$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: 0gZ981HzLpqdPUZG/Loa0PTrwO+LYS+qnOxuuC+wSAQ= Subject key identifier: CF:D2:3B:82:45:6E:E2:B0:70:5C:39:79:48:1C:FF:BE:86:13:59:EF Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: AF Signing time: Fri 13 Jun 2025 05:00:15 +0000 Manifest this update: Fri 13 Jun 2025 05:00:15 +0000 Manifest next update: Fri 20 Jun 2025 05:00:15 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: GpropP+SYQGdVnGNEaZ/m1vp1I13XIQ3ECgzSzcNKDQ=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: K7xoMbrahTaRmzWPIHZWon2Vo6zWB816U+odiAFW2nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Jun 13 05:00:15 2025 GMT Not After : Jun 20 05:00:15 2025 GMT Subject: CN=684bb05f-2e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4d:4e:0e:24:57:64:fc:73:c8:13:b9:51:c3: 0e:d5:7f:e6:fc:b7:66:5e:44:57:43:b2:4b:8e:4f: 41:39:9b:ba:04:55:ca:96:35:e3:1c:ad:75:6b:12: 7f:2e:de:30:b4:8d:e9:50:70:1a:01:73:60:0b:e1: f0:55:a4:37:b8:d3:39:49:89:27:fd:3c:3e:c0:cd: d9:65:5d:c9:22:8a:28:8b:06:36:6d:2b:3d:3f:d3: a1:1d:a4:a9:06:79:46:15:77:de:67:14:e2:f9:35: 99:ad:ab:17:74:a5:ca:fc:36:db:22:af:20:08:cc: 48:83:72:fe:34:80:31:47:5b:58:2c:ae:d5:3c:70: 90:a6:38:1b:ac:2c:90:0e:4c:e3:24:4c:93:fe:38: f4:26:b6:f9:b5:55:9f:d2:2d:9c:07:61:c6:c7:9c: 29:96:d5:eb:05:95:07:7b:2d:7b:ec:04:80:6a:4b: 94:a5:60:13:cf:23:f2:da:b9:7c:88:94:2b:36:45: 70:00:8e:58:0d:09:d0:95:dc:ca:d1:74:c8:81:90: 60:7c:fc:30:37:f6:aa:7a:b2:6c:8e:24:03:09:6a: 9e:cf:68:1d:6a:9c:32:e2:22:30:59:8d:00:f8:f0: 0c:4d:14:fe:a7:2d:2f:94:b0:02:73:17:92:ee:46: ee:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D2:3B:82:45:6E:E2:B0:70:5C:39:79:48:1C:FF:BE:86:13:59:EF X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:69:ea:7d:55:71:65:ae:70:92:a0:f9:85:1e:5d:9e:95:9a: 08:cd:14:16:4c:c7:d8:c4:06:94:db:2e:8e:ed:b1:84:97:5f: 40:22:43:7d:5a:f5:50:4e:4d:b0:f8:d3:7b:72:1a:54:95:16: 3e:ab:bc:99:d8:f9:03:6e:a3:12:32:0a:84:6a:18:e2:53:08: eb:fd:ed:4c:14:9b:e8:04:b8:1e:13:31:31:06:5f:02:81:01: d7:90:cb:cc:ad:6d:37:b2:9a:33:84:b9:e0:5c:01:71:4e:95: 31:d3:a7:05:65:e0:c1:ad:b2:26:e8:3e:5e:99:94:6b:5b:5d: 55:b2:e4:23:95:07:22:23:bf:8c:50:14:b1:eb:88:c6:07:46: f6:27:bd:c4:b6:db:c3:ab:b6:5f:09:02:c4:cc:1b:fb:f4:ac: 16:7b:b4:44:4a:2a:a7:65:c8:d3:b4:b3:86:19:57:04:71:36: 97:0a:9b:98:1d:1f:88:18:ff:f2:bb:8e:96:25:83:fd:34:e8: 81:84:23:a3:99:41:ef:81:45:49:af:fd:74:c9:93:00:40:2a: 17:ca:5c:ac:e3:cc:ff:3f:dd:9b:b6:cd:c0:39:69:db:1b:04: 8e:2e:c3:92:60:2e:d4:bf:4e:13:42:cf:18:c7:67:f2:98:d9: 28:7d:88:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjUwNjEzMDUwMDE1WhcNMjUwNjIwMDUwMDE1WjAYMRYwFAYD VQQDEw02ODRiYjA1Zi0yZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArk1ODiRXZPxzyBO5UcMO1X/m/LdmXkRXQ7JLjk9BOZu6BFXKljXjHK11axJ/ Lt4wtI3pUHAaAXNgC+HwVaQ3uNM5SYkn/Tw+wM3ZZV3JIoooiwY2bSs9P9OhHaSp BnlGFXfeZxTi+TWZrasXdKXK/DbbIq8gCMxIg3L+NIAxR1tYLK7VPHCQpjgbrCyQ DkzjJEyT/jj0Jrb5tVWf0i2cB2HGx5wpltXrBZUHey177ASAakuUpWATzyPy2rl8 iJQrNkVwAI5YDQnQldzK0XTIgZBgfPwwN/aqerJsjiQDCWqez2gdapwy4iIwWY0A +PAMTRT+py0vlLACcxeS7kbupwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/SO4JF buKwcFw5eUgc/76GE1nvMB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALaep9VXFlrnCSoPmFHl2elZoIzRQWTMfYxAaU2y6O7bGEl19AIkN9 WvVQTk2w+NN7chpUlRY+q7yZ2PkDbqMSMgqEahjiUwjr/e1MFJvoBLgeEzExBl8C gQHXkMvMrW03spozhLngXAFxTpUx06cFZeDBrbIm6D5emZRrW11VsuQjlQciI7+M UBSx64jGB0b2J73EttvDq7ZfCQLEzBv79KwWe7RESiqnZcjTtLOGGVcEcTaXCpuY HR+IGP/yu46WJYP9NOiBhCOjmUHvgUVJr/10yZMAQCoXylys48z/P92bts3AOWnb GwSOLsOSYC7Uv04TQs8Yx2fymNkofYh4 -----END CERTIFICATE-----Generated at Sun Jun 15 05:00:12 2025 by rpki-client