$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: bl7BBFqhF7LbII0oVXENwDXPgWkNgHzh89o8xXD8emw= Subject key identifier: 66:73:5D:BE:A2:D7:72:63:EF:5A:97:36:80:0B:5E:A1:4C:B0:44:72 Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0536 Signing time: Mon 30 Jun 2025 23:57:40 +0000 Manifest this update: Mon 30 Jun 2025 23:57:39 +0000 Manifest next update: Mon 07 Jul 2025 23:57:39 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: p40yAnhRH6pxP72eAZUhAj7UAuCFF02UpICU3/IWyrg=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: aXSQnMlRqYHjlA+sWyHQ/h8SKDapqi9yLmH+QCm7j5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Jun 30 23:57:39 2025 GMT Not After : Jul 7 23:57:39 2025 GMT Subject: CN=68632473-3758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:df:60:18:9b:c8:63:a1:4a:bd:5d:f6:05: 83:c3:a3:97:1c:af:06:a6:1a:fa:ab:e0:00:c1:2a: fc:a6:08:d4:83:9c:88:22:a9:58:96:f7:52:d4:ef: 5f:74:ec:e4:4e:8d:fa:40:0d:1b:cf:d0:0a:a3:46: b2:06:ac:db:8b:e2:48:a1:25:d2:2f:ce:3b:5f:44: f1:9d:59:85:55:a4:de:1f:89:84:e0:f3:4b:8d:95: ef:76:0a:7a:81:b4:7a:ca:82:f3:fe:fd:2d:22:92: df:25:35:1c:40:be:5d:19:20:4e:2c:00:a2:a2:d3: da:0f:cd:96:9a:65:01:9f:13:73:49:ef:f5:e2:ff: bd:98:ce:1d:87:a4:4e:44:78:60:49:c3:6a:ed:be: e6:1d:c5:a5:9b:0f:bd:1e:b6:e7:4f:6f:97:88:84: 9f:59:e9:68:f3:74:5c:c1:66:cb:7a:3c:ff:25:23: aa:56:c4:39:c1:60:07:d6:f4:b2:1c:2c:8b:11:d0: 47:f0:5c:03:8b:2f:2e:1b:42:59:f4:51:0f:94:58: a9:c0:da:22:c5:3a:40:75:3a:fe:66:59:ea:35:43: ef:f6:10:7b:83:57:2c:15:4a:6a:ab:a5:26:ed:bd: 86:db:0a:b7:3d:2f:b0:6b:2a:df:92:c3:9e:6b:68: 31:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:73:5D:BE:A2:D7:72:63:EF:5A:97:36:80:0B:5E:A1:4C:B0:44:72 X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7e:b6:6f:72:13:f0:05:25:08:f0:4b:fd:ec:a5:8d:61:ce: 0d:91:12:de:7a:d6:c0:d1:5c:ac:24:58:50:07:39:b3:96:5c: 7d:d0:a6:39:07:ab:a1:a1:84:40:fc:15:73:ae:5e:4e:3f:ff: b2:b6:85:c7:45:b6:cd:31:6d:f8:7f:eb:05:f8:03:ce:1c:a7: d9:a7:de:ae:73:cb:32:db:91:3f:32:e5:fb:db:52:d5:22:e3: 4a:96:a5:68:3f:a1:8a:ed:0e:ff:dc:3d:3b:1a:93:3e:c6:7e: fe:e8:60:c8:9c:f3:93:41:cc:14:0f:24:89:d0:bf:d2:20:f0: c6:1a:cc:1e:63:4d:2e:42:49:8d:6b:fd:b2:30:3b:7f:3d:60: 30:fc:47:22:ab:52:2d:1c:2a:a7:d7:20:7b:74:32:06:c7:af: 20:0f:f7:a5:a1:c7:a0:00:72:4c:07:bb:cc:0c:6d:1c:b8:26: f3:33:9e:87:74:0f:42:fb:9a:b0:3b:4d:81:40:f7:15:83:a4: 03:73:a5:59:46:bd:19:12:1a:88:44:a4:55:4d:b4:75:9e:4c: 66:04:82:6a:2f:8f:00:42:00:1a:8a:f4:e6:64:56:4a:ff:ea: 9d:ba:8a:31:f2:78:79:e5:3f:f6:31:15:76:c5:df:2a:ed:34: 16:30:d4:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUwNjMwMjM1NzM5WhcNMjUwNzA3MjM1NzM5WjAYMRYwFAYD VQQDEw02ODYzMjQ3My0zNzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KffYBibyGOhSr1d9gWDw6OXHK8Gphr6q+AAwSr8pgjUg5yIIqlYlvdS1O9f dOzkTo36QA0bz9AKo0ayBqzbi+JIoSXSL847X0TxnVmFVaTeH4mE4PNLjZXvdgp6 gbR6yoLz/v0tIpLfJTUcQL5dGSBOLACiotPaD82WmmUBnxNzSe/14v+9mM4dh6RO RHhgScNq7b7mHcWlmw+9HrbnT2+XiISfWelo83RcwWbLejz/JSOqVsQ5wWAH1vSy HCyLEdBH8FwDiy8uG0JZ9FEPlFipwNoixTpAdTr+ZlnqNUPv9hB7g1csFUpqq6Um 7b2G2wq3PS+wayrfksOea2gxsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZzXb6i 13Jj71qXNoALXqFMsERyMB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAofrZvchPwBSUI8Ev97KWNYc4NkRLeetbA0VysJFhQBzmzllx90KY5 B6uhoYRA/BVzrl5OP/+ytoXHRbbNMW34f+sF+APOHKfZp96uc8sy25E/MuX721LV IuNKlqVoP6GK7Q7/3D07GpM+xn7+6GDInPOTQcwUDySJ0L/SIPDGGsweY00uQkmN a/2yMDt/PWAw/Eciq1ItHCqn1yB7dDIGx68gD/elocegAHJMB7vMDG0cuCbzM56H dA9C+5qwO02BQPcVg6QDc6VZRr0ZEhqIRKRVTbR1nkxmBIJqL48AQgAaivTmZFZK /+qduoox8nh55T/2MRV2xd8q7TQWMNRI -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:35 2025 by rpki-client