$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft File: F5SMh3nFnmXK_OLv3LHLUJEThEw.mft (raw, json) Hash identifier: dCOXVL1998grm02iWGge8RmEWQwrS2ZT6iQc0pxXjMo= Subject key identifier: 1A:73:84:A0:65:EB:33:34:98:30:64:D5:18:CA:C3:68:35:76:FB:BF Authority key identifier: 17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C Certificate issuer: /CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft Manifest number: 071A Signing time: Fri 18 Jul 2025 22:09:08 +0000 Manifest this update: Fri 18 Jul 2025 22:09:08 +0000 Manifest next update: Fri 25 Jul 2025 22:09:08 +0000 Files and hashes: 1: F5SMh3nFnmXK_OLv3LHLUJEThEw.crl (hash: HoJo2kmbQrRdRKoOiyQPLm6eqDiKBwAYT6EUmelGQDE=) 2: 7A75D42E45B211EB99335867C4F9AE02.roa (hash: NsZ4F3z/UkG4nWlQYLX7FdM8TeLtW3jisug+AwHpPsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FC0B, serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C Validity Not Before: Jul 18 22:09:08 2025 GMT Not After : Jul 25 22:09:08 2025 GMT Subject: CN=687ac604-6e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:36:3e:c5:2a:dd:d8:69:b3:60:57:7b:10:3a: 31:39:e3:d9:01:b3:1a:ae:b3:32:3d:b1:d9:ff:cc: f4:1c:f6:83:39:87:da:81:fc:6b:fe:7d:9e:73:8a: 9d:47:01:45:fe:e8:59:53:c5:93:68:47:37:6f:a7: 14:eb:2f:1f:aa:2c:f3:7c:e8:84:84:09:86:6f:9c: d0:d9:3a:ba:47:ca:a7:ac:51:5b:a8:0e:d6:b3:4d: d9:80:7f:87:59:50:36:d1:9e:19:e0:bc:76:21:19: fd:e6:e6:81:4f:bc:20:f6:26:7f:a6:03:63:9c:c6: bb:7a:0a:6f:ce:c5:81:51:06:52:6d:7f:aa:4c:df: 50:2a:d5:93:9e:62:fe:f3:87:0f:7d:1e:ed:50:8c: 0a:42:cb:7c:f3:64:6e:78:f1:48:5f:c7:a5:78:05: 9a:b5:20:99:ea:ad:e8:f8:a9:86:d0:d3:e9:a5:46: 9d:ef:82:6b:3f:1f:34:ad:1c:a6:3b:06:9c:48:71: b6:de:cd:05:c5:5f:8e:78:a4:a2:1a:eb:a5:38:fd: 81:37:4a:95:ca:7b:77:0b:71:4a:d3:b4:52:25:a9: f9:32:b9:ae:b3:4e:95:a8:9e:4d:47:c8:1b:53:3e: 65:68:58:c0:e6:e0:14:0b:a5:31:15:46:58:a6:49: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:73:84:A0:65:EB:33:34:98:30:64:D5:18:CA:C3:68:35:76:FB:BF X509v3 Authority Key Identifier: keyid:17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2e:44:77:06:7d:61:e4:3a:05:6e:37:22:af:71:31:32:d6: 37:26:5d:53:07:06:ca:33:34:74:ce:e6:08:56:4c:c3:3c:38: df:53:ea:5d:9a:a3:4c:7d:4b:47:a3:cf:96:fa:b0:58:2d:b4: 39:91:d4:f1:80:2a:76:cf:7c:d4:f3:35:43:5f:13:5f:91:da: c6:8b:3e:b1:a0:8a:b6:a6:0c:52:30:9c:11:ee:d4:4d:f2:6b: 97:71:54:f2:a7:bc:95:18:84:a3:75:ae:7e:88:7f:94:3d:ca: da:45:73:7f:ab:21:3c:63:bc:0f:23:8b:cd:ef:34:4c:2b:b7: db:5d:15:e1:c2:88:37:5e:56:c9:48:08:76:87:64:a1:f1:1b: d1:cc:4b:72:49:3e:4b:6b:a7:16:f9:f1:bb:d4:6c:f9:03:fd: a7:f3:64:2c:4f:02:50:ba:bc:c3:b3:83:d9:0a:9b:e2:85:dd: ed:63:ad:8d:61:25:48:bb:93:01:78:3f:66:a7:5d:b7:7d:db: 03:bc:83:04:7e:7c:e2:58:46:db:19:e5:08:f5:a6:73:17:80: 8e:02:36:07:a8:db:c6:d9:69:e7:ce:5e:76:55:b6:2e:b7:dc: 23:de:b1:78:3d:5f:15:b1:b2:59:f6:ec:c6:2d:a4:8a:86:eb: 20:16:49:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZDMEIxMTAvBgNVBAUTKDE3OTQ4Qzg3NzlDNTlFNjVDQUZDRTJFRkRDQjFDQjUw OTExMzg0NEMwHhcNMjUwNzE4MjIwOTA4WhcNMjUwNzI1MjIwOTA4WjAYMRYwFAYD VQQDEw02ODdhYzYwNC02ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jY+xSrd2GmzYFd7EDoxOePZAbMarrMyPbHZ/8z0HPaDOYfagfxr/n2ec4qd RwFF/uhZU8WTaEc3b6cU6y8fqizzfOiEhAmGb5zQ2Tq6R8qnrFFbqA7Ws03ZgH+H WVA20Z4Z4Lx2IRn95uaBT7wg9iZ/pgNjnMa7egpvzsWBUQZSbX+qTN9QKtWTnmL+ 84cPfR7tUIwKQst882RuePFIX8eleAWatSCZ6q3o+KmG0NPppUad74JrPx80rRym OwacSHG23s0FxV+OeKSiGuulOP2BN0qVynt3C3FK07RSJan5Mrmus06VqJ5NR8gb Uz5laFjA5uAUC6UxFUZYpknIfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpzhKBl 6zM0mDBk1RjKw2g1dvu/MB8GA1UdIwQYMBaAFBeUjId5xZ5lyvzi79yxy1CRE4RM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkMwQi9CRUU3NTU4MDQ1 QjAxMUVCQTM2OTZENjNDNEY5QUUwMi9GNVNNaDNuRm5tWEtfT0x2M0xITFVKRVRo RXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y1U01oM25Gbm1YS19PTHYzTEhMVUpFVGhFdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkMwQi9CRUU3NTU4MDQ1QjAxMUVCQTM2OTZENjNDNEY5QUUwMi9GNVNNaDNuRm5t WEtfT0x2M0xITFVKRVRoRXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoLkR3Bn1h5DoFbjcir3ExMtY3Jl1TBwbKMzR0zuYIVkzDPDjfU+pd mqNMfUtHo8+W+rBYLbQ5kdTxgCp2z3zU8zVDXxNfkdrGiz6xoIq2pgxSMJwR7tRN 8muXcVTyp7yVGISjda5+iH+UPcraRXN/qyE8Y7wPI4vN7zRMK7fbXRXhwog3XlbJ SAh2h2Sh8RvRzEtyST5La6cW+fG71Gz5A/2n82QsTwJQurzDs4PZCpvihd3tY62N YSVIu5MBeD9mp123fdsDvIMEfnziWEbbGeUI9aZzF4COAjYHqNvG2Wnnzl52VbYu t9wj3rF4PV8VsbJZ9uzGLaSKhusgFkmV -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:20 2025 by rpki-client