$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: jQB4qgJ4MBIBL9/Rowa1fwDDG3+zmg9zDBVpyzXswGw= Subject key identifier: 84:AB:6E:9B:6A:0E:BE:85:B1:62:FE:07:8C:7C:8B:DA:26:25:E5:95 Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 262F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 2617 Signing time: Mon 16 Jun 2025 15:46:53 +0000 Manifest this update: Mon 16 Jun 2025 15:46:53 +0000 Manifest next update: Mon 23 Jun 2025 15:46:53 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: pnjn02xuoT0DKN0hm0k1MJCbpFfEWc4u62AiiZgeKNg=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9775 (0x262f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: Jun 16 15:46:53 2025 GMT Not After : Jun 23 15:46:53 2025 GMT Subject: CN=68503c6d-1469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:44:c3:6e:4c:a8:9d:83:e6:13:a6:a4:d7: 3c:ce:b9:52:c2:3e:cc:e7:db:a9:a4:07:24:3c:88: 1d:3e:36:b5:73:b7:d3:e9:28:58:92:d6:28:07:6f: 75:f9:0e:47:0b:21:54:d8:e6:2a:de:d8:75:15:fe: 03:f4:ca:72:70:9a:2c:b0:fd:c4:22:45:7b:ae:4f: 44:77:76:7c:ee:0b:f3:f2:e0:30:bf:fd:72:10:aa: 41:89:db:a3:dd:04:fb:54:f6:31:7d:b4:ff:2a:d8: 3a:be:c8:dc:5d:e4:5e:08:c4:49:be:54:2f:29:89: e2:83:04:53:23:27:49:9d:db:94:e4:1d:2d:11:fa: 6e:2c:5d:85:fe:7e:cb:cc:41:f5:36:43:b5:79:99: a3:cf:dd:2e:39:92:b1:c3:37:a0:38:55:07:dd:47: b9:85:9d:a6:f1:36:b8:07:0d:10:de:48:0e:ca:80: 27:b3:a7:cc:25:e6:c3:0d:87:38:52:d1:05:24:2f: 71:87:22:e6:4e:78:b4:2d:be:db:e0:72:f6:35:14: ca:61:94:c2:37:af:cc:2d:d9:22:21:18:20:c6:f7: f4:65:51:90:15:7a:24:bd:14:0f:d2:40:32:c2:a0: 80:72:e0:6f:82:d7:40:5e:27:7e:34:e0:96:89:98: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:6E:9B:6A:0E:BE:85:B1:62:FE:07:8C:7C:8B:DA:26:25:E5:95 X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:8a:67:74:e2:69:6a:a3:57:3b:b1:06:f7:ea:99:bc:50:55: 9a:6d:c3:59:d9:42:bd:ad:8b:0d:48:1b:26:e3:40:9b:35:6d: 71:a1:32:34:3e:85:0f:75:49:8d:8e:4a:83:bc:af:27:e7:06: 32:24:06:d1:f4:96:44:bf:df:a9:b8:ec:ed:f1:bf:ab:20:e5: 6a:41:0a:75:ec:df:f6:eb:b4:a2:be:9e:95:27:df:14:89:cf: 36:cb:4f:ec:fa:1d:a5:a5:9d:2d:7a:63:48:17:a5:8c:f5:ba: f8:ac:82:46:f2:ad:8a:f2:05:77:8d:1c:11:1d:d7:e8:4f:49: aa:44:ad:ad:3d:19:99:ec:0d:3b:02:e7:34:b3:2a:67:a7:1b: df:d8:2b:d2:4f:8b:af:6c:a5:52:a5:97:a6:d3:80:d5:fb:00: 1f:91:0d:5d:79:43:b8:6a:e8:d6:b5:40:fd:3d:58:9e:43:99: ae:e8:9f:40:fb:2f:49:36:5f:4f:13:d6:8a:83:15:8d:af:92: 8d:70:a1:94:dd:2f:6a:b7:bd:a5:9f:95:0a:52:87:f8:94:62: 6f:05:1a:77:bd:26:f5:f1:2f:91:cf:16:9a:96:44:f6:0a:04: af:83:bd:35:55:38:d9:f9:65:d8:6d:cb:ba:b1:ba:ff:90:54: dd:84:4a:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUwNjE2MTU0NjUzWhcNMjUwNjIzMTU0NjUzWjAYMRYwFAYD VQQDEw02ODUwM2M2ZC0xNDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEdEw25MqJ2D5hOmpNc8zrlSwj7M59uppAckPIgdPja1c7fT6ShYktYoB291 +Q5HCyFU2OYq3th1Ff4D9MpycJossP3EIkV7rk9Ed3Z87gvz8uAwv/1yEKpBiduj 3QT7VPYxfbT/Ktg6vsjcXeReCMRJvlQvKYnigwRTIydJnduU5B0tEfpuLF2F/n7L zEH1NkO1eZmjz90uOZKxwzegOFUH3Ue5hZ2m8Ta4Bw0Q3kgOyoAns6fMJebDDYc4 UtEFJC9xhyLmTni0Lb7b4HL2NRTKYZTCN6/MLdkiIRggxvf0ZVGQFXokvRQP0kAy wqCAcuBvgtdAXid+NOCWiZjHXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISrbptq Dr6FsWL+B4x8i9omJeWVMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2imd04mlqo1c7sQb36pm8UFWabcNZ2UK9rYsNSBsm40CbNW1xoTI0 PoUPdUmNjkqDvK8n5wYyJAbR9JZEv9+puOzt8b+rIOVqQQp17N/267Sivp6VJ98U ic82y0/s+h2lpZ0temNIF6WM9br4rIJG8q2K8gV3jRwRHdfoT0mqRK2tPRmZ7A07 Auc0sypnpxvf2CvST4uvbKVSpZem04DV+wAfkQ1deUO4aujWtUD9PVieQ5mu6J9A +y9JNl9PE9aKgxWNr5KNcKGU3S9qt72ln5UKUof4lGJvBRp3vSb18S+RzxaalkT2 CgSvg701VTjZ+WXYbcu6sbr/kFTdhEro -----END CERTIFICATE-----Generated at Tue Jun 17 20:00:18 2025 by rpki-client