$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: 5t63qHDj7lpWpfAOfEelhMQVaNryl9rU/ysAoLFfCys= Subject key identifier: 29:D7:96:03:E8:B5:D3:15:1D:D1:01:83:A0:80:FB:E4:38:B3:37:68 Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 024D Signing time: Tue 01 Jul 2025 02:33:30 +0000 Manifest this update: Tue 01 Jul 2025 02:33:29 +0000 Manifest next update: Tue 08 Jul 2025 02:33:29 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: SXohndrKuHyyvkKeT361P4Rx/oJbYXqSXNXdvr2mvok=) 2: 1C01E3AC16C811EF93505027C4F9AE02.roa (hash: 4depWt+h8LD6EK3DLt4OJRH84aurXO7NIs5K1+8UmIA=) 3: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: orsVYI0WPqRRwsJkvK9ISroiZMKS0a+gVuvh69buNNs=) 4: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: 2oEdY4ta3hN90rZpyN1SlR035NNb05Tx7U/Ur7N9XJo=) 5: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: /C0qtTA5i0rVvnV/xAh9o5sYCzRTxWzn/hNOktwoiis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: Jul 1 02:33:29 2025 GMT Not After : Jul 8 02:33:29 2025 GMT Subject: CN=686348f9-4592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:08:ce:e3:3b:7b:5e:49:79:92:3a:fa:74: 1f:9c:ad:52:b6:5b:26:84:57:14:f2:73:b7:df:c5: 24:a5:27:0e:ce:0d:9d:ed:eb:2b:5d:71:d7:7b:ae: 06:37:5d:b3:a3:41:ec:83:e6:0a:7b:7a:97:11:94: a8:74:98:8e:55:ec:ff:fd:6c:ff:a1:24:01:e2:18: 07:ba:8e:9c:ec:bc:8b:b5:7b:5b:2f:06:f6:46:90: 92:a7:a2:f5:f9:e4:07:a9:ee:fa:60:b0:80:80:f0: 72:2d:bf:5c:64:79:e5:59:0c:64:82:e8:2f:f6:57: bb:0e:59:bc:dd:17:47:6d:4b:0f:fd:14:6f:30:9b: 5f:71:a0:fc:f8:be:dd:fb:bd:e1:e1:62:c8:1a:13: 1d:87:b9:25:8a:89:85:6f:b3:2a:82:78:a7:a8:dc: 00:c0:8e:45:5d:c1:08:a4:9c:2f:ee:04:8a:ad:d9: 27:87:da:d9:d2:49:6c:d8:08:a8:6d:4a:f1:5d:b9: 58:a1:39:c4:0a:4c:4b:ba:cd:7a:3d:be:60:d2:6e: 63:d7:f5:da:74:b1:11:50:5c:ae:40:f6:aa:12:0a: f1:3c:9f:88:09:9d:a8:6c:b3:f7:2b:24:1e:59:b8: a2:83:18:5e:32:71:57:15:35:ef:1c:da:29:35:1c: 4f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D7:96:03:E8:B5:D3:15:1D:D1:01:83:A0:80:FB:E4:38:B3:37:68 X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:cf:25:e0:eb:f4:2a:6d:1b:3d:9a:50:3e:60:b0:f1:55:72: 59:c5:2c:5c:ca:3b:b4:80:79:fe:1e:fa:9a:64:db:c6:04:3a: 10:5b:97:e6:56:b6:25:ed:e1:d6:72:05:99:2e:75:33:74:75: 0a:34:e3:a7:a0:4c:fc:9c:2a:c2:c3:09:8e:ad:e3:dd:3a:92: 11:15:81:0d:04:ae:24:92:9f:50:de:ce:36:70:e9:8c:4e:4d: fc:a4:fc:f6:22:cc:9a:de:65:25:0a:31:93:a5:e1:ea:42:7a: 53:ad:9d:92:97:9c:7e:b7:ae:4a:92:1e:ab:dd:92:bc:88:8c: 45:3b:80:55:f7:d5:69:b4:03:38:e3:dd:a2:a9:b4:5f:a5:c1: e4:37:d2:7b:bc:4b:29:4b:ff:66:6e:9f:af:bc:97:7d:43:04: 72:58:55:86:7e:49:0c:4c:ca:6a:02:d4:4e:e7:98:d9:b9:d0: 1e:fb:f4:73:d9:c9:be:1c:8f:3e:ff:7b:84:01:40:12:06:d1: b1:e0:04:11:29:ad:3b:8c:a1:58:63:dc:14:5d:b0:b0:4d:47: 7f:08:93:17:06:f2:d4:21:07:74:de:0d:4c:8e:ce:d7:d9:fd: be:44:6c:14:ba:d5:1b:ea:10:b1:01:f8:77:b3:5e:70:37:a4: 2b:f9:19:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjUwNzAxMDIzMzI5WhcNMjUwNzA4MDIzMzI5WjAYMRYwFAYD VQQDEw02ODYzNDhmOS00NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuooIzuM7e15JeZI6+nQfnK1StlsmhFcU8nO338UkpScOzg2d7esrXXHXe64G N12zo0Hsg+YKe3qXEZSodJiOVez//Wz/oSQB4hgHuo6c7LyLtXtbLwb2RpCSp6L1 +eQHqe76YLCAgPByLb9cZHnlWQxkgugv9le7Dlm83RdHbUsP/RRvMJtfcaD8+L7d +73h4WLIGhMdh7kliomFb7MqgninqNwAwI5FXcEIpJwv7gSKrdknh9rZ0kls2Aio bUrxXblYoTnECkxLus16Pb5g0m5j1/XadLERUFyuQPaqEgrxPJ+ICZ2obLP3KyQe WbiigxheMnFXFTXvHNopNRxPBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnXlgPo tdMVHdEBg6CA++Q4szdoMB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8zyXg6/QqbRs9mlA+YLDxVXJZxSxcyju0gHn+HvqaZNvGBDoQW5fm VrYl7eHWcgWZLnUzdHUKNOOnoEz8nCrCwwmOrePdOpIRFYENBK4kkp9Q3s42cOmM Tk38pPz2Isya3mUlCjGTpeHqQnpTrZ2Sl5x+t65Kkh6r3ZK8iIxFO4BV99VptAM4 492iqbRfpcHkN9J7vEspS/9mbp+vvJd9QwRyWFWGfkkMTMpqAtRO55jZudAe+/Rz 2cm+HI8+/3uEAUASBtGx4AQRKa07jKFYY9wUXbCwTUd/CJMXBvLUIQd03g1Mjs7X 2f2+RGwUutUb6hCxAfh3s15wN6Qr+Rmk -----END CERTIFICATE-----Generated at Wed Jul 2 22:23:02 2025 by rpki-client