$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft File: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json) Hash identifier: 7nSrLqJ2sKI2nF2kukp1Na6igngquqLWq512gDGxiTA= Subject key identifier: D7:31:1B:9D:54:16:1A:92:99:5A:A8:DD:E7:01:4E:B0:C6:D3:80:E4 Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 Certificate issuer: /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft Manifest number: 5F Signing time: Thu 03 Jul 2025 07:19:56 +0000 Manifest this update: Thu 03 Jul 2025 07:19:55 +0000 Manifest next update: Thu 10 Jul 2025 07:19:55 +0000 Files and hashes: 1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: UGNPs1pddEBOi29T63cYDHFayotpOiO35NhcphCsxH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Validity Not Before: Jul 3 07:19:55 2025 GMT Not After : Jul 10 07:19:55 2025 GMT Subject: CN=68662f1c-3c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:75:ac:6b:d5:85:3b:ca:38:81:04:e4:57: a7:74:74:6d:ae:83:c1:08:8c:25:bd:04:e7:28:7a: bb:43:a6:d9:30:a9:e1:87:37:4b:bc:e0:44:88:70: 15:9f:ac:04:eb:c6:97:13:e3:b4:00:b5:35:65:7e: b9:22:ab:6e:3f:7b:39:ba:90:55:ac:b9:e1:83:18: 5f:1a:df:cf:5c:79:ae:92:b7:67:c4:d8:6f:fc:3f: 16:33:d3:ce:cb:a3:b2:cc:c5:51:27:06:0a:c3:3b: 6d:da:b8:28:fa:2c:90:ac:3d:8c:41:93:b9:e4:72: 69:66:06:31:65:6a:de:08:c9:28:95:c5:71:7c:13: 96:be:cb:b7:fa:7f:d2:ab:20:83:f2:3c:87:9d:96: de:de:b8:5c:4a:70:1a:cc:d1:43:c6:25:82:c0:60: 3e:62:ef:88:ba:f0:72:93:1c:25:d7:61:a8:4d:bd: 13:17:41:6e:53:55:ed:51:79:7b:a2:57:d7:db:93: 68:36:28:7a:d2:48:57:32:dc:43:73:1b:da:26:4b: 81:5a:92:7f:f9:b6:52:cb:2f:64:46:c5:61:30:8a: 67:3d:8e:87:f8:94:2c:5e:f2:a8:c8:03:66:cb:4e: 54:d2:c6:e9:87:38:f4:ea:0d:d7:61:d1:df:be:8e: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:31:1B:9D:54:16:1A:92:99:5A:A8:DD:E7:01:4E:B0:C6:D3:80:E4 X509v3 Authority Key Identifier: keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:65:e5:4b:90:06:83:99:d9:68:28:26:c6:22:6b:b8:a6:3b: 56:37:9d:ee:89:46:19:76:8a:e8:42:24:9a:b2:44:04:7f:f0: be:b9:04:7b:03:a1:fe:4c:13:8f:a7:79:51:e9:6c:42:db:9e: 15:4f:40:9d:10:bd:a8:16:fb:bf:f4:00:42:3b:cc:39:e7:34: 64:9f:a6:34:4f:b8:ad:de:79:d3:f6:2a:7c:7b:9c:10:22:2b: 27:64:6a:76:1e:5c:c1:ed:aa:da:78:04:1c:53:c5:01:aa:f0: 2a:a7:7c:61:1e:3f:9c:3a:d2:d7:43:02:40:ab:bd:12:bd:ea: 2e:cc:cf:76:ae:e6:5a:a6:c3:0e:02:8b:8d:05:14:44:74:8c: 3b:79:7f:0a:ac:db:60:e3:f3:46:ca:04:d3:76:15:2b:4f:6c: fa:a7:71:eb:90:93:0d:46:65:40:0d:f7:1e:21:f5:39:e6:16: 9d:21:e4:b3:d8:e5:d6:15:1b:12:18:44:73:2f:1b:04:37:36: ce:a2:c1:c0:20:83:c2:00:8f:be:ce:31:ba:3d:64:18:58:f2: 64:51:ec:f2:62:7c:0a:fd:d3:a4:9b:e0:aa:c8:33:03:52:e3: 71:06:32:62:07:99:6b:98:82:37:c2:84:da:fc:6c:d9:40:53: 32:78:d9:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QTVBRjExMC8GA1UEBRMoRjNFQkJGQjRBOTM4MEZFMDlBNTYxRkM2QUZBMkExQ0My MTQ4ODYxMTAeFw0yNTA3MDMwNzE5NTVaFw0yNTA3MTAwNzE5NTVaMBgxFjAUBgNV BAMTDTY4NjYyZjFjLTNjMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAMnWsa9WFO8o4gQTkV6d0dG2ug8EIjCW9BOcoertDptkwqeGHN0u84ESIcBWf rATrxpcT47QAtTVlfrkiq24/ezm6kFWsueGDGF8a389cea6St2fE2G/8PxYz087L o7LMxVEnBgrDO23auCj6LJCsPYxBk7nkcmlmBjFlat4IySiVxXF8E5a+y7f6f9Kr IIPyPIedlt7euFxKcBrM0UPGJYLAYD5i74i68HKTHCXXYahNvRMXQW5TVe1ReXui V9fbk2g2KHrSSFcy3ENzG9omS4Fakn/5tlLLL2RGxWEwimc9jof4lCxe8qjIA2bL TlTSxumHOPTqDddh0d++jtx7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1zEbnVQW GpKZWqjd5wFOsMbTgOQwHwYDVR0jBBgwFoAU8+u/tKk4D+CaVh/Gr6KhzCFIhhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBNUFGLzg4REJBOTgyQ0JD MTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1DYVZoX0dyNktoekNGSWho RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOC11X3RLazRELUNhVmhfR3I2S2h6Q0ZJaGhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB NUFGLzg4REJBOTgyQ0JDMTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1D YVZoX0dyNktoekNGSWhoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGRl5UuQBoOZ2WgoJsYia7imO1Y3ne6JRhl2iuhCJJqyRAR/8L65BHsD of5ME4+neVHpbELbnhVPQJ0QvagW+7/0AEI7zDnnNGSfpjRPuK3eedP2Knx7nBAi KydkanYeXMHtqtp4BBxTxQGq8CqnfGEeP5w60tdDAkCrvRK96i7Mz3au5lqmww4C i40FFER0jDt5fwqs22Dj80bKBNN2FStPbPqnceuQkw1GZUAN9x4h9TnmFp0h5LPY 5dYVGxIYRHMvGwQ3Ns6iwcAgg8IAj77OMbo9ZBhY8mRR7PJifAr906Sb4KrIMwNS 43EGMmIHmWuYgjfChNr8bNlAUzJ42aU= -----END CERTIFICATE-----Generated at Thu Jul 3 11:01:17 2025 by rpki-client