$ rpki-client -vvf rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/8i9IgBMws3F3JdASDS-xvdy6b6o.mft File: 8i9IgBMws3F3JdASDS-xvdy6b6o.mft (raw, json) Hash identifier: etnfbN2vXc4AihL/SIGI4fNSH0xgaFLex78p6ZRjLVg= Subject key identifier: 4F:39:7A:2F:4E:E7:89:52:C4:F4:6E:CB:D9:54:2B:41:A6:FE:66:8D Authority key identifier: F2:2F:48:80:13:30:B3:71:77:25:D0:12:0D:2F:B1:BD:DC:BA:6F:AA Certificate issuer: /CN=A911438E/serialNumber=F22F48801330B3717725D0120D2FB1BDDCBA6FAA Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8i9IgBMws3F3JdASDS-xvdy6b6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/8i9IgBMws3F3JdASDS-xvdy6b6o.mft Manifest number: 0228 Signing time: Sat 05 Jul 2025 02:29:52 +0000 Manifest this update: Sat 05 Jul 2025 02:29:51 +0000 Manifest next update: Sat 12 Jul 2025 02:29:51 +0000 Files and hashes: 1: 8i9IgBMws3F3JdASDS-xvdy6b6o.crl (hash: IbgyFjOcSXxvW6LL4i1AODzlJgkRGXmPQYlyDAZq3KQ=) 2: D7CD0314335311EDA051FC40C4F9AE02.roa (hash: qYwV/RlOGfoYaN3jbtvogs8Xp0DE7VcX4velw24rt/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/8i9IgBMws3F3JdASDS-xvdy6b6o.crl rsync://rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/8i9IgBMws3F3JdASDS-xvdy6b6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8i9IgBMws3F3JdASDS-xvdy6b6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911438E, serialNumber=F22F48801330B3717725D0120D2FB1BDDCBA6FAA Validity Not Before: Jul 5 02:29:51 2025 GMT Not After : Jul 12 02:29:51 2025 GMT Subject: CN=68688e20-a2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:16:31:35:67:d7:57:64:f9:68:5b:14:72: 3c:f8:77:c1:6b:f9:b3:99:9e:f9:12:93:76:3d:2b: a9:b7:79:7e:31:c6:71:f0:fa:13:d2:16:d7:29:d2: c3:6e:5b:27:f9:cf:30:f7:fe:68:28:93:2c:70:35: 1d:aa:67:4b:95:82:76:d6:80:01:46:cb:49:6b:18: a2:4e:69:67:a6:ba:05:46:f3:ef:46:d8:01:e5:1c: c0:b7:07:9b:fa:7b:01:32:0d:90:03:bd:93:0f:9a: 5b:45:ef:b4:10:03:08:7b:2c:7b:22:f3:80:f0:aa: 07:75:8f:57:ec:49:3c:4c:67:ec:b7:39:88:1e:b4: 5e:d1:31:07:82:f7:5e:91:ba:16:82:92:ff:63:54: 3f:bf:8a:a7:00:ab:aa:81:b9:ee:3a:26:25:fc:87: 67:a3:10:f2:c3:26:97:19:12:ff:71:d9:63:22:98: f2:6e:37:bb:55:3a:77:55:23:13:97:2e:ff:06:6a: 26:6b:f5:6f:96:f0:0b:6a:56:83:46:79:a7:43:7f: d9:18:a3:52:88:c6:6d:22:4e:28:30:c6:9b:74:3a: 4b:f2:c9:6d:eb:e5:01:ea:98:65:38:7f:2b:1a:35: 6a:01:0a:d3:1e:7e:8d:c8:86:33:9c:70:9f:87:9f: 2d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:39:7A:2F:4E:E7:89:52:C4:F4:6E:CB:D9:54:2B:41:A6:FE:66:8D X509v3 Authority Key Identifier: