$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json) Hash identifier: wo5EnX+KgGRHQ8mjdXl6QPQjkMTWw4SWv1zjzQgGtVU= Subject key identifier: 63:D8:E8:56:AD:CA:25:E1:79:2B:4D:FD:F1:82:BE:8B:2D:D7:32:F1 Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft Manifest number: 01A9 Signing time: Tue 01 Jul 2025 03:39:22 +0000 Manifest this update: Tue 01 Jul 2025 03:39:22 +0000 Manifest next update: Tue 08 Jul 2025 03:39:22 +0000 Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: 33RO9a6/D6sK6F/5AbEjhbht5CGTl02zbrqw4zGcgBU=) 2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: aeO1Mj/elW/xh7ym1J+KF848UMK5HdQa3I9hteU56q0=) 3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: pPZ9JIadC5wyaOareOX2satHOT6x5cmd8WRCUuxQZvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C20, serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Validity Not Before: Jul 1 03:39:22 2025 GMT Not After : Jul 8 03:39:22 2025 GMT Subject: CN=6863586a-1bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:6f:c6:cf:0e:5f:2b:35:9d:af:58:d6:5c: 63:c0:4d:c9:83:a8:0e:a5:8a:18:73:26:c9:b0:1e: 93:bd:89:45:58:0b:4c:2d:e7:5f:e7:0c:af:87:ec: 6c:12:6c:ef:e7:be:01:56:ae:8a:0f:11:a1:50:94: 2f:98:ba:75:13:98:af:bd:b5:6b:7a:26:1a:b7:70: f9:5a:44:39:b6:dc:91:b5:3b:04:12:d6:c3:ee:05: 63:d7:69:57:0f:c7:1b:08:dd:5e:1c:7e:32:10:21: 7e:02:ef:1f:ed:5e:cc:4e:ca:94:0e:4d:5f:85:c4: 4e:38:8b:dd:7f:ad:e1:db:1d:dc:d2:11:03:bd:a2: 34:26:39:ec:af:61:46:db:ca:9f:97:04:15:63:1c: 2e:50:9b:0f:1c:45:2d:20:3a:37:33:a9:72:db:0d: 02:55:12:c5:b1:97:a9:6b:e4:8e:dd:74:05:e8:40: 62:c9:0f:1b:3d:75:9a:e6:45:47:c7:cc:b7:67:f7: c2:96:a0:f1:9f:8d:f7:af:c2:1f:61:fa:15:76:53: f6:ae:6d:2c:21:13:32:75:5a:f0:b6:22:af:bf:c3: 0d:e7:83:81:bf:14:6a:fe:9c:92:70:5c:4a:32:6f: 7f:51:4f:92:25:e0:d2:10:fb:51:53:60:4d:8b:73: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D8:E8:56:AD:CA:25:E1:79:2B:4D:FD:F1:82:BE:8B:2D:D7:32:F1 X509v3 Authority Key Identifier: keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:bb:e9:af:1e:c5:da:12:55:b1:9b:f0:6d:22:b1:bf:fb:fe: 83:0a:d2:e5:a6:ba:80:2a:3c:11:e8:0c:78:ea:e2:3e:3b:a1: 00:6d:af:ce:b2:bc:23:55:96:62:04:84:88:fc:43:06:21:05: 69:c4:01:75:20:c6:02:f9:ad:bf:df:5c:9b:fe:55:e0:15:6b: fa:32:58:41:9e:a5:82:61:63:ed:ab:95:c2:a3:f0:a4:4b:c6: 72:df:a7:55:4e:39:62:39:e8:a3:81:06:d2:f1:71:fe:a5:6c: c5:e9:01:ec:ed:21:4e:75:58:7b:22:f1:75:f3:ad:d7:78:d3: 45:62:c1:15:b0:52:b7:fe:8a:6a:9c:be:34:e0:0f:e1:fb:b1: b3:a5:5a:a6:49:52:08:98:a1:c3:38:10:43:68:66:86:f8:fa: 0d:10:f5:4b:5b:9c:a7:9c:df:83:2c:d9:40:74:13:a0:47:69: de:72:d9:fc:d6:8b:8b:09:a2:ba:79:5e:d4:84:b6:4d:95:4a: 13:ca:4b:3d:0f:a3:12:76:10:a0:2e:e2:b1:5b:ef:d0:e0:e1: 06:93:c2:da:42:63:0d:9e:99:dd:ef:13:fc:7b:a1:49:ae:90: 40:12:cd:68:08:73:a8:eb:dc:de:f6:52:68:92:0f:81:08:62: 88:03:69:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy OUYzQzg4NUIwHhcNMjUwNzAxMDMzOTIyWhcNMjUwNzA4MDMzOTIyWjAYMRYwFAYD VQQDEw02ODYzNTg2YS0xYmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtilvxs8OXys1na9Y1lxjwE3Jg6gOpYoYcybJsB6TvYlFWAtMLedf5wyvh+xs Emzv574BVq6KDxGhUJQvmLp1E5ivvbVreiYat3D5WkQ5ttyRtTsEEtbD7gVj12lX D8cbCN1eHH4yECF+Au8f7V7MTsqUDk1fhcROOIvdf63h2x3c0hEDvaI0Jjnsr2FG 28qflwQVYxwuUJsPHEUtIDo3M6ly2w0CVRLFsZepa+SO3XQF6EBiyQ8bPXWa5kVH x8y3Z/fClqDxn433r8IfYfoVdlP2rm0sIRMydVrwtiKvv8MN54OBvxRq/pyScFxK Mm9/UU+SJeDSEPtRU2BNi3NaXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPY6Fat yiXheStN/fGCvost1zLxMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEMyMC9BNUE0Q0QxMENDNzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlm VVJHdDc2d1plWndwODhpRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXu+mvHsXaElWxm/BtIrG/+/6DCtLlprqAKjwR6Ax46uI+O6EAba/O srwjVZZiBISI/EMGIQVpxAF1IMYC+a2/31yb/lXgFWv6MlhBnqWCYWPtq5XCo/Ck S8Zy36dVTjliOeijgQbS8XH+pWzF6QHs7SFOdVh7IvF1863XeNNFYsEVsFK3/opq nL404A/h+7GzpVqmSVIImKHDOBBDaGaG+PoNEPVLW5ynnN+DLNlAdBOgR2nectn8 1ouLCaK6eV7UhLZNlUoTyks9D6MSdhCgLuKxW+/Q4OEGk8LaQmMNnpnd7xP8e6FJ rpBAEs1oCHOo69ze9lJokg+BCGKIA2mX -----END CERTIFICATE-----Generated at Wed Jul 2 10:15:37 2025 by rpki-client