$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json) Hash identifier: C8SgzUefqxLFvwVnSPDuesxp8Xxx+gldG7wBRcL6jb8= Subject key identifier: 04:E1:DF:AA:E5:EA:38:0A:C5:44:8C:93:2C:F7:7A:06:D8:5A:E5:E5 Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft Manifest number: 077C Signing time: Mon 16 Jun 2025 21:12:40 +0000 Manifest this update: Mon 16 Jun 2025 21:12:40 +0000 Manifest next update: Mon 23 Jun 2025 21:12:40 +0000 Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: +DKAiQr3XBQ6uF1u36kE+RNSF+Egql6L3djKrpxIdFo=) 2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: 4ZdvboJ8mrbqq75dMjpcRNVXA0/Wmpp30CU0dXWt/yQ=) 3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: nma4xkXXDMJG7QciaymwPc3dJsJxzYlJjEDf7RTo8RE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Validity Not Before: Jun 16 21:12:40 2025 GMT Not After : Jun 23 21:12:40 2025 GMT Subject: CN=685088c8-5c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:65:99:96:53:83:1b:88:c6:04:a2:fc:c5: 5a:4e:02:15:f7:50:cb:c5:b4:74:64:47:d6:df:85: c9:81:18:b5:08:cf:12:47:d9:d0:51:0f:6a:ce:ae: 1e:c5:56:df:9d:6c:51:9a:1a:01:77:3f:6b:bd:bd: 2f:e9:e0:36:dd:db:bb:a1:4f:1f:65:a0:29:a7:0a: a8:6c:19:93:2c:a3:9a:7d:30:28:c2:6f:61:1a:93: 1a:10:25:d0:94:92:a7:53:7c:22:9d:94:14:f5:28: af:38:a7:43:a4:b1:01:4e:2d:7c:33:6d:c4:4f:ac: 02:d2:6d:a6:dc:6a:2d:ab:68:61:cb:73:30:40:e7: c4:94:c9:04:6d:5d:ca:7a:57:79:15:15:d4:4b:d9: 7d:be:b7:b3:f7:4d:6f:48:21:13:b7:24:d4:0d:be: c8:c8:27:64:3c:a5:b0:f9:61:78:7e:c9:46:2d:47: d2:bf:01:05:8c:52:de:b5:5e:a6:42:61:94:ce:4e: ee:e7:34:f0:c5:b9:48:16:44:2c:45:af:38:ec:ab: 26:e1:3e:d3:99:cd:5c:fd:4e:2d:61:fa:4a:03:30: 8b:cf:90:9b:db:38:ea:ec:c3:43:04:08:aa:35:a9: b6:54:eb:b4:51:07:49:db:6f:a1:75:0f:a3:d7:fb: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E1:DF:AA:E5:EA:38:0A:C5:44:8C:93:2C:F7:7A:06:D8:5A:E5:E5 X509v3 Authority Key Identifier: keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3a:85:d2:53:65:c2:b5:dd:d9:7b:b5:d5:43:d6:2d:87:4d: 88:77:68:15:ac:0c:e3:90:e1:98:7b:21:86:19:00:87:79:64: bd:a8:f3:ed:a3:13:aa:c4:42:03:51:a9:30:10:05:b3:d3:fd: 97:26:50:8b:63:df:9d:d3:8e:8a:39:cf:c5:6c:9a:5a:06:48: ee:51:3a:e7:08:2c:c6:61:91:3d:cb:b1:11:2b:b6:37:41:1a: 73:73:0e:69:6c:3e:50:2e:9e:b6:6d:15:ff:86:63:6d:0e:1a: e5:59:c3:c0:c4:d6:db:3f:9d:3d:74:c3:07:51:44:10:ae:e2: fa:8c:4a:01:0e:9d:cf:4d:38:22:5f:b3:20:fd:b8:67:68:21: 5b:89:6d:df:67:f0:cf:41:2d:cd:a8:a6:0b:29:97:e0:5f:91: 47:70:f7:67:1b:48:8f:7e:4a:d2:14:f0:c7:a6:0f:95:07:94: 11:39:cb:f5:d6:b9:e8:4a:b7:5d:eb:bf:07:21:3e:5a:e0:a8: a7:51:81:2f:d0:8c:24:24:64:36:a5:28:4c:9c:de:a1:d7:f4: a3:a1:f8:00:cf:35:bc:0d:0e:ba:58:ba:ae:b1:f5:ca:83:fd: eb:24:a1:06:d4:3c:ad:2a:0a:29:97:93:88:ec:79:75:3b:bd: 06:93:80:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw MkU5NTYwMTAwHhcNMjUwNjE2MjExMjQwWhcNMjUwNjIzMjExMjQwWjAYMRYwFAYD VQQDEw02ODUwODhjOC01YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKBlmZZTgxuIxgSi/MVaTgIV91DLxbR0ZEfW34XJgRi1CM8SR9nQUQ9qzq4e xVbfnWxRmhoBdz9rvb0v6eA23du7oU8fZaAppwqobBmTLKOafTAowm9hGpMaECXQ lJKnU3winZQU9SivOKdDpLEBTi18M23ET6wC0m2m3Gotq2hhy3MwQOfElMkEbV3K eld5FRXUS9l9vrez901vSCETtyTUDb7IyCdkPKWw+WF4fslGLUfSvwEFjFLetV6m QmGUzk7u5zTwxblIFkQsRa847Ksm4T7Tmc1c/U4tYfpKAzCLz5Cb2zjq7MNDBAiq Nam2VOu0UQdJ22+hdQ+j1/uppwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATh36rl 6jgKxUSMkyz3egbYWuXlMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2 OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz TG9hSTNxU0lmWk1DNlZZQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcOoXSU2XCtd3Ze7XVQ9Yth02Id2gVrAzjkOGYeyGGGQCHeWS9qPPt oxOqxEIDUakwEAWz0/2XJlCLY9+d046KOc/FbJpaBkjuUTrnCCzGYZE9y7ERK7Y3 QRpzcw5pbD5QLp62bRX/hmNtDhrlWcPAxNbbP509dMMHUUQQruL6jEoBDp3PTTgi X7Mg/bhnaCFbiW3fZ/DPQS3NqKYLKZfgX5FHcPdnG0iPfkrSFPDHpg+VB5QROcv1 1rnoSrdd678HIT5a4KinUYEv0IwkJGQ2pShMnN6h1/SjofgAzzW8DQ66WLqusfXK g/3rJKEG1DytKgopl5OI7Hl1O70Gk4AV -----END CERTIFICATE-----Generated at Tue Jun 17 16:20:08 2025 by rpki-client