$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json) Hash identifier: L94OVJnbqGqz0JMKODlv0nbdGlnPfJ6ZIVph0djsXPo= Subject key identifier: 7A:3C:7D:6C:2B:6B:21:78:C7:B2:F1:22:AD:B0:F1:90:86:FD:0F:B3 Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft Manifest number: 01D0 Signing time: Sat 31 May 2025 02:36:35 +0000 Manifest this update: Sat 31 May 2025 02:36:34 +0000 Manifest next update: Sat 07 Jun 2025 02:36:34 +0000 Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: aDcAZ6kO2KlJQsJpGwody6XyDLn1ZNoqv7lDX9+zjBY=) 2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: ZvVWR24fiTgTKL1AgxjjU+8hvOzH690FD/ftf9Pub2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159 Validity Not Before: May 31 02:36:34 2025 GMT Not After : Jun 7 02:36:34 2025 GMT Subject: CN=683a6b33-9888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:af:74:0c:c3:ff:cc:bc:fc:f3:db:5a:a2:79: 19:43:0e:c7:11:c1:c8:25:4f:65:db:12:4a:41:a7: 2d:1a:cc:db:77:6b:4d:8a:8a:31:44:93:0e:c5:36: c8:fb:2e:73:85:4c:94:ca:a6:64:62:e1:b7:9b:c4: 62:5f:2b:04:04:44:87:e9:33:a4:19:f4:b7:73:be: 29:fd:49:60:a9:95:91:b9:43:3b:17:56:ce:96:91: 99:05:99:02:62:0f:4f:3c:08:cf:9e:ab:73:83:d6: 10:34:01:19:ab:d0:88:6b:f6:ca:dc:b2:af:db:85: b1:95:6d:86:9a:13:37:3c:8f:b0:e6:10:db:6b:a8: 49:35:a1:9c:9f:63:56:49:ce:bb:05:4d:c7:54:3e: ba:11:1c:1b:58:dd:68:62:12:bd:9b:25:05:f4:b3: 3e:f1:b6:a1:b2:7b:eb:b1:29:03:55:f9:29:bd:d2: 85:cf:36:0e:8c:0b:3b:f3:d8:d4:28:5f:86:cf:c2: bf:57:f9:40:47:31:ba:03:46:78:87:aa:72:38:e5: 9e:3e:7e:e7:31:a3:fc:c9:91:a3:74:42:8f:a6:d4: b1:c2:5a:6c:80:10:23:3f:4a:42:74:08:10:5e:d7: 1e:92:f3:0e:24:ca:68:3c:b2:17:11:98:6e:c6:03: bc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3C:7D:6C:2B:6B:21:78:C7:B2:F1:22:AD:B0:F1:90:86:FD:0F:B3 X509v3 Authority Key Identifier: keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:49:9b:24:17:0a:12:12:97:95:19:32:6e:7a:de:90:f9:3a: f3:8f:9b:df:78:f0:23:90:b3:8f:7f:a7:4c:5d:49:69:7d:ca: 1f:20:54:9c:0b:e3:c0:e6:43:e6:5c:04:9f:f6:57:79:be:7c: ac:51:94:c1:ce:7e:d9:80:2c:dd:19:1c:5a:6b:5a:95:e8:f7: 0a:86:4e:52:df:f3:f1:f7:4a:bc:8a:81:3c:3f:a1:56:37:f5: 08:8e:03:5d:fb:ff:d6:4f:1c:bb:d5:5e:54:01:28:7d:9f:ec: 81:b9:69:02:a0:27:39:11:b0:50:09:74:93:85:9b:75:7c:48: 32:a1:dc:ba:50:4e:d5:a9:d2:8d:78:ba:62:b8:a3:31:fd:67: 58:f0:fb:a0:36:31:07:da:3b:65:05:55:8e:ef:3d:6b:46:99: bf:9e:36:a0:eb:ea:e1:3d:d8:2b:39:75:3c:0d:be:ea:2b:f1: 0b:d0:f3:4c:49:b4:0b:0b:ea:89:e4:98:0f:7d:31:7d:b3:6b: a8:93:65:b9:d8:8a:40:58:87:2e:c4:80:9d:16:21:de:3b:d9: bd:a1:cc:7c:d5:9b:6a:49:5c:e2:0c:e1:14:64:c9:98:c6:dc: 9e:96:f7:5f:f8:6b:12:0a:41:ed:b7:73:34:74:f0:bc:0a:fd: 7a:be:5c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB QkZFM0YxNTkwHhcNMjUwNTMxMDIzNjM0WhcNMjUwNjA3MDIzNjM0WjAYMRYwFAYD VQQDEw02ODNhNmIzMy05ODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr690DMP/zLz889taonkZQw7HEcHIJU9l2xJKQactGszbd2tNiooxRJMOxTbI +y5zhUyUyqZkYuG3m8RiXysEBESH6TOkGfS3c74p/UlgqZWRuUM7F1bOlpGZBZkC Yg9PPAjPnqtzg9YQNAEZq9CIa/bK3LKv24WxlW2GmhM3PI+w5hDba6hJNaGcn2NW Sc67BU3HVD66ERwbWN1oYhK9myUF9LM+8bahsnvrsSkDVfkpvdKFzzYOjAs789jU KF+Gz8K/V/lARzG6A0Z4h6pyOOWePn7nMaP8yZGjdEKPptSxwlpsgBAjP0pCdAgQ XtcekvMOJMpoPLIXEZhuxgO8DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHo8fWwr ayF4x7LxIq2w8ZCG/Q+zMB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4 VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwSZskFwoSEpeVGTJuet6Q+Trzj5vfePAjkLOPf6dMXUlpfcofIFSc C+PA5kPmXASf9ld5vnysUZTBzn7ZgCzdGRxaa1qV6PcKhk5S3/Px90q8ioE8P6FW N/UIjgNd+//WTxy71V5UASh9n+yBuWkCoCc5EbBQCXSThZt1fEgyody6UE7VqdKN eLpiuKMx/WdY8PugNjEH2jtlBVWO7z1rRpm/njag6+rhPdgrOXU8Db7qK/EL0PNM SbQLC+qJ5JgPfTF9s2uok2W52IpAWIcuxICdFiHeO9m9ocx81ZtqSVziDOEUZMmY xtyelvdf+GsSCkHtt3M0dPC8Cv16vlw3 -----END CERTIFICATE-----Generated at Sat May 31 16:43:00 2025 by rpki-client