keyid:F2:2F:48:80:13:30:B3:71:77:25:D0:12:0D:2F:B1:BD:DC:BA:6F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/8i9IgBMws3F3JdASDS-xvdy6b6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8i9IgBMws3F3JdASDS-xvdy6b6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911438E/EF612860334F11EDBCD0C93BC4F9AE02/8i9IgBMws3F3JdASDS-xvdy6b6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ca:33:e4:3d:ca:a6:7d:fd:2d:8b:9b:86:ab:b1:f1:45:c5: 05:f8:60:12:b6:28:60:3c:04:ad:7d:7a:f1:50:da:2c:2d:55: fe:8c:b8:e6:26:fc:0c:2d:ab:35:ba:78:7a:ca:26:26:bc:41: 13:18:b7:bf:da:55:f2:03:b5:1c:fe:84:46:75:5a:6c:41:b4: 78:b1:85:0d:6c:3b:2f:b1:00:43:f6:87:93:25:48:3b:54:76: 55:41:31:f6:d5:4b:33:33:14:1a:92:54:d6:0b:d1:88:8a:b1: ed:44:60:a5:24:3f:cf:2e:8b:bb:d2:70:8a:57:e7:2b:c7:9b: 3a:98:4c:ae:2c:fd:8e:ab:09:30:00:38:f0:f1:79:20:08:0f: 07:12:a1:a3:c8:0e:f5:3f:6e:92:37:68:e3:5d:29:d4:53:bd: 1b:a5:99:b4:2c:8c:aa:53:51:5d:08:6f:d0:b4:4b:4b:19:5d: 4b:cc:13:dd:51:25:f2:ed:cb:c8:a2:b9:de:3a:be:d3:78:2d: 94:09:38:38:ab:ac:f3:e8:bd:ff:e4:fa:0d:73:50:c3:84:46: 54:b4:ae:07:e3:5d:e7:5a:7b:b8:39:8f:f5:a6:eb:9e:48:b2: 2a:d0:b8:42:9e:99:67:d2:cf:a1:d7:33:92:4f:68:c2:23:f1: 9a:d4:09:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQzOEUxMTAvBgNVBAUTKEYyMkY0ODgwMTMzMEIzNzE3NzI1RDAxMjBEMkZCMUJE RENCQTZGQUEwHhcNMjUwNzA1MDIyOTUxWhcNMjUwNzEyMDIyOTUxWjAYMRYwFAYD VQQDEw02ODY4OGUyMC1hMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttcWMTVn11dk+WhbFHI8+HfBa/mzmZ75EpN2PSupt3l+McZx8PoT0hbXKdLD blsn+c8w9/5oKJMscDUdqmdLlYJ21oABRstJaxiiTmlnproFRvPvRtgB5RzAtweb +nsBMg2QA72TD5pbRe+0EAMIeyx7IvOA8KoHdY9X7Ek8TGfstzmIHrRe0TEHgvde kboWgpL/Y1Q/v4qnAKuqgbnuOiYl/IdnoxDywyaXGRL/cdljIpjybje7VTp3VSMT ly7/Bmoma/VvlvALalaDRnmnQ3/ZGKNSiMZtIk4oMMabdDpL8slt6+UB6phlOH8r GjVqAQrTHn6NyIYznHCfh58tOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE85ei9O 54lSxPRuy9lUK0Gm/maNMB8GA1UdIwQYMBaAFPIvSIATMLNxdyXQEg0vsb3cum+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDM4RS9FRjYxMjg2MDMz NEYxMUVEQkNEMEM5M0JDNEY5QUUwMi84aTlJZ0JNd3MzRjNKZEFTRFMteHZkeTZi Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpOUlnQk13czNGM0pkQVNEUy14dmR5NmI2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDM4RS9FRjYxMjg2MDMzNEYxMUVEQkNEMEM5M0JDNEY5QUUwMi84aTlJZ0JNd3Mz RjNKZEFTRFMteHZkeTZiNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeyjPkPcqmff0ti5uGq7HxRcUF+GAStihgPAStfXrxUNosLVX+jLjm JvwMLas1unh6yiYmvEETGLe/2lXyA7Uc/oRGdVpsQbR4sYUNbDsvsQBD9oeTJUg7 VHZVQTH21UszMxQaklTWC9GIirHtRGClJD/PLou70nCKV+crx5s6mEyuLP2Oqwkw ADjw8XkgCA8HEqGjyA71P26SN2jjXSnUU70bpZm0LIyqU1FdCG/QtEtLGV1LzBPd USXy7cvIorneOr7TeC2UCTg4q6zz6L3/5PoNc1DDhEZUtK4H413nWnu4OY/1puue SLIq0LhCnpln0s+h1zOST2jCI/Ga1Am9 -----END CERTIFICATE-----Generated at Sat Jul 5 22:12:05 2025 by rpki-client