$ rpki-client -vvf rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft File: Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft (raw, json) Hash identifier: Qg+PSYR+x6tQ7SuIyyQez4n413+Tg0OnxX12ZsbSs5I= Subject key identifier: F4:06:81:04:31:3A:0F:58:4F:35:08:BA:CC:DA:1F:DB:B5:C9:2A:92 Authority key identifier: 16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 Certificate issuer: /CN=A916223F/serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Certificate serial: 0CB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft Manifest number: 0CA9 Signing time: Sun 24 Aug 2025 18:09:53 +0000 Manifest this update: Sun 24 Aug 2025 18:09:52 +0000 Manifest next update: Sun 31 Aug 2025 18:09:52 +0000 Files and hashes: 1: Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl (hash: MXiGVZifnauCs0FDBFllKOyBpF1TsinazLYSdZ8fgzw=) 2: 80392340F95D11E9ABF14387C4F9AE02.roa (hash: HyFNgnjZWsveyr1t+EGS0rR5D+l88ZMNMytH+WMJ+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916223F, serialNumber=16EDC8956BC413C9C5021928B03BC850FC7E7247 Validity Not Before: Aug 24 18:09:52 2025 GMT Not After : Aug 31 18:09:52 2025 GMT Subject: CN=68ab5570-0155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:08:79:21:b3:61:a8:ea:65:dd:7f:65:c2:e2: fc:a5:e6:82:cb:c9:eb:37:55:b4:bf:93:1d:9f:f3: 97:f4:e8:f6:78:b5:d2:44:26:f3:77:6d:c6:2a:25: 80:ce:02:b2:1d:a9:84:c6:35:f1:5a:c7:ca:0f:61: 75:f6:c9:48:45:16:55:47:60:fa:46:ed:f1:88:7e: de:bc:a1:70:c6:c1:79:60:65:95:b1:e9:60:3a:63: 0f:b0:0d:77:72:58:4d:e6:7a:e6:87:dd:f3:b9:4e: 59:f1:d9:c1:86:09:9c:e7:a3:e7:16:a0:a1:94:02: c4:80:3d:9f:72:29:5e:1e:cc:4d:34:7e:bd:4e:36: e5:54:ca:c7:0e:54:6b:62:8c:26:38:82:51:4f:ca: f5:65:75:05:86:42:19:65:74:f8:45:59:47:a5:82: ee:4d:2c:a8:28:a9:d7:a2:78:b1:e9:80:03:46:59: 1c:c5:7f:e8:34:94:57:9c:33:57:29:90:74:59:99: ca:0f:30:7d:a3:61:ba:86:4d:9d:23:6c:c8:54:10: 9c:b8:c8:f8:29:87:85:77:3a:22:04:c3:0f:6d:f3: c9:12:f9:db:d1:e1:e7:e4:b2:6a:b9:d7:83:4e:bc: 25:f1:c5:95:83:d0:9e:fa:1d:22:c5:a2:fd:db:11: c0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:06:81:04:31:3A:0F:58:4F:35:08:BA:CC:DA:1F:DB:B5:C9:2A:92 X509v3 Authority Key Identifier: keyid:16:ED:C8:95:6B:C4:13:C9:C5:02:19:28:B0:3B:C8:50:FC:7E:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fu3IlWvEE8nFAhkosDvIUPx-ckc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916223F/4EBF27B6F95C11E9B6272285C4F9AE02/Fu3IlWvEE8nFAhkosDvIUPx-ckc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:79:cd:98:24:a2:3a:67:79:3c:a3:74:2e:f3:99:21:44:b4: f2:98:88:8b:f0:38:92:03:f8:e4:c1:a2:76:99:37:84:d2:76: b1:0d:b3:9e:99:12:6e:9a:66:ea:1e:1d:dd:6a:93:91:12:93: 8c:15:f6:6d:a5:79:9b:a3:5b:e9:7f:ad:aa:8c:cf:e9:07:21: 66:f7:f6:54:f4:33:af:bc:71:55:20:c0:cc:73:2b:dd:61:d3: 50:5d:e6:05:6c:ca:2f:d2:15:43:57:64:96:0a:03:05:f8:f5: 52:dd:90:3e:ef:7d:07:ef:49:df:36:51:1a:c1:65:97:08:bc: 03:66:5a:fd:12:88:df:a7:8b:86:99:dd:dc:5a:23:61:c9:14: 33:f3:62:3f:36:53:2a:b3:16:4b:ab:ef:e3:95:39:09:94:9d: fd:d7:a5:04:08:a2:8f:9d:0b:cc:29:af:85:f6:5b:d1:1b:71: 19:a4:76:18:77:54:4a:35:cd:07:d6:8c:be:20:53:b9:1a:5a: d8:77:ea:bc:e5:c5:95:a7:c5:9d:ac:74:64:4c:38:08:c0:89: 49:eb:f2:fc:46:8b:a9:04:f5:7a:01:d6:2c:fa:13:e7:4b:f5: af:1e:b8:c9:e3:2e:31:ae:27:bb:da:df:21:74:ff:a8:4d:b2: 0b:dd:da:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIyM0YxMTAvBgNVBAUTKDE2RURDODk1NkJDNDEzQzlDNTAyMTkyOEIwM0JDODUw RkM3RTcyNDcwHhcNMjUwODI0MTgwOTUyWhcNMjUwODMxMTgwOTUyWjAYMRYwFAYD VQQDEw02OGFiNTU3MC0wMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ah5IbNhqOpl3X9lwuL8peaCy8nrN1W0v5Mdn/OX9Oj2eLXSRCbzd23GKiWA zgKyHamExjXxWsfKD2F19slIRRZVR2D6Ru3xiH7evKFwxsF5YGWVselgOmMPsA13 clhN5nrmh93zuU5Z8dnBhgmc56PnFqChlALEgD2fcileHsxNNH69TjblVMrHDlRr YowmOIJRT8r1ZXUFhkIZZXT4RVlHpYLuTSyoKKnXonix6YADRlkcxX/oNJRXnDNX KZB0WZnKDzB9o2G6hk2dI2zIVBCcuMj4KYeFdzoiBMMPbfPJEvnb0eHn5LJqudeD Trwl8cWVg9Ce+h0ixaL92xHACQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQGgQQx Og9YTzUIuszaH9u1ySqSMB8GA1UdIwQYMBaAFBbtyJVrxBPJxQIZKLA7yFD8fnJH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjIzRi80RUJGMjdCNkY5 NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4bkZBaGtvc0R2SVVQeC1j a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z1M0lsV3ZFRThuRkFoa29zRHZJVVB4LWNrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjIzRi80RUJGMjdCNkY5NUMxMUU5QjYyNzIyODVDNEY5QUUwMi9GdTNJbFd2RUU4 bkZBaGtvc0R2SVVQeC1ja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUec2YJKI6Z3k8o3Qu85khRLTymIiL8DiSA/jkwaJ2mTeE0naxDbOe mRJummbqHh3dapOREpOMFfZtpXmbo1vpf62qjM/pByFm9/ZU9DOvvHFVIMDMcyvd YdNQXeYFbMov0hVDV2SWCgMF+PVS3ZA+730H70nfNlEawWWXCLwDZlr9Eojfp4uG md3cWiNhyRQz82I/NlMqsxZLq+/jlTkJlJ3916UECKKPnQvMKa+F9lvRG3EZpHYY d1RKNc0H1oy+IFO5GlrYd+q85cWVp8WdrHRkTDgIwIlJ6/L8RoupBPV6AdYs+hPn S/WvHrjJ4y4xrie72t8hdP+oTbIL3dqq -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:13 2025 by rpki-client