$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: Xu+0cygi0bFQD8wXcLmulV4dxOeidQGvsME8DD0JNhE= Subject key identifier: 5A:BC:E0:ED:D1:AC:79:2D:10:82:CA:AE:61:C9:18:79:B9:ED:93:B2 Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0CB0 Signing time: Mon 16 Jun 2025 18:05:56 +0000 Manifest this update: Mon 16 Jun 2025 18:05:55 +0000 Manifest next update: Mon 23 Jun 2025 18:05:55 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: M8ZRcEwrvlwXyQWfL1xlhlKOz0FhSS/Qa8f0JEMsIHQ=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Jun 16 18:05:55 2025 GMT Not After : Jun 23 18:05:55 2025 GMT Subject: CN=68505d04-c277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:77:c9:fb:79:b9:87:7d:df:32:8c:d0:02: 16:9f:c7:97:ab:f5:32:23:fd:2b:67:32:44:65:de: 11:16:fc:a9:26:32:86:93:f7:4b:d5:5c:9e:76:1a: e3:93:b3:43:48:60:56:02:90:2d:9a:b9:e1:ef:8f: 33:60:ba:73:c5:7f:95:4c:2a:87:7f:e1:dd:6a:65: 12:b6:31:63:40:62:ed:54:eb:54:5c:34:01:cd:77: f7:ce:8d:58:81:e6:ee:1f:6a:36:54:22:e7:eb:f6: b1:7d:33:02:c2:90:5a:2f:fd:0d:c7:fd:de:11:80: d7:14:2f:2e:d8:86:3c:0b:8e:59:1e:b4:d4:f0:5c: d8:c4:e9:96:b0:80:3a:95:83:a9:3d:76:9e:0b:4d: 0a:f2:58:76:02:68:d5:e3:0a:14:df:1f:42:2e:55: e2:42:4a:c8:46:4e:ac:28:97:5a:b1:1f:6e:03:0a: 49:a9:31:b8:45:c0:34:cd:d7:a5:00:87:aa:09:9a: 33:cd:a1:92:13:c0:cd:a3:8b:d0:19:e6:bf:23:c8: 11:1f:50:5b:bb:7a:20:73:00:26:15:8e:74:fa:e6: af:8d:25:2e:e3:2d:45:65:1f:8c:44:cc:33:e0:25: f6:9e:25:de:7c:87:03:38:2f:bb:91:2d:d2:96:6d: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BC:E0:ED:D1:AC:79:2D:10:82:CA:AE:61:C9:18:79:B9:ED:93:B2 X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:74:e9:b0:ab:96:d9:ec:c4:3f:f8:1e:21:90:03:7d:ad:77: e6:8b:78:a8:5f:8e:0a:03:2e:0a:39:ce:ea:97:c2:df:b0:2f: c0:58:c6:7e:32:9b:76:22:71:b9:9e:5e:18:9a:fc:e6:0e:a9: 89:5d:a1:7e:21:92:48:13:6e:10:0c:46:96:5a:86:44:83:14: b1:bb:49:74:9b:da:2f:ce:3e:78:63:9f:04:51:28:51:41:0b: 65:ba:77:a5:5c:8d:b8:47:81:28:7c:b9:a4:f7:83:d9:04:87: 9c:b1:a4:00:ff:ee:51:c8:c7:20:8c:be:fe:85:bd:3a:db:c1: 56:f8:7e:dd:c5:96:dc:01:42:83:c8:b3:5b:68:13:6e:27:ea: 57:12:1d:64:e9:d6:9a:ab:cd:d0:e6:cd:f0:9b:9d:e3:57:91: 7d:60:4c:8b:2a:62:d7:fa:b2:15:ea:48:4a:7f:f3:ff:61:ff: e4:fa:74:43:d7:3c:d0:13:69:04:da:e7:87:d7:16:ca:32:1c: 09:eb:14:f5:cb:55:e3:f0:44:dc:11:26:ad:78:04:56:93:70: f9:62:34:bb:0b:64:5c:f9:dc:2f:94:4f:91:5d:5f:b6:f3:62: c3:e9:b5:8e:fa:5a:eb:c5:12:f6:e4:fd:89:c1:2a:92:a7:bf: f8:84:09:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUwNjE2MTgwNTU1WhcNMjUwNjIzMTgwNTU1WjAYMRYwFAYD VQQDEw02ODUwNWQwNC1jMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lR3yft5uYd93zKM0AIWn8eXq/UyI/0rZzJEZd4RFvypJjKGk/dL1Vyedhrj k7NDSGBWApAtmrnh748zYLpzxX+VTCqHf+HdamUStjFjQGLtVOtUXDQBzXf3zo1Y gebuH2o2VCLn6/axfTMCwpBaL/0Nx/3eEYDXFC8u2IY8C45ZHrTU8FzYxOmWsIA6 lYOpPXaeC00K8lh2AmjV4woU3x9CLlXiQkrIRk6sKJdasR9uAwpJqTG4RcA0zdel AIeqCZozzaGSE8DNo4vQGea/I8gRH1Bbu3ogcwAmFY50+uavjSUu4y1FZR+MRMwz 4CX2niXefIcDOC+7kS3Slm0luQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFq84O3R rHktEILKrmHJGHm57ZOyMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCadOmwq5bZ7MQ/+B4hkAN9rXfmi3ioX44KAy4KOc7ql8LfsC/AWMZ+ Mpt2InG5nl4YmvzmDqmJXaF+IZJIE24QDEaWWoZEgxSxu0l0m9ovzj54Y58EUShR QQtlunelXI24R4EofLmk94PZBIecsaQA/+5RyMcgjL7+hb0628FW+H7dxZbcAUKD yLNbaBNuJ+pXEh1k6daaq83Q5s3wm53jV5F9YEyLKmLX+rIV6khKf/P/Yf/k+nRD 1zzQE2kE2ueH1xbKMhwJ6xT1y1Xj8ETcESateARWk3D5YjS7C2Rc+dwvlE+RXV+2 82LD6bWO+lrrxRL25P2JwSqSp7/4hAm3 -----END CERTIFICATE-----Generated at Wed Jun 18 10:27:35 2025 by rpki-client