$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: 8Cl+da/99M88tw/JpfEbHvX5lSD2/IPWmjkKYWPGjEw= Subject key identifier: BC:8E:00:CB:B6:0F:AC:05:8F:22:19:64:7D:C2:69:68:FE:FC:AF:C7 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: AE Signing time: Wed 06 Aug 2025 14:22:56 +0000 Manifest this update: Wed 06 Aug 2025 14:22:56 +0000 Manifest next update: Wed 13 Aug 2025 14:22:56 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: IELYvthrxJA3+bHzUM2pHSAqud9pc3KyQYnaobHjebs=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 14:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Aug 6 14:22:56 2025 GMT Not After : Aug 13 14:22:56 2025 GMT Subject: CN=68936540-96d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:cb:2c:b5:9d:34:0a:34:08:3b:44:2e:9a: 8f:e5:72:be:41:ce:f3:ac:23:35:41:ab:40:17:5a: e6:e8:2d:5b:82:07:59:bd:75:39:c2:e3:ff:35:e9: 06:1f:36:fe:4b:3c:88:cf:33:9e:a3:21:64:61:6b: 77:8d:a9:8a:92:99:23:49:37:aa:58:91:35:cd:a0: 42:65:09:46:37:84:64:ca:c4:e1:dd:bf:9a:14:22: 43:9a:3e:66:71:c2:9b:ac:79:ad:e2:4e:d6:0b:85: d2:10:31:d9:6e:41:98:50:e2:8e:79:33:4b:97:3c: aa:47:5b:95:64:c7:d5:27:8e:85:cc:84:3e:e4:4d: eb:50:b2:b9:39:53:fa:e3:5b:7e:17:de:91:b6:99: 7f:9e:6d:5a:cc:20:a3:cb:f3:06:a9:65:8f:2a:16: 74:d2:d8:34:6d:fa:cd:5c:d5:9d:49:45:b8:f9:8f: 23:2b:82:46:71:d2:86:f3:6c:5e:3f:d2:e1:a9:2f: c8:97:cc:2a:1f:39:13:93:17:38:cd:90:1f:22:37: 8a:12:43:09:a1:58:15:07:44:7d:b6:b2:55:5a:db: b4:db:5f:11:6c:91:9f:7a:80:95:4c:bd:d3:11:c2: 2c:1e:78:41:04:d9:fe:5d:b9:d2:ad:f6:95:90:5a: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8E:00:CB:B6:0F:AC:05:8F:22:19:64:7D:C2:69:68:FE:FC:AF:C7 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0d:e6:fa:3a:0f:1c:ff:85:8b:d6:8c:af:1a:d3:af:5a:d0: de:44:86:b8:3b:f3:3d:44:f6:01:bc:16:1e:93:06:78:bb:19: 08:0c:26:bd:f1:d1:e5:4a:5c:ba:f9:53:e9:ed:d2:4b:6c:19: 3c:8b:eb:c0:b7:99:48:74:1c:c6:c3:2d:e2:bd:26:67:8b:61: 29:94:03:d9:f3:f4:ff:d3:96:93:c9:ac:db:99:ff:c9:61:69: dc:6f:4a:77:12:3f:06:59:3a:a4:28:34:c7:8a:f4:90:77:13: 23:5f:ba:ae:26:7b:66:39:a9:54:f0:ec:59:2b:29:4e:87:b9: 10:40:1e:2b:f6:2e:59:a3:1f:1d:c3:b7:63:36:93:3f:c6:0c: 4e:aa:22:67:12:09:40:1d:a9:36:02:62:77:4d:88:90:19:b3: c1:13:0c:0d:82:49:0b:e7:c5:69:e4:7f:8f:f0:39:03:20:98: e7:7b:dd:4f:f4:9f:d8:c0:19:0d:89:b6:6a:1b:b1:6d:9c:20: 40:c9:00:5d:c4:72:4e:a8:26:48:82:0a:55:e4:c4:57:a5:83: e8:da:b0:c3:0c:91:1f:46:43:79:06:0f:50:78:be:8e:64:20: 5e:07:75:15:cb:88:25:96:f6:b6:0a:d8:a8:9a:4f:1e:2e:bc: d0:48:aa:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjUwODA2MTQyMjU2WhcNMjUwODEzMTQyMjU2WjAYMRYwFAYD VQQDEw02ODkzNjU0MC05NmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumHLLLWdNAo0CDtELpqP5XK+Qc7zrCM1QatAF1rm6C1bggdZvXU5wuP/NekG Hzb+SzyIzzOeoyFkYWt3jamKkpkjSTeqWJE1zaBCZQlGN4RkysTh3b+aFCJDmj5m ccKbrHmt4k7WC4XSEDHZbkGYUOKOeTNLlzyqR1uVZMfVJ46FzIQ+5E3rULK5OVP6 41t+F96Rtpl/nm1azCCjy/MGqWWPKhZ00tg0bfrNXNWdSUW4+Y8jK4JGcdKG82xe P9LhqS/Il8wqHzkTkxc4zZAfIjeKEkMJoVgVB0R9trJVWtu0218RbJGfeoCVTL3T EcIsHnhBBNn+XbnSrfaVkFpedwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyOAMu2 D6wFjyIZZH3CaWj+/K/HMB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8Deb6Og8c/4WL1oyvGtOvWtDeRIa4O/M9RPYBvBYekwZ4uxkIDCa9 8dHlSly6+VPp7dJLbBk8i+vAt5lIdBzGwy3ivSZni2EplAPZ8/T/05aTyazbmf/J YWncb0p3Ej8GWTqkKDTHivSQdxMjX7quJntmOalU8OxZKylOh7kQQB4r9i5Zox8d w7djNpM/xgxOqiJnEglAHak2AmJ3TYiQGbPBEwwNgkkL58Vp5H+P8DkDIJjne91P 9J/YwBkNibZqG7FtnCBAyQBdxHJOqCZIggpV5MRXpYPo2rDDDJEfRkN5Bg9QeL6O ZCBeB3UVy4gllva2Ctiomk8eLrzQSKou -----END CERTIFICATE-----Generated at Wed Aug 6 16:14:20 2025 by rpki-client