$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft File: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json) Hash identifier: L/sn2pOO3thhjIksAcsJxICQk1oFWmklVGcq7t/yRj8= Subject key identifier: B3:46:D9:CC:A7:D9:D2:FA:CB:B0:18:D8:1E:C5:74:D4:26:9B:1A:46 Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Certificate serial: 0F7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft Manifest number: 0F5C Signing time: Wed 18 Jun 2025 17:33:37 +0000 Manifest this update: Wed 18 Jun 2025 17:33:36 +0000 Manifest next update: Wed 25 Jun 2025 17:33:36 +0000 Files and hashes: 1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: 14vEX0ezxiaghHOuokFt0WOEmhfsu5ns4+g9bZ7OaiE=) 2: B1F01F2A025C11F0BCAB0F12C4F9AE02.roa (hash: wNl2vPAfQOmVBCkud9vffEnTL87IbN3lfDYFsp2wc4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3964 (0xf7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Validity Not Before: Jun 18 17:33:36 2025 GMT Not After : Jun 25 17:33:36 2025 GMT Subject: CN=6852f870-2d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:42:66:c8:1e:27:eb:d6:16:a9:ac:2e:04: af:23:42:80:66:17:2b:c7:6a:f6:aa:3e:ac:07:3f: 11:ea:46:8f:08:b9:44:c8:54:1c:79:be:12:7a:c5: 80:1c:18:81:76:9a:75:f2:6a:84:ae:1d:5d:3e:fb: cb:53:62:0c:4b:e4:6f:8f:95:a9:80:c4:58:af:7e: e1:93:94:5d:fc:46:4c:1a:bb:ea:fa:a9:07:6a:eb: 6e:e9:81:6d:bb:e6:47:a0:ab:35:23:8a:bf:27:54: 11:c0:57:00:1f:35:c2:86:93:cd:5f:9c:d6:ec:f1: 98:de:80:98:aa:05:86:23:0c:7f:87:46:b6:bd:30: 84:78:8b:cb:95:93:f7:bf:30:22:3f:b6:81:3b:d0: ca:80:f4:7e:f6:59:7a:ba:66:92:63:61:09:db:3e: 8c:7b:0b:36:59:88:60:b0:73:68:ed:1b:19:29:10: 7a:5a:2e:53:f5:a4:8b:72:14:22:a1:0a:5d:f1:68: 24:3b:87:af:17:27:51:42:2f:56:fc:43:e8:6e:2f: e4:77:d7:89:fd:51:36:98:12:64:d0:15:8c:96:1b: 77:ec:c0:a9:9e:e8:f8:cc:4b:a5:63:64:72:45:36: e2:42:1d:62:e4:75:0d:95:c8:79:20:a8:d1:d4:c7: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:46:D9:CC:A7:D9:D2:FA:CB:B0:18:D8:1E:C5:74:D4:26:9B:1A:46 X509v3 Authority Key Identifier: keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:99:c8:00:a2:65:85:04:38:92:09:fb:b4:c5:5b:95:6f:e7: 95:78:f1:1e:1a:37:73:c1:b1:e9:0f:35:f4:9d:a9:9d:27:d7: 87:71:33:c6:e2:67:d1:10:b1:78:43:3c:80:6f:88:8f:13:ea: 13:d1:df:7d:ef:25:3d:04:92:c5:4a:07:17:52:a6:e1:48:1d: 17:56:5e:d6:48:8c:f6:4f:cc:f9:b0:d0:9b:4a:91:e1:a6:01: 1a:63:25:7b:c9:f9:9d:ab:d0:97:fb:ab:b6:fe:94:2d:28:62: 73:47:0b:da:42:b9:1f:1f:96:99:8e:c8:7a:76:ca:c9:0e:9a: 40:b0:5a:3e:45:55:54:f5:cb:35:05:a4:ff:8c:b1:66:30:65: 3b:b3:b1:50:fa:e0:ec:7c:1c:b7:ef:64:bf:4f:1f:14:43:fe: 3d:f1:3c:b0:71:b4:a8:ef:40:de:21:38:0b:bc:f1:1f:99:4d: a0:ef:09:04:e1:03:29:9f:37:c8:ec:d8:a1:62:05:a8:88:69: 2c:d4:51:8b:a7:1d:35:74:d6:0f:47:9b:6b:01:b9:3f:8e:2c: 16:52:98:b4:4e:e0:2f:25:99:78:35:b5:64:8b:85:12:39:a0: f0:7e:bd:1d:53:59:34:df:49:6a:83:16:36:76:93:5b:b4:7d: 24:02:fd:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2M0QxMTAvBgNVBAUTKEYyMjFFOTQzMkExOUYyODUwNzgzMUIxMkVEODZCQzRC QjU5NjM5ODEwHhcNMjUwNjE4MTczMzM2WhcNMjUwNjI1MTczMzM2WjAYMRYwFAYD VQQDEw02ODUyZjg3MC0yZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLlCZsgeJ+vWFqmsLgSvI0KAZhcrx2r2qj6sBz8R6kaPCLlEyFQceb4SesWA HBiBdpp18mqErh1dPvvLU2IMS+Rvj5WpgMRYr37hk5Rd/EZMGrvq+qkHautu6YFt u+ZHoKs1I4q/J1QRwFcAHzXChpPNX5zW7PGY3oCYqgWGIwx/h0a2vTCEeIvLlZP3 vzAiP7aBO9DKgPR+9ll6umaSY2EJ2z6Mews2WYhgsHNo7RsZKRB6Wi5T9aSLchQi oQpd8WgkO4evFydRQi9W/EPobi/kd9eJ/VE2mBJk0BWMlht37MCpnuj4zEulY2Ry RTbiQh1i5HUNlch5IKjR1Mf0EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNG2cyn 2dL6y7AY2B7FdNQmmxpGMB8GA1UdIwQYMBaAFPIh6UMqGfKFB4MbEu2GvEu1ljmB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTYzRC9GOUM5NzY2Qzcy NjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhvVUhneHNTN1lhOFM3V1dP WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpSHBReW9aOG9VSGd4c1M3WWE4UzdXV09ZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTYzRC9GOUM5NzY2QzcyNjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhv VUhneHNTN1lhOFM3V1dPWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTmcgAomWFBDiSCfu0xVuVb+eVePEeGjdzwbHpDzX0namdJ9eHcTPG 4mfRELF4QzyAb4iPE+oT0d997yU9BJLFSgcXUqbhSB0XVl7WSIz2T8z5sNCbSpHh pgEaYyV7yfmdq9CX+6u2/pQtKGJzRwvaQrkfH5aZjsh6dsrJDppAsFo+RVVU9cs1 BaT/jLFmMGU7s7FQ+uDsfBy372S/Tx8UQ/498TywcbSo70DeITgLvPEfmU2g7wkE 4QMpnzfI7NihYgWoiGks1FGLpx01dNYPR5trAbk/jiwWUpi0TuAvJZl4NbVki4US OaDwfr0dU1k030lqgxY2dpNbtH0kAv2g -----END CERTIFICATE-----Generated at Fri Jun 20 09:02:31 2025 by rpki-client