$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: zhNOE/T7dkdo+KQZ64i2/4gwd2zfAkdHiQZlkof6FmQ= Subject key identifier: 8B:9E:7C:D0:C1:BA:5C:47:8C:7B:09:EB:58:95:D5:FC:7C:51:5B:1F Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 046E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 0467 Signing time: Sat 09 Aug 2025 00:40:44 +0000 Manifest this update: Sat 09 Aug 2025 00:40:44 +0000 Manifest next update: Sat 16 Aug 2025 00:40:44 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: 38oUKNF2mQhjr3I843fOdlJshoYkfHvr/Tb0g5mBMm4=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 6uFvpip5xKUGRghNdeTpeBy3R93KivQ5uvgIzsfjzEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1134 (0x46e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Aug 9 00:40:44 2025 GMT Not After : Aug 16 00:40:44 2025 GMT Subject: CN=6896990c-d3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fd:b8:18:65:23:ca:b1:67:2c:0f:92:39:6d: 81:d3:d2:4a:e0:c2:30:f2:df:c2:a8:05:8c:ee:f3: b3:c7:e3:1c:01:2a:44:7b:79:20:00:6d:b1:a1:cf: ac:0b:71:0f:db:47:b1:58:0b:17:a7:96:17:97:84: a2:6e:94:c2:b4:8d:2c:e5:dc:cb:fb:8c:0b:5b:c6: 37:73:43:88:19:41:83:99:b2:99:4b:ee:3c:39:6e: a7:26:fa:c8:e5:ac:5a:26:03:e5:1a:59:72:7b:2a: 52:1c:63:52:ab:2c:e7:5f:04:fa:55:26:5b:c2:e1: e1:7e:aa:b8:22:d1:a0:62:07:db:54:62:65:da:6a: f0:12:04:df:7a:a0:cf:c2:30:1e:f9:2e:b5:73:9a: d7:10:7b:00:2f:e9:6a:d8:e1:e0:31:ca:60:92:93: 6e:cb:61:39:e6:ef:4b:6b:56:3e:dd:e4:2d:82:49: 44:91:84:42:f5:e3:ae:1a:06:24:81:77:a6:4d:00: 12:22:77:e0:94:0c:94:07:86:ee:9e:5f:2d:37:be: ed:79:3d:c0:b8:3c:d8:ab:32:57:0e:33:02:e9:f5: 99:d6:71:03:06:42:1a:9d:26:d3:0c:b5:7e:ef:75: e8:a8:66:74:bd:3c:07:31:77:57:1d:aa:c4:43:43: a8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9E:7C:D0:C1:BA:5C:47:8C:7B:09:EB:58:95:D5:FC:7C:51:5B:1F X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:13:e0:f5:c7:ac:49:0c:f3:9b:95:72:18:50:6e:ec:d7:32: 8b:13:11:66:44:52:22:43:3b:95:fd:b4:03:f5:72:fe:15:85: 37:46:a0:68:c5:b5:66:89:f4:58:2b:8f:60:42:99:da:65:c7: 85:a7:6b:16:d5:f5:94:50:43:c0:47:5d:6e:1e:f8:c3:58:3d: da:03:b6:61:b9:04:36:70:4c:0f:78:08:53:94:85:b7:eb:d1: 9c:a0:cd:70:33:59:28:e6:9e:6d:d5:b9:66:f7:9a:78:a3:93: 0a:71:65:6f:b6:17:84:94:60:16:8d:f6:23:50:2c:95:5c:d2: 30:23:27:c9:f0:65:c1:f1:51:53:26:12:2f:78:d1:2e:e7:6f: b4:02:ea:ad:44:c8:41:e9:4d:db:93:30:2b:dd:87:b8:7a:91: 6b:1f:4a:50:25:95:d8:63:f7:08:07:0d:64:81:ad:41:89:cf: 3f:af:83:11:c5:e2:66:8e:a4:a8:e3:19:99:bc:ad:11:0c:cb: 82:21:1c:02:fa:7a:90:91:ae:d0:27:c4:d7:6c:f2:8f:40:6b: 84:89:fc:50:93:2c:82:32:24:03:96:a3:a2:e3:f7:96:50:9e: 65:50:0f:d3:cf:8f:20:aa:6e:76:ec:d2:99:b2:2a:0b:19:e9: 96:dc:fd:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjUwODA5MDA0MDQ0WhcNMjUwODE2MDA0MDQ0WjAYMRYwFAYD VQQDEw02ODk2OTkwYy1kM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6f24GGUjyrFnLA+SOW2B09JK4MIw8t/CqAWM7vOzx+McASpEe3kgAG2xoc+s C3EP20exWAsXp5YXl4SibpTCtI0s5dzL+4wLW8Y3c0OIGUGDmbKZS+48OW6nJvrI 5axaJgPlGllyeypSHGNSqyznXwT6VSZbwuHhfqq4ItGgYgfbVGJl2mrwEgTfeqDP wjAe+S61c5rXEHsAL+lq2OHgMcpgkpNuy2E55u9La1Y+3eQtgklEkYRC9eOuGgYk gXemTQASInfglAyUB4bunl8tN77teT3AuDzYqzJXDjMC6fWZ1nEDBkIanSbTDLV+ 73XoqGZ0vTwHMXdXHarEQ0OoBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuefNDB ulxHjHsJ61iV1fx8UVsfMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWE+D1x6xJDPOblXIYUG7s1zKLExFmRFIiQzuV/bQD9XL+FYU3RqBo xbVmifRYK49gQpnaZceFp2sW1fWUUEPAR11uHvjDWD3aA7ZhuQQ2cEwPeAhTlIW3 69GcoM1wM1ko5p5t1blm95p4o5MKcWVvtheElGAWjfYjUCyVXNIwIyfJ8GXB8VFT JhIveNEu52+0AuqtRMhB6U3bkzAr3Ye4epFrH0pQJZXYY/cIBw1kga1Bic8/r4MR xeJmjqSo4xmZvK0RDMuCIRwC+nqQka7QJ8TXbPKPQGuEifxQkyyCMiQDlqOi4/eW UJ5lUA/Tz48gqm527NKZsioLGemW3P0Y -----END CERTIFICATE-----Generated at Sun Aug 10 04:50:05 2025 by rpki-client