$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: A0nIg7kRrDwoYnIfuMo9iDvm0Vl7A2BF+6EOJZB6Z64= Subject key identifier: 3D:09:4A:80:80:B5:13:6D:7D:0F:C6:E4:3E:34:9F:22:35:A5:4C:4F Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: 29 Signing time: Thu 03 Jul 2025 08:02:12 +0000 Manifest this update: Thu 03 Jul 2025 08:02:11 +0000 Manifest next update: Thu 10 Jul 2025 08:02:11 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: BkVOnVNZYDVl+tHDQYHTXL3vNeOFMs+aVdMbrkbddRk=) 2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: o/13AO8mPDvXBUbVg85hPilsA+v8uBO89/ms9/UgUgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Jul 3 08:02:11 2025 GMT Not After : Jul 10 08:02:11 2025 GMT Subject: CN=68663903-6239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:45:41:48:3c:36:fc:6b:45:f9:1f:e7:cd:2b: 7a:1e:3c:0c:75:61:90:9d:89:a7:62:72:d0:72:ed: 8a:87:ed:a6:90:b9:f5:2c:d1:b8:6d:1a:37:cc:64: bb:32:7c:7d:cf:ad:2f:df:cb:06:ea:4c:3d:6f:f8: c7:ff:aa:4c:77:2d:f3:c0:fa:7c:60:d8:82:bb:00: 58:0d:f6:7b:3a:27:c7:d4:3b:15:e9:d1:42:a3:de: dc:9f:f1:48:ea:2f:4a:d4:a5:90:2b:f7:18:ac:a0: 72:e6:ec:68:c5:04:d6:90:fa:6a:ce:1a:a8:48:62: e8:21:69:0a:cb:35:43:b7:ce:93:cc:47:37:e6:1b: 88:bc:61:8c:61:fd:67:1c:8c:68:2f:ac:b9:14:af: 94:ff:9c:ec:5d:b7:60:81:f3:7d:32:1d:28:2f:ee: cd:90:7a:0c:ae:a6:ce:92:e8:8c:6d:42:29:7b:a5: 74:ea:36:7f:8c:3f:91:16:b4:bd:11:8e:e0:fb:57: d9:ba:f4:04:a7:a0:4a:53:84:e1:c0:cf:83:45:82: ae:e9:ed:7e:c7:16:ff:22:0c:c5:79:bd:85:23:a9: 2d:aa:70:8b:17:44:b7:46:81:a6:17:0a:82:b3:e1: a3:0e:90:d8:76:cf:4a:be:1e:44:73:01:f8:08:83: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:09:4A:80:80:B5:13:6D:7D:0F:C6:E4:3E:34:9F:22:35:A5:4C:4F X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:92:97:31:a1:d5:1b:fb:80:a9:bd:de:5b:98:c7:83:59:f9: 98:d5:c5:f8:69:62:23:fd:20:4e:34:dc:8e:3c:5a:1d:e6:b0: a0:0b:b7:84:7e:db:1a:52:0d:4a:fd:4d:17:7d:4e:74:85:c0: da:bf:6f:a1:82:be:fc:4a:31:a0:3a:8e:3a:ae:17:bd:b9:12: 63:53:80:38:8a:7f:dc:e4:8f:7e:df:6b:16:74:39:d6:d0:4e: 65:f8:53:9e:6f:24:4b:5c:d8:1c:c7:82:26:80:dd:08:93:f3: e8:61:14:46:c6:6a:3e:65:52:c4:40:2c:80:18:65:66:e3:cc: 99:a0:8a:80:45:fc:9c:da:ee:d0:ab:8a:86:4f:bb:ef:1a:08: 42:09:29:61:d3:77:1e:0b:d7:1d:c9:42:53:15:c1:16:fa:ac: 81:ef:e6:a7:c5:ab:4e:fb:9d:2f:95:92:8f:51:35:b2:2c:b7: b4:1a:34:a9:48:7f:ac:c9:9d:30:74:e9:f7:20:ce:a2:d7:ac: 1a:ba:14:75:44:fb:b7:fb:f0:de:46:93:b1:aa:e0:8e:49:21: 0b:22:ff:37:d6:d4:64:34:f9:d5:f9:99:da:f0:ce:a5:53:17: 42:3e:6a:37:d7:18:c5:1f:5f:c6:0c:f1:7a:b2:82:de:4b:fc: d2:3a:b6:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkFDQjExMC8GA1UEBRMoRjAwOTIzM0Q4RDA4N0ZDMUQwRjY0MjU3ODBFM0E0RDg0 NEEzNEY4MTAeFw0yNTA3MDMwODAyMTFaFw0yNTA3MTAwODAyMTFaMBgxFjAUBgNV BAMTDTY4NjYzOTAzLTYyMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCRUFIPDb8a0X5H+fNK3oePAx1YZCdiadictBy7YqH7aaQufUs0bhtGjfMZLsy fH3PrS/fywbqTD1v+Mf/qkx3LfPA+nxg2IK7AFgN9ns6J8fUOxXp0UKj3tyf8Ujq L0rUpZAr9xisoHLm7GjFBNaQ+mrOGqhIYughaQrLNUO3zpPMRzfmG4i8YYxh/Wcc jGgvrLkUr5T/nOxdt2CB830yHSgv7s2Qegyups6S6IxtQil7pXTqNn+MP5EWtL0R juD7V9m69ASnoEpThOHAz4NFgq7p7X7HFv8iDMV5vYUjqS2qcIsXRLdGgaYXCoKz 4aMOkNh2z0q+HkRzAfgIg5K/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPQlKgIC1 E219D8bkPjSfIjWlTE8wHwYDVR0jBBgwFoAU8AkjPY0If8HQ9kJXgOOk2ESjT4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQUNCLzc0QkQ4NThBMUIz RDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEFralBZMElmOEhROWtKWGdPT2syRVNqVDRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy QUNCLzc0QkQ4NThBMUIzRDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhI UTlrSlhnT09rMkVTalQ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADSSlzGh1Rv7gKm93luYx4NZ+ZjVxfhpYiP9IE403I48Wh3msKALt4R+ 2xpSDUr9TRd9TnSFwNq/b6GCvvxKMaA6jjquF725EmNTgDiKf9zkj37faxZ0OdbQ TmX4U55vJEtc2BzHgiaA3QiT8+hhFEbGaj5lUsRALIAYZWbjzJmgioBF/Jza7tCr ioZPu+8aCEIJKWHTdx4L1x3JQlMVwRb6rIHv5qfFq077nS+Vko9RNbIst7QaNKlI f6zJnTB06fcgzqLXrBq6FHVE+7f78N5Gk7Gq4I5JIQsi/zfW1GQ0+dX5mdrwzqVT F0I+ajfXGMUfX8YM8Xqygt5L/NI6tps= -----END CERTIFICATE-----Generated at Sat Jul 5 02:35:24 2025 by rpki-client