$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json) Hash identifier: ousXHSjraA2dY91i8YNaLLNNjUYOG3HCql6WNJOuPHw= Subject key identifier: C9:AD:56:C3:35:86:35:23:C0:E8:83:49:35:B2:68:A4:1E:6E:99:6B Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Certificate serial: 0352 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft Manifest number: 034D Signing time: Tue 01 Jul 2025 01:36:26 +0000 Manifest this update: Tue 01 Jul 2025 01:36:26 +0000 Manifest next update: Tue 08 Jul 2025 01:36:26 +0000 Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: exrzYBC+sLLs7Y6SpuHHg1VmwRZ7OFF0e6CCpl+xDos=) 2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: S7JF/bNkGQBKzWyyMCIfasqHndqaViHJP5nFlj8AfpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 850 (0x352) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Validity Not Before: Jul 1 01:36:26 2025 GMT Not After : Jul 8 01:36:26 2025 GMT Subject: CN=68633b9a-c299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:5b:35:b2:96:c9:5a:40:98:3f:36:0f:3c: fe:46:94:31:78:f4:b2:6f:7e:1b:08:e2:d8:a9:b5: 21:1f:9e:2f:a3:31:c7:14:e4:4c:bb:17:21:3b:5d: 24:a4:c7:88:fa:06:ad:76:81:db:3a:a0:b5:ae:54: f3:37:c5:df:48:03:7d:7a:df:7e:2b:a4:17:16:e2: 7f:f5:5f:1e:4a:66:c7:f0:39:d1:02:12:c6:b4:e1: ca:3b:82:68:3d:8d:20:67:50:6f:82:3f:e3:5b:01: 25:09:21:85:2c:3f:8c:2e:88:c2:51:6e:bb:d7:dc: b3:a7:dd:93:fe:3b:a3:79:72:60:8c:d1:d2:1b:ea: 36:5e:dd:24:c2:57:cc:13:d1:9b:2c:0b:82:e4:98: cd:aa:55:37:96:fa:22:04:a7:1b:4f:a4:18:b2:04: 66:bb:a0:b8:2b:93:e5:ca:e8:4c:64:36:68:ee:53: 47:63:39:d8:07:e8:6d:06:13:5e:ed:91:ad:c8:65: 21:44:89:aa:1c:bb:8b:a8:88:8c:a0:73:f0:04:76: 2f:ed:09:1e:c2:63:2c:97:4d:dc:b0:88:85:22:3c: 1f:ee:e3:e9:8b:e0:4c:a8:cb:10:0c:2f:88:8c:2b: 6a:90:1e:48:64:73:dd:73:76:58:05:73:4e:f5:39: 3e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AD:56:C3:35:86:35:23:C0:E8:83:49:35:B2:68:A4:1E:6E:99:6B X509v3 Authority Key Identifier: keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a6:b8:68:f4:38:2c:b6:9c:6a:76:30:b0:58:5c:ac:33:e6: 8c:ce:fc:2f:43:89:e0:ef:df:54:cf:b4:ee:fe:3b:c4:35:38: 8f:c9:7a:4c:cb:ec:75:0e:c8:93:3b:3a:1c:6a:79:2a:f4:eb: 5f:b4:16:44:8f:95:7d:10:70:66:fb:a6:6d:89:58:4f:4e:cf: 9c:95:94:84:a5:d6:d6:fc:73:d5:36:66:a0:6a:f8:80:bf:c6: f5:df:ce:ca:ec:08:24:02:60:25:0a:01:b4:0c:5c:ab:f2:4b: 77:e9:22:9a:7f:19:1b:1d:9e:69:20:e1:9b:44:7f:35:22:6b: 64:06:e7:26:e5:5c:a2:9d:c8:7b:a8:88:06:a5:bc:34:b3:ed: 28:93:a3:1c:1b:a8:cd:ef:4a:c4:89:23:d6:c0:6d:23:6a:1b: 8e:1b:f7:a6:45:d1:f7:3e:fd:63:dc:35:b3:f5:4c:af:9e:25: 50:5e:32:87:d1:52:21:64:da:86:b2:20:2c:28:de:af:61:b2: 9f:e8:9f:8c:a0:c5:24:26:10:3b:a1:aa:eb:c5:51:30:78:0c: ff:00:1e:0b:87:49:ef:43:68:db:06:0c:0b:ba:65:20:2e:4d: 17:7a:a0:bb:6f:dc:5b:91:a6:d6:ba:8d:20:fc:16:0d:37:ee: af:15:f2:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCNUYxMTAvBgNVBAUTKEYwMkE1RDEwMkY3RjMzQjI2MTExQjRBMjg3NDJGN0JB MkYxRTlBOTkwHhcNMjUwNzAxMDEzNjI2WhcNMjUwNzA4MDEzNjI2WjAYMRYwFAYD VQQDEw02ODYzM2I5YS1jMjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLhbNbKWyVpAmD82Dzz+RpQxePSyb34bCOLYqbUhH54vozHHFORMuxchO10k pMeI+gatdoHbOqC1rlTzN8XfSAN9et9+K6QXFuJ/9V8eSmbH8DnRAhLGtOHKO4Jo PY0gZ1Bvgj/jWwElCSGFLD+MLojCUW6719yzp92T/jujeXJgjNHSG+o2Xt0kwlfM E9GbLAuC5JjNqlU3lvoiBKcbT6QYsgRmu6C4K5PlyuhMZDZo7lNHYznYB+htBhNe 7ZGtyGUhRImqHLuLqIiMoHPwBHYv7QkewmMsl03csIiFIjwf7uPpi+BMqMsQDC+I jCtqkB5IZHPdc3ZYBXNO9Tk+vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmtVsM1 hjUjwOiDSTWyaKQebplrMB8GA1UdIwQYMBaAFPAqXRAvfzOyYRG0oodC97ovHpqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I1Ri8wMDVFNTlBQ0Mw OTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003SmhFYlNpaDBMM3VpOGVt cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDcGRFQzlfTTdKaEViU2loMEwzdWk4ZW1way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I1Ri8wMDVFNTlBQ0MwOTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003 SmhFYlNpaDBMM3VpOGVtcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdprho9DgstpxqdjCwWFysM+aMzvwvQ4ng799Uz7Tu/jvENTiPyXpM y+x1DsiTOzocankq9OtftBZEj5V9EHBm+6ZtiVhPTs+clZSEpdbW/HPVNmagaviA v8b1387K7AgkAmAlCgG0DFyr8kt36SKafxkbHZ5pIOGbRH81ImtkBucm5Vyinch7 qIgGpbw0s+0ok6McG6jN70rEiSPWwG0jahuOG/emRdH3Pv1j3DWz9UyvniVQXjKH 0VIhZNqGsiAsKN6vYbKf6J+MoMUkJhA7oarrxVEweAz/AB4Lh0nvQ2jbBgwLumUg Lk0XeqC7b9xbkabWuo0g/BYNN+6vFfKv -----END CERTIFICATE-----Generated at Tue Jul 1 21:23:48 2025 by rpki-client