$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.mft (raw, json) Hash identifier: /FwSOmRz24pSBTlJH/6EmxqyMhipphR5nYlMWJqm4Eo= Subject key identifier: 82:05:83:28:49:59:31:C1:94:C6:A9:6C:0E:F5:22:E2:CD:13:03:A0 Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 Certificate issuer: /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft Manifest number: DB Signing time: Tue 01 Jul 2025 06:06:16 +0000 Manifest this update: Tue 01 Jul 2025 06:06:15 +0000 Manifest next update: Tue 08 Jul 2025 06:06:15 +0000 Files and hashes: 1: 8mzvyND2FJXOpWXLF0zPkuc6CJk.crl (hash: WXkNkuzmIL8n2ovpFTJFzDm5ILnRd4LFYI/LtAzzF9c=) 2: 81DED04C065411EFAAF0D25DC4F9AE02.roa (hash: KnA/iGGYoBgm/bcH9BItyxCBripYpEURjIllmAUmPC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184A0A, serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Validity Not Before: Jul 1 06:06:15 2025 GMT Not After : Jul 8 06:06:15 2025 GMT Subject: CN=68637ad8-14ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:65:c4:2a:79:33:68:11:6a:35:2c:83:52: f5:6c:b0:d4:c6:a2:2c:1b:07:3c:53:65:53:17:d3: 1a:d3:4c:cc:78:23:7e:a9:89:54:e0:7e:9b:cd:80: 4d:95:31:19:ad:b2:31:9b:1a:7b:0c:a2:c7:9d:ba: 5c:60:0a:26:a4:9a:3d:1f:3b:6f:b9:06:ad:e7:c9: a9:59:57:3c:e7:4e:fe:b0:7d:18:88:9a:9a:82:11: 9f:16:d9:d1:45:44:e6:f7:e6:f1:09:38:8f:99:30: 9b:a7:b5:0f:c8:b1:35:f3:8a:20:db:9a:70:81:2d: 3a:38:68:8d:77:c1:65:1e:97:92:27:9d:e1:fb:51: 4d:a7:ea:ee:8d:b2:03:8d:b3:f1:8f:ff:d3:e2:5a: 57:e7:0e:47:ef:c3:b0:25:dc:58:d2:de:8d:6a:c1: 28:65:87:68:da:04:71:48:02:cd:2a:c0:23:9d:00: 95:9c:57:34:50:e7:17:38:48:bb:6b:ea:1a:74:0a: 14:63:b9:74:9f:98:fe:ec:a0:62:11:24:7a:62:f7: 0b:85:30:49:5f:11:02:97:0f:9b:3a:37:1b:16:4c: ba:59:38:c6:e5:c6:85:fb:59:db:6c:2a:7d:14:30: 44:f8:36:b4:f3:fa:13:80:b9:1e:08:f6:21:44:3c: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:05:83:28:49:59:31:C1:94:C6:A9:6C:0E:F5:22:E2:CD:13:03:A0 X509v3 Authority Key Identifier: keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:77:7a:c4:03:85:8f:00:9b:0d:08:91:27:69:49:0b:c1:e2: 96:ec:8e:93:11:51:60:d5:85:6a:bb:5a:42:38:b0:3d:19:22: 47:2f:15:05:3e:a5:84:97:15:a1:5d:69:c8:a6:74:4b:86:8b: a4:c8:13:54:1e:93:01:4e:9f:1e:e9:97:c6:24:a2:6b:b9:8c: 7a:89:17:93:d6:7b:9b:7c:dc:8d:1b:6b:c1:5b:3a:a8:3b:cb: c0:3e:3a:21:3c:90:83:e4:66:26:39:47:dc:46:e1:80:bb:51: be:06:0a:51:eb:49:57:f5:ae:e2:9e:8d:69:0d:3e:f6:13:f1: d9:69:cd:44:58:4c:5a:21:45:22:b6:0c:8b:af:47:18:24:d6: 3d:b3:55:53:d7:ea:73:7b:4f:27:06:33:54:94:6e:3d:89:0e: f1:1a:7b:78:90:ae:bb:78:46:05:98:04:b7:50:4c:4a:0e:bb: 7c:a1:b0:89:51:0d:b9:c6:10:d4:6e:51:74:6e:aa:c0:41:ce: 8a:cc:8c:48:bd:68:31:22:1d:00:93:26:ab:d7:69:ac:c4:2f: ad:27:30:b5:59:ba:ef:01:d6:13:42:6c:27:61:ea:8a:a6:44: 6b:67:76:40:b9:65:c2:ca:eb:5d:b7:b1:95:d0:fc:5c:5a:72: 88:21:11:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBMEExMTAvBgNVBAUTKEYyNkNFRkM4RDBGNjE0OTVDRUE1NjVDQjE3NENDRjky RTczQTA4OTkwHhcNMjUwNzAxMDYwNjE1WhcNMjUwNzA4MDYwNjE1WjAYMRYwFAYD VQQDEw02ODYzN2FkOC0xNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8dlxCp5M2gRajUsg1L1bLDUxqIsGwc8U2VTF9Ma00zMeCN+qYlU4H6bzYBN lTEZrbIxmxp7DKLHnbpcYAompJo9HztvuQat58mpWVc8507+sH0YiJqaghGfFtnR RUTm9+bxCTiPmTCbp7UPyLE184og25pwgS06OGiNd8FlHpeSJ53h+1FNp+rujbID jbPxj//T4lpX5w5H78OwJdxY0t6NasEoZYdo2gRxSALNKsAjnQCVnFc0UOcXOEi7 a+oadAoUY7l0n5j+7KBiESR6YvcLhTBJXxEClw+bOjcbFky6WTjG5caF+1nbbCp9 FDBE+Da08/oTgLkeCPYhRDygfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIFgyhJ WTHBlMapbA71IuLNEwOgMB8GA1UdIwQYMBaAFPJs78jQ9hSVzqVlyxdMz5LnOgiZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEEwQS9ENDkxRDg4MDA2 NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZKWE9wV1hMRjB6UGt1YzZD SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhtenZ5TkQyRkpYT3BXWExGMHpQa3VjNkNKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEEwQS9ENDkxRDg4MDA2NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZK WE9wV1hMRjB6UGt1YzZDSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMd3rEA4WPAJsNCJEnaUkLweKW7I6TEVFg1YVqu1pCOLA9GSJHLxUF PqWElxWhXWnIpnRLhoukyBNUHpMBTp8e6ZfGJKJruYx6iReT1nubfNyNG2vBWzqo O8vAPjohPJCD5GYmOUfcRuGAu1G+BgpR60lX9a7ino1pDT72E/HZac1EWExaIUUi tgyLr0cYJNY9s1VT1+pze08nBjNUlG49iQ7xGnt4kK67eEYFmAS3UExKDrt8obCJ UQ25xhDUblF0bqrAQc6KzIxIvWgxIh0Akyar12msxC+tJzC1WbrvAdYTQmwnYeqK pkRrZ3ZAuWXCyutdt7GV0PxcWnKIIRHJ -----END CERTIFICATE-----Generated at Wed Jul 2 22:45:15 2025 by rpki-client