$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: MjGlIGmez7zH4xXbUj4SWj1wSfkZ+8jWCWcsN819KJI= Subject key identifier: 71:E5:5F:27:95:F9:30:F4:73:A1:D1:CA:5A:29:7D:AD:E2:35:AB:8D Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 0444 Signing time: Thu 03 Jul 2025 00:37:44 +0000 Manifest this update: Thu 03 Jul 2025 00:37:44 +0000 Manifest next update: Thu 10 Jul 2025 00:37:44 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: KS66ub5DpHpK5TIA6CisONKXWK6FAXbbXceGyvy8/NA=) 2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: shUyL0T+nIZClfZrL/H8TAF10vSCmqRMW+JFhYiGjJU=) 3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: PInFHi+DRZ/0Ub/EKAgjN1FIJnedDnHONJpIq7oTfD8=) 4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: vkj3SfiZ1waq+IfpcqocmD4VCDj2+bbKheOVyJpVYTY=) 5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: VaOofZOdoeXB+ROUfhfuam0fJhFDWk1WoiIImzNsQ8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: Jul 3 00:37:44 2025 GMT Not After : Jul 10 00:37:44 2025 GMT Subject: CN=6865d0d8-ec34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5a:88:a0:36:4c:ca:2a:d8:36:f2:ee:ae:5e: b5:70:41:b9:d1:0a:cd:e2:8e:32:64:05:94:46:6e: 0e:ab:fb:2c:ee:54:0a:ae:f6:e9:c0:15:23:3a:aa: 70:c7:e9:a8:8b:51:fb:91:33:43:4c:5d:ce:6f:58: 9b:8d:a5:79:85:4b:ba:0e:69:17:f1:53:f8:0f:8c: 0a:f9:9d:52:3b:2a:1e:10:a4:80:5b:31:46:73:f7: 81:50:bd:d7:b1:57:c9:6c:07:10:83:84:83:f5:77: c3:12:cb:20:0a:78:45:25:ea:c1:95:7b:5a:36:5c: ce:f3:22:7c:bc:5d:eb:cf:7f:1d:6c:d9:33:fd:da: 4f:26:72:be:bd:f8:62:fc:2e:63:93:31:ae:c7:b2: 5f:cd:0e:2c:d3:6d:4a:df:9f:e7:8f:7d:8b:f0:8c: 94:b2:46:32:bc:9e:10:9f:82:ff:cc:71:75:d0:f3: 3d:04:8a:42:3d:29:7d:79:42:a5:2a:bb:96:0a:c9: 8f:64:ff:fe:2f:aa:ab:92:ef:b8:fb:a8:6c:a3:cc: db:ae:a9:a1:ed:58:2a:6e:39:eb:69:67:6c:a3:ab: 86:d2:59:79:e4:2c:c9:25:c7:99:00:26:73:00:65: 29:cd:0f:4f:af:e8:40:f0:6e:a8:0d:f4:01:d7:d8: 64:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E5:5F:27:95:F9:30:F4:73:A1:D1:CA:5A:29:7D:AD:E2:35:AB:8D X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ed:95:2d:dd:84:dc:23:50:e4:cc:2a:69:74:b3:e7:f1:93: 6a:be:fa:88:e8:ac:b5:03:42:3a:c2:e9:50:c1:f6:ec:c0:be: c6:40:21:c4:e1:70:a9:a7:ae:1f:41:6e:b7:f4:a6:ef:d5:2a: 68:d3:69:12:4d:ff:f5:10:d0:48:9b:29:c5:4b:fa:6e:62:fd: 29:8f:aa:d1:db:95:95:fa:09:21:d1:4c:aa:d4:be:b5:3a:a3: 05:d7:bb:6d:e2:75:9d:87:ff:b2:2e:cb:06:1e:4c:81:df:20: f0:9c:03:60:70:63:85:ba:73:e4:cf:ae:9f:d3:de:35:84:37: 8b:fb:bf:93:5c:3c:f8:ad:84:e0:15:f4:77:10:8d:61:1c:c2: ca:bd:60:9b:d9:24:9f:92:75:bf:e5:88:e3:58:64:4f:07:6c: 7a:c8:e5:ff:5c:4c:99:3f:c6:85:ca:8b:6f:97:cc:91:4c:ac: 91:ab:50:cd:ea:fc:5a:5a:b6:8f:19:8b:cd:56:86:64:78:dc: 6e:f6:16:c8:22:c8:96:3c:8e:b1:a4:82:37:36:45:6d:a6:bc: d8:f3:a4:db:40:d4:7d:47:c0:51:9f:c2:ba:ea:7f:8e:8a:74: 7e:f0:e2:71:91:a9:c7:3a:a4:11:ef:e0:78:a7:34:c8:f5:11: 0f:43:37:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjUwNzAzMDAzNzQ0WhcNMjUwNzEwMDAzNzQ0WjAYMRYwFAYD VQQDEw02ODY1ZDBkOC1lYzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41qIoDZMyirYNvLurl61cEG50QrN4o4yZAWURm4Oq/ss7lQKrvbpwBUjOqpw x+moi1H7kTNDTF3Ob1ibjaV5hUu6DmkX8VP4D4wK+Z1SOyoeEKSAWzFGc/eBUL3X sVfJbAcQg4SD9XfDEssgCnhFJerBlXtaNlzO8yJ8vF3rz38dbNkz/dpPJnK+vfhi /C5jkzGux7JfzQ4s021K35/nj32L8IyUskYyvJ4Qn4L/zHF10PM9BIpCPSl9eUKl KruWCsmPZP/+L6qrku+4+6hso8zbrqmh7VgqbjnraWdso6uG0ll55CzJJceZACZz AGUpzQ9Pr+hA8G6oDfQB19hk+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHlXyeV +TD0c6HRylopfa3iNauNMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA7ZUt3YTcI1DkzCppdLPn8ZNqvvqI6Ky1A0I6wulQwfbswL7GQCHE 4XCpp64fQW639Kbv1Spo02kSTf/1ENBImynFS/puYv0pj6rR25WV+gkh0Uyq1L61 OqMF17tt4nWdh/+yLssGHkyB3yDwnANgcGOFunPkz66f0941hDeL+7+TXDz4rYTg FfR3EI1hHMLKvWCb2SSfknW/5YjjWGRPB2x6yOX/XEyZP8aFyotvl8yRTKyRq1DN 6vxaWraPGYvNVoZkeNxu9hbIIsiWPI6xpII3NkVtprzY86TbQNR9R8BRn8K66n+O inR+8OJxkanHOqQR7+B4pzTI9REPQzfx -----END CERTIFICATE-----Generated at Thu Jul 3 08:10:10 2025 by rpki-client