$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: ILeToOE0Slrv50U1CJWuiPWUYuNwBDGPQCf9cJ+m+cc= Subject key identifier: A2:21:B0:E9:F8:8D:0F:E3:73:86:5F:43:C1:0A:0B:ED:AE:A4:63:47 Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 046B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 046B Signing time: Mon 11 Aug 2025 00:15:28 +0000 Manifest this update: Mon 11 Aug 2025 00:15:28 +0000 Manifest next update: Mon 18 Aug 2025 00:15:28 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: MX3i21EJwHU22J3YiMdd6YaSPB48mcixS4nc58AnKCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1131 (0x46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Validity Not Before: Aug 11 00:15:28 2025 GMT Not After : Aug 18 00:15:28 2025 GMT Subject: CN=68993620-79f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:1d:79:0e:4f:95:2c:77:cc:82:ac:a7:f3: f6:c2:22:7e:c5:2c:a3:11:33:71:a9:c7:da:0b:61: de:b0:b8:c3:31:c6:74:6e:96:b4:50:54:15:09:a5: d6:e4:95:27:e1:d6:a1:8d:74:cf:31:be:cb:61:93: 51:9a:79:e5:1b:cd:6c:a8:1c:b7:60:0a:a8:94:ed: 0b:da:b4:ab:c6:f8:96:4b:cc:be:5d:c9:f0:27:58: d8:d1:c5:e9:51:7a:dc:1e:1e:30:f4:09:2e:2d:2c: 50:fb:f9:67:25:29:2d:80:4d:ba:5e:b6:d7:35:f9: 04:3c:00:ed:cd:c6:7e:be:8f:9e:73:aa:50:3b:de: 2b:a9:a4:49:00:23:30:e9:dc:ac:b7:c3:35:14:05: de:17:5d:60:f9:61:9c:0b:95:b6:57:fb:a4:53:a0: c6:c9:ea:dc:13:d0:84:56:b8:9d:74:2d:8f:d6:61: d6:c4:96:02:c2:70:ce:28:c1:51:9d:ed:44:55:0d: 75:b9:f6:83:54:66:a2:bf:8f:00:f0:f2:06:ce:68: 76:71:42:21:6a:da:df:ca:49:2a:2e:a3:cd:67:60: 80:66:30:5f:3e:a1:d7:6e:4d:ec:de:80:68:a0:db: ea:dd:39:74:0c:49:72:ad:1a:85:60:9f:8b:36:d5: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:21:B0:E9:F8:8D:0F:E3:73:86:5F:43:C1:0A:0B:ED:AE:A4:63:47 X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f0:67:ec:cb:4e:19:bb:6b:93:35:20:2f:42:e6:55:1a:6e: 91:4b:cd:58:88:30:42:29:92:1b:d1:93:78:8a:7c:92:65:6f: d1:fa:f4:57:6d:1f:c7:b8:1c:16:df:92:3b:0a:73:b9:93:20: 4e:5b:71:e0:04:03:72:eb:d4:dc:15:ba:0f:e4:ff:61:92:45: fd:58:58:85:07:74:96:bd:65:5d:35:21:c9:4a:67:d1:9d:74: 2b:47:d9:61:9e:09:c6:c6:a4:a2:c6:2d:f1:3b:b4:d3:55:a1: 8a:7a:85:ff:fe:89:1c:12:e0:c4:54:d3:a4:94:4d:ad:30:d7: 6c:d8:17:8b:e8:a3:6c:e9:e1:ef:c8:92:72:93:6e:36:48:7a: f4:d9:11:e2:61:18:09:c7:7f:3e:e8:81:84:f7:4a:98:1a:83: 39:e6:36:43:6b:1f:de:d7:6b:56:7e:49:56:3e:07:ec:0f:11: c8:dd:9f:f1:b4:02:e2:ea:ef:51:0b:10:fd:b6:00:0e:a7:b3: 18:e7:df:bd:22:b7:aa:6c:f0:6a:0a:77:d5:4f:df:52:9c:0d: 38:d1:06:68:4e:85:9b:1f:83:74:c4:6e:9d:55:9c:68:23:4a: d9:d7:2d:b8:40:65:b9:a3:65:a9:be:aa:69:10:26:05:b9:4f: 89:39:e8:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjUwODExMDAxNTI4WhcNMjUwODE4MDAxNTI4WjAYMRYwFAYD VQQDEw02ODk5MzYyMC03OWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJgdeQ5PlSx3zIKsp/P2wiJ+xSyjETNxqcfaC2HesLjDMcZ0bpa0UFQVCaXW 5JUn4dahjXTPMb7LYZNRmnnlG81sqBy3YAqolO0L2rSrxviWS8y+XcnwJ1jY0cXp UXrcHh4w9AkuLSxQ+/lnJSktgE26XrbXNfkEPADtzcZ+vo+ec6pQO94rqaRJACMw 6dyst8M1FAXeF11g+WGcC5W2V/ukU6DGyercE9CEVriddC2P1mHWxJYCwnDOKMFR ne1EVQ11ufaDVGaiv48A8PIGzmh2cUIhatrfykkqLqPNZ2CAZjBfPqHXbk3s3oBo oNvq3Tl0DElyrRqFYJ+LNtUEXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIhsOn4 jQ/jc4ZfQ8EKC+2upGNHMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX8Gfsy04Zu2uTNSAvQuZVGm6RS81YiDBCKZIb0ZN4inySZW/R+vRX bR/HuBwW35I7CnO5kyBOW3HgBANy69TcFboP5P9hkkX9WFiFB3SWvWVdNSHJSmfR nXQrR9lhngnGxqSixi3xO7TTVaGKeoX//okcEuDEVNOklE2tMNds2BeL6KNs6eHv yJJyk242SHr02RHiYRgJx38+6IGE90qYGoM55jZDax/e12tWfklWPgfsDxHI3Z/x tALi6u9RCxD9tgAOp7MY59+9IreqbPBqCnfVT99SnA040QZoToWbH4N0xG6dVZxo I0rZ1y24QGW5o2WpvqppECYFuU+JOei8 -----END CERTIFICATE-----Generated at Tue Aug 12 20:45:30 2025 by rpki-client