$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json) Hash identifier: bEgthrxrTzzQft+RaI+LrHBULSFBBFcW/Eu0JSTPxhk= Subject key identifier: 81:B8:AD:38:5E:DD:C7:55:85:99:93:5A:7E:0B:CF:86:B8:FC:6E:A0 Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft Manifest number: 0287 Signing time: Thu 03 Jul 2025 02:00:55 +0000 Manifest this update: Thu 03 Jul 2025 02:00:55 +0000 Manifest next update: Thu 10 Jul 2025 02:00:55 +0000 Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: ywS9bR4MGuTyV3iSXf/4Dp9qV8Ylv1eGpMnChbMv7tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Validity Not Before: Jul 3 02:00:55 2025 GMT Not After : Jul 10 02:00:55 2025 GMT Subject: CN=6865e457-4c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:d6:d1:ea:80:46:89:80:e2:64:e4:ac:20: 44:8e:14:2d:05:1e:6b:71:5f:55:ad:fc:d2:1d:d6: e5:58:b8:b8:87:6b:c8:25:da:12:67:03:94:0a:e5: c4:6a:00:9c:4a:3a:85:53:93:3a:1a:0f:f2:97:5f: ee:51:dd:75:06:7f:cc:ab:3b:79:26:4e:06:ac:52: 26:70:28:60:1e:e3:ee:9e:21:ac:3a:69:72:48:c8: 80:6f:8b:f3:0c:a1:67:b2:0c:4c:02:ff:a7:42:80: 8b:b8:82:be:be:2a:f6:f3:30:7e:f8:df:18:2f:a2: 10:3a:88:c3:94:10:31:ac:e7:d5:5e:01:d7:04:0f: b2:27:f9:0d:37:a5:a3:fc:ce:45:95:10:22:4c:53: 88:8e:ef:24:84:38:3d:de:11:c6:ab:d6:cb:7c:c6: 86:91:47:92:f2:88:e2:ed:14:c7:a6:3e:3b:37:99: 8a:57:61:c7:ac:31:bb:6b:3e:de:6b:33:0b:c1:bd: 2e:e1:de:17:af:60:98:e6:4b:ec:f1:9d:37:f5:bf: ea:11:0d:b6:79:5b:e8:5a:17:50:43:ca:02:99:c7: ab:12:c0:f0:63:e4:4a:58:9a:82:71:0e:de:7a:87: 7c:28:09:cb:e8:3c:51:0b:41:8f:08:11:ff:11:0b: f1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B8:AD:38:5E:DD:C7:55:85:99:93:5A:7E:0B:CF:86:B8:FC:6E:A0 X509v3 Authority Key Identifier: keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cc:89:9c:50:b4:4e:c1:16:54:cd:21:36:67:79:b2:fe:49: 28:f2:90:d8:fe:5c:89:b7:c4:db:93:31:1a:a3:5d:f4:91:e5: ba:ed:2f:d8:20:e7:4c:30:cc:f4:67:e8:4a:75:f2:d0:f9:7d: 99:f3:79:68:5a:33:ec:b5:89:7e:b6:05:f0:23:0e:1b:66:d4: dc:f1:c8:6e:68:5d:48:57:71:44:4e:b0:d4:94:1d:c1:aa:47: 69:92:20:51:5e:99:db:cb:d1:ab:1c:48:c4:34:52:b4:ab:f2: c7:df:8b:97:a2:4d:e6:b0:75:94:59:b0:ef:95:e8:1a:49:10: 19:1c:24:f1:ee:20:24:91:e2:6c:72:de:5c:9b:3f:08:da:8f: e5:a2:1b:5c:37:f5:0e:28:80:16:27:20:e7:9e:8f:42:76:0a: 56:77:bd:39:3d:8d:59:24:9a:03:a0:0c:84:13:4b:a6:ab:7f: a0:9f:ee:85:d2:8c:07:9f:3e:e0:ab:96:d2:77:31:a5:43:22: 31:70:e1:72:dd:eb:7c:29:2f:a0:e1:51:18:1a:c8:e1:a0:7a: e0:fc:cd:92:ae:81:4a:ca:d1:00:f7:e4:f8:02:cf:c7:28:5c: 04:2b:c5:77:3b:64:3b:69:ab:f3:4c:0f:88:68:93:05:25:06: 26:25:b2:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKEYxMTZFOTEyQTk1MDlERTRCMkQ2QjNEOTNDQkMxOEY1 MDAzNkUxNjgwHhcNMjUwNzAzMDIwMDU1WhcNMjUwNzEwMDIwMDU1WjAYMRYwFAYD VQQDEw02ODY1ZTQ1Ny00YzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOfW0eqARomA4mTkrCBEjhQtBR5rcV9VrfzSHdblWLi4h2vIJdoSZwOUCuXE agCcSjqFU5M6Gg/yl1/uUd11Bn/Mqzt5Jk4GrFImcChgHuPuniGsOmlySMiAb4vz DKFnsgxMAv+nQoCLuIK+vir28zB++N8YL6IQOojDlBAxrOfVXgHXBA+yJ/kNN6Wj /M5FlRAiTFOIju8khDg93hHGq9bLfMaGkUeS8oji7RTHpj47N5mKV2HHrDG7az7e azMLwb0u4d4Xr2CY5kvs8Z039b/qEQ22eVvoWhdQQ8oCmcerEsDwY+RKWJqCcQ7e eod8KAnL6DxRC0GPCBH/EQvxhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG4rThe 3cdVhZmTWn4Lz4a4/G6gMB8GA1UdIwQYMBaAFPEW6RKpUJ3kstaz2Ty8GPUANuFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC84NTI3RTRCNjBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5lU3kxclBaUEx3WTlRQTI0 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSYnBFcWxRbmVTeTFyUFpQTHdZOVFBMjRXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC84NTI3RTRCNjBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5l U3kxclBaUEx3WTlRQTI0V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtzImcULROwRZUzSE2Z3my/kko8pDY/lyJt8TbkzEao130keW67S/Y IOdMMMz0Z+hKdfLQ+X2Z83loWjPstYl+tgXwIw4bZtTc8chuaF1IV3FETrDUlB3B qkdpkiBRXpnby9GrHEjENFK0q/LH34uXok3msHWUWbDvlegaSRAZHCTx7iAkkeJs ct5cmz8I2o/lohtcN/UOKIAWJyDnno9CdgpWd705PY1ZJJoDoAyEE0umq3+gn+6F 0owHnz7gq5bSdzGlQyIxcOFy3et8KS+g4VEYGsjhoHrg/M2SroFKytEA9+T4As/H KFwEK8V3O2Q7aavzTA+IaJMFJQYmJbIA -----END CERTIFICATE-----Generated at Thu Jul 3 05:02:20 2025 by rpki-client