$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: py+o3GcRJ3ALNkTqOoAI+wU30vKTyg5TUH7O3nRUEpc= Subject key identifier: 6A:BB:52:FD:40:0D:88:06:53:9F:8E:F1:02:95:75:BD:79:07:B1:95 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 26C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 2644 Signing time: Mon 30 Jun 2025 15:46:30 +0000 Manifest this update: Mon 30 Jun 2025 15:46:29 +0000 Manifest next update: Mon 07 Jul 2025 15:46:29 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: Trg0gxDSOQLdF7nonexokHaDgnG+GwmlUQv+kTZ/mDU=) 2: 949FF22A0F8211EE9C28226AC4F9AE02.roa (hash: /caEAePnKT7ITLEvb3LSk2ednKAtBpTkWioTlhfKwbA=) 3: 8FC6588099D711EFB8A4757AC4F9AE02.roa (hash: unwOXbdTfZz7FftNdr0FctWsJH4pDCRSkIqFT/8g7b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9928 (0x26c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Jun 30 15:46:29 2025 GMT Not After : Jul 7 15:46:29 2025 GMT Subject: CN=6862b156-0cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:af:11:ad:04:91:fb:06:b2:35:72:7e:bc:c2: c9:d8:1d:ed:ac:93:6a:be:19:d4:75:e0:b5:bf:32: 8d:12:13:73:fa:4f:15:1e:7e:6c:8c:e8:b4:fc:d8: ae:24:7c:29:c9:c9:9d:99:f2:15:61:ea:20:fa:bb: 1f:00:1a:28:cd:30:6a:aa:15:62:0e:81:8c:3d:51: 1e:cf:1e:16:20:9a:6f:df:1c:24:10:fb:3a:7b:f1: 76:e8:1d:86:a1:dd:9e:85:9a:8c:38:1b:f0:a2:31: bd:4f:6f:fb:9b:bd:2d:a1:44:99:f3:80:b3:b3:3f: 9a:b4:1d:d1:08:e7:ce:4f:42:a4:dc:65:f3:a3:61: ab:10:08:13:a6:c0:3d:03:c5:ca:0f:cc:ed:12:76: 2c:68:0c:0d:78:39:8e:af:6f:7f:bd:23:f4:1f:50: 56:94:a8:78:dc:18:1d:f0:00:9e:33:2b:cf:9a:7f: 45:c0:19:30:3a:86:76:7f:53:dd:31:87:4a:d5:90: 61:b7:18:32:9f:c0:1d:92:77:d0:03:ca:68:52:d5: 9f:24:81:31:6f:e2:84:37:48:cf:28:17:7b:dd:71: 86:52:67:ad:a8:bd:ac:d1:c8:60:92:c6:fa:21:50: 7e:97:51:57:16:19:6d:1b:cb:7a:0a:41:ff:7c:15: fc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BB:52:FD:40:0D:88:06:53:9F:8E:F1:02:95:75:BD:79:07:B1:95 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:04:e5:cb:cd:eb:1d:5f:d8:f2:e2:20:29:19:42:8b:e0:f0: 2b:79:a1:62:0e:b5:0f:4d:e3:51:c0:78:b8:0b:be:e4:f7:ec: d4:eb:37:4b:c0:a4:20:9c:7b:38:32:45:f7:59:ef:d7:54:f4: c9:10:73:6a:d9:3b:22:47:b3:38:f4:aa:88:3c:03:57:99:85: 32:64:04:9c:5d:ad:cd:03:cf:40:fa:e3:57:ca:17:f4:fc:bd: f1:e3:94:1f:07:5f:00:90:11:65:c8:85:25:a2:fd:21:56:ea: 0b:c5:b1:19:15:cf:d3:20:44:ba:68:c2:68:b8:5a:c3:95:bd: 09:32:63:65:70:ee:76:53:41:87:2e:04:f8:9e:5f:0e:66:90: ae:ac:cd:52:66:a4:4e:c5:02:ed:c4:95:02:2c:80:81:ec:21: 77:fc:1f:49:e0:7b:a8:05:e4:55:0c:0f:3d:71:35:a4:30:4e: a2:90:cf:77:4f:44:44:ac:e1:12:29:2c:cc:86:d5:90:12:fb: 00:e7:62:b1:f3:fe:ba:ed:d7:9e:71:c3:bd:f5:09:ef:08:68: c5:17:81:6a:27:fb:bc:fe:ba:3a:f0:f7:ad:1a:64:f8:a3:0a: c8:f9:55:fb:93:25:25:85:20:53:79:02:f0:d4:ae:45:18:2c: fe:ac:d3:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjUwNjMwMTU0NjI5WhcNMjUwNzA3MTU0NjI5WjAYMRYwFAYD VQQDEw02ODYyYjE1Ni0wY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1a8RrQSR+wayNXJ+vMLJ2B3trJNqvhnUdeC1vzKNEhNz+k8VHn5sjOi0/Niu JHwpycmdmfIVYeog+rsfABoozTBqqhViDoGMPVEezx4WIJpv3xwkEPs6e/F26B2G od2ehZqMOBvwojG9T2/7m70toUSZ84Czsz+atB3RCOfOT0Kk3GXzo2GrEAgTpsA9 A8XKD8ztEnYsaAwNeDmOr29/vSP0H1BWlKh43Bgd8ACeMyvPmn9FwBkwOoZ2f1Pd MYdK1ZBhtxgyn8AdknfQA8poUtWfJIExb+KEN0jPKBd73XGGUmetqL2s0chgksb6 IVB+l1FXFhltG8t6CkH/fBX8jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGq7Uv1A DYgGU5+O8QKVdb15B7GVMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeBOXLzesdX9jy4iApGUKL4PAreaFiDrUPTeNRwHi4C77k9+zU6zdL wKQgnHs4MkX3We/XVPTJEHNq2TsiR7M49KqIPANXmYUyZAScXa3NA89A+uNXyhf0 /L3x45QfB18AkBFlyIUlov0hVuoLxbEZFc/TIES6aMJouFrDlb0JMmNlcO52U0GH LgT4nl8OZpCurM1SZqROxQLtxJUCLICB7CF3/B9J4HuoBeRVDA89cTWkME6ikM93 T0RErOESKSzMhtWQEvsA52Kx8/667deeccO99QnvCGjFF4FqJ/u8/ro68PetGmT4 owrI+VX7kyUlhSBTeQLw1K5FGCz+rNPs -----END CERTIFICATE-----Generated at Wed Jul 2 03:37:30 2025 by rpki-client