$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: DTkWs2uVf+nWsNUJwzG/Z+r4cGUi7O3Twdd1RiSquTo= Subject key identifier: 2A:D1:B9:5E:7A:64:C3:B6:A5:E0:C1:95:18:87:A0:90:08:80:01:36 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: 9C Signing time: Wed 02 Jul 2025 14:23:10 +0000 Manifest this update: Wed 02 Jul 2025 14:23:10 +0000 Manifest next update: Wed 09 Jul 2025 14:23:10 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: brfJXdbeh95/nY1U1TkgTR0qZlR6eObebwQ+FfecxpE=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Jul 2 14:23:10 2025 GMT Not After : Jul 9 14:23:10 2025 GMT Subject: CN=686540ce-79ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:70:eb:a2:ff:3a:00:30:c2:72:2e:eb:fc: 67:90:78:22:35:09:4d:dc:d4:e5:85:74:e3:b1:10: 85:09:50:27:f1:b3:c8:2d:d6:26:c1:c4:0e:1c:15: 1b:39:f4:80:49:89:7d:8f:bf:1b:ad:bd:c8:99:99: 7e:8a:c6:c0:7c:0a:16:5c:4c:af:96:2f:2c:26:68: 55:c0:bd:22:ea:73:8a:de:12:52:83:ca:14:b9:4a: 2b:e9:bc:f0:52:57:5f:eb:d1:9b:51:40:f0:4b:de: fd:6e:66:b8:38:b4:9b:e3:e9:53:d9:8b:80:37:d0: 7f:9c:5c:19:d5:78:0e:a3:a3:d8:85:53:cb:42:3f: 29:38:4c:de:cb:30:94:87:ce:c6:fc:34:e9:cf:fe: 65:39:4d:6b:3f:5e:3c:e2:f4:11:0a:0a:47:f3:68: 71:54:5a:8d:54:d0:bf:92:d7:c6:5e:8f:15:38:97: d5:ad:69:a4:99:2c:49:04:78:4f:44:b0:ed:7c:e1: e3:45:83:fd:4e:6b:c6:d4:37:23:fb:33:42:f6:9e: 99:9a:36:f3:62:ed:f3:10:ca:66:3c:4b:5b:66:b3: fd:3f:b1:22:07:d7:24:f5:3e:87:92:0f:a7:3d:89: 41:60:bc:fe:6c:ca:a6:7a:c5:05:3a:15:17:f6:c5: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D1:B9:5E:7A:64:C3:B6:A5:E0:C1:95:18:87:A0:90:08:80:01:36 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:88:b4:64:06:db:8e:47:b9:b0:7e:e3:c1:a1:f2:ce:7c:44: 44:b5:98:75:29:ea:8b:d6:82:45:4e:7b:45:3c:cf:0a:fd:f7: 53:55:9a:00:d4:76:58:e3:ff:16:f2:a5:1d:6f:a3:4d:8b:d6: 83:e9:7b:34:15:ac:15:4c:49:dc:8e:61:7b:8f:16:7e:73:48: 02:a3:9f:35:f5:fb:0c:66:e0:69:a2:0f:36:7f:a6:e6:ad:c5: 78:e5:69:3e:a6:24:3a:fc:e7:c4:71:f6:d5:7f:87:c0:9b:34: b7:0d:30:e0:23:84:d9:c8:48:b4:68:f0:2c:b4:5d:72:b1:1e: 9b:b3:81:1d:35:9b:71:97:49:4b:3c:3a:3f:d9:67:ff:fa:44: fc:82:a3:d5:6d:12:a9:7b:e8:74:e0:c6:3e:80:2c:5a:04:fc: 04:a8:bc:2b:c7:77:5a:b6:5e:da:07:a9:cc:ac:ac:10:82:7c: 4e:f1:52:27:15:5b:0f:6e:3f:8b:fc:ac:70:89:6a:c5:c5:29: e6:07:d3:c0:6d:e5:84:8d:72:c6:8b:05:05:85:06:7c:ff:8f: 35:fb:8c:e0:6a:cf:ac:e4:2d:91:d3:30:de:23:9c:20:e1:85: bd:c9:ba:80:0a:3b:95:0a:c0:af:82:33:76:91:cd:99:5a:0e: 21:8e:10:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjUwNzAyMTQyMzEwWhcNMjUwNzA5MTQyMzEwWjAYMRYwFAYD VQQDEw02ODY1NDBjZS03OWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfpw66L/OgAwwnIu6/xnkHgiNQlN3NTlhXTjsRCFCVAn8bPILdYmwcQOHBUb OfSASYl9j78brb3ImZl+isbAfAoWXEyvli8sJmhVwL0i6nOK3hJSg8oUuUor6bzw Uldf69GbUUDwS979bma4OLSb4+lT2YuAN9B/nFwZ1XgOo6PYhVPLQj8pOEzeyzCU h87G/DTpz/5lOU1rP1484vQRCgpH82hxVFqNVNC/ktfGXo8VOJfVrWmkmSxJBHhP RLDtfOHjRYP9TmvG1Dcj+zNC9p6ZmjbzYu3zEMpmPEtbZrP9P7EiB9ck9T6Hkg+n PYlBYLz+bMqmesUFOhUX9sXcvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrRuV56 ZMO2peDBlRiHoJAIgAE2MB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHiLRkBtuOR7mwfuPBofLOfEREtZh1KeqL1oJFTntFPM8K/fdTVZoA 1HZY4/8W8qUdb6NNi9aD6Xs0FawVTEncjmF7jxZ+c0gCo5819fsMZuBpog82f6bm rcV45Wk+piQ6/OfEcfbVf4fAmzS3DTDgI4TZyEi0aPAstF1ysR6bs4EdNZtxl0lL PDo/2Wf/+kT8gqPVbRKpe+h04MY+gCxaBPwEqLwrx3datl7aB6nMrKwQgnxO8VIn FVsPbj+L/KxwiWrFxSnmB9PAbeWEjXLGiwUFhQZ8/481+4zgas+s5C2R0zDeI5wg 4YW9ybqACjuVCsCvgjN2kc2ZWg4hjhAY -----END CERTIFICATE-----Generated at Thu Jul 3 06:52:28 2025 by rpki-client