$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft File: 8q-Rix8UisrksDlFAoTeSQ15Dlk.mft (raw, json) Hash identifier: flLD5b7xhnskpsrR+IIhSfhEYfQfrJJdFXaXZdbGmiI= Subject key identifier: 52:34:E6:FA:65:BA:89:F9:C8:E9:D6:4A:EB:8E:99:59:DF:0F:86:32 Authority key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 Certificate issuer: /CN=A9114EF6/serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft Manifest number: 58 Signing time: Tue 01 Jul 2025 07:56:16 +0000 Manifest this update: Tue 01 Jul 2025 07:56:16 +0000 Manifest next update: Tue 08 Jul 2025 07:56:16 +0000 Files and hashes: 1: 8q-Rix8UisrksDlFAoTeSQ15Dlk.crl (hash: LYsBipVFMiwPldnT+zMw35Wa8+V9Q8+flKHMxgALnGU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Validity Not Before: Jul 1 07:56:16 2025 GMT Not After : Jul 8 07:56:16 2025 GMT Subject: CN=686394a0-762e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:25:ef:f5:4f:dd:70:a8:38:1f:9f:90:ca:d6: fa:08:91:63:77:8c:e6:7d:c9:49:2e:0b:f4:29:d8: 18:a7:11:23:32:4c:bc:73:0c:33:1b:fb:72:bd:8c: 6f:88:cf:1e:76:e6:6b:b7:17:30:ff:33:25:88:ff: 9d:b3:f8:0d:86:be:88:c7:be:dd:af:7f:0f:1f:29: 8a:cd:fc:92:85:0a:70:62:d2:bc:e2:12:39:c5:42: 21:61:36:0d:ee:33:03:12:a1:27:72:ce:c4:51:d5: 38:19:cb:7e:f9:ea:5a:b4:27:b6:70:0f:f0:a8:44: 55:27:37:79:d1:36:7b:35:43:cb:46:bd:c0:1a:b5: c3:e3:38:94:02:ce:b8:bc:a5:f9:06:b9:8b:61:20: c8:7f:a6:ca:96:cc:54:44:da:46:a6:23:13:67:73: 10:bb:07:37:be:b7:00:85:a4:70:4f:f2:cf:59:af: 98:1a:04:37:bd:7e:a3:4f:74:05:85:ab:eb:88:e1: 16:3c:b3:3a:5e:46:0e:83:e2:5b:7c:21:4f:14:a3: a3:b5:30:9a:ae:a4:97:f2:bd:84:8f:ec:30:48:b9: 9a:1c:97:ee:9b:47:58:2b:1f:2d:2b:6a:4f:c5:ad: a7:89:9a:18:a8:af:61:32:14:89:44:37:3f:9e:23: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:34:E6:FA:65:BA:89:F9:C8:E9:D6:4A:EB:8E:99:59:DF:0F:86:32 X509v3 Authority Key Identifier: keyid:F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:57:0d:61:92:8d:74:84:93:13:26:20:3f:49:26:a6:05:14: 56:c3:5d:82:15:8f:31:63:fb:fe:ba:fc:cb:ec:76:16:ff:26: 16:43:43:7a:15:e9:b8:fa:ac:b8:5f:80:68:15:b0:c3:6e:69: 40:1f:d2:60:19:ae:34:2d:aa:88:5c:21:7f:fc:ac:bb:8b:19: f8:26:32:de:06:de:3b:9b:2f:dc:92:14:60:11:40:6a:78:62: 31:58:a0:d8:4e:05:fa:08:86:5c:be:50:86:e0:93:84:6a:63: 34:e7:0e:be:1d:ba:5e:d9:8e:61:e0:e8:71:05:b2:6e:86:ec: 7f:d2:90:a4:ce:e7:f5:1e:d7:ff:2e:66:9c:e5:fc:05:01:80: 3f:0b:11:55:4f:db:90:40:20:44:de:dc:57:15:0f:25:1d:35: 7f:de:a6:1b:e6:e2:74:7e:a6:da:6c:34:57:b6:64:c4:41:63: 24:67:d9:4a:a1:c6:58:cd:47:a3:f2:bf:a6:d4:d1:ab:83:c9: 0a:f1:1a:cf:e0:e6:d7:7e:6b:b4:78:e3:68:e1:15:3f:e4:10: 02:60:ec:ff:83:33:c4:13:d3:d2:7b:75:3b:32:d9:4c:c6:aa: 11:96:de:d8:c6:ae:2f:1d:3f:0f:02:d4:6d:e1:d6:6e:a1:14: db:dc:ae:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoRjJBRjkxOEIxRjE0OEFDQUU0QjAzOTQ1MDI4NERFNDkw RDc5MEU1OTAeFw0yNTA3MDEwNzU2MTZaFw0yNTA3MDgwNzU2MTZaMBgxFjAUBgNV BAMTDTY4NjM5NGEwLTc2MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkJe/1T91wqDgfn5DK1voIkWN3jOZ9yUkuC/Qp2BinESMyTLxzDDMb+3K9jG+I zx525mu3FzD/MyWI/52z+A2GvojHvt2vfw8fKYrN/JKFCnBi0rziEjnFQiFhNg3u MwMSoSdyzsRR1TgZy3756lq0J7ZwD/CoRFUnN3nRNns1Q8tGvcAatcPjOJQCzri8 pfkGuYthIMh/psqWzFRE2kamIxNncxC7Bze+twCFpHBP8s9Zr5gaBDe9fqNPdAWF q+uI4RY8szpeRg6D4lt8IU8Uo6O1MJqupJfyvYSP7DBIuZocl+6bR1grHy0rak/F raeJmhior2EyFIlENz+eI9HNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUjTm+mW6 ifnI6dZK646ZWd8PhjIwHwYDVR0jBBgwFoAU8q+Rix8UisrksDlFAoTeSQ15Dlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2Lzk2NDYzNDU4RDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNya3NEbEZBb1RlU1ExNURs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHEtUml4OFVpc3Jrc0RsRkFvVGVTUTE1RGxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2Lzk2NDYzNDU4RDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNy a3NEbEZBb1RlU1ExNURsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAItXDWGSjXSEkxMmID9JJqYFFFbDXYIVjzFj+/66/Mvsdhb/JhZDQ3oV 6bj6rLhfgGgVsMNuaUAf0mAZrjQtqohcIX/8rLuLGfgmMt4G3jubL9ySFGARQGp4 YjFYoNhOBfoIhly+UIbgk4RqYzTnDr4dul7ZjmHg6HEFsm6G7H/SkKTO5/Ue1/8u Zpzl/AUBgD8LEVVP25BAIETe3FcVDyUdNX/ephvm4nR+ptpsNFe2ZMRBYyRn2Uqh xljNR6Pyv6bU0auDyQrxGs/g5td+a7R442jhFT/kEAJg7P+DM8QT09J7dTsy2UzG qhGW3tjGri8dPw8C1G3h1m6hFNvcru4= -----END CERTIFICATE-----Generated at Thu Jul 3 01:13:47 2025 by rpki-client