$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json) Hash identifier: wEZ9KzhtE3OtIEaIihcKEZggGoO8BuceT0KF2WjLWnM= Subject key identifier: 1E:42:CF:56:AB:7C:E6:87:76:8B:4E:E8:F3:A2:E5:A1:2A:26:41:85 Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 0B4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft Manifest number: 0B26 Signing time: Wed 02 Jul 2025 19:30:25 +0000 Manifest this update: Wed 02 Jul 2025 19:30:24 +0000 Manifest next update: Wed 09 Jul 2025 19:30:24 +0000 Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: epOQPIBlzjkeX3g9vXzYhPxnqibq1hRC165N8+dMU3g=) 2: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: H9hbPUbdv0cUQiC5whOpkC+JQu6c3qm0FHMfkH/xI3Y=) 3: DE437646F8A911EB98242219C4F9AE02.roa (hash: qO/L9iOGcVT7Zy5+lQ1QEnr1iK0Ar+vJn8jp9AXsGQU=) 4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: BML327IqAumg1Qf2fd2jwUkaILEe0UriC88ZGk+s8xU=) 5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: dSI3Emdz4l81LDdf6Ly+xEHJKZsAFGwWrqPYXFTwQHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2890 (0xb4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: Jul 2 19:30:24 2025 GMT Not After : Jul 9 19:30:24 2025 GMT Subject: CN=686588d1-033c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:bc:41:06:b8:3a:59:e5:06:79:52:1b:f1: 6e:fe:e9:55:94:9f:b1:2e:4c:7e:7c:d7:c9:82:01: 59:cd:51:81:94:5c:32:57:c8:b7:25:d9:59:7e:12: 42:47:43:a7:55:43:50:dd:e9:fa:75:d4:bc:28:b7: fe:14:9f:71:91:70:9c:4c:ca:84:df:90:55:6b:57: 7c:5c:a0:23:25:a6:7b:df:ff:04:c0:f2:6f:d9:0d: 42:f3:b3:eb:c6:43:a5:a8:8f:6a:3e:8f:61:85:cf: 66:32:79:c0:77:08:74:a0:48:59:40:2f:4b:7e:c8: 92:80:b1:b2:46:49:65:83:8b:a4:f0:f4:b5:76:df: ad:0a:ed:4d:e3:34:b7:a1:8d:0e:0b:88:c0:a7:55: 71:b2:8b:e7:9b:34:c2:2b:d8:c6:e1:ba:ae:df:d6: 84:4e:49:fd:62:93:bf:5f:ff:78:db:5d:41:f7:e9: 18:b3:76:30:47:a2:16:ff:77:f7:ee:4d:0c:92:64: 72:28:cd:96:74:f5:61:9d:ed:f6:95:75:b8:83:e8: 46:9e:07:0e:11:56:36:84:54:28:01:36:28:bd:dd: 24:bc:f4:3b:00:2c:03:2f:9d:64:f2:b4:15:a1:21: ff:de:72:68:fa:0d:3a:d3:a4:2e:33:ca:42:58:3f: 2f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:42:CF:56:AB:7C:E6:87:76:8B:4E:E8:F3:A2:E5:A1:2A:26:41:85 X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:59:33:ac:6d:8b:fa:f5:f8:61:d4:2e:1a:d0:31:30:73:60: 4a:d4:5c:ea:c6:7d:9a:e9:a1:c5:32:96:f7:94:db:df:f5:b1: 98:a6:39:04:61:ab:ba:60:76:32:b6:3c:2c:f5:98:42:7d:4e: fe:f0:65:7b:be:62:f5:7b:8e:4b:97:43:91:21:ac:84:df:03: 94:cd:7e:c3:4c:81:8a:a6:d6:94:ca:86:a8:b2:99:03:6b:c0: 66:15:ec:0d:ef:b0:86:87:3b:8f:4c:1e:dc:58:ce:62:63:44: 20:0a:8b:e2:3e:86:c1:f0:79:6d:86:dc:7b:f2:44:16:4f:cf: 31:b1:4c:81:2e:cd:b6:09:3b:2a:5b:2a:b2:86:b7:28:01:43: ce:64:72:92:48:f6:a0:5a:7d:2f:7d:51:5b:6a:5e:7f:f7:15: f4:53:eb:40:f3:14:40:0e:08:4c:ec:23:54:e1:ab:61:d2:57: 43:ba:5d:20:e6:00:be:24:a0:4a:7f:70:0e:d5:69:f7:63:f9: c7:3c:a4:16:b8:73:e8:88:c6:76:17:f6:7c:ac:97:92:40:f8: be:4b:96:b4:58:61:74:0b:eb:4a:49:bd:34:c4:68:63:28:2b: b8:76:14:0f:78:36:2a:bf:c7:66:4e:b9:71:e1:ea:19:40:f4: 2a:a8:9a:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjUwNzAyMTkzMDI0WhcNMjUwNzA5MTkzMDI0WjAYMRYwFAYD VQQDEw02ODY1ODhkMS0wMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1va8QQa4OlnlBnlSG/Fu/ulVlJ+xLkx+fNfJggFZzVGBlFwyV8i3JdlZfhJC R0OnVUNQ3en6ddS8KLf+FJ9xkXCcTMqE35BVa1d8XKAjJaZ73/8EwPJv2Q1C87Pr xkOlqI9qPo9hhc9mMnnAdwh0oEhZQC9LfsiSgLGyRkllg4uk8PS1dt+tCu1N4zS3 oY0OC4jAp1VxsovnmzTCK9jG4bqu39aETkn9YpO/X/94211B9+kYs3YwR6IW/3f3 7k0MkmRyKM2WdPVhne32lXW4g+hGngcOEVY2hFQoATYovd0kvPQ7ACwDL51k8rQV oSH/3nJo+g0606QuM8pCWD8vxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5Cz1ar fOaHdotO6POi5aEqJkGFMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REQ3OC9ENEU5NjQ5QzQyRjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1 NThSVnZkczFGWmFJMEJRUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOWTOsbYv69fhh1C4a0DEwc2BK1Fzqxn2a6aHFMpb3lNvf9bGYpjkE Yau6YHYytjws9ZhCfU7+8GV7vmL1e45Ll0ORIayE3wOUzX7DTIGKptaUyoaospkD a8BmFewN77CGhzuPTB7cWM5iY0QgCoviPobB8Hlthtx78kQWT88xsUyBLs22CTsq WyqyhrcoAUPOZHKSSPagWn0vfVFbal5/9xX0U+tA8xRADghM7CNU4ath0ldDul0g 5gC+JKBKf3AO1Wn3Y/nHPKQWuHPoiMZ2F/Z8rJeSQPi+S5a0WGF0C+tKSb00xGhj KCu4dhQPeDYqv8dmTrlx4eoZQPQqqJrG -----END CERTIFICATE-----Generated at Fri Jul 4 07:37:45 2025 by rpki-client