$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: Q7afTiWl4cuyqC4cJA3427ST8yV3noQa6EH07z3OZVw= Subject key identifier: 62:0E:92:21:CD:84:59:A7:26:47:32:2E:61:7B:65:61:9F:AF:94:71 Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: 20 Signing time: Sun 15 Jun 2025 06:57:29 +0000 Manifest this update: Sun 15 Jun 2025 06:57:29 +0000 Manifest next update: Sun 22 Jun 2025 06:57:28 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: bevIU80w3SXLsI64/jFuXl227vXWUz8bfRSgflvhUjI=) 2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: o/13AO8mPDvXBUbVg85hPilsA+v8uBO89/ms9/UgUgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Jun 15 06:57:29 2025 GMT Not After : Jun 22 06:57:28 2025 GMT Subject: CN=684e6ed9-9b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:cc:89:fb:6f:43:e8:ff:36:05:fd:85:b0: 15:58:c2:43:21:e7:d7:c9:7f:87:93:c5:15:a4:c4: 25:64:89:3a:23:d1:cb:40:0c:b9:ec:1a:fc:67:79: 81:21:31:ca:c4:4d:f6:81:d4:74:d6:99:dd:5d:b2: 03:0b:53:f2:c4:54:83:59:5e:93:c1:b2:6e:74:c4: 25:12:af:db:87:b2:42:57:9b:b8:84:19:84:3f:43: 81:fb:23:43:44:74:93:a0:02:de:8a:e5:67:ee:eb: ab:ab:90:7b:68:a0:21:b8:2d:96:d0:bb:68:73:19: d7:00:af:c7:96:0d:8b:46:65:d8:4d:18:65:ab:97: dc:79:72:05:b6:86:46:21:fa:6e:52:dc:a5:9c:71: 6b:c0:09:dd:ce:15:a1:b1:37:c5:ee:6c:d5:cc:a2: 70:97:e9:d9:61:e7:e1:9e:80:59:fb:91:fe:c7:89: 27:1b:fc:72:09:65:de:a6:2a:36:20:fe:cd:26:47: 59:76:8e:15:75:22:3a:89:dc:64:1c:6d:d7:b9:0d: d5:50:df:fc:f0:c9:c6:5f:c9:c5:c0:b4:84:e4:ab: 2e:34:0f:6d:e3:85:c1:b3:4b:31:12:15:a9:3a:e1: a6:d6:c3:7e:af:74:d3:45:50:9a:28:67:8b:3b:13: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0E:92:21:CD:84:59:A7:26:47:32:2E:61:7B:65:61:9F:AF:94:71 X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:67:84:34:5d:46:c6:8b:7c:c3:3c:33:4d:4f:d5:ed:91:5c: 3e:73:71:0f:f8:c3:d1:67:8d:a3:a9:91:2a:72:6b:dd:aa:ad: ef:a1:ef:42:61:28:a1:fc:59:4a:42:a0:10:71:11:48:67:19: cd:0d:4b:c8:0b:9f:3b:d5:ef:ae:d1:62:7c:57:6e:cb:d0:ab: 6d:aa:2b:07:79:40:ff:e8:c4:6f:71:09:48:0a:35:ef:73:f1: bb:6a:8c:d7:6a:ac:f4:4f:ca:1f:14:48:82:a4:a9:6c:61:5a: 3e:f8:66:14:95:98:64:39:c4:4a:a9:48:8e:ce:77:fe:ea:86: 2d:4f:02:69:13:6e:76:11:6d:52:30:de:06:a3:22:9f:c6:d5: 93:47:f4:97:fc:9c:cb:7e:d7:79:f9:cc:02:93:b5:26:68:3f: a7:f5:b7:dd:9c:d1:9d:58:05:f6:89:66:84:16:0a:d3:0c:0a: 85:10:27:43:75:b0:f5:a1:a7:0b:e4:21:20:32:84:b3:36:f9: 9f:e4:bf:d4:09:0d:39:5b:70:56:47:04:26:67:b1:78:a8:18: 3e:fd:ce:5b:8b:51:75:67:64:d9:3e:46:7b:92:4b:94:54:80: 09:13:f5:59:59:1b:84:12:3d:b9:88:dc:30:42:73:76:a2:01: 8d:ef:df:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkFDQjExMC8GA1UEBRMoRjAwOTIzM0Q4RDA4N0ZDMUQwRjY0MjU3ODBFM0E0RDg0 NEEzNEY4MTAeFw0yNTA2MTUwNjU3MjlaFw0yNTA2MjIwNjU3MjhaMBgxFjAUBgNV BAMTDTY4NGU2ZWQ5LTliOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDABsyJ+29D6P82Bf2FsBVYwkMh59fJf4eTxRWkxCVkiToj0ctADLnsGvxneYEh McrETfaB1HTWmd1dsgMLU/LEVINZXpPBsm50xCUSr9uHskJXm7iEGYQ/Q4H7I0NE dJOgAt6K5Wfu66urkHtooCG4LZbQu2hzGdcAr8eWDYtGZdhNGGWrl9x5cgW2hkYh +m5S3KWccWvACd3OFaGxN8XubNXMonCX6dlh5+GegFn7kf7HiScb/HIJZd6mKjYg /s0mR1l2jhV1IjqJ3GQcbde5DdVQ3/zwycZfycXAtITkqy40D23jhcGzSzESFak6 4abWw36vdNNFUJooZ4s7E0GFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYg6SIc2E WacmRzIuYXtlYZ+vlHEwHwYDVR0jBBgwFoAU8AkjPY0If8HQ9kJXgOOk2ESjT4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQUNCLzc0QkQ4NThBMUIz RDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEFralBZMElmOEhROWtKWGdPT2syRVNqVDRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy QUNCLzc0QkQ4NThBMUIzRDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhI UTlrSlhnT09rMkVTalQ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJFnhDRdRsaLfMM8M01P1e2RXD5zcQ/4w9FnjaOpkSpya92qre+h70Jh KKH8WUpCoBBxEUhnGc0NS8gLnzvV767RYnxXbsvQq22qKwd5QP/oxG9xCUgKNe9z 8btqjNdqrPRPyh8USIKkqWxhWj74ZhSVmGQ5xEqpSI7Od/7qhi1PAmkTbnYRbVIw 3gajIp/G1ZNH9Jf8nMt+13n5zAKTtSZoP6f1t92c0Z1YBfaJZoQWCtMMCoUQJ0N1 sPWhpwvkISAyhLM2+Z/kv9QJDTlbcFZHBCZnsXioGD79zluLUXVnZNk+RnuSS5RU gAkT9VlZG4QSPbmI3DBCc3aiAY3v310= -----END CERTIFICATE-----Generated at Sun Jun 15 10:26:44 2025 by rpki-client