$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: V/X8SgxLZ50d155JMKiJOH7AzlyWODmooBXw9sVrw/s= Subject key identifier: 5C:F7:DB:05:85:33:5E:56:7B:5C:AB:A6:82:0E:33:2A:3A:2C:63:0A Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 08B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 08A8 Signing time: Wed 02 Jul 2025 20:47:58 +0000 Manifest this update: Wed 02 Jul 2025 20:47:58 +0000 Manifest next update: Wed 09 Jul 2025 20:47:58 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: Q2Aj6+tau6EFKIepwc5Cviq6r+qOiTAO4+uonkOghSg=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2230 (0x8b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Jul 2 20:47:58 2025 GMT Not After : Jul 9 20:47:58 2025 GMT Subject: CN=68659afe-8990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:06:4f:99:79:35:ef:f1:72:65:bd:28:3b: 6c:ae:a4:d3:f6:a6:11:1b:34:12:a0:96:df:d5:8a: fe:60:17:cd:94:e7:3a:ae:0e:87:8e:58:67:1d:a5: dc:a1:dd:34:b8:c2:55:6f:34:66:4b:ea:67:04:18: c5:de:90:a5:11:72:40:7a:aa:93:74:ca:2a:37:df: 92:0a:4f:9a:c7:52:7a:e2:30:a7:03:a7:6a:df:b5: 63:5f:08:f8:30:53:74:71:5a:6a:1f:1e:a5:c3:6f: 54:49:3e:06:1f:85:b0:bb:b6:8f:ed:3b:84:e2:c5: c8:57:0a:c2:99:46:20:0c:63:b7:55:d8:3b:f6:81: 43:e4:28:00:0f:89:f0:0e:21:67:25:81:2b:63:51: 78:5f:9c:57:93:33:62:af:21:da:76:94:7d:39:f4: 8e:8d:6e:80:f5:f6:90:2f:98:7b:70:b3:77:0f:a3: 52:8f:e6:06:07:1f:8c:53:f4:c8:ce:b3:fb:cd:ba: 10:76:7d:47:6f:58:35:f2:ba:0a:65:03:3a:4a:ad: 4a:e9:d9:11:cf:eb:3e:e0:6c:e8:09:c6:b8:b0:ee: 56:86:eb:ba:3e:af:6b:9b:66:d3:54:e2:2f:fe:6f: 6d:73:69:45:67:7f:9c:70:fe:e8:6c:89:e9:88:5d: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F7:DB:05:85:33:5E:56:7B:5C:AB:A6:82:0E:33:2A:3A:2C:63:0A X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:7e:b2:b3:7b:8a:20:ba:a5:84:e2:dd:fe:7b:7a:b6:1a:51: 8f:cb:71:52:bf:f6:bd:db:dc:07:ea:62:14:88:4c:ab:b4:e6: c6:b0:ae:b2:4c:a8:64:df:6d:90:8c:7f:00:3e:6d:9e:2c:a6: 2e:9a:01:2d:32:96:b2:39:3f:9f:84:cd:27:63:f0:1e:c4:7e: c4:67:d8:95:6c:db:72:d3:7f:af:bb:d8:6e:c9:24:f7:88:6a: f0:8b:d0:ed:d4:49:3c:cf:fc:50:04:14:ad:8c:66:64:17:49: 17:ad:c6:4e:00:e0:b7:d4:75:13:8d:0c:7f:51:91:c7:77:72: 42:3a:87:2c:e4:e8:8a:da:94:c1:66:e8:9a:5e:f2:8e:62:65: b3:a7:8c:ca:c3:27:ea:64:00:69:07:f7:0e:97:a1:18:fa:b9: 27:b4:76:49:f5:bb:cc:5f:d7:b9:2c:1b:db:cb:c9:7d:d0:76: 19:0f:59:a4:82:ff:63:3e:8f:d5:49:25:48:8f:ee:3b:fd:7f: 75:7d:8c:2b:80:bd:93:87:8e:c5:10:d4:38:75:66:de:e6:fc: 9c:db:c8:10:65:8f:56:35:a1:d9:2f:64:15:8d:36:00:a4:22: 72:e5:d7:7d:8d:b1:fc:b4:24:e1:b3:63:ec:14:cd:4d:70:75: c9:b2:ec:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwNzAyMjA0NzU4WhcNMjUwNzA5MjA0NzU4WjAYMRYwFAYD VQQDEw02ODY1OWFmZS04OTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXMGT5l5Ne/xcmW9KDtsrqTT9qYRGzQSoJbf1Yr+YBfNlOc6rg6HjlhnHaXc od00uMJVbzRmS+pnBBjF3pClEXJAeqqTdMoqN9+SCk+ax1J64jCnA6dq37VjXwj4 MFN0cVpqHx6lw29UST4GH4Wwu7aP7TuE4sXIVwrCmUYgDGO3Vdg79oFD5CgAD4nw DiFnJYErY1F4X5xXkzNiryHadpR9OfSOjW6A9faQL5h7cLN3D6NSj+YGBx+MU/TI zrP7zboQdn1Hb1g18roKZQM6Sq1K6dkRz+s+4GzoCca4sO5Whuu6Pq9rm2bTVOIv /m9tc2lFZ3+ccP7obInpiF2NjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFz32wWF M15We1yrpoIOMyo6LGMKMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIfrKze4oguqWE4t3+e3q2GlGPy3FSv/a929wH6mIUiEyrtObGsK6y TKhk322QjH8APm2eLKYumgEtMpayOT+fhM0nY/AexH7EZ9iVbNty03+vu9huyST3 iGrwi9Dt1Ek8z/xQBBStjGZkF0kXrcZOAOC31HUTjQx/UZHHd3JCOocs5OiK2pTB ZuiaXvKOYmWzp4zKwyfqZABpB/cOl6EY+rkntHZJ9bvMX9e5LBvby8l90HYZD1mk gv9jPo/VSSVIj+47/X91fYwrgL2Th47FENQ4dWbe5vyc28gQZY9WNaHZL2QVjTYA pCJy5dd9jbH8tCThs2PsFM1NcHXJsuwC -----END CERTIFICATE-----Generated at Thu Jul 3 14:41:32 2025 by rpki-client