xMpA0 -----END CERTIFICATE-----Generated at Sun Jul 20 10:26:27 2025 by rpki-client