$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json) Hash identifier: A3X+AAAtUSyEXgNAyXUoymqwE3+I3HPPBetXlYtWMBA= Subject key identifier: A9:98:0E:0C:F0:63:83:14:59:22:9C:FA:EA:FF:65:73:15:01:0E:60 Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft Manifest number: 0D Signing time: Thu 19 Jun 2025 07:31:59 +0000 Manifest this update: Thu 19 Jun 2025 07:31:58 +0000 Manifest next update: Thu 26 Jun 2025 07:31:58 +0000 Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: Ru97a9HLjCgRgfkgQtu6v+VTEh33YZRwv31RMYAG0fU=) 2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: lNd0dhVh9oVMjkR+5hS3U5ljCVkdpvgCie/KVi3bQe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Validity Not Before: Jun 19 07:31:58 2025 GMT Not After : Jun 26 07:31:58 2025 GMT Subject: CN=6853bcef-f785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:df:ab:5e:95:fd:29:44:3f:6a:3c:e9:21:62: 68:4d:74:d8:01:3d:67:95:f7:3e:79:01:04:0f:5f: d8:7e:de:f7:be:0b:31:5e:11:9a:14:6f:63:c1:af: 97:ce:3d:75:4b:c7:8e:1f:1c:88:3c:aa:f2:0d:be: c8:91:7c:8b:d3:e5:5f:ae:c6:83:94:33:58:04:35: c6:63:22:6e:89:34:d9:7c:57:f1:66:81:39:05:e1: f9:46:bd:15:8a:a5:4b:55:a2:5d:11:46:21:55:de: d2:54:94:9d:22:a3:1f:71:96:ad:56:31:a9:53:90: 99:67:57:9f:0f:08:6c:e4:43:f3:0a:c0:94:45:82: 34:1c:48:c4:d0:a4:af:d7:4c:99:df:3c:4b:ed:7c: 31:37:c8:58:6e:f5:d1:23:8e:d9:09:68:c1:f0:6c: 1e:8e:dd:50:d9:83:c9:1b:67:09:bd:e0:f7:75:b8: 71:cb:61:ac:00:e3:60:fd:79:10:02:22:45:09:9c: 1a:fd:a3:35:89:13:47:6a:b1:52:5f:f8:94:3e:d2: 63:e1:88:29:bb:22:74:4e:81:b0:ef:6c:60:28:a5: de:3a:2d:28:8f:c5:4e:42:c7:2a:78:85:e2:0a:4e: 06:33:56:3c:9a:54:6c:79:00:45:75:45:51:77:4b: c9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:98:0E:0C:F0:63:83:14:59:22:9C:FA:EA:FF:65:73:15:01:0E:60 X509v3 Authority Key Identifier: keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:38:23:8c:e3:7e:11:95:a0:3b:70:1f:de:37:47:76:26:71: 3b:b9:f1:fd:da:13:fc:3b:8b:75:9d:50:8a:8e:dc:b8:8a:1a: f7:4f:b7:fe:2e:d1:18:d8:64:f4:50:c3:78:e3:d3:aa:99:85: 21:b5:4e:c5:30:40:47:2a:b9:94:cf:cc:59:7a:0e:ad:c3:22: 39:aa:48:8e:97:37:95:5a:00:67:ff:1e:38:9a:c9:c3:34:26: fb:2c:0c:68:42:3f:f5:c0:d3:4d:77:a9:4a:42:c6:73:e9:34: 01:56:92:40:9d:04:7a:88:03:00:8e:ff:cc:4a:40:aa:64:36: ee:af:15:44:f9:dc:c7:2f:29:f6:dc:b6:1f:b6:33:68:b9:f3: b9:e8:28:0e:77:d2:82:36:66:c9:3e:c6:b5:a3:04:30:84:d0: 3d:60:d5:d3:4b:88:b1:a4:99:b4:f4:e7:b8:1c:2a:63:3f:48: f9:a7:ee:9b:b8:ad:24:1f:1d:b3:f4:fb:a8:1f:45:a7:92:66: 68:7e:09:83:91:8b:f1:a8:65:2c:c5:84:24:f3:3d:38:2d:8e: 02:e1:06:d9:ed:e2:0d:f5:0b:66:b9:a2:07:6e:c6:f0:e5:d6: c6:bf:f1:42:45:3a:08:fb:9e:14:05:6c:39:6e:21:a7:ec:7c: e5:6e:57:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoRjE1QzVDNUJBNTIxNDUzNzA3QzgxRjVGRUMwODExQkYy MUNGRjQwRTAeFw0yNTA2MTkwNzMxNThaFw0yNTA2MjYwNzMxNThaMBgxFjAUBgNV BAMTDTY4NTNiY2VmLWY3ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw36telf0pRD9qPOkhYmhNdNgBPWeV9z55AQQPX9h+3ve+CzFeEZoUb2PBr5fO PXVLx44fHIg8qvINvsiRfIvT5V+uxoOUM1gENcZjIm6JNNl8V/FmgTkF4flGvRWK pUtVol0RRiFV3tJUlJ0iox9xlq1WMalTkJlnV58PCGzkQ/MKwJRFgjQcSMTQpK/X TJnfPEvtfDE3yFhu9dEjjtkJaMHwbB6O3VDZg8kbZwm94Pd1uHHLYawA42D9eRAC IkUJnBr9ozWJE0dqsVJf+JQ+0mPhiCm7InROgbDvbGAopd46LSiPxU5Cxyp4heIK TgYzVjyaVGx5AEV1RVF3S8knAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqZgODPBj gxRZIpz66v9lcxUBDmAwHwYDVR0jBBgwFoAU8VxcW6UhRTcHyB9f7AgRvyHP9A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBLzlBODczRUIwNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRjSHlCOWY3QWdSdnlIUDlB NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFZ4Y1c2VWhSVGNIeUI5ZjdBZ1J2eUhQOUE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBLzlBODczRUIwNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRj SHlCOWY3QWdSdnlIUDlBNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALA4I4zjfhGVoDtwH943R3YmcTu58f3aE/w7i3WdUIqO3LiKGvdPt/4u 0RjYZPRQw3jj06qZhSG1TsUwQEcquZTPzFl6Dq3DIjmqSI6XN5VaAGf/HjiaycM0 JvssDGhCP/XA0013qUpCxnPpNAFWkkCdBHqIAwCO/8xKQKpkNu6vFUT53McvKfbc th+2M2i587noKA530oI2Zsk+xrWjBDCE0D1g1dNLiLGkmbT057gcKmM/SPmn7pu4 rSQfHbP0+6gfRaeSZmh+CYORi/GoZSzFhCTzPTgtjgLhBtnt4g31C2a5ogduxvDl 1sa/8UJFOgj7nhQFbDluIafsfOVuV8E= -----END CERTIFICATE-----Generated at Thu Jun 19 20:05:16 2025 by rpki-client