$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: LERwms1dz9fcfprdLQZHp2hFLsVmNbyZHQcBT+qFbZ0= Subject key identifier: 01:50:B2:6C:31:0D:2C:82:27:DF:D5:FB:D0:65:71:9A:DF:60:88:EA Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0E17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0E09 Signing time: Wed 02 Jul 2025 18:02:56 +0000 Manifest this update: Wed 02 Jul 2025 18:02:56 +0000 Manifest next update: Wed 09 Jul 2025 18:02:56 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: GZ1ogX/4Tpmyswqw5A9fGatpe/V5kx9DN3j/rKo0xYY=) 2: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: aiQgD71KIHf3EulghLpV7U2on7ornTtSdk1QL8F6cWM=) 3: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: ueAPuc77rri4PQKwtmMLByRiVZjsosToomd9waxslTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3607 (0xe17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Jul 2 18:02:56 2025 GMT Not After : Jul 9 18:02:56 2025 GMT Subject: CN=68657450-d7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:db:28:9e:51:35:49:0f:74:9f:f8:84:cc:4a: d9:f0:94:93:c7:64:f8:8e:0f:4d:6a:cf:05:7c:db: f3:50:8d:4e:0b:1c:90:36:69:76:45:82:a5:c1:6e: 59:af:4c:39:59:9b:34:a2:e8:e8:8f:9e:16:18:6e: 24:bd:04:0e:e9:a3:71:2d:bc:1a:af:6f:97:b8:21: ea:88:d1:0e:9a:39:65:f7:f3:10:50:5d:4b:a5:6a: 16:34:9f:cb:58:96:55:07:ee:bd:8e:48:5d:38:9e: 4f:50:b4:ad:57:89:f8:84:b2:8c:75:fc:49:4a:13: 37:4b:aa:42:0d:bb:b1:e9:91:12:f9:39:b5:05:f8: 93:13:5f:99:9d:8f:c9:b9:8d:94:41:52:9b:3a:7d: 2c:2a:a4:17:13:ac:02:14:dc:b2:7d:f2:04:5f:0b: 3a:d4:65:c5:7d:e1:08:47:25:ce:92:e2:9b:1b:49: af:1c:70:f1:0d:c6:52:92:da:d9:1b:5d:86:49:37: d9:f3:b5:d9:0a:29:69:f9:35:e6:4e:26:61:62:3b: 58:44:cb:7f:c7:a9:9b:ba:f1:fd:d9:d8:d3:37:1a: 51:81:33:34:c0:59:7e:96:bc:2c:32:9d:87:8f:dd: a7:a9:e3:fb:53:f4:a5:24:69:eb:95:59:13:19:68: 17:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:50:B2:6C:31:0D:2C:82:27:DF:D5:FB:D0:65:71:9A:DF:60:88:EA X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:17:9b:22:63:a4:f2:e5:d1:7d:4c:7a:45:c5:5e:8c:54:5e: 73:76:46:97:45:e9:d9:07:9e:50:c7:d3:f1:f4:79:e8:b1:15: f4:21:8a:98:32:5c:8d:b3:b6:f4:8f:c3:d4:2d:0f:9f:7c:83: 4d:af:6b:3f:f4:10:2f:be:87:95:8e:af:f9:c7:da:b2:29:58: 22:2f:a1:1f:2a:65:e5:a8:0b:a1:f0:f7:0e:bd:fa:ac:cc:36: d6:a8:55:19:53:95:e8:6b:9d:5d:92:30:66:c2:70:a9:77:25: 42:5d:6b:f7:84:77:bc:fd:1b:89:5c:83:bf:e6:20:c6:f1:b7: 99:57:a4:db:19:aa:a8:98:0e:c2:fb:92:c7:c8:a7:d5:81:64: a1:d3:c2:eb:da:46:d2:f3:2f:d2:9b:3c:4b:c5:0e:12:44:14: ba:56:1b:dd:54:31:1f:06:79:5d:b0:e3:56:b0:0b:e9:17:73: 7a:d2:5b:04:95:a1:0b:19:ac:d6:e9:f7:bc:3b:8c:45:62:31: 5c:74:5b:73:d2:76:a8:11:08:cd:2e:45:28:66:75:ef:db:c9: 0f:bc:f2:0c:6e:6c:e5:0c:e7:88:dd:d1:46:ab:8c:db:e3:dd: 3b:18:02:90:ae:4c:db:e2:86:26:b8:ed:49:5e:82:ac:82:b6: 5b:d2:2f:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjUwNzAyMTgwMjU2WhcNMjUwNzA5MTgwMjU2WjAYMRYwFAYD VQQDEw02ODY1NzQ1MC1kN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dsonlE1SQ90n/iEzErZ8JSTx2T4jg9Nas8FfNvzUI1OCxyQNml2RYKlwW5Z r0w5WZs0oujoj54WGG4kvQQO6aNxLbwar2+XuCHqiNEOmjll9/MQUF1LpWoWNJ/L WJZVB+69jkhdOJ5PULStV4n4hLKMdfxJShM3S6pCDbux6ZES+Tm1BfiTE1+ZnY/J uY2UQVKbOn0sKqQXE6wCFNyyffIEXws61GXFfeEIRyXOkuKbG0mvHHDxDcZSktrZ G12GSTfZ87XZCilp+TXmTiZhYjtYRMt/x6mbuvH92djTNxpRgTM0wFl+lrwsMp2H j92nqeP7U/SlJGnrlVkTGWgXMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFQsmwx DSyCJ9/V+9BlcZrfYIjqMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOF5siY6Ty5dF9THpFxV6MVF5zdkaXRenZB55Qx9Px9HnosRX0IYqY MlyNs7b0j8PULQ+ffINNr2s/9BAvvoeVjq/5x9qyKVgiL6EfKmXlqAuh8PcOvfqs zDbWqFUZU5Xoa51dkjBmwnCpdyVCXWv3hHe8/RuJXIO/5iDG8beZV6TbGaqomA7C +5LHyKfVgWSh08Lr2kbS8y/SmzxLxQ4SRBS6VhvdVDEfBnldsONWsAvpF3N60lsE laELGazW6fe8O4xFYjFcdFtz0naoEQjNLkUoZnXv28kPvPIMbmzlDOeI3dFGq4zb 4907GAKQrkzb4oYmuO1JXoKsgrZb0i9T -----END CERTIFICATE-----Generated at Thu Jul 3 05:06:57 2025 by rpki-client