$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: fQHEx9Gjz+W7q2rvwCiQLy2aJsqhoJVDdWk+qpDh6XU= Subject key identifier: 82:B7:58:00:D6:62:72:69:E1:95:5F:D7:26:C3:99:99:FE:D6:D0:7B Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: B7 Signing time: Sun 29 Jun 2025 05:00:40 +0000 Manifest this update: Sun 29 Jun 2025 05:00:40 +0000 Manifest next update: Sun 06 Jul 2025 05:00:40 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: rkKh6o6G1CQzygu7/nuspuhM8WJZLhDs8+keeKbBD0c=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: K7xoMbrahTaRmzWPIHZWon2Vo6zWB816U+odiAFW2nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Jun 29 05:00:40 2025 GMT Not After : Jul 6 05:00:40 2025 GMT Subject: CN=6860c878-c10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:12:d0:6e:05:7c:40:b4:0b:8c:d3:88:56:aa: 98:67:aa:99:1a:55:f6:54:6b:e3:ac:21:ef:84:54: 51:66:ae:4c:c7:cd:8d:35:7a:8a:dd:39:06:2b:54: ee:6f:ce:43:db:4e:e3:0f:82:9b:ce:31:26:da:ff: e3:2b:0f:cc:9b:df:88:c5:c1:68:bf:46:b5:b7:97: 82:ba:1d:6c:74:16:2a:a3:f7:ed:4f:2e:73:80:b3: 20:af:33:14:39:59:bd:22:04:e4:2e:b3:23:0c:12: 94:c8:58:2b:26:0f:e2:6d:7a:f2:2a:b1:31:c1:0a: c9:5d:f5:5d:f2:ba:5f:4e:93:cd:66:ff:14:f0:43: 8b:f1:36:1c:c6:2c:5b:13:66:d9:40:79:43:4d:18: f0:2c:f6:63:c1:eb:28:f4:f8:8f:47:d8:8c:84:97: 61:75:2f:c5:8a:9e:70:8f:e5:bc:b0:37:a3:69:0f: 70:88:84:85:1b:55:72:85:10:7e:01:83:c6:66:9d: 8e:83:91:34:5f:fa:5d:3f:69:54:61:83:86:80:a6: 2c:30:73:f7:00:d3:b7:d1:3d:b6:71:d3:c6:41:53: 94:08:a9:42:13:7e:ff:22:99:39:6a:4d:1a:73:18: b6:a7:46:6b:a8:65:aa:72:5d:2e:75:59:0d:7e:72: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B7:58:00:D6:62:72:69:E1:95:5F:D7:26:C3:99:99:FE:D6:D0:7B X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b6:8c:94:ee:ac:4f:3a:99:5d:48:b2:a6:d0:21:9d:9f:45: b0:c1:e1:06:6c:31:2a:58:3b:ed:75:63:d5:a3:bd:05:64:7e: be:93:1c:4c:a1:e8:3d:73:7f:d3:85:18:ed:ce:0a:17:4c:57: 1e:24:62:56:7a:ed:30:26:7f:20:ca:30:34:72:26:89:cc:51: 4d:f3:7d:9b:00:0d:47:06:3f:76:14:8c:24:9b:8b:4a:f8:ea: e8:21:72:e0:1b:d1:cd:6e:27:6a:f1:31:b8:ae:44:0c:86:91: 2e:21:8e:89:69:22:99:21:82:a8:4c:f0:ce:a8:56:53:b2:b3: 4e:ec:d6:28:be:a6:fa:3e:3b:bd:9d:f1:6a:6a:8c:1e:b8:92: 2d:57:d2:da:1b:ca:c3:f1:2d:e2:82:89:58:2d:a9:c0:1b:6e: ee:cf:7e:f9:f1:c5:8f:d7:0b:16:e0:e3:42:79:7a:4f:02:d7: bb:e8:8e:cd:c4:ee:8b:82:fb:e2:5c:af:98:09:8f:b8:41:51: a4:32:5d:36:b6:96:0b:30:04:fb:72:76:15:c4:b7:8c:66:53: 0d:e7:70:4f:ac:02:8f:54:3e:6a:b2:d2:5d:cc:da:14:0d:4a: be:6b:73:6e:d9:55:63:ea:6c:78:e0:5c:05:78:91:63:a2:10: b6:3d:74:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjUwNjI5MDUwMDQwWhcNMjUwNzA2MDUwMDQwWjAYMRYwFAYD VQQDEw02ODYwYzg3OC1jMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xLQbgV8QLQLjNOIVqqYZ6qZGlX2VGvjrCHvhFRRZq5Mx82NNXqK3TkGK1Tu b85D207jD4KbzjEm2v/jKw/Mm9+IxcFov0a1t5eCuh1sdBYqo/ftTy5zgLMgrzMU OVm9IgTkLrMjDBKUyFgrJg/ibXryKrExwQrJXfVd8rpfTpPNZv8U8EOL8TYcxixb E2bZQHlDTRjwLPZjweso9PiPR9iMhJdhdS/Fip5wj+W8sDejaQ9wiISFG1VyhRB+ AYPGZp2Og5E0X/pdP2lUYYOGgKYsMHP3ANO30T22cdPGQVOUCKlCE37/Ipk5ak0a cxi2p0ZrqGWqcl0udVkNfnJJmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK3WADW YnJp4ZVf1ybDmZn+1tB7MB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGtoyU7qxPOpldSLKm0CGdn0WwweEGbDEqWDvtdWPVo70FZH6+kxxM oeg9c3/ThRjtzgoXTFceJGJWeu0wJn8gyjA0ciaJzFFN832bAA1HBj92FIwkm4tK +OroIXLgG9HNbidq8TG4rkQMhpEuIY6JaSKZIYKoTPDOqFZTsrNO7NYovqb6Pju9 nfFqaoweuJItV9LaG8rD8S3igolYLanAG27uz3758cWP1wsW4ONCeXpPAte76I7N xO6LgvviXK+YCY+4QVGkMl02tpYLMAT7cnYVxLeMZlMN53BPrAKPVD5qstJdzNoU DUq+a3Nu2VVj6mx44FwFeJFjohC2PXSG -----END CERTIFICATE-----Generated at Sun Jun 29 23:32:00 2025 by rpki-client