$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: dI2M1Y7RgYKjKQyyZPie7/H41nyuI+KUC/d+IEII3Hw= Subject key identifier: E0:3C:A8:90:82:D5:2E:37:0C:AC:0A:07:B1:32:7E:F0:F7:AC:70:29 Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 05B6 Signing time: Wed 02 Jul 2025 23:26:14 +0000 Manifest this update: Wed 02 Jul 2025 23:26:14 +0000 Manifest next update: Wed 09 Jul 2025 23:26:14 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: QRAutULZC0wkp09Lcl29rdTVuA8GkOqOY/pPI3hx5YA=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: RN+WuKj4+pEbBe+8XBpVSE8Eibjnma2NtmAKtaqSc2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Jul 2 23:26:14 2025 GMT Not After : Jul 9 23:26:14 2025 GMT Subject: CN=6865c016-c1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fc:7e:0d:e9:f5:b5:5e:fd:d5:4a:d5:a0:4a: be:67:06:25:74:e1:3c:20:2c:37:a3:e5:f5:6f:6e: 97:01:77:4f:28:d3:b6:80:62:4b:a6:0a:c1:92:c1: 2e:8d:25:ec:91:6e:d6:13:77:c8:a7:e7:ab:b1:a2: b5:67:c5:64:6d:34:34:01:0a:dd:2a:08:08:16:41: e0:b8:83:0e:e3:52:8d:65:f0:cf:5b:23:51:c0:cf: a5:65:0f:b1:ae:2d:da:5c:fd:df:2a:c5:8f:81:1c: c6:5d:e5:c4:89:02:87:a1:e2:d0:47:cc:74:a0:0e: 91:c5:dc:e9:84:3e:90:46:8b:23:25:fb:97:65:3d: 60:53:18:1f:52:c8:22:08:24:68:ca:9b:80:d1:4d: 53:fb:56:18:3f:29:93:72:c0:97:a1:1c:6e:48:f2: de:e6:3c:30:b0:af:e7:7f:19:bf:0b:47:97:b8:d3: 04:a3:69:f9:f3:1f:c2:67:0e:f5:d5:50:dc:1f:0a: 74:e7:21:e0:7a:3d:91:78:48:ef:7d:55:27:cd:72: 40:5d:69:8e:7a:5e:44:c4:01:85:5a:e3:1a:6b:14: 3c:fc:12:56:90:b5:98:93:99:bf:4f:0f:45:7c:be: 78:47:f4:a6:11:84:0f:59:1e:28:6b:6b:13:47:fa: b2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3C:A8:90:82:D5:2E:37:0C:AC:0A:07:B1:32:7E:F0:F7:AC:70:29 X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e0:43:91:cd:44:23:14:5b:fd:b9:21:b6:64:76:2a:66:64: a3:ec:af:db:b0:f8:b1:a6:b5:7e:07:0c:4b:4d:d0:4d:e8:a0: fe:1c:36:03:61:88:4e:2e:d9:ac:d0:f7:7d:8f:e9:cf:b4:b0: e4:d4:6d:af:19:f3:53:d6:77:00:d7:b7:d2:80:68:34:38:e5: c1:78:f0:b4:66:bc:14:17:a5:73:57:85:3c:f2:c7:a5:bf:56: 13:80:60:22:86:06:51:6f:21:02:e1:75:84:3a:d4:9a:c8:17: a2:4f:ea:cd:9c:ae:ff:3d:a4:a2:4e:70:29:0f:a0:cf:b3:83: dd:2d:5f:97:04:17:b7:3c:6f:2b:01:32:a9:00:32:33:89:a5: 0c:90:6e:fb:41:d9:2a:26:b6:62:08:1d:b0:80:dd:44:2c:0e: 26:8e:7a:f5:72:88:30:24:40:96:d8:e0:be:9b:8b:ea:a8:72: ee:5d:74:8f:aa:7c:1e:f4:57:12:c8:66:2e:13:f2:91:ff:14: 87:d4:8a:42:6d:2a:7f:8d:4f:07:5d:6d:b5:a0:9b:9f:95:26: e7:95:c7:9c:b6:be:89:fa:a6:ce:c3:fc:82:ab:f1:66:7a:8a: b2:ad:9e:44:f5:c7:99:b9:f3:5d:4b:e3:f6:19:48:07:91:a2: e2:4e:92:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjUwNzAyMjMyNjE0WhcNMjUwNzA5MjMyNjE0WjAYMRYwFAYD VQQDEw02ODY1YzAxNi1jMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Px+Den1tV791UrVoEq+ZwYldOE8ICw3o+X1b26XAXdPKNO2gGJLpgrBksEu jSXskW7WE3fIp+ersaK1Z8VkbTQ0AQrdKggIFkHguIMO41KNZfDPWyNRwM+lZQ+x ri3aXP3fKsWPgRzGXeXEiQKHoeLQR8x0oA6RxdzphD6QRosjJfuXZT1gUxgfUsgi CCRoypuA0U1T+1YYPymTcsCXoRxuSPLe5jwwsK/nfxm/C0eXuNMEo2n58x/CZw71 1VDcHwp05yHgej2ReEjvfVUnzXJAXWmOel5ExAGFWuMaaxQ8/BJWkLWYk5m/Tw9F fL54R/SmEYQPWR4oa2sTR/qyHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOA8qJCC 1S43DKwKB7EyfvD3rHApMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK4EORzUQjFFv9uSG2ZHYqZmSj7K/bsPixprV+BwxLTdBN6KD+HDYD YYhOLtms0Pd9j+nPtLDk1G2vGfNT1ncA17fSgGg0OOXBePC0ZrwUF6VzV4U88sel v1YTgGAihgZRbyEC4XWEOtSayBeiT+rNnK7/PaSiTnApD6DPs4PdLV+XBBe3PG8r ATKpADIziaUMkG77QdkqJrZiCB2wgN1ELA4mjnr1cogwJECW2OC+m4vqqHLuXXSP qnwe9FcSyGYuE/KR/xSH1IpCbSp/jU8HXW21oJuflSbnlcectr6J+qbOw/yCq/Fm eoqyrZ5E9ceZufNdS+P2GUgHkaLiTpLK -----END CERTIFICATE-----Generated at Thu Jul 3 10:33:24 2025 by rpki-client