$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft File: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json) Hash identifier: XmRKSbAxECRvQ+oGEcU9+MRH5eP+enTAOcSj8xt010s= Subject key identifier: AF:98:9B:DE:AA:E9:6F:C4:08:FB:64:28:71:DE:5B:4E:D6:4B:7E:DF Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3 Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft Manifest number: 01D9 Signing time: Thu 03 Jul 2025 02:52:08 +0000 Manifest this update: Thu 03 Jul 2025 02:52:08 +0000 Manifest next update: Thu 10 Jul 2025 02:52:07 +0000 Files and hashes: 1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: gXwn8UsqfBpbCsh/HHKzhdsDUcsk8NZbqbGBptGWlfE=) 2: 2F43497CA16711EFBB0B733EC4F9AE02.roa (hash: ZYbaEoAWqyp/aPXD71n7sec2EkFfTfM2g3XustUPS1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3 Validity Not Before: Jul 3 02:52:08 2025 GMT Not After : Jul 10 02:52:07 2025 GMT Subject: CN=6865f058-2844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:f0:3a:66:da:91:a5:d3:ec:86:bb:d3:e8: 7b:33:28:6d:d3:e5:ef:21:99:43:b7:4a:e2:c1:f3: 0c:29:67:a6:a7:7d:7a:87:2b:ac:93:17:c1:6c:99: 7b:49:7d:f8:e7:4a:52:f7:00:14:f3:16:8b:de:01: 11:95:72:8f:2b:1f:6b:8f:b3:10:03:b9:f1:77:13: 28:23:e2:fd:de:17:a8:4f:e8:0c:59:13:cf:24:29: 6d:2c:16:71:25:5a:db:4f:62:22:35:d1:dd:32:21: d5:6a:0b:1c:fa:0c:1b:c8:6d:aa:9a:67:40:03:8d: 92:d0:9b:21:f1:c1:84:4b:2e:bb:97:9d:0f:e6:27: 51:5c:40:26:f7:88:3a:89:08:6f:89:36:3f:ee:fe: 78:9c:d3:19:eb:7d:6b:08:dc:d3:b3:ef:fd:58:25: 7d:df:60:9c:17:c9:8b:42:5c:72:fe:62:96:62:54: ac:31:ba:5d:a3:87:09:b0:11:03:a4:6e:de:31:d1: 97:34:6c:ad:24:e7:c8:72:b0:5c:63:4c:db:d8:87: d7:cc:d9:cc:ca:8e:5e:c7:89:76:83:c9:54:1e:37: 8f:c8:4d:1c:5f:87:fa:00:f0:3c:18:98:c7:a1:2c: 8b:0b:b4:a6:4f:5a:7b:7e:e2:4c:20:d9:10:29:87: 3f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:98:9B:DE:AA:E9:6F:C4:08:FB:64:28:71:DE:5B:4E:D6:4B:7E:DF X509v3 Authority Key Identifier: keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:38:11:67:79:f7:6d:23:36:40:46:11:8a:88:91:94:1f:5b: 6b:8b:02:17:6f:26:2c:45:8c:a6:49:b9:0b:83:8e:74:4b:4a: b3:46:dd:94:5a:5c:44:f6:a3:8f:91:06:92:fe:cc:ab:2c:4a: fd:d2:d2:37:39:34:85:54:7f:36:3f:a5:2f:48:0c:f6:53:d1: 91:b9:ec:00:56:2d:46:19:f3:a3:3e:d3:70:b5:70:2d:79:7e: 53:8b:51:30:7f:09:46:20:34:82:00:78:4f:f1:2a:a9:cd:31: 7b:dc:9b:3f:c0:d6:7b:bb:c5:1e:f9:20:d6:a2:c2:e5:7d:9d: 21:41:37:82:8d:a7:31:93:43:3f:6b:e2:74:af:14:cb:09:6f: f5:fb:1c:b6:c3:7e:c7:38:73:39:ae:17:67:06:58:b3:23:73: 9b:9c:6b:7e:26:aa:ca:13:40:1b:9d:67:6a:92:e8:f1:9e:71: c8:5b:82:f2:6a:5a:83:50:9e:57:d3:53:26:c0:26:c8:11:2b: 1a:fc:bc:95:ca:30:11:06:5a:15:29:41:52:dc:45:be:a0:5e: 9e:54:c3:7a:46:36:18:ae:a3:c1:91:9f:4e:f9:49:f2:82:d2: 59:82:bb:14:49:bb:bd:27:f6:fc:ec:80:d5:3a:13:f0:a9:1f: 8d:79:be:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MkExMTAvBgNVBAUTKEYxMjVBMEU2QjhFQkRDMTM2QUI1MzA3RDQ5MTQ3MTBF OTAwNjNCQzMwHhcNMjUwNzAzMDI1MjA4WhcNMjUwNzEwMDI1MjA3WjAYMRYwFAYD VQQDEw02ODY1ZjA1OC0yODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzy/wOmbakaXT7Ia70+h7Myht0+XvIZlDt0riwfMMKWemp316hyuskxfBbJl7 SX3450pS9wAU8xaL3gERlXKPKx9rj7MQA7nxdxMoI+L93heoT+gMWRPPJCltLBZx JVrbT2IiNdHdMiHVagsc+gwbyG2qmmdAA42S0Jsh8cGESy67l50P5idRXEAm94g6 iQhviTY/7v54nNMZ631rCNzTs+/9WCV932CcF8mLQlxy/mKWYlSsMbpdo4cJsBED pG7eMdGXNGytJOfIcrBcY0zb2IfXzNnMyo5ex4l2g8lUHjePyE0cX4f6APA8GJjH oSyLC7SmT1p7fuJMINkQKYc/OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+Ym96q 6W/ECPtkKHHeW07WS37fMB8GA1UdIwQYMBaAFPEloOa469wTarUwfUkUcQ6QBjvD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkyQS84MUEzMDA3MDg2 NjMxMUVEQTAyNDZCMjVDNEY5QUUwMi84U1dnNXJqcjNCTnF0VEI5U1JSeERwQUdP OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhTV2c1cmpyM0JOcXRUQjlTUlJ4RHBBR084TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkyQS84MUEzMDA3MDg2NjMxMUVEQTAyNDZCMjVDNEY5QUUwMi84U1dnNXJqcjNC TnF0VEI5U1JSeERwQUdPOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWOBFnefdtIzZARhGKiJGUH1triwIXbyYsRYymSbkLg450S0qzRt2U WlxE9qOPkQaS/syrLEr90tI3OTSFVH82P6UvSAz2U9GRuewAVi1GGfOjPtNwtXAt eX5Ti1EwfwlGIDSCAHhP8SqpzTF73Js/wNZ7u8Ue+SDWosLlfZ0hQTeCjacxk0M/ a+J0rxTLCW/1+xy2w37HOHM5rhdnBlizI3ObnGt+JqrKE0AbnWdqkujxnnHIW4Ly alqDUJ5X01MmwCbIESsa/LyVyjARBloVKUFS3EW+oF6eVMN6RjYYrqPBkZ9O+Uny gtJZgrsUSbu9J/b87IDVOhPwqR+Neb4t -----END CERTIFICATE-----Generated at Fri Jul 4 10:57:53 2025 by rpki-client