$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json) Hash identifier: XfJaZhav8UBb0G5o+q2xMnRl5W/nN5chlHHB0q1jVLU= Subject key identifier: 72:95:3C:91:93:F9:74:BD:DC:FC:A9:A5:AF:7E:88:5D:BE:8F:D1:BC Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft Manifest number: 0194 Signing time: Thu 03 Jul 2025 03:32:15 +0000 Manifest this update: Thu 03 Jul 2025 03:32:14 +0000 Manifest next update: Thu 10 Jul 2025 03:32:14 +0000 Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: 9PpxNKxoR9KHkANxAUxm5qjE5Vic+Tf64hqEa2P0YYU=) 2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: f37dHVQCBKGAv6cZ++QH+hDhUU+kBGU4CSkotJ/zJb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Validity Not Before: Jul 3 03:32:14 2025 GMT Not After : Jul 10 03:32:14 2025 GMT Subject: CN=6865f9bf-1bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3b:b0:ad:c6:e5:5b:9f:cc:78:13:49:5d:7f: f8:53:a3:b9:a4:27:a3:23:8f:47:9c:7b:f3:d5:a7: 2b:64:d4:8c:60:e3:a4:90:d3:11:48:9d:ed:c1:90: e2:71:c6:42:49:89:d6:16:43:59:fd:84:48:bd:cf: 57:41:54:7b:1c:6a:93:32:58:59:4b:33:a1:a5:c6: 33:6b:de:04:30:91:9b:95:dc:09:2f:11:ca:94:87: b2:49:38:d6:64:64:87:2e:a6:e3:ac:f9:9b:06:5f: 31:ab:0a:44:7e:02:fc:3f:c2:06:73:e5:de:37:02: 21:aa:fe:27:7d:3f:5d:6c:18:5a:9e:5f:f6:f2:d0: 2a:e6:0c:ec:45:02:c1:03:21:03:8c:71:45:a9:c8: 86:2c:1e:78:0a:62:1c:8c:ae:ed:a9:f5:e5:c1:0b: d4:b7:dc:4e:1b:63:7e:8e:ba:b3:0d:d6:53:a7:9d: c3:6c:21:d8:7b:43:6d:96:d0:19:34:02:ed:28:8d: 7b:4b:1a:52:0c:25:e8:b0:a2:4e:19:c0:29:e2:32: fb:e9:0f:01:ac:55:7e:78:94:6c:7c:5a:fc:c3:cd: d3:a0:06:ef:cd:01:b3:5b:fd:81:6d:48:82:ac:e4: 08:c3:b6:70:5c:b9:9f:cf:1a:82:33:25:09:af:72: ca:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:95:3C:91:93:F9:74:BD:DC:FC:A9:A5:AF:7E:88:5D:BE:8F:D1:BC X509v3 Authority Key Identifier: keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:6a:59:69:21:63:86:e4:09:c4:b5:45:8e:2d:5a:73:a6:f0: 4a:eb:a2:15:bb:8c:c7:4a:8b:69:f2:51:b1:40:b4:65:03:9d: ba:39:9e:a6:bc:d6:3a:1b:22:8f:ee:f5:95:62:67:f8:a4:7d: 36:80:5b:cd:ce:02:18:66:01:fd:6d:15:fa:92:8f:52:14:b6: 71:ea:94:b1:e0:22:d9:1f:c3:e5:74:8e:a1:fe:45:52:d2:4f: 91:b4:7a:d6:3b:bb:45:ac:f0:8c:ba:89:8a:80:38:7a:9e:be: 25:b3:3b:79:bb:ac:2f:77:08:90:5f:c8:91:14:e6:6b:8f:1f: 8d:0b:e7:97:6b:f2:c0:1b:12:20:11:73:d1:c3:3e:5d:d4:07: 5d:44:5d:95:e3:97:03:dc:2c:25:49:9a:49:6c:cd:34:2c:f4: 02:ea:62:41:7d:65:68:f2:46:9f:dd:40:4d:24:0c:c6:94:29: 2f:73:ba:06:76:c5:f0:3b:84:c8:5b:f8:a4:cc:91:b3:14:23: a8:e8:1d:2f:b2:3e:e0:e3:f1:d2:ec:77:de:33:59:15:52:75: ce:49:d8:d6:97:ac:a2:1a:dc:2d:72:8a:ab:7b:65:fa:2d:43: 3b:a2:f1:af:7b:0b:d7:20:bb:36:d4:5a:f2:bf:ed:e8:0a:a7: 32:7a:c1:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY0OEQxMTAvBgNVBAUTKEYxN0I1MzIxQTU4RDc5RTIzMDUzMUM1QUEwRjBCMjRF MUQ4MTIxQTMwHhcNMjUwNzAzMDMzMjE0WhcNMjUwNzEwMDMzMjE0WjAYMRYwFAYD VQQDEw02ODY1ZjliZi0xYmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9juwrcblW5/MeBNJXX/4U6O5pCejI49HnHvz1acrZNSMYOOkkNMRSJ3twZDi ccZCSYnWFkNZ/YRIvc9XQVR7HGqTMlhZSzOhpcYza94EMJGbldwJLxHKlIeySTjW ZGSHLqbjrPmbBl8xqwpEfgL8P8IGc+XeNwIhqv4nfT9dbBhanl/28tAq5gzsRQLB AyEDjHFFqciGLB54CmIcjK7tqfXlwQvUt9xOG2N+jrqzDdZTp53DbCHYe0NtltAZ NALtKI17SxpSDCXosKJOGcAp4jL76Q8BrFV+eJRsfFr8w83ToAbvzQGzW/2BbUiC rOQIw7ZwXLmfzxqCMyUJr3LKgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKVPJGT +XS93Pyppa9+iF2+j9G8MB8GA1UdIwQYMBaAFPF7UyGljXniMFMcWqDwsk4dgSGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjQ4RC9DM0VFRTJBOEVG RTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVlSXdVeHhhb1BDeVRoMkJJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYdFRJYVdOZWVJd1V4eGFvUEN5VGgyQklhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjQ4RC9DM0VFRTJBOEVGRTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVl SXdVeHhhb1BDeVRoMkJJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxallpIWOG5AnEtUWOLVpzpvBK66IVu4zHSotp8lGxQLRlA526OZ6m vNY6GyKP7vWVYmf4pH02gFvNzgIYZgH9bRX6ko9SFLZx6pSx4CLZH8PldI6h/kVS 0k+RtHrWO7tFrPCMuomKgDh6nr4lszt5u6wvdwiQX8iRFOZrjx+NC+eXa/LAGxIg EXPRwz5d1AddRF2V45cD3CwlSZpJbM00LPQC6mJBfWVo8kaf3UBNJAzGlCkvc7oG dsXwO4TIW/ikzJGzFCOo6B0vsj7g4/HS7HfeM1kVUnXOSdjWl6yiGtwtcoqre2X6 LUM7ovGvewvXILs21Fryv+3oCqcyesFd -----END CERTIFICATE-----Generated at Fri Jul 4 18:11:12 2025 by rpki-client