$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: GDCvKBfPcLpGoKIBz0meewtnGxWLkIZl2jwV0yTyNIA= Subject key identifier: D6:01:57:9B:EC:E0:63:86:71:4A:93:A0:E3:20:35:87:E9:A3:F6:D3 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 093D Signing time: Thu 12 Jun 2025 20:02:42 +0000 Manifest this update: Thu 12 Jun 2025 20:02:41 +0000 Manifest next update: Thu 19 Jun 2025 20:02:41 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: sc+yaRZEQMF9XFc32sP54A2q+Wb/B0uKGidmae8yo/M=) 2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: kvRrYXzDEb1knff7u5sMUOY0LST5MU2sRwL9Qq51bMI=) 3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: 5xmx4EdtRdh7/raKFzoldytV08fzGVQ9tShtrjhxke0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Jun 12 20:02:41 2025 GMT Not After : Jun 19 20:02:41 2025 GMT Subject: CN=684b3262-3a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:0c:d0:b0:72:a8:8a:ed:ad:30:98:34:64: 59:30:18:3c:51:23:af:69:91:85:2c:73:ae:00:aa: d4:b4:88:92:06:61:e4:bc:8c:c2:73:bb:81:ff:ef: cd:93:09:7d:a7:23:35:89:93:52:85:7c:78:5f:d2: 54:f3:39:fa:8e:45:25:63:63:d6:d2:2d:d5:e4:aa: c8:56:e2:c5:d2:6a:d8:31:3d:cb:f6:ee:a9:fd:ec: 53:be:f4:e8:c9:a3:ef:6f:85:7b:eb:8d:fd:c8:c9: 6b:54:34:d0:bd:56:cd:0c:6e:d0:02:50:42:cf:c7: 10:50:42:b3:93:b7:d7:d3:d6:e0:02:e3:76:5f:1a: 6a:66:86:63:99:ec:10:82:86:76:38:8c:4a:c6:8f: 1d:51:8b:0b:61:ac:65:41:63:3f:c8:43:80:db:6a: 4b:9b:1e:28:0a:e4:7a:e4:27:82:c3:07:cc:ca:47: 6f:3f:75:10:8a:a0:ef:f7:f7:a7:9b:6f:6c:63:6f: d3:13:e2:77:d4:f0:94:42:45:dd:76:9c:50:5e:5b: a7:f5:c4:f1:6d:e5:69:88:16:18:c5:b6:02:5c:c7: fd:89:27:f9:d4:6d:81:cb:a4:4e:1d:b9:b1:dd:9f: 9b:02:a7:78:36:55:1f:df:cf:8f:92:08:2c:43:57: 11:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:57:9B:EC:E0:63:86:71:4A:93:A0:E3:20:35:87:E9:A3:F6:D3 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c7:e3:6b:f6:1d:69:a8:b9:94:c1:93:5f:22:ea:12:55:68: 8c:9e:9e:83:27:7d:6b:25:05:b1:34:f6:00:3c:5a:73:a9:89: 6b:75:8c:7f:83:0d:40:11:62:0a:fa:d2:e4:2e:e7:51:85:25: 58:6d:db:26:50:2f:36:f4:38:5d:da:35:2a:6c:94:f8:1d:1b: 36:3a:6a:17:a0:f8:95:59:30:1b:1e:8f:57:02:c7:48:d2:cc: 54:d5:c0:64:55:3e:42:2d:54:06:f9:41:fe:4f:c2:bd:c0:1a: 6a:27:86:69:4d:cb:d7:d2:2f:bd:13:66:e3:ec:95:dd:32:72: b4:e7:b8:3b:a9:c4:b2:71:69:27:7a:1c:9e:04:3c:bd:be:72: 1c:2b:b6:a3:25:e2:b3:28:bf:b0:5d:cf:38:f0:c0:d5:33:e5: aa:09:fd:d0:6f:27:b6:55:9c:a7:6a:e1:6b:1f:f4:d9:f2:a2: cd:a7:18:c8:b2:b1:2a:3e:b4:1b:b8:09:e7:74:fc:c4:40:74: 39:69:9e:e0:0a:c5:b1:93:4b:a9:be:22:dd:a0:7a:70:9a:fb: 03:eb:01:c6:8f:69:9f:fd:76:98:ff:da:16:1b:08:ea:d8:a3: c6:18:6d:b8:90:72:1e:49:3f:f6:f6:20:b3:30:9e:4a:7d:0b: 0d:66:f6:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUwNjEyMjAwMjQxWhcNMjUwNjE5MjAwMjQxWjAYMRYwFAYD VQQDEw02ODRiMzI2Mi0zYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqu0M0LByqIrtrTCYNGRZMBg8USOvaZGFLHOuAKrUtIiSBmHkvIzCc7uB/+/N kwl9pyM1iZNShXx4X9JU8zn6jkUlY2PW0i3V5KrIVuLF0mrYMT3L9u6p/exTvvTo yaPvb4V76439yMlrVDTQvVbNDG7QAlBCz8cQUEKzk7fX09bgAuN2XxpqZoZjmewQ goZ2OIxKxo8dUYsLYaxlQWM/yEOA22pLmx4oCuR65CeCwwfMykdvP3UQiqDv9/en m29sY2/TE+J31PCUQkXddpxQXlun9cTxbeVpiBYYxbYCXMf9iSf51G2By6ROHbmx 3Z+bAqd4NlUf38+PkggsQ1cRowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYBV5vs 4GOGcUqToOMgNYfpo/bTMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/x+Nr9h1pqLmUwZNfIuoSVWiMnp6DJ31rJQWxNPYAPFpzqYlrdYx/ gw1AEWIK+tLkLudRhSVYbdsmUC829Dhd2jUqbJT4HRs2OmoXoPiVWTAbHo9XAsdI 0sxU1cBkVT5CLVQG+UH+T8K9wBpqJ4ZpTcvX0i+9E2bj7JXdMnK057g7qcSycWkn ehyeBDy9vnIcK7ajJeKzKL+wXc848MDVM+WqCf3Qbye2VZynauFrH/TZ8qLNpxjI srEqPrQbuAnndPzEQHQ5aZ7gCsWxk0upviLdoHpwmvsD6wHGj2mf/XaY/9oWGwjq 2KPGGG24kHIeST/29iCzMJ5KfQsNZvb0 -----END CERTIFICATE-----Generated at Sat Jun 14 19:06:14 2025 by rpki-client