$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json) Hash identifier: OLCLmls4JpceSIg4E/hlUc9LAMZG59DwpDxL+9czBUs= Subject key identifier: 39:C3:89:14:89:63:AB:2D:1B:09:BE:7A:3D:6C:A9:12:24:4C:B5:BE Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft Manifest number: 0663 Signing time: Tue 01 Jul 2025 00:48:26 +0000 Manifest this update: Tue 01 Jul 2025 00:48:25 +0000 Manifest next update: Tue 08 Jul 2025 00:48:25 +0000 Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: 6UDcL4PenyOc+iaalyRsIn7xb7aGv7HaJALUhAQGLJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Validity Not Before: Jul 1 00:48:25 2025 GMT Not After : Jul 8 00:48:25 2025 GMT Subject: CN=68633059-87a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:81:1d:b1:27:8b:aa:59:3a:f2:54:2e:f2: 1a:1a:0b:c8:42:40:ab:ec:96:b3:a6:3b:8a:5b:f0: 89:bd:c5:62:03:ff:3b:67:ef:9e:81:fb:ff:e8:42: fe:8b:4c:5e:97:cf:2e:22:aa:c4:b4:80:62:d7:87: 1c:7d:d0:79:09:9d:01:68:e7:ee:6a:0b:6a:3c:c4: 89:ef:1c:92:91:86:45:2a:cc:59:ac:3a:fa:a9:e2: 49:4e:4a:41:d5:ac:55:ff:93:ea:01:92:27:ad:6c: fd:3f:04:13:8d:b2:a7:56:56:25:7e:66:fa:51:5c: 69:fb:06:9a:0b:65:ed:25:d5:f7:5b:6f:a8:14:0f: 62:10:12:9f:b6:68:9f:7b:88:92:d6:0e:85:8a:73: 51:23:96:82:f3:d1:a7:51:30:20:0e:b2:e7:b7:da: f9:ca:81:1d:44:30:2e:6c:a7:17:73:e5:f9:40:b6: 26:76:b1:21:98:cb:ff:c7:b2:8f:0d:ce:e1:fc:cd: cb:c0:18:42:eb:43:c2:80:b4:2b:31:ae:82:e3:7c: c5:c7:9b:db:69:61:39:f2:c4:78:50:7b:3b:65:1d: 62:e2:bc:d7:3a:35:12:b4:bd:ed:fb:ad:fa:ef:bd: 41:19:ab:90:31:f9:72:c0:6d:db:d2:bf:9c:1b:f7: 54:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:89:14:89:63:AB:2D:1B:09:BE:7A:3D:6C:A9:12:24:4C:B5:BE X509v3 Authority Key Identifier: keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:2f:ed:1a:4c:b0:ff:64:ff:17:28:35:c6:ae:76:da:56:0b: 58:96:ed:cc:24:af:fa:33:bd:45:32:2c:a3:cc:8f:7b:ae:cc: 14:fb:c8:11:8a:3f:af:d6:9a:1c:fd:a5:d3:5d:49:10:d0:cc: 31:8c:99:cc:93:bd:76:69:f8:91:02:58:42:70:79:55:25:b9: d5:9c:56:45:32:d5:b4:7c:74:ed:a9:74:9f:3a:02:3c:b4:dc: 02:65:cc:ee:27:35:c3:f9:c5:00:50:39:db:30:f6:54:76:4e: 5f:1a:ec:a5:ed:ef:b5:1c:97:68:2e:82:a3:63:d4:9e:ac:52: 11:82:3f:6d:ac:8a:3e:b1:91:b7:72:3b:63:be:48:13:e2:ae: e4:51:3c:75:66:0b:cd:a7:58:78:49:ec:93:a0:d3:6c:92:a3: 08:e9:42:b8:3b:82:fb:3b:5e:cf:41:d6:41:a1:56:d4:d9:33: e3:e4:ea:a0:4d:f1:c9:3b:23:7d:bf:bb:42:c5:e1:58:e5:a5: a5:9e:be:71:db:ee:a5:f7:df:4a:30:d9:bc:44:e1:6b:1a:9e: aa:35:42:cc:0c:89:e0:99:e6:28:9d:11:f0:bb:2a:fe:c2:34: 5d:b8:9a:82:1f:4d:6a:cb:3a:e5:75:35:cc:53:64:7b:56:11: 7d:be:06:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB RTBCMzVBMTgwHhcNMjUwNzAxMDA0ODI1WhcNMjUwNzA4MDA0ODI1WjAYMRYwFAYD VQQDEw02ODYzMzA1OS04N2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25SBHbEni6pZOvJULvIaGgvIQkCr7JazpjuKW/CJvcViA/87Z++egfv/6EL+ i0xel88uIqrEtIBi14ccfdB5CZ0BaOfuagtqPMSJ7xySkYZFKsxZrDr6qeJJTkpB 1axV/5PqAZInrWz9PwQTjbKnVlYlfmb6UVxp+waaC2XtJdX3W2+oFA9iEBKftmif e4iS1g6FinNRI5aC89GnUTAgDrLnt9r5yoEdRDAubKcXc+X5QLYmdrEhmMv/x7KP Dc7h/M3LwBhC60PCgLQrMa6C43zFx5vbaWE58sR4UHs7ZR1i4rzXOjUStL3t+636 771BGauQMflywG3b0r+cG/dUEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnDiRSJ Y6stGwm+ej1sqRIkTLW+MB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf b2JZM0MzUlE4by11Q3pXaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRL+0aTLD/ZP8XKDXGrnbaVgtYlu3MJK/6M71FMiyjzI97rswU+8gR ij+v1poc/aXTXUkQ0MwxjJnMk712afiRAlhCcHlVJbnVnFZFMtW0fHTtqXSfOgI8 tNwCZczuJzXD+cUAUDnbMPZUdk5fGuyl7e+1HJdoLoKjY9SerFIRgj9trIo+sZG3 cjtjvkgT4q7kUTx1ZgvNp1h4SeyToNNskqMI6UK4O4L7O17PQdZBoVbU2TPj5Oqg TfHJOyN9v7tCxeFY5aWlnr5x2+6l999KMNm8ROFrGp6qNULMDIngmeYonRHwuyr+ wjRduJqCH01qyzrldTXMU2R7VhF9vgYR -----END CERTIFICATE-----Generated at Tue Jul 1 15:31:26 2025 by rpki-client