$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: zd0ZWQPaQN8pptcxQhmnrCOUeTJ5fBJUO6E1HEgN8FE= Subject key identifier: 29:C4:B0:56:DF:F5:82:82:72:3E:43:5C:D9:82:DD:08:C0:E5:7B:D9 Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 04A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 048C Signing time: Thu 03 Jul 2025 00:28:49 +0000 Manifest this update: Thu 03 Jul 2025 00:28:48 +0000 Manifest next update: Thu 10 Jul 2025 00:28:48 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: Iva9UWTFC3Riun9u97wVnKEIa5VNUQZL29OVMkIdP74=) 2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: 6Gx+BiutQSrEbY8mFBzgAsNKgb1qIvA80j3THb6HaOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: Jul 3 00:28:48 2025 GMT Not After : Jul 10 00:28:48 2025 GMT Subject: CN=6865cec1-f2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2b:8c:4c:af:5b:b3:b5:24:5d:db:32:47:14: 84:69:dd:45:03:4e:cd:1b:b3:44:5f:2d:7b:43:d9: 39:be:3d:7e:bc:02:a2:5c:a3:ce:d4:ef:71:fd:53: 71:34:ec:68:d6:95:2a:d8:10:b6:ca:cb:5a:a8:91: 94:26:af:8c:79:c3:6a:f3:81:8b:8b:e2:dc:76:b4: 51:f6:2c:92:6a:33:f4:6b:8b:05:98:cf:a0:b5:cf: c8:e6:a1:06:db:61:39:d3:18:80:19:3e:72:9f:3b: 32:9a:b3:65:ee:ae:8b:b6:5b:6c:74:86:f5:1e:68: fb:5a:1f:92:43:20:51:5d:f2:c0:4c:f5:47:fe:9a: 32:0f:07:e7:1e:db:5c:d6:b7:36:80:18:b8:c6:d3: 4d:3a:f1:0d:6d:4e:97:e0:7b:0c:ac:15:51:22:d8: d6:a3:57:3c:76:9f:84:62:6a:ea:0a:d5:9c:d5:08: a3:53:6c:92:0b:bd:bb:f3:9a:f2:10:c2:c6:47:a5: fb:02:c1:a6:48:f9:97:7d:5b:97:47:c2:0a:48:22: b6:dd:4b:a8:cf:77:da:d9:b7:54:c6:2c:ea:7d:4e: f6:bb:48:82:6b:fd:8d:51:32:48:33:5f:f5:5b:19: 89:23:a2:49:8d:d1:0f:7e:29:ae:c6:2a:ef:20:c3: df:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C4:B0:56:DF:F5:82:82:72:3E:43:5C:D9:82:DD:08:C0:E5:7B:D9 X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:40:fe:4b:61:67:db:c0:07:df:88:37:b2:ee:e2:9f:78:e9: 84:86:e4:e7:f7:3b:e4:9a:f3:ed:01:90:45:04:be:ee:08:11: 71:07:b8:8d:47:55:a8:88:ad:b4:d4:e9:d0:f4:60:96:54:e6: c7:e2:16:8c:04:af:b0:81:c7:2e:71:93:b8:a2:f6:a4:50:c5: c3:ac:65:c5:2d:77:45:76:30:2b:e9:ec:7d:b7:eb:cc:cc:48: 24:2a:78:5e:aa:58:fb:4d:75:30:26:81:71:39:d2:24:4b:b3: 7f:f1:1d:e4:29:df:59:0d:a5:6c:8d:af:34:80:d9:1f:5f:ad: fd:f3:d6:4e:30:16:c0:9b:ba:43:d6:11:6c:ae:d7:3f:9b:de: 84:a2:3e:56:e0:3b:1e:9a:61:c8:d7:cc:59:d7:eb:ed:19:b8: 6e:73:de:2d:75:f6:43:8e:57:e6:46:0b:c0:21:61:ef:8e:d9: b8:22:ca:3c:80:14:9d:61:ca:d9:27:e8:aa:21:c1:fb:4d:8c: 50:e2:ff:5c:e5:46:66:3f:5c:4a:35:4a:22:9b:09:26:12:ba: af:98:15:c7:64:b3:2e:fd:64:40:bd:b5:3d:85:a8:c7:b8:89: 9d:98:51:48:bc:21:70:cf:91:84:14:2d:0e:29:3c:45:4a:90: 9c:93:4c:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjUwNzAzMDAyODQ4WhcNMjUwNzEwMDAyODQ4WjAYMRYwFAYD VQQDEw02ODY1Y2VjMS1mMmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyuMTK9bs7UkXdsyRxSEad1FA07NG7NEXy17Q9k5vj1+vAKiXKPO1O9x/VNx NOxo1pUq2BC2ystaqJGUJq+MecNq84GLi+LcdrRR9iySajP0a4sFmM+gtc/I5qEG 22E50xiAGT5ynzsymrNl7q6LtltsdIb1Hmj7Wh+SQyBRXfLATPVH/poyDwfnHttc 1rc2gBi4xtNNOvENbU6X4HsMrBVRItjWo1c8dp+EYmrqCtWc1QijU2ySC72785ry EMLGR6X7AsGmSPmXfVuXR8IKSCK23Uuoz3fa2bdUxizqfU72u0iCa/2NUTJIM1/1 WxmJI6JJjdEPfimuxirvIMPfhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnEsFbf 9YKCcj5DXNmC3QjA5XvZMB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArQP5LYWfbwAffiDey7uKfeOmEhuTn9zvkmvPtAZBFBL7uCBFxB7iN R1WoiK201OnQ9GCWVObH4haMBK+wgccucZO4ovakUMXDrGXFLXdFdjAr6ex9t+vM zEgkKnheqlj7TXUwJoFxOdIkS7N/8R3kKd9ZDaVsja80gNkfX63989ZOMBbAm7pD 1hFsrtc/m96Eoj5W4DsemmHI18xZ1+vtGbhuc94tdfZDjlfmRgvAIWHvjtm4Iso8 gBSdYcrZJ+iqIcH7TYxQ4v9c5UZmP1xKNUoimwkmErqvmBXHZLMu/WRAvbU9hajH uImdmFFIvCFwz5GEFC0OKTxFSpCck0wV -----END CERTIFICATE-----Generated at Thu Jul 3 12:26:28 2025 by rpki-client