$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: eEFfvMqThu24fuaRV3MsF2t1Zik6OC2+SoLVPDkQkwI= Subject key identifier: 94:9E:39:8D:EF:F4:45:8D:8B:3E:2C:36:26:9C:FA:65:86:64:9F:44 Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0E2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0E1C Signing time: Fri 08 Aug 2025 18:01:46 +0000 Manifest this update: Fri 08 Aug 2025 18:01:45 +0000 Manifest next update: Fri 15 Aug 2025 18:01:45 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: /wF2bRdGdgXhxuoOsVje8GCeArOlapaSQtpR3CJxqFE=) 2: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: aiQgD71KIHf3EulghLpV7U2on7ornTtSdk1QL8F6cWM=) 3: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: ueAPuc77rri4PQKwtmMLByRiVZjsosToomd9waxslTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3626 (0xe2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Aug 8 18:01:45 2025 GMT Not After : Aug 15 18:01:45 2025 GMT Subject: CN=68963b8a-6a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:89:e8:bf:b3:c0:43:fe:6b:c3:ef:8d:16: 0f:32:27:d9:da:49:75:d4:81:1e:27:52:89:72:89: fe:9b:97:3e:54:35:55:3c:73:4f:4e:b7:cf:07:41: 04:95:f0:87:68:7e:b7:9c:b9:5a:e6:9b:ff:b0:85: fd:d8:01:32:80:79:b1:b3:a1:6d:e3:88:e9:ee:09: b2:cb:60:57:cc:da:54:67:43:4f:57:f8:07:b4:99: 22:ba:60:a0:73:e1:c0:c5:1a:c8:96:ff:d2:11:7d: 99:cd:dc:72:7a:4f:6c:64:af:73:c9:ff:b0:4c:85: 3b:38:e8:78:ab:4b:f0:7a:f4:03:b8:ab:e3:d4:cc: e3:3d:4d:62:0a:b7:67:68:8f:d1:d3:58:1b:8a:a9: 68:68:6e:17:f8:5c:71:f2:66:96:ac:98:f4:61:e3: e7:46:f2:37:cd:21:67:76:44:a5:3f:60:a1:eb:ef: f2:a6:5b:0d:b3:be:fb:99:83:17:f0:92:a8:84:67: 36:52:89:37:e3:c2:67:d9:cc:20:0a:1c:b3:3b:28: 2c:2d:9a:02:27:5e:c3:09:73:7c:af:a1:fe:34:76: 7d:3c:3c:97:3d:78:ae:1b:05:6e:94:95:02:6e:e1: ca:fe:b7:13:f6:9c:af:05:99:fb:28:fe:57:94:22: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9E:39:8D:EF:F4:45:8D:8B:3E:2C:36:26:9C:FA:65:86:64:9F:44 X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3d:fd:fb:01:33:dd:bc:0e:24:39:a5:c7:8b:8b:9b:57:c0: 00:06:f2:d6:22:b2:c0:9e:9f:33:8c:cd:fa:2a:da:15:c4:f3: d0:03:94:24:4b:62:13:ea:9f:0d:26:30:68:ca:7a:0a:85:ac: da:86:a7:4f:c4:4b:cf:a4:03:15:52:5a:b8:e5:20:82:c8:c7: f9:48:0a:e2:b8:7a:d7:94:73:82:e7:72:eb:39:8a:02:dc:d1: a3:72:6a:ff:9a:4e:62:69:84:a5:7f:54:99:44:97:28:60:5a: ab:c4:eb:1e:62:60:0d:1a:6d:a4:2a:a4:65:da:d9:96:2f:48: 1c:40:8e:b3:a2:00:6a:93:f7:b3:d5:a2:f1:ed:5e:0b:7c:4d: f8:8b:b2:ba:3f:13:7e:a2:7d:0d:51:82:ab:79:51:a9:2e:c1: 70:a4:04:4c:e2:98:73:42:73:38:7f:71:e3:2e:e5:71:4d:45: 0e:27:d2:6b:7a:d3:89:ca:91:75:65:a3:0b:dd:bb:eb:4c:65: cb:32:fa:8b:59:c0:27:fd:50:3e:0c:9d:17:19:61:66:ae:99: dd:c2:18:0e:0d:fc:75:d9:77:ff:ac:bc:d3:65:c6:59:52:b1: ba:e3:ef:33:82:6b:d0:7c:64:f4:bb:81:ef:22:25:ab:23:15: fd:2f:2b:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjUwODA4MTgwMTQ1WhcNMjUwODE1MTgwMTQ1WjAYMRYwFAYD VQQDEw02ODk2M2I4YS02YTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbyJ6L+zwEP+a8PvjRYPMifZ2kl11IEeJ1KJcon+m5c+VDVVPHNPTrfPB0EE lfCHaH63nLla5pv/sIX92AEygHmxs6Ft44jp7gmyy2BXzNpUZ0NPV/gHtJkiumCg c+HAxRrIlv/SEX2Zzdxyek9sZK9zyf+wTIU7OOh4q0vwevQDuKvj1MzjPU1iCrdn aI/R01gbiqloaG4X+Fxx8maWrJj0YePnRvI3zSFndkSlP2Ch6+/yplsNs777mYMX 8JKohGc2Uok348Jn2cwgChyzOygsLZoCJ17DCXN8r6H+NHZ9PDyXPXiuGwVulJUC buHK/rcT9pyvBZn7KP5XlCJZcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSeOY3v 9EWNiz4sNiac+mWGZJ9EMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaPf37ATPdvA4kOaXHi4ubV8AABvLWIrLAnp8zjM36KtoVxPPQA5Qk S2IT6p8NJjBoynoKhazahqdPxEvPpAMVUlq45SCCyMf5SAriuHrXlHOC53LrOYoC 3NGjcmr/mk5iaYSlf1SZRJcoYFqrxOseYmANGm2kKqRl2tmWL0gcQI6zogBqk/ez 1aLx7V4LfE34i7K6PxN+on0NUYKreVGpLsFwpARM4phzQnM4f3HjLuVxTUUOJ9Jr etOJypF1ZaML3bvrTGXLMvqLWcAn/VA+DJ0XGWFmrpndwhgODfx12Xf/rLzTZcZZ UrG64+8zgmvQfGT0u4HvIiWrIxX9LyuD -----END CERTIFICATE-----Generated at Sun Aug 10 13:57:48 2025 by rpki-client