$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json) Hash identifier: /T4a8JrOWtJO02+5fArXsk0RxErH2qquuL6NFUoVRdQ= Subject key identifier: 7E:87:6A:F4:94:B4:19:06:CE:C3:A6:EB:1C:2E:16:04:E7:AB:ED:33 Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Certificate serial: 078F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft Manifest number: 0783 Signing time: Mon 30 Jun 2025 21:41:07 +0000 Manifest this update: Mon 30 Jun 2025 21:41:07 +0000 Manifest next update: Mon 07 Jul 2025 21:41:07 +0000 Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: EDMuapLkjrS/J+7HOiTHqScT/zf4eiyE0x0TmczCONo=) 2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: 4ZdvboJ8mrbqq75dMjpcRNVXA0/Wmpp30CU0dXWt/yQ=) 3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: nma4xkXXDMJG7QciaymwPc3dJsJxzYlJjEDf7RTo8RE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1935 (0x78f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Validity Not Before: Jun 30 21:41:07 2025 GMT Not After : Jul 7 21:41:07 2025 GMT Subject: CN=68630473-b3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:b5:d8:5a:f1:7c:3d:3f:31:b6:fe:6c:dd: ae:59:9c:79:af:5f:81:70:f3:9b:51:4b:ac:92:51: 00:fc:75:da:9f:af:aa:60:e0:25:65:02:41:ba:fc: 6c:1c:c1:71:68:5e:5a:77:df:2b:1c:9f:cd:f2:d8: f1:10:7e:fe:10:d0:83:e3:3a:47:2e:cf:93:12:36: 11:99:f3:d5:00:09:eb:bc:3c:fe:99:74:70:6d:35: 04:36:c0:51:04:a8:4a:da:cc:da:0d:49:0f:e5:43: 8e:d9:62:f4:0d:29:9a:27:f7:23:62:76:12:44:48: a6:ae:a6:29:00:82:4c:63:b2:12:6b:5d:34:5b:6d: 5e:12:5b:2d:64:a5:a2:b9:37:bc:f2:02:84:92:c1: 9a:cb:ec:cd:8f:d9:38:f7:02:94:5c:0b:fa:8c:49: 0a:c5:20:28:6e:f0:ea:b4:31:80:00:9a:d6:1b:b7: cb:d8:0b:e7:21:01:c8:74:b8:d2:93:b4:41:ec:eb: c6:3f:72:90:ef:d7:4b:ef:85:5e:9d:6d:58:b4:8d: 9f:55:84:03:93:62:e5:77:76:2e:9f:65:a0:ee:6f: c4:e4:29:d8:32:6c:3f:26:88:19:01:a3:47:5d:44: 7a:1d:80:03:5d:6d:3c:4c:34:81:c6:61:66:30:81: 87:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:87:6A:F4:94:B4:19:06:CE:C3:A6:EB:1C:2E:16:04:E7:AB:ED:33 X509v3 Authority Key Identifier: keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:84:6e:08:aa:b4:5e:37:84:fd:1c:51:96:8d:3e:32:25:f9: bd:9e:64:15:c8:d5:b4:e3:d8:0d:41:96:79:94:16:e6:12:e7: 5e:7c:4a:bf:f9:a7:35:83:ab:15:aa:21:44:44:ac:17:f6:94: f3:52:bf:ad:9b:91:d1:37:0c:c3:19:c4:95:c4:a9:68:35:15: 12:a2:2e:49:98:f4:07:07:1c:43:60:45:39:d7:d7:c4:01:2c: 23:2f:3d:4d:3a:a6:e3:37:73:13:4d:59:ce:7e:26:19:9b:9c: 8c:d7:db:d6:c2:de:64:e7:00:38:eb:5c:fe:b6:f2:b4:d1:82: 64:4c:4d:2e:24:35:11:f9:31:eb:3e:94:93:92:0a:6c:83:37: 60:9c:46:c1:83:39:cc:57:17:3d:61:8e:91:2d:8d:eb:d8:4c: af:68:4c:c4:c8:f8:82:d0:76:14:ac:b8:69:b9:e3:60:24:80: b5:2d:1e:55:6c:24:3f:78:f5:4d:31:d0:9c:57:28:1b:49:4b: 4e:60:79:bc:a8:93:77:3f:16:7a:bd:0c:02:03:e8:a2:f8:ce: 6a:da:22:9d:6b:0b:e0:40:c0:50:fe:58:0b:e9:55:6c:49:52: 23:d3:05:30:90:a1:69:74:3a:19:52:0c:fe:a1:29:a6:13:d6: 90:9b:8d:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw MkU5NTYwMTAwHhcNMjUwNjMwMjE0MTA3WhcNMjUwNzA3MjE0MTA3WjAYMRYwFAYD VQQDEw02ODYzMDQ3My1iM2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA+12FrxfD0/Mbb+bN2uWZx5r1+BcPObUUusklEA/HXan6+qYOAlZQJBuvxs HMFxaF5ad98rHJ/N8tjxEH7+ENCD4zpHLs+TEjYRmfPVAAnrvDz+mXRwbTUENsBR BKhK2szaDUkP5UOO2WL0DSmaJ/cjYnYSREimrqYpAIJMY7ISa100W21eElstZKWi uTe88gKEksGay+zNj9k49wKUXAv6jEkKxSAobvDqtDGAAJrWG7fL2AvnIQHIdLjS k7RB7OvGP3KQ79dL74VenW1YtI2fVYQDk2Lld3Yun2Wg7m/E5CnYMmw/JogZAaNH XUR6HYADXW08TDSBxmFmMIGHoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6HavSU tBkGzsOm6xwuFgTnq+0zMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2 OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz TG9hSTNxU0lmWk1DNlZZQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLhG4IqrReN4T9HFGWjT4yJfm9nmQVyNW049gNQZZ5lBbmEudefEq/ +ac1g6sVqiFERKwX9pTzUr+tm5HRNwzDGcSVxKloNRUSoi5JmPQHBxxDYEU519fE ASwjLz1NOqbjN3MTTVnOfiYZm5yM19vWwt5k5wA461z+tvK00YJkTE0uJDUR+THr PpSTkgpsgzdgnEbBgznMVxc9YY6RLY3r2EyvaEzEyPiC0HYUrLhpueNgJIC1LR5V bCQ/ePVNMdCcVygbSUtOYHm8qJN3PxZ6vQwCA+ii+M5q2iKdawvgQMBQ/lgL6VVs SVIj0wUwkKFpdDoZUgz+oSmmE9aQm43l -----END CERTIFICATE-----Generated at Tue Jul 1 20:13:19 2025 by rpki-client