$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json) Hash identifier: 15TIv213+5eFCOJPMeboYs2EksajLmkrwu09Zr6NbRI= Subject key identifier: C4:9E:19:AA:C7:16:66:74:9E:FA:2D:FA:20:39:A8:0F:4D:FC:AB:B7 Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft Manifest number: FF Signing time: Thu 03 Jul 2025 05:17:24 +0000 Manifest this update: Thu 03 Jul 2025 05:17:23 +0000 Manifest next update: Thu 10 Jul 2025 05:17:23 +0000 Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: 8kSsg8DKG5p1NDS5G198BcPuYq/+8tKSEOxrLRz0T/M=) 2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: irE7drsVeTTk7a2RFFZcS/J6SNQBkLx5nAZFgDb1h5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Validity Not Before: Jul 3 05:17:23 2025 GMT Not After : Jul 10 05:17:23 2025 GMT Subject: CN=68661263-56cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:b5:73:18:2b:5e:d1:18:e5:90:32:b2:1c:8f: 01:16:ff:6f:58:db:de:54:ca:79:09:d0:50:8b:fc: 5d:f9:d2:3b:65:66:0b:0f:8c:60:01:31:50:df:77: b5:52:0e:be:b0:f8:4f:08:da:37:99:aa:50:a4:a7: 03:2a:7b:32:7e:46:cd:37:4e:4d:e1:da:5c:65:b5: 69:73:0b:5a:d8:c6:3a:bf:39:39:1e:1a:65:13:e3: 51:4f:3a:25:3c:ce:fd:4d:09:5d:2a:ed:65:a7:31: 15:87:fa:60:54:bc:72:82:ca:0e:17:ae:4b:ea:ca: 7a:00:d2:ec:19:c1:22:0c:25:6f:4c:b0:79:07:02: 36:6a:1d:5e:32:2a:a0:fa:00:53:d6:41:5f:7b:d9: cb:7d:30:26:f1:b5:25:f5:2f:47:c1:17:7e:5e:c2: 12:4c:53:b1:0a:c0:11:6a:2e:94:79:f4:f9:90:c8: b2:0f:76:f8:c2:de:28:cb:db:82:90:28:81:75:44: 6d:c9:be:8a:b0:3c:a8:04:10:df:74:ee:b9:ef:19: 51:db:83:97:4f:bf:6b:1d:43:e5:f8:99:31:1e:00: bb:f1:da:b5:14:db:87:44:76:15:db:dc:fc:94:1e: 24:7e:ae:6d:30:e8:ea:0d:82:e6:7d:b7:4e:32:ab: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9E:19:AA:C7:16:66:74:9E:FA:2D:FA:20:39:A8:0F:4D:FC:AB:B7 X509v3 Authority Key Identifier: keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:3d:29:ce:00:f3:60:c4:81:64:fb:0f:b8:22:be:69:66:62: ee:13:8d:15:c9:37:0d:97:32:02:04:fb:7b:1a:7f:ac:2d:00: 1f:6e:bf:17:6e:56:d5:c7:dd:09:66:60:cf:33:b7:ae:72:7a: e9:23:2d:56:9d:63:b0:25:ae:57:59:8b:2f:6f:6a:ed:f3:4a: da:2e:12:eb:26:1f:25:18:6b:cd:4b:3c:bf:a0:ba:02:69:ed: 52:cb:38:6f:5a:dc:57:39:66:24:35:21:fe:8e:80:ab:4b:8f: 78:79:ad:b1:a4:04:4a:e4:52:96:70:9d:d3:e8:99:59:4f:fc: 94:88:7f:42:19:89:fc:94:62:85:11:80:68:bb:bb:be:ed:22: 56:ac:01:f3:2a:5d:f1:5e:43:6a:0f:90:bd:e6:7b:84:b4:e6: a9:1a:7d:35:14:cf:6c:08:0a:77:b4:b8:82:99:00:94:a9:cd: 45:b0:20:81:61:e0:1d:8b:85:a8:2c:2b:51:51:61:41:bb:fe: 91:f3:de:64:52:53:af:20:80:6b:17:ff:03:27:d8:51:6e:33: f4:c5:25:e7:97:e5:90:b8:fc:9a:4e:28:85:94:8d:e2:69:b1: 2c:14:de:3d:95:99:23:57:88:e1:40:28:db:12:24:6d:d8:c5: aa:52:cd:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDM0IxMTAvBgNVBAUTKDAwOEYyQ0M4NjQyNDFERTg2MzVFOTNBNTc0NDBGOUMy RUIyNThCQjMwHhcNMjUwNzAzMDUxNzIzWhcNMjUwNzEwMDUxNzIzWjAYMRYwFAYD VQQDEw02ODY2MTI2My01NmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/7VzGCte0RjlkDKyHI8BFv9vWNveVMp5CdBQi/xd+dI7ZWYLD4xgATFQ33e1 Ug6+sPhPCNo3mapQpKcDKnsyfkbNN05N4dpcZbVpcwta2MY6vzk5HhplE+NRTzol PM79TQldKu1lpzEVh/pgVLxygsoOF65L6sp6ANLsGcEiDCVvTLB5BwI2ah1eMiqg +gBT1kFfe9nLfTAm8bUl9S9HwRd+XsISTFOxCsARai6UefT5kMiyD3b4wt4oy9uC kCiBdURtyb6KsDyoBBDfdO657xlR24OXT79rHUPl+JkxHgC78dq1FNuHRHYV29z8 lB4kfq5tMOjqDYLmfbdOMqvcYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSeGarH FmZ0nvot+iA5qA9N/Ku3MB8GA1UdIwQYMBaAFACPLMhkJB3oY16TpXRA+cLrJYuz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzQi85NTdCMjQ0MENF Q0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hlaGpYcE9sZEVENXd1c2xp N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOHN5R1FrSGVoalhwT2xkRUQ1d3VzbGk3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUMzQi85NTdCMjQ0MENFQ0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hl aGpYcE9sZEVENXd1c2xpN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYPSnOAPNgxIFk+w+4Ir5pZmLuE40VyTcNlzICBPt7Gn+sLQAfbr8X blbVx90JZmDPM7eucnrpIy1WnWOwJa5XWYsvb2rt80raLhLrJh8lGGvNSzy/oLoC ae1SyzhvWtxXOWYkNSH+joCrS494ea2xpARK5FKWcJ3T6JlZT/yUiH9CGYn8lGKF EYBou7u+7SJWrAHzKl3xXkNqD5C95nuEtOapGn01FM9sCAp3tLiCmQCUqc1FsCCB YeAdi4WoLCtRUWFBu/6R895kUlOvIIBrF/8DJ9hRbjP0xSXnl+WQuPyaTiiFlI3i abEsFN49lZkjV4jhQCjbEiRt2MWqUs1S -----END CERTIFICATE-----Generated at Fri Jul 4 10:52:26 2025 by rpki-client