$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft File: p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json) Hash identifier: +tGVhvzDBqw4XUCU5GCElPmnQRMXhtSIDTRB5Sjc/E0= Subject key identifier: 96:F8:4B:4C:19:6B:26:CD:ED:71:27:51:0E:56:FF:26:8C:50:43:A1 Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 Certificate issuer: /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft Manifest number: 01B8 Signing time: Thu 03 Jul 2025 03:08:30 +0000 Manifest this update: Thu 03 Jul 2025 03:08:29 +0000 Manifest next update: Thu 10 Jul 2025 03:08:29 +0000 Files and hashes: 1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: Cpf4dVfC0ODyIlFHPbD5pN9sVoBgX0p6roYPOh5VpuM=) 2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 5g7RrFvBwgNiKlK3rQGnarO7ApLyrSM6Xg9ERGMGz5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Validity Not Before: Jul 3 03:08:29 2025 GMT Not After : Jul 10 03:08:29 2025 GMT Subject: CN=6865f42e-38f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ee:42:d0:d9:c9:23:11:4a:56:8e:88:6b:74: 98:a3:23:39:b2:71:dc:55:cb:df:cf:3e:b2:bf:f8: cb:a5:1f:61:51:dd:0d:01:e8:f5:1c:84:d9:51:bb: fc:0e:f9:7a:ef:c4:50:88:b9:a8:38:be:67:4e:f9: 98:81:36:d6:22:86:0c:e3:e2:33:3b:af:cd:22:73: df:10:7f:6e:d6:f5:25:08:7c:e5:01:18:e1:af:cd: 5f:a0:ba:a5:a7:41:4a:7c:a7:d7:dd:72:d6:d4:ff: 7a:b7:72:2d:2d:87:b4:8a:b6:d2:9c:99:93:a2:10: 10:ba:1a:f2:da:6d:56:8c:ef:08:d8:03:b9:14:69: da:b8:2c:53:1f:a0:7b:dd:ec:40:85:98:b6:67:a2: 48:e6:db:5f:17:90:71:7f:b9:09:de:72:15:8c:c3: 63:2c:10:e9:24:b7:b8:05:87:96:d0:67:46:86:4d: 11:a5:d3:f0:23:2b:f1:92:8b:8c:0f:ef:ed:cb:34: d0:6e:2b:96:16:d6:bc:46:cd:36:6c:65:5b:41:d2: 6a:80:7c:6b:95:40:44:70:57:e1:54:38:e7:e9:5e: 6b:e4:a7:f1:c1:df:ea:83:a7:bc:ab:2c:f5:35:33: 91:b6:31:8b:39:ac:6a:ce:42:9c:01:70:77:7f:d7: 8c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F8:4B:4C:19:6B:26:CD:ED:71:27:51:0E:56:FF:26:8C:50:43:A1 X509v3 Authority Key Identifier: keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:41:fb:01:1f:cc:0a:30:33:c8:f6:f0:da:0a:4c:db:7e:54: 00:68:4e:44:27:78:f7:42:e5:5c:78:70:7c:7b:e3:f5:25:bd: 24:b2:f7:82:ba:9e:93:3e:c2:31:69:6e:42:71:7b:00:ad:d9: 82:6b:2f:fb:b0:ec:e9:c8:52:0f:1a:c0:8b:dc:9e:60:7c:5e: c0:b8:a6:69:aa:f1:52:99:57:ac:21:62:eb:69:bf:98:2f:1a: f7:78:20:1d:26:84:c7:39:9b:41:c9:c2:1b:47:44:98:b1:76: 93:73:01:d4:a3:29:e0:9c:e2:fd:b4:e1:3e:0d:ba:b2:e7:1e: 5c:e1:60:8c:79:33:b2:77:96:a2:76:97:8c:78:3b:80:e4:98: 11:7e:2d:b1:fe:79:7c:75:a4:f8:0c:3e:04:eb:96:62:a8:b2: 16:2a:74:d9:06:9e:aa:58:25:3b:05:02:46:bc:c4:3b:6b:b8: 89:a5:3c:9a:f3:42:1a:9e:40:5a:47:dc:87:08:92:e0:05:d1: b9:c8:63:fb:22:f8:27:8d:ab:7b:d9:e6:f4:64:6c:35:41:ac: 30:ae:f4:1b:d7:6e:4b:a7:8b:96:6d:2a:ea:ef:92:af:e5:c3: 2b:44:84:e7:37:7a:9a:48:07:17:75:c9:25:b5:54:d4:07:9c: 9b:9f:fe:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDNjQxMTAvBgNVBAUTKEE3QzE4MkNCMEM1NkVDQzY4RDc0OTFBMjkxNDE0NEI0 Nzc0Rjc3MzIwHhcNMjUwNzAzMDMwODI5WhcNMjUwNzEwMDMwODI5WjAYMRYwFAYD VQQDEw02ODY1ZjQyZS0zOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApu5C0NnJIxFKVo6Ia3SYoyM5snHcVcvfzz6yv/jLpR9hUd0NAej1HITZUbv8 Dvl678RQiLmoOL5nTvmYgTbWIoYM4+IzO6/NInPfEH9u1vUlCHzlARjhr81foLql p0FKfKfX3XLW1P96t3ItLYe0irbSnJmTohAQuhry2m1WjO8I2AO5FGnauCxTH6B7 3exAhZi2Z6JI5ttfF5Bxf7kJ3nIVjMNjLBDpJLe4BYeW0GdGhk0RpdPwIyvxkouM D+/tyzTQbiuWFta8Rs02bGVbQdJqgHxrlUBEcFfhVDjn6V5r5Kfxwd/qg6e8qyz1 NTORtjGLOaxqzkKcAXB3f9eMpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb4S0wZ aybN7XEnUQ5W/yaMUEOhMB8GA1UdIwQYMBaAFKfBgssMVuzGjXSRopFBRLR3T3cy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0M2NC9BNkRFRjFFRUIz MEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdNYU5kSkdpa1VGRXRIZFBk ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4R0N5d3hXN01hTmRKR2lrVUZFdEhkUGR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0M2NC9BNkRFRjFFRUIzMEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdN YU5kSkdpa1VGRXRIZFBkekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4QfsBH8wKMDPI9vDaCkzbflQAaE5EJ3j3QuVceHB8e+P1Jb0ksveC up6TPsIxaW5CcXsArdmCay/7sOzpyFIPGsCL3J5gfF7AuKZpqvFSmVesIWLrab+Y Lxr3eCAdJoTHOZtBycIbR0SYsXaTcwHUoyngnOL9tOE+Dbqy5x5c4WCMeTOyd5ai dpeMeDuA5JgRfi2x/nl8daT4DD4E65ZiqLIWKnTZBp6qWCU7BQJGvMQ7a7iJpTya 80IankBaR9yHCJLgBdG5yGP7Ivgnjat72eb0ZGw1QawwrvQb125Lp4uWbSrq75Kv 5cMrRITnN3qaSAcXdckltVTUB5ybn/7d -----END CERTIFICATE-----Generated at Thu Jul 3 08:57:54 2025 by rpki-client