$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: C/jOHwC+MTLMFiAIWfedNHJT1s4vvtG8WvbU9E9EaBc= Subject key identifier: 96:97:24:E4:BB:BE:E3:87:4B:1F:13:DF:47:3C:D9:2C:C4:74:08:A5 Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 0457 Signing time: Thu 03 Jul 2025 00:30:19 +0000 Manifest this update: Thu 03 Jul 2025 00:30:19 +0000 Manifest next update: Thu 10 Jul 2025 00:30:19 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: FjCFGHdqU6aeFEZmlctFMOBlyRP9JnKYU3Lku2uoYy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Validity Not Before: Jul 3 00:30:19 2025 GMT Not After : Jul 10 00:30:19 2025 GMT Subject: CN=6865cf1b-516c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:31:0e:1c:00:a8:1e:7e:a7:58:3e:7c:54: a5:15:ac:cb:42:5f:10:b4:1b:7b:f2:62:c5:14:41: 41:7f:0f:a7:84:62:21:4d:fd:86:35:84:60:ee:67: 0b:de:b9:16:69:12:7e:ad:a1:41:2e:2a:ec:5b:f7: e6:3e:ac:79:d7:db:a7:ff:ef:6f:84:26:76:8e:02: c9:c8:b2:53:27:a9:13:bf:28:f7:c2:88:d3:66:c6: ec:0f:49:50:02:86:97:28:cc:1b:e6:64:13:32:7c: d5:b6:ee:9c:a9:a7:7b:09:97:9a:98:ba:c5:f6:6a: 9b:ce:6f:4c:ad:6e:f5:1d:6a:47:5a:93:ad:c4:44: 0e:57:37:14:72:06:d9:da:f4:7c:f6:20:ac:96:f4: bb:5c:31:08:01:6c:d0:9c:63:54:d8:8f:e9:04:de: 42:d9:51:fd:c0:5f:13:68:7b:b2:43:9c:5f:51:9d: 86:8a:84:31:b4:f4:06:f1:b1:49:c6:37:47:b9:14: 0f:76:fb:75:54:c9:86:57:c3:77:fc:3d:36:eb:f4: e4:34:7d:3d:75:7c:6f:77:13:26:b6:e5:fb:92:c0: 1d:6b:28:ec:b5:cf:01:0b:d4:11:d6:3a:69:4c:a8: 1b:67:cd:8c:a1:66:6e:d7:f4:67:18:b0:70:f9:58: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:97:24:E4:BB:BE:E3:87:4B:1F:13:DF:47:3C:D9:2C:C4:74:08:A5 X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:7e:f3:ab:21:ee:5b:10:81:f7:ba:00:70:87:b4:df:4c:35: bb:59:7a:be:32:d4:48:a9:54:35:fd:58:6e:bd:b2:8a:ec:fa: 51:18:8f:a3:bb:70:55:6c:5c:29:60:45:47:23:6b:b5:32:13: 0c:21:16:18:8b:6d:ed:7f:4b:3a:6d:d8:74:ec:22:11:ee:09: f8:da:26:ae:ba:c7:64:92:6e:da:3d:2c:b0:17:6b:68:21:75: d8:d2:8a:73:fd:ef:d8:cb:a2:dc:3b:fd:19:64:bb:e7:95:cf: 20:0f:3f:68:84:61:7a:5e:df:a9:5e:ce:e1:50:60:f5:db:07: d2:08:fd:09:d4:83:02:20:da:d7:31:26:c5:fc:9a:b5:c3:40: 80:c3:93:c5:54:e0:ba:66:23:be:c6:56:80:d4:83:65:97:41: 4a:9b:12:05:b3:7f:60:d4:f7:58:98:7c:d7:62:a3:8e:e1:e3: c5:a6:df:47:ef:47:60:4f:6a:00:fe:01:91:5d:95:6b:08:af: 12:12:d9:73:e9:da:3a:b8:81:f9:b5:4e:1d:8d:8e:78:82:c9: 06:88:df:ee:d6:c7:42:86:05:ce:ed:25:d5:1b:46:ff:04:1a: e0:06:b0:b6:fe:7f:78:07:95:10:71:ab:51:87:71:f2:64:fa: bb:e0:74:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjUwNzAzMDAzMDE5WhcNMjUwNzEwMDAzMDE5WjAYMRYwFAYD VQQDEw02ODY1Y2YxYi01MTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl8xDhwAqB5+p1g+fFSlFazLQl8QtBt78mLFFEFBfw+nhGIhTf2GNYRg7mcL 3rkWaRJ+raFBLirsW/fmPqx519un/+9vhCZ2jgLJyLJTJ6kTvyj3wojTZsbsD0lQ AoaXKMwb5mQTMnzVtu6cqad7CZeamLrF9mqbzm9MrW71HWpHWpOtxEQOVzcUcgbZ 2vR89iCslvS7XDEIAWzQnGNU2I/pBN5C2VH9wF8TaHuyQ5xfUZ2GioQxtPQG8bFJ xjdHuRQPdvt1VMmGV8N3/D026/TkNH09dXxvdxMmtuX7ksAdayjstc8BC9QR1jpp TKgbZ82MoWZu1/RnGLBw+Vj6iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaXJOS7 vuOHSx8T30c82SzEdAilMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSfvOrIe5bEIH3ugBwh7TfTDW7WXq+MtRIqVQ1/VhuvbKK7PpRGI+j u3BVbFwpYEVHI2u1MhMMIRYYi23tf0s6bdh07CIR7gn42iauusdkkm7aPSywF2to IXXY0opz/e/Yy6LcO/0ZZLvnlc8gDz9ohGF6Xt+pXs7hUGD12wfSCP0J1IMCINrX MSbF/Jq1w0CAw5PFVOC6ZiO+xlaA1INll0FKmxIFs39g1PdYmHzXYqOO4ePFpt9H 70dgT2oA/gGRXZVrCK8SEtlz6do6uIH5tU4djY54gskGiN/u1sdChgXO7SXVG0b/ BBrgBrC2/n94B5UQcatRh3HyZPq74HSQ -----END CERTIFICATE-----Generated at Thu Jul 3 18:33:29 2025 by rpki-client