$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft File: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft (raw, json) Hash identifier: 4AEfkB3AbeeS8YzS/PSWhTTIWOrT0TvDK8xTh7bRK4I= Subject key identifier: 9D:BA:10:17:AE:46:4E:FA:17:D1:A5:10:36:BF:23:50:37:FF:AC:FA Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Certificate serial: 2779 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft Manifest number: 2751 Signing time: Sat 14 Jun 2025 15:37:48 +0000 Manifest this update: Sat 14 Jun 2025 15:37:47 +0000 Manifest next update: Sat 21 Jun 2025 15:37:47 +0000 Files and hashes: 1: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl (hash: mKHC1q0UYM++kCeR69LQbObDr2jK2qnC0az37bkwHts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10105 (0x2779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B12B, serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Validity Not Before: Jun 14 15:37:47 2025 GMT Not After : Jun 21 15:37:47 2025 GMT Subject: CN=684d974b-f7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:d4:ab:fe:74:c3:19:43:1e:b1:98:e9:88: db:7b:69:44:9c:ff:8b:c2:da:cb:35:3b:f4:d8:7f: 9d:98:6d:92:e9:a0:0c:bb:11:ab:58:ba:b8:f5:dd: 2b:13:c1:47:60:d8:62:f7:31:c9:b8:be:81:72:d6: 0a:38:13:94:63:c2:cc:e7:c7:32:2e:6b:87:87:c5: eb:a3:91:a2:de:ca:a9:d9:95:e5:01:72:a4:69:7b: a9:2b:04:96:6b:91:c1:f6:f2:6c:2e:c2:6e:a5:62: 39:3d:e6:d0:bb:85:c8:a2:3b:61:17:73:9a:32:12: 56:d9:ea:a0:5f:fb:7e:3e:9b:da:ef:b6:3b:32:8e: 13:50:92:54:d5:6a:cb:6b:5c:42:1e:bf:c1:e3:e7: cb:9d:35:a0:4e:b6:1f:98:eb:14:23:eb:0e:b7:24: 56:2f:ac:34:1b:36:b1:ba:3f:b1:33:a4:58:3b:b2: 50:f8:8d:77:a8:5b:a6:4c:40:15:60:36:3b:8a:41: 6e:3a:45:48:e0:03:4f:ce:60:e6:f9:4f:7a:9f:8a: 55:1d:10:ca:eb:2a:8b:d4:0a:49:5f:06:bc:99:d6: ef:f6:72:87:f3:4d:0a:6a:cf:0a:25:65:31:80:19: 46:14:48:64:8c:b2:74:52:d5:84:be:8f:83:76:fe: 20:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BA:10:17:AE:46:4E:FA:17:D1:A5:10:36:BF:23:50:37:FF:AC:FA X509v3 Authority Key Identifier: keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:8b:6d:06:ec:62:21:f4:47:d9:d0:54:6f:90:71:94:18:d4: 8c:de:bd:b7:7e:cf:91:9f:05:cb:a2:35:ab:0d:d3:09:1f:47: b7:b7:05:70:e1:50:5e:26:38:98:44:27:ce:d4:f0:13:93:dc: d4:5e:aa:38:b7:4e:51:de:7a:15:3c:53:70:04:12:d4:11:f2: 0f:7f:81:fa:b4:1b:6f:a6:49:d6:d1:6d:83:3c:31:00:40:5c: ad:58:d8:c9:db:4d:d2:72:f7:e6:b3:11:dd:ca:b9:59:23:cd: f5:d5:4e:e2:df:55:e7:54:ff:e4:af:38:10:b7:1c:32:77:30: 88:38:2a:d4:09:a4:2a:96:00:86:d3:41:e3:d1:da:5d:54:d1: ee:64:87:f6:01:f1:7b:cd:ed:18:7a:0c:10:c8:42:b6:e7:8f: 47:eb:2e:ec:5d:5e:70:0c:7f:81:dd:96:dd:31:44:f0:26:d2: e5:13:ec:6e:69:8c:d0:07:1b:ae:e2:70:82:0e:bf:eb:da:d7: ed:0c:46:9a:33:d7:13:e8:95:28:96:70:fe:e9:5d:fc:f7:a0: d5:57:d3:d9:d5:d0:4b:ac:85:52:ef:d8:fa:d7:80:ce:56:e7: 31:8c:7c:67:a6:b1:0b:98:85:11:e5:1b:85:65:04:69:2e:fe: 4c:fe:66:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxMkIxMTAvBgNVBAUTKEYyNjkyMzQ1M0YwMTcwMzA5RkQ1OEJGM0IwQjVEQ0U0 M0ZGOUI0MUMwHhcNMjUwNjE0MTUzNzQ3WhcNMjUwNjIxMTUzNzQ3WjAYMRYwFAYD VQQDEw02ODRkOTc0Yi1mN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqerUq/50wxlDHrGY6Yjbe2lEnP+LwtrLNTv02H+dmG2S6aAMuxGrWLq49d0r E8FHYNhi9zHJuL6BctYKOBOUY8LM58cyLmuHh8Xro5Gi3sqp2ZXlAXKkaXupKwSW a5HB9vJsLsJupWI5PebQu4XIojthF3OaMhJW2eqgX/t+Ppva77Y7Mo4TUJJU1WrL a1xCHr/B4+fLnTWgTrYfmOsUI+sOtyRWL6w0Gzaxuj+xM6RYO7JQ+I13qFumTEAV YDY7ikFuOkVI4ANPzmDm+U96n4pVHRDK6yqL1ApJXwa8mdbv9nKH800Kas8KJWUx gBlGFEhkjLJ0UtWEvo+Ddv4gcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ26EBeu Rk76F9GlEDa/I1A3/6z6MB8GA1UdIwQYMBaAFPJpI0U/AXAwn9WL87C13OQ/+bQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjEyQi9BNTA5RUMxRUJE OUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNEQ2YxWXZ6c0xYYzVEXzV0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhta2pSVDhCY0RDZjFZdnpzTFhjNURfNXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjEyQi9BNTA5RUMxRUJEOUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNE Q2YxWXZ6c0xYYzVEXzV0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0i20G7GIh9EfZ0FRvkHGUGNSM3r23fs+RnwXLojWrDdMJH0e3twVw 4VBeJjiYRCfO1PATk9zUXqo4t05R3noVPFNwBBLUEfIPf4H6tBtvpknW0W2DPDEA QFytWNjJ203ScvfmsxHdyrlZI8311U7i31XnVP/krzgQtxwydzCIOCrUCaQqlgCG 00Hj0dpdVNHuZIf2AfF7ze0YegwQyEK2549H6y7sXV5wDH+B3ZbdMUTwJtLlE+xu aYzQBxuu4nCCDr/r2tftDEaaM9cT6JUolnD+6V3896DVV9PZ1dBLrIVS79j614DO VucxjHxnprELmIUR5RuFZQRpLv5M/mZA -----END CERTIFICATE-----Generated at Sun Jun 15 09:34:47 2025 by rpki-client