$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: TEBJIRgZKHY1CXKMkR46PHS/C0WqnBdbk78CdCo64qU= Subject key identifier: C7:4E:2D:97:59:BB:2A:3D:A9:59:EB:43:61:A9:39:18:A1:E8:E4:49 Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 0997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 0991 Signing time: Wed 02 Jul 2025 20:18:58 +0000 Manifest this update: Wed 02 Jul 2025 20:18:58 +0000 Manifest next update: Wed 09 Jul 2025 20:18:58 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: Q9JcFjY4fKxu9bgXjkqvB0DiimcNdioDfxsLfG56Yp8=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: LjFZkARdigofgjMJFtc/qBM/m3OntU9kJkRF62lZTLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Jul 2 20:18:58 2025 GMT Not After : Jul 9 20:18:58 2025 GMT Subject: CN=68659432-37e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:cd:dd:08:b0:03:ee:0f:e5:5b:d2:d2:7e: 74:3e:f3:18:c2:75:95:33:75:fd:c3:46:3d:83:65: 1a:a2:eb:f4:cb:1a:55:e7:08:5c:4d:23:77:6c:3f: 3b:04:76:b2:23:c7:87:91:5c:f3:88:4b:ed:d2:97: 90:8d:9a:60:2b:3b:35:ab:29:2c:ff:fe:16:a8:b6: 35:ab:86:4c:62:68:54:12:16:e0:cb:a1:39:b3:75: d5:25:1c:41:c8:f5:a8:61:9d:6c:bc:f3:93:46:e9: ca:3d:54:26:34:37:ae:00:b0:81:bf:20:93:ed:db: bf:0f:39:55:eb:52:47:b7:59:48:1f:bb:a0:18:64: dc:e8:b3:b0:08:66:1b:24:be:62:23:07:25:0a:e4: f1:65:a8:b9:f6:96:d6:1f:45:5f:40:c1:dd:20:4a: 44:ec:34:0b:44:a5:12:d8:f6:4b:6b:0b:10:3e:bf: df:ac:58:a5:fb:0d:78:be:5f:0c:f5:7f:c2:ae:9b: bd:f4:b7:69:1c:2b:67:e7:3c:fe:96:2e:26:12:b1: 50:56:5e:ec:db:db:52:02:b5:8b:a9:ef:db:2d:37: 4d:70:57:14:24:3f:08:ce:b1:fd:81:92:a7:c6:31: 7e:e4:67:0c:fd:24:00:d5:72:fe:26:d0:0d:ed:53: 55:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4E:2D:97:59:BB:2A:3D:A9:59:EB:43:61:A9:39:18:A1:E8:E4:49 X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:68:70:39:45:28:c4:d7:37:93:51:2d:2e:cc:5c:b5:f1:56: f6:9f:bb:ab:f9:5c:73:15:72:06:d6:f3:73:45:e0:92:3a:1c: cd:08:4b:64:af:d1:de:99:78:7d:56:35:d2:39:7f:73:05:dc: e8:c4:01:84:49:55:88:a2:0a:16:0c:24:30:7a:47:03:97:f5: 51:04:17:b6:5a:f7:85:35:6b:c5:63:32:d9:54:84:a6:d1:ad: 19:db:1a:80:14:01:de:54:79:8e:89:51:33:45:ef:d6:4d:fb: 2a:df:6c:79:93:fc:8f:7e:d8:1d:0e:98:5e:47:f3:19:b3:56: 6b:5c:af:03:3e:1c:a7:1a:38:a1:e5:da:e1:ce:7e:3b:a4:11: f6:2b:be:02:90:7d:0d:9c:6e:3f:46:40:a1:d5:7f:25:59:07: f6:e1:eb:c7:2a:84:dd:cf:99:a3:4c:d9:c1:56:de:95:47:72: 1d:6c:8d:07:82:e7:54:b1:e5:9c:44:e7:33:f5:3c:a7:52:1c: d5:ec:d6:1d:f1:bb:2c:ac:43:dc:86:77:e0:0f:29:10:41:3f: 0d:3c:f1:91:43:bc:94:3c:fa:7b:fb:ea:33:32:a9:8e:8d:0b: 05:4e:37:74:53:46:aa:a3:05:36:46:33:50:73:40:4b:2e:c3: c3:75:5f:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjUwNzAyMjAxODU4WhcNMjUwNzA5MjAxODU4WjAYMRYwFAYD VQQDEw02ODY1OTQzMi0zN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxrN3QiwA+4P5VvS0n50PvMYwnWVM3X9w0Y9g2Uaouv0yxpV5whcTSN3bD87 BHayI8eHkVzziEvt0peQjZpgKzs1qyks//4WqLY1q4ZMYmhUEhbgy6E5s3XVJRxB yPWoYZ1svPOTRunKPVQmNDeuALCBvyCT7du/DzlV61JHt1lIH7ugGGTc6LOwCGYb JL5iIwclCuTxZai59pbWH0VfQMHdIEpE7DQLRKUS2PZLawsQPr/frFil+w14vl8M 9X/Crpu99LdpHCtn5zz+li4mErFQVl7s29tSArWLqe/bLTdNcFcUJD8IzrH9gZKn xjF+5GcM/SQA1XL+JtAN7VNVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdOLZdZ uyo9qVnrQ2GpORih6ORJMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRaHA5RSjE1zeTUS0uzFy18Vb2n7ur+VxzFXIG1vNzReCSOhzNCEtk r9HemXh9VjXSOX9zBdzoxAGESVWIogoWDCQwekcDl/VRBBe2WveFNWvFYzLZVISm 0a0Z2xqAFAHeVHmOiVEzRe/WTfsq32x5k/yPftgdDpheR/MZs1ZrXK8DPhynGjih 5drhzn47pBH2K74CkH0NnG4/RkCh1X8lWQf24evHKoTdz5mjTNnBVt6VR3IdbI0H gudUseWcROcz9TynUhzV7NYd8bssrEPchnfgDykQQT8NPPGRQ7yUPPp7++ozMqmO jQsFTjd0U0aqowU2RjNQc0BLLsPDdV/b -----END CERTIFICATE-----Generated at Fri Jul 4 12:04:11 2025 by rpki-client