$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: w3UPbch8gitFrGxrAYaU3JNSlb7bgKBEw6iSLGolWJk= Subject key identifier: 6A:83:36:64:DE:EA:40:6F:B3:77:33:51:42:69:95:D7:B2:F7:98:A5 Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 0482 Signing time: Thu 12 Jun 2025 23:45:02 +0000 Manifest this update: Thu 12 Jun 2025 23:45:01 +0000 Manifest next update: Thu 19 Jun 2025 23:45:01 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: 5oN2mMo0JBkdoThgMP78kumYwwke9L1n6g+Jii/zdIU=) 2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: 6Gx+BiutQSrEbY8mFBzgAsNKgb1qIvA80j3THb6HaOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: Jun 12 23:45:01 2025 GMT Not After : Jun 19 23:45:01 2025 GMT Subject: CN=684b667e-6c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:ab:05:70:98:90:09:08:ed:2e:c9:2c:5f: 6a:42:19:42:49:41:37:60:ff:2d:cd:35:4e:5d:ef: 81:a1:be:f6:47:6a:a6:fb:c0:ea:44:98:b0:8a:0a: bc:95:61:10:97:28:93:e5:09:2d:50:4e:40:0d:df: b1:53:25:ad:ce:a7:30:a5:c2:81:41:a3:2d:e6:17: 2f:90:c5:7f:30:e9:6e:1b:ac:31:6f:f5:e4:97:8d: 41:7d:f8:72:90:23:94:cc:5e:7b:b6:17:69:e1:2b: 95:f1:86:41:9e:ce:34:6e:61:af:e1:4c:e7:98:75: ce:3f:eb:d8:43:78:08:71:f0:f2:96:32:50:f7:db: e5:59:5a:f6:54:6a:84:21:76:42:58:53:85:2d:b9: 18:a5:5f:a7:d7:1b:4e:a2:c9:b7:d4:bf:1c:ee:60: 51:87:19:bf:20:94:ae:18:ab:07:83:20:e7:0f:ca: 57:65:18:fb:59:4c:cd:bd:2f:62:d0:c3:d1:d2:99: 39:09:0f:23:8d:b9:b1:f8:fd:ec:35:08:45:41:0a: 8f:68:54:7d:f9:ab:47:e9:8b:4f:d3:e0:40:e4:c9: c4:d1:3b:9f:df:ba:85:9e:0a:14:11:7b:77:40:d3: 62:b9:58:54:41:90:ad:12:bf:b4:44:f8:aa:e2:f0: e1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:83:36:64:DE:EA:40:6F:B3:77:33:51:42:69:95:D7:B2:F7:98:A5 X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:6b:ed:c2:5b:84:cb:8c:97:3c:9b:e6:23:0b:e7:77:c2:0c: a2:ae:b1:12:ae:12:52:9a:df:d0:17:26:96:35:28:56:10:be: 57:c0:03:70:98:90:0a:ed:56:ef:f6:00:73:84:73:e2:92:f1: ac:13:0d:16:a3:cf:d1:7a:4b:cd:b3:12:2d:d7:81:97:2a:e1: 03:6e:9c:18:70:e6:25:8b:95:a9:62:8a:08:d6:df:ab:bf:50: 88:d9:bf:07:56:b9:15:55:1c:e6:9a:89:cf:23:94:b2:39:af: 54:b7:86:43:09:0c:fa:bc:54:41:ab:95:a1:63:c2:0c:12:5b: a5:8c:21:d4:98:b1:d8:41:c3:2e:72:61:db:c0:dc:45:7c:e0: ba:97:8e:a4:c5:8e:1e:02:87:51:62:04:73:3f:6f:9b:42:9c: 67:38:d8:e8:c7:03:00:ef:91:55:b8:6f:2f:cd:64:87:b1:ef: 04:c5:47:90:46:03:c6:f0:75:8e:70:ba:d1:cd:55:46:95:fd: f1:fa:70:9b:68:91:55:f4:dc:03:cd:61:97:05:d6:9a:f6:eb: 9b:ca:65:3f:83:dd:8e:1c:3e:87:a4:a2:fb:f9:31:e3:55:b8: dd:c5:89:a3:17:6a:71:4b:b8:74:26:72:fc:1f:8c:58:83:64: ac:71:c3:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjUwNjEyMjM0NTAxWhcNMjUwNjE5MjM0NTAxWjAYMRYwFAYD VQQDEw02ODRiNjY3ZS02Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHKrBXCYkAkI7S7JLF9qQhlCSUE3YP8tzTVOXe+Bob72R2qm+8DqRJiwigq8 lWEQlyiT5QktUE5ADd+xUyWtzqcwpcKBQaMt5hcvkMV/MOluG6wxb/Xkl41Bffhy kCOUzF57thdp4SuV8YZBns40bmGv4UznmHXOP+vYQ3gIcfDyljJQ99vlWVr2VGqE IXZCWFOFLbkYpV+n1xtOosm31L8c7mBRhxm/IJSuGKsHgyDnD8pXZRj7WUzNvS9i 0MPR0pk5CQ8jjbmx+P3sNQhFQQqPaFR9+atH6YtP0+BA5MnE0Tuf37qFngoUEXt3 QNNiuVhUQZCtEr+0RPiq4vDhJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqDNmTe 6kBvs3czUUJpldey95ilMB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBa+3CW4TLjJc8m+YjC+d3wgyirrESrhJSmt/QFyaWNShWEL5XwANw mJAK7Vbv9gBzhHPikvGsEw0Wo8/RekvNsxIt14GXKuEDbpwYcOYli5WpYooI1t+r v1CI2b8HVrkVVRzmmonPI5SyOa9Ut4ZDCQz6vFRