$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft File: 8uBzCSl2BY65hlYUFDf4-2i3IV0.mft (raw, json) Hash identifier: p3/TGgQ63+HfGR9+82dIB24DNuzPFgfosuguLPNGYxA= Subject key identifier: 20:F8:B3:E5:31:FA:5E:15:62:37:49:4E:08:13:98:D8:45:B2:33:07 Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft Manifest number: 23 Signing time: Tue 01 Jul 2025 08:38:29 +0000 Manifest this update: Tue 01 Jul 2025 08:38:28 +0000 Manifest next update: Tue 08 Jul 2025 08:38:28 +0000 Files and hashes: 1: 8uBzCSl2BY65hlYUFDf4-2i3IV0.crl (hash: MNlvVKNMgE974+pOgiUeM1AqgxiffxZmWJiQJTMh2Nk=) 2: CFED56A4240411F0B73CB374C4F9AE02.roa (hash: Zn3nz0esus3n+Qr7MjHUDFZOowDDsYzs6GVur4c4Gdw=) 3: CF53E5E6240411F0B73CB374C4F9AE02.roa (hash: aGXXY3h8pMjRmE6vJ9+0EmvsUGymYki2tMrN0LjTaWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: Jul 1 08:38:28 2025 GMT Not After : Jul 8 08:38:28 2025 GMT Subject: CN=68639e84-ffdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:ac:09:cf:09:47:88:25:e8:ab:b1:45:44: cb:f4:4c:8c:75:5d:a1:c4:8c:1e:fe:cb:4a:f3:fe: d7:52:50:53:ba:d5:6b:bb:50:06:e9:a2:05:8e:e6: 78:6c:bb:72:f3:99:f2:e2:77:2f:af:c0:68:53:1d: f9:fe:de:e2:78:2e:75:2a:60:bd:a1:42:2d:ea:d6: a5:6e:84:07:bb:92:ff:85:ae:a0:9d:fd:91:23:1a: 5d:f6:c6:51:8d:86:8b:88:c4:bd:0c:5c:37:b0:4e: f3:b1:ca:06:c7:dc:2e:28:6f:e4:76:13:20:2e:7e: 58:7b:67:d9:cc:5e:fb:ae:80:19:9d:6d:98:42:67: 8f:c5:60:4c:53:40:4e:8f:45:ac:15:a3:08:86:76: 2c:7f:bc:5d:17:2e:68:18:92:03:fa:41:94:bf:28: b3:63:73:bb:65:f2:52:d4:ff:2f:99:53:a7:76:ef: fb:56:54:c6:7c:b6:c7:01:06:0c:d9:cd:1a:24:36: 33:20:a3:ce:b0:2c:b7:bd:1d:81:da:ca:76:2a:bb: c4:c8:e8:4b:94:79:5a:df:5b:82:58:31:3a:74:ae: fd:81:75:63:c7:8c:07:84:d4:15:b2:f6:d4:63:d1: fa:12:55:dc:2d:27:12:85:6a:fc:43:7d:96:94:d3: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F8:B3:E5:31:FA:5E:15:62:37:49:4E:08:13:98:D8:45:B2:33:07 X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fd:4e:80:1f:c8:d0:7e:01:5d:57:b8:5e:df:60:67:82:18: 94:53:66:e6:1c:55:b0:70:ad:42:f4:60:e4:01:93:8b:65:9e: 65:90:91:80:33:55:f6:f2:b6:c4:42:48:76:82:47:0b:d3:83: 05:a9:51:40:d1:96:4f:af:1e:e4:e3:43:d2:f6:2b:9f:70:3d: b9:2c:da:19:68:e0:93:48:6d:5d:a1:d0:dd:0b:0b:c0:12:98: 7a:8b:1e:5d:9a:8d:16:58:15:20:2f:5a:70:bf:d7:b9:07:3f: bc:8b:2a:bf:1a:79:4f:6f:4c:3b:ee:eb:9c:52:9c:e7:dc:27: 7d:3c:4e:36:43:b1:3b:8a:99:38:78:2e:c0:10:a9:b0:a7:61: a4:cc:31:ee:b2:b0:5c:22:7c:9a:3b:d9:65:ca:f6:c5:8d:fe: 7c:48:a1:2f:14:7f:8d:43:67:b3:7a:1b:a8:57:71:83:84:7d: 78:1b:25:be:40:27:a0:7f:9f:a3:8c:87:62:f9:58:4c:72:2d: 19:7e:43:23:03:13:2a:16:2d:a4:62:1e:29:09:d2:e5:de:83: 6f:2d:0f:2b:5a:71:fd:e7:9c:9c:38:62:e0:83:f9:57:03:8a: 8d:bb:2f:94:44:f4:3f:76:9d:33:6f:54:17:a7:0c:3a:3b:72: f8:e6:c1:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYyQjExMC8GA1UEBRMoRjJFMDczMDkyOTc2MDU4RUI5ODY1NjE0MTQzN0Y4RkI2 OEI3MjE1RDAeFw0yNTA3MDEwODM4MjhaFw0yNTA3MDgwODM4MjhaMBgxFjAUBgNV BAMTDTY4NjM5ZTg0LWZmZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS1KwJzwlHiCXoq7FFRMv0TIx1XaHEjB7+y0rz/tdSUFO61Wu7UAbpogWO5nhs u3LzmfLidy+vwGhTHfn+3uJ4LnUqYL2hQi3q1qVuhAe7kv+FrqCd/ZEjGl32xlGN houIxL0MXDewTvOxygbH3C4ob+R2EyAuflh7Z9nMXvuugBmdbZhCZ4/FYExTQE6P RawVowiGdix/vF0XLmgYkgP6QZS/KLNjc7tl8lLU/y+ZU6d27/tWVMZ8tscBBgzZ zRokNjMgo86wLLe9HYHaynYqu8TI6EuUeVrfW4JYMTp0rv2BdWPHjAeE1BWy9tRj 0foSVdwtJxKFavxDfZaU0wlhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIPiz5TH6 XhViN0lOCBOY2EWyMwcwHwYDVR0jBBgwFoAU8uBzCSl2BY65hlYUFDf4+2i3IV0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjJCLzYxQjM1NjE2MjQw NDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHVCekNTbDJCWTY1aGxZVUZEZjQtMmkzSVYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjJCLzYxQjM1NjE2MjQwNDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2 NWhsWVVGRGY0LTJpM0lWMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAr9ToAfyNB+AV1XuF7fYGeCGJRTZuYcVbBwrUL0YOQBk4tlnmWQkYAz VfbytsRCSHaCRwvTgwWpUUDRlk+vHuTjQ9L2K59wPbks2hlo4JNIbV2h0N0LC8AS mHqLHl2ajRZYFSAvWnC/17kHP7yLKr8aeU9vTDvu65xSnOfcJ308TjZDsTuKmTh4 LsAQqbCnYaTMMe6ysFwifJo72WXK9sWN/nxIoS8Uf41DZ7N6G6hXcYOEfXgbJb5A J6B/n6OMh2L5WExyLRl+QyMDEyoWLaRiHikJ0uXeg28tDytacf3nnJw4YuCD+VcD io27L5RE9D92nTNvVBenDDo7cvjmwdM= -----END CERTIFICATE-----Generated at Wed Jul 2 15:15:37 2025 by rpki-client