$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: vRAfwdvnADExPReu/I1tds3QaS7DfMb7VVHEG1SZktg= Subject key identifier: 90:8A:E6:95:CB:AF:7D:07:F2:C0:09:8B:A3:A6:F8:7B:92:71:B5:33 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0E11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0DFB Signing time: Wed 02 Jul 2025 18:05:36 +0000 Manifest this update: Wed 02 Jul 2025 18:05:35 +0000 Manifest next update: Wed 09 Jul 2025 18:05:35 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: JhVzwKV1sGOt44+3bZkHGLnvzFM6F5TtuMHmUda3ZWs=) 2: 6523917E508911F0A97F9A28C4F9AE02.roa (hash: K4wA0GoKvzqerl9jOReA1zKoYkvfC5BqWgsjQH9G7Wo=) 3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: kkPAtmDoelVoYFE7Hbje8wUj2mrPDtwi5yj75S4iHxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3601 (0xe11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Jul 2 18:05:35 2025 GMT Not After : Jul 9 18:05:35 2025 GMT Subject: CN=686574ef-6f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:fe:1d:fe:b9:85:95:34:ac:33:12:5e:5f: ae:3a:d8:5a:ee:38:51:ce:7f:af:0e:60:90:e3:b1: 23:1d:da:ac:56:e3:a4:ba:be:db:6e:81:b7:b3:ab: 17:18:b1:e8:d6:ef:e1:0f:7f:4f:86:ae:f7:e1:9c: ea:eb:f8:7c:06:a4:fa:f8:76:79:37:67:4f:60:ac: 53:26:05:87:d6:39:e2:c9:94:98:29:6d:7a:a1:a4: b7:f3:c1:aa:f6:6b:d0:c1:37:46:46:4f:77:f4:01: 4d:bf:9b:c6:1f:9a:d5:32:28:73:ed:b9:a5:8b:29: db:4f:3a:61:92:fa:81:16:f8:cf:eb:e2:cd:7f:49: 79:15:d4:cc:87:1b:38:50:b1:21:87:e6:4c:40:16: 1c:6f:b8:e5:77:97:c8:9d:3c:9e:1a:b1:a7:dc:a6: e0:ee:e9:8f:66:c3:a6:73:3e:85:fa:dc:1e:d4:5f: a3:37:15:f0:e8:34:c0:de:6b:32:47:50:a3:40:35: 50:1b:30:5f:e8:39:07:1d:c5:9c:55:8f:b8:ca:4f: 90:3f:0c:df:de:bd:b0:7d:44:ea:ae:b7:42:8a:59: b0:f7:04:9c:8e:6b:f8:d4:5a:b8:75:fc:d1:bf:5a: 65:de:6a:24:02:54:22:8d:2a:97:06:44:8e:26:76: 35:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8A:E6:95:CB:AF:7D:07:F2:C0:09:8B:A3:A6:F8:7B:92:71:B5:33 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8e:e8:5e:4e:39:0a:d6:c2:08:9e:34:77:14:6d:5c:b3:47: f7:b3:d0:bc:c0:b5:82:96:e6:0a:bb:ba:7d:de:08:c2:ab:0f: 00:b9:79:3e:6f:33:fc:8e:0f:20:14:a0:01:1e:35:91:ab:f5: 55:a2:99:25:88:b0:f4:a4:bc:df:18:bf:3f:d8:1a:10:d0:17: 4f:de:55:b9:23:ea:2a:78:8f:e8:e4:6a:53:a7:85:e2:ce:77: 7b:36:a1:7b:de:9b:96:15:69:28:d7:bf:99:64:38:9b:d9:ef: a9:a4:a8:86:b2:cc:9f:99:44:06:cb:c8:70:07:7a:b5:f3:63: 60:8f:0c:24:43:13:bc:ec:e7:16:ea:7b:81:bc:cd:dd:dd:42: f2:79:f1:56:81:54:c1:59:9d:72:07:ef:83:c0:cb:af:e2:af: 01:22:c4:cd:3c:8f:87:16:39:96:53:cf:81:60:b8:64:c5:7b: a6:0d:1b:bb:6f:9b:c4:42:0e:7d:a6:84:a0:36:ef:55:74:06: 31:9f:99:91:c6:a6:6c:ec:33:37:92:1d:dc:df:0f:6b:97:b3: 7b:bb:ba:c3:66:25:e9:a7:f3:ad:e4:51:47:68:f2:69:52:a5: 2e:9d:c8:9c:e6:96:17:52:68:21:25:be:0f:bd:63:2f:06:00: 96:13:09:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUwNzAyMTgwNTM1WhcNMjUwNzA5MTgwNTM1WjAYMRYwFAYD VQQDEw02ODY1NzRlZi02ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNb+Hf65hZU0rDMSXl+uOtha7jhRzn+vDmCQ47EjHdqsVuOkur7bboG3s6sX GLHo1u/hD39Phq734Zzq6/h8BqT6+HZ5N2dPYKxTJgWH1jniyZSYKW16oaS388Gq 9mvQwTdGRk939AFNv5vGH5rVMihz7bmliynbTzphkvqBFvjP6+LNf0l5FdTMhxs4 ULEhh+ZMQBYcb7jld5fInTyeGrGn3Kbg7umPZsOmcz6F+twe1F+jNxXw6DTA3msy R1CjQDVQGzBf6DkHHcWcVY+4yk+QPwzf3r2wfUTqrrdCilmw9wScjmv41Fq4dfzR v1pl3mokAlQijSqXBkSOJnY1DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCK5pXL r30H8sAJi6Om+HuScbUzMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvjuheTjkK1sIInjR3FG1cs0f3s9C8wLWCluYKu7p93gjCqw8AuXk+ bzP8jg8gFKABHjWRq/VVopkliLD0pLzfGL8/2BoQ0BdP3lW5I+oqeI/o5GpTp4Xi znd7NqF73puWFWko17+ZZDib2e+ppKiGssyfmUQGy8hwB3q182NgjwwkQxO87OcW 6nuBvM3d3ULyefFWgVTBWZ1yB++DwMuv4q8BIsTNPI+HFjmWU8+BYLhkxXumDRu7 b5vEQg59poSgNu9VdAYxn5mRxqZs7DM3kh3c3w9rl7N7u7rDZiXpp/Ot5FFHaPJp UqUuncic5pYXUmghJb4PvWMvBgCWEwm2 -----END CERTIFICATE-----Generated at Thu Jul 3 02:57:55 2025 by rpki-client