$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: W5vEop7uGJ0peCiceCKmnyFXMDiLq0+1gtMxfBl0As8= Subject key identifier: E1:2C:23:C9:BA:90:5D:3C:4C:D0:BC:D4:D6:D4:8E:B5:88:67:74:1E Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 0128 Signing time: Thu 03 Jul 2025 04:46:33 +0000 Manifest this update: Thu 03 Jul 2025 04:46:32 +0000 Manifest next update: Thu 10 Jul 2025 04:46:32 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: BsEULFV0m3zTnPHfGV0/xoS40NZf/vgC+eON3HwLmP8=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: 51Cgnd7L929YsdYeHMQakHz8pXfhQg7XBbfSBPJ2XYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Jul 3 04:46:32 2025 GMT Not After : Jul 10 04:46:32 2025 GMT Subject: CN=68660b28-2ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:24:2c:1b:0b:ee:24:40:27:99:3e:a7:69: 57:fa:85:4e:59:f4:90:16:03:a5:69:59:28:7b:f8: b8:73:bb:46:ce:3b:61:88:07:14:2d:ea:db:d5:7d: ef:7e:8e:ea:96:9c:5f:41:d1:21:9e:d1:5d:db:0e: f1:54:a3:c2:91:44:fa:de:42:15:3c:01:88:5f:40: 4e:6b:ba:79:a2:6f:a4:75:34:2c:9f:62:89:70:d8: 66:a6:03:3b:0f:20:9b:cc:97:5d:5a:61:ac:c5:29: 96:31:b8:c5:69:df:d5:0c:3b:2e:fd:08:50:fa:b7: e0:ed:3b:b2:8d:3a:39:11:6c:e2:15:8a:5b:d4:ee: 17:96:48:fe:2d:52:c9:99:53:d4:7b:cb:cd:96:51: 74:3f:c2:fe:7f:77:46:34:d5:d0:41:68:df:bf:a0: 1d:32:46:29:fc:dc:6a:0b:c0:88:e4:c0:e0:05:06: 99:77:29:39:b1:83:3f:51:88:7a:ea:dd:b0:94:b1: 84:d7:3e:11:b7:e2:4d:fb:92:39:50:fb:c0:ec:21: 4e:f2:d1:ba:d9:5d:55:7b:9e:a8:f1:43:75:3d:84: 15:78:66:c1:08:7c:0e:1f:58:b4:85:37:6d:2a:8a: 2f:0a:48:44:73:5a:91:d0:3f:f3:6c:a6:91:da:c1: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2C:23:C9:BA:90:5D:3C:4C:D0:BC:D4:D6:D4:8E:B5:88:67:74:1E X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6e:fc:c7:fa:27:1b:c2:bd:73:e1:d9:22:48:89:03:53:e6: a4:4b:7d:e7:02:0e:76:43:7b:2b:a5:cc:a9:3b:b8:ba:b6:46: f4:04:21:d5:df:34:4a:36:dc:94:4a:96:9d:22:ae:b6:31:c4: 8a:18:b0:1d:9a:ab:c9:a7:73:cc:65:a2:e7:1d:15:18:bc:c8: 22:53:aa:99:7c:36:11:0f:39:57:3b:2a:61:7b:1e:4b:4b:d6: e5:ee:06:b4:b7:09:e2:e7:6a:33:01:72:1b:88:2c:d7:94:cf: 6c:b7:f4:11:d3:a5:82:4f:25:66:05:13:d4:88:75:27:ec:69: 68:2f:18:7f:2c:66:52:df:cb:87:69:c2:46:83:0b:34:4b:33: 88:ec:5b:07:af:9b:19:12:d6:e5:7f:64:d6:13:c8:1c:dd:62: 9c:44:74:da:b6:f3:95:3c:85:bc:e2:6f:6f:1b:79:fe:3e:59: 4c:12:a0:d8:5d:27:fc:e3:f0:76:d1:59:a2:c8:c7:fe:f2:86: 43:0e:6e:02:66:73:48:01:16:48:f4:71:4b:e7:7e:6a:04:2a: 69:18:4b:1f:ae:b7:3e:13:27:fe:68:e8:dc:0a:ff:f6:73:6c: 0a:96:8c:b7:09:db:a4:2f:59:ef:39:0b:c3:10:0d:4a:e1:06: d5:2c:75:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjUwNzAzMDQ0NjMyWhcNMjUwNzEwMDQ0NjMyWjAYMRYwFAYD VQQDEw02ODY2MGIyOC0yYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMYkLBsL7iRAJ5k+p2lX+oVOWfSQFgOlaVkoe/i4c7tGzjthiAcULerb1X3v fo7qlpxfQdEhntFd2w7xVKPCkUT63kIVPAGIX0BOa7p5om+kdTQsn2KJcNhmpgM7 DyCbzJddWmGsxSmWMbjFad/VDDsu/QhQ+rfg7TuyjTo5EWziFYpb1O4Xlkj+LVLJ mVPUe8vNllF0P8L+f3dGNNXQQWjfv6AdMkYp/NxqC8CI5MDgBQaZdyk5sYM/UYh6 6t2wlLGE1z4Rt+JN+5I5UPvA7CFO8tG62V1Ve56o8UN1PYQVeGbBCHwOH1i0hTdt KoovCkhEc1qR0D/zbKaR2sG8XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEsI8m6 kF08TNC81NbUjrWIZ3QeMB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+bvzH+icbwr1z4dkiSIkDU+akS33nAg52Q3srpcypO7i6tkb0BCHV 3zRKNtyUSpadIq62McSKGLAdmqvJp3PMZaLnHRUYvMgiU6qZfDYRDzlXOyphex5L S9bl7ga0twni52ozAXIbiCzXlM9st/QR06WCTyVmBRPUiHUn7GloLxh/LGZS38uH acJGgws0SzOI7FsHr5sZEtblf2TWE8gc3WKcRHTatvOVPIW84m9vG3n+PllMEqDY XSf84/B20VmiyMf+8oZDDm4CZnNIARZI9HFL535qBCppGEsfrrc+Eyf+aOjcCv/2 c2wKloy3CdukL1nvOQvDEA1K4QbVLHUz -----END CERTIFICATE-----Generated at Fri Jul 4 02:22:14 2025 by rpki-client