$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: 9YGtsg+Eqfx7+fh8i/WGFTWQgdvesSiHnSuGmbnQZ+c= Subject key identifier: BE:DB:74:DD:34:77:D6:74:01:A4:C0:08:FF:6B:CA:C4:BA:64:9E:F0 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 014C Signing time: Sun 15 Jun 2025 03:26:44 +0000 Manifest this update: Sun 15 Jun 2025 03:26:43 +0000 Manifest next update: Sun 22 Jun 2025 03:26:43 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: zlJvsdW/7q3U6uflBexNWSleIj82UAmCzvNFJ9u0hBk=) 2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Jun 15 03:26:43 2025 GMT Not After : Jun 22 03:26:43 2025 GMT Subject: CN=684e3d73-eca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:53:f2:b9:28:47:7a:aa:50:ae:74:7d:6f: c6:e4:00:70:cf:85:0e:3f:cf:3e:39:8e:0b:04:d3: ec:6a:35:d1:a3:a4:e2:da:bf:b2:cc:cc:10:93:4d: 40:dd:6a:1d:6f:0a:b1:d0:42:8d:c6:ca:ff:a5:1a: a3:03:ab:d8:7d:3b:d0:10:cf:91:fc:bf:ff:36:1c: f3:5b:a3:21:e6:53:11:4d:50:44:75:fa:51:49:0e: 94:37:95:c2:04:88:3c:48:69:fe:40:8f:d4:ce:33: 5a:67:a8:3d:d9:e0:32:d6:fa:52:14:ff:ce:79:69: 65:fd:84:67:74:ae:19:14:34:26:ad:a1:d8:68:3a: 92:2b:ec:47:1d:34:77:1a:c3:ae:23:1a:cd:9c:62: 9f:5f:cf:41:58:51:14:af:5c:d0:df:e8:31:ef:aa: 52:e6:59:f7:e7:ac:65:54:b2:49:ff:08:33:1b:f9: 7f:34:b7:79:78:6d:8f:35:c6:7a:4c:d8:33:38:32: 61:61:5e:05:38:8e:6a:d3:0e:e2:47:4e:ba:16:4f: 92:80:c5:0e:ea:53:98:c5:79:92:18:95:51:64:b4: d4:d1:ed:ba:ee:6b:b7:3e:ed:2c:d0:0f:36:d2:04: 9d:a4:52:67:7e:51:ee:da:5f:59:6e:49:6f:11:28: 69:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DB:74:DD:34:77:D6:74:01:A4:C0:08:FF:6B:CA:C4:BA:64:9E:F0 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8e:9c:41:0e:cd:4e:ce:5f:d8:70:27:fa:e3:d5:5a:37:73: 18:e4:6b:e0:9a:ce:e7:92:99:e5:8b:a9:4c:d4:1a:c2:42:9b: 84:24:26:3a:2c:c3:40:e2:4d:93:5d:39:c0:fe:f0:8d:4d:32: 1c:18:1d:8e:46:95:d9:a0:b1:24:7c:3c:9e:e0:36:d4:01:4d: 9b:1a:b6:18:75:81:b0:db:3e:4e:95:14:07:ab:50:51:9f:53: 27:cb:38:92:f5:c3:ab:9a:39:48:09:7a:43:55:ee:e5:b5:ca: cd:01:c1:1d:35:ec:20:07:de:95:45:25:79:5a:a7:7b:b8:12: 66:44:f0:58:1d:b1:3c:5e:04:80:71:c8:f5:c7:4d:82:21:fe: 75:f5:bd:1b:0b:32:40:aa:6b:d3:ff:43:21:e1:7f:90:c4:aa: 64:2a:02:e5:ec:ae:28:4b:90:18:20:47:72:df:ce:a0:3d:a0: e3:e4:99:bc:94:dd:59:34:ae:03:f7:ab:c5:fa:73:70:99:70: 8d:af:b6:cf:e3:3b:95:0a:e5:c9:0a:45:59:a0:05:63:ab:22: 8c:6b:c9:de:74:52:9a:26:67:51:b7:dd:26:10:18:a5:85:ef: 88:03:60:b8:b7:0a:51:44:6c:67:04:d7:ef:06:c7:dc:ee:e9: 85:95:7d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUwNjE1MDMyNjQzWhcNMjUwNjIyMDMyNjQzWjAYMRYwFAYD VQQDEw02ODRlM2Q3My1lY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJNT8rkoR3qqUK50fW/G5ABwz4UOP88+OY4LBNPsajXRo6Ti2r+yzMwQk01A 3Wodbwqx0EKNxsr/pRqjA6vYfTvQEM+R/L//NhzzW6Mh5lMRTVBEdfpRSQ6UN5XC BIg8SGn+QI/UzjNaZ6g92eAy1vpSFP/OeWll/YRndK4ZFDQmraHYaDqSK+xHHTR3 GsOuIxrNnGKfX89BWFEUr1zQ3+gx76pS5ln356xlVLJJ/wgzG/l/NLd5eG2PNcZ6 TNgzODJhYV4FOI5q0w7iR066Fk+SgMUO6lOYxXmSGJVRZLTU0e267mu3Pu0s0A82 0gSdpFJnflHu2l9ZbklvEShptwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7bdN00 d9Z0AaTACP9rysS6ZJ7wMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9jpxBDs1Ozl/YcCf649VaN3MY5Gvgms7nkpnli6lM1BrCQpuEJCY6 LMNA4k2TXTnA/vCNTTIcGB2ORpXZoLEkfDye4DbUAU2bGrYYdYGw2z5OlRQHq1BR n1MnyziS9cOrmjlICXpDVe7ltcrNAcEdNewgB96VRSV5Wqd7uBJmRPBYHbE8XgSA ccj1x02CIf519b0bCzJAqmvT/0Mh4X+QxKpkKgLl7K4oS5AYIEdy386gPaDj5Jm8 lN1ZNK4D96vF+nNwmXCNr7bP4zuVCuXJCkVZoAVjqyKMa8nedFKaJmdRt90mEBil he+IA2C4twpRRGxnBNfvBsfc7umFlX3C -----END CERTIFICATE-----Generated at Sun Jun 15 09:45:10 2025 by rpki-client