$ rpki-client -vvf rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft File: 0fxphnCiQetFTVXFZ6paY1rwoGM.mft (raw, json) Hash identifier: zaZHofgvXDuOinWWcHuGz8n4uNK7FpuwK4WAVMweE78= Subject key identifier: 01:57:EC:48:1F:E8:EE:47:90:92:21:13:DF:75:63:0F:6B:4B:8C:09 Authority key identifier: D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 Certificate issuer: /CN=A918681B/serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Certificate serial: 0518 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft Manifest number: 050C Signing time: Sat 19 Jul 2025 00:02:12 +0000 Manifest this update: Sat 19 Jul 2025 00:02:11 +0000 Manifest next update: Sat 26 Jul 2025 00:02:11 +0000 Files and hashes: 1: 0fxphnCiQetFTVXFZ6paY1rwoGM.crl (hash: yj1T9LeaMzKdIgB7ISaPopp4TAAy5aUWhb6JEehvayA=) 2: 5D4D3E261A3E11ECB42D0B80C4F9AE02.roa (hash: Am0tyv0SW/vQBy5lGTGy4TYfxwQ9Lc6UrqhzC51ywy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1304 (0x518) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918681B, serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063 Validity Not Before: Jul 19 00:02:11 2025 GMT Not After : Jul 26 00:02:11 2025 GMT Subject: CN=687ae084-a4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:28:3a:6b:32:44:c1:7f:77:8e:8b:76:c8: ad:f8:c2:26:b1:a8:c0:83:8d:0b:7e:56:0d:16:2c: 8b:61:86:a4:4b:51:5f:43:55:52:2f:b9:04:84:2b: 16:ab:d8:ca:f3:f1:88:bd:1d:25:c2:a6:a8:7a:09: f8:4f:17:28:60:1b:97:36:3b:50:fc:3c:21:18:15: 9c:95:21:01:3b:24:f3:35:69:10:1b:ef:1e:61:4b: 0f:30:de:25:8d:77:24:92:7a:f2:da:85:5c:72:ea: ba:54:99:d6:5e:70:1f:db:49:09:28:40:7f:00:41: a5:74:fb:b3:c1:a9:d6:94:e6:2f:04:0e:ff:5b:9a: 15:5a:11:2a:b4:4f:e2:20:fc:29:c9:b4:0f:51:34: 64:10:18:9b:ff:5f:3e:29:d5:44:ac:93:5b:fe:1a: 24:a2:01:76:2c:9f:e4:07:69:52:55:4e:55:ff:6d: 1e:99:b5:7e:e4:69:de:63:13:ac:be:68:9b:1f:71: 04:c3:5e:bc:2a:02:ec:82:60:c4:4a:8c:93:8f:28: 94:78:b8:57:0f:5a:89:bb:8c:05:82:a7:90:57:92: 2c:c8:7c:e3:ad:4c:fb:aa:89:79:ea:27:1e:8f:8c: 5f:6e:a8:d5:23:75:a3:ca:12:eb:3b:f6:00:76:c5: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:57:EC:48:1F:E8:EE:47:90:92:21:13:DF:75:63:0F:6B:4B:8C:09 X509v3 Authority Key Identifier: keyid:D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:70:f2:bf:2e:90:41:80:b6:63:44:90:65:4e:d2:7d:4f:6f: 81:ce:dc:58:1c:28:01:0b:bf:2d:53:c9:18:6a:60:51:13:bc: 73:da:c1:1a:66:fc:7a:d7:f9:32:de:8b:88:0a:ec:04:0d:ad: 1e:84:c9:ee:82:3e:32:bc:36:b9:0c:c6:20:99:6a:5d:7c:ef: 5d:b1:d4:32:25:6c:66:1b:9a:0e:5c:ae:96:49:36:ad:f0:cf: ff:82:8d:55:8b:6a:34:e7:96:b1:24:33:d9:90:89:8b:25:91: b3:5a:5f:cd:4c:9a:df:5f:a7:d9:46:71:72:f3:7c:9f:25:a4: 02:98:b5:22:e6:2f:3b:e6:b6:0d:15:fe:29:de:96:56:cd:b0: 0d:a6:db:36:1e:d7:7b:ef:a8:3e:88:b7:ed:d9:9c:3e:77:94: 93:90:2d:e1:f6:87:a8:2b:cd:70:3b:d9:67:03:65:e3:a2:4a: 98:cf:3a:96:7b:2c:d4:7a:3b:fa:54:db:e2:90:11:46:58:5e: 67:7f:50:6a:f6:a1:5c:08:82:71:ee:06:40:13:fb:ed:16:21: 82:1c:3c:c9:1d:03:8d:07:c9:37:fa:d5:4d:57:99:28:44:c4: 8f:9e:46:b2:78:00:b7:1a:f0:62:e3:19:e2:45:2b:b7:3c:d8: ba:30:85:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4MUIxMTAvBgNVBAUTKEQxRkM2OTg2NzBBMjQxRUI0NTRENTVDNTY3QUE1QTYz NUFGMEEwNjMwHhcNMjUwNzE5MDAwMjExWhcNMjUwNzI2MDAwMjExWjAYMRYwFAYD VQQDEw02ODdhZTA4NC1hNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg8oOmsyRMF/d46Ldsit+MImsajAg40LflYNFiyLYYakS1FfQ1VSL7kEhCsW q9jK8/GIvR0lwqaoegn4TxcoYBuXNjtQ/DwhGBWclSEBOyTzNWkQG+8eYUsPMN4l jXckknry2oVccuq6VJnWXnAf20kJKEB/AEGldPuzwanWlOYvBA7/W5oVWhEqtE/i IPwpybQPUTRkEBib/18+KdVErJNb/hokogF2LJ/kB2lSVU5V/20embV+5GneYxOs vmibH3EEw168KgLsgmDESoyTjyiUeLhXD1qJu4wFgqeQV5IsyHzjrUz7qol56ice j4xfbqjVI3WjyhLrO/YAdsVANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFX7Egf 6O5HkJIhE991Yw9rS4wJMB8GA1UdIwQYMBaAFNH8aYZwokHrRU1VxWeqWmNa8KBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjgxQi9DNDNGQkQwNjFB M0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFldEZUVlhGWjZwYVkxcndv R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmeHBobkNpUWV0RlRWWEZaNnBhWTFyd29HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjgxQi9DNDNGQkQwNjFBM0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFl dEZUVlhGWjZwYVkxcndvR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBncPK/LpBBgLZjRJBlTtJ9T2+BztxYHCgBC78tU8kYamBRE7xz2sEa Zvx61/ky3ouICuwEDa0ehMnugj4yvDa5DMYgmWpdfO9dsdQyJWxmG5oOXK6WSTat 8M//go1Vi2o055axJDPZkImLJZGzWl/NTJrfX6fZRnFy83yfJaQCmLUi5i875rYN Ff4p3pZWzbANpts2Htd776g+iLft2Zw+d5STkC3h9oeoK81wO9lnA2XjokqYzzqW eyzUejv6VNvikBFGWF5nf1Bq9qFcCIJx7gZAE/vtFiGCHDzJHQONB8k3+tVNV5ko RMSPnkayeAC3GvBi4xniRSu3PNi6MIX+ -----END CERTIFICATE-----Generated at Sun Jul 20 03:29:05 2025 by rpki-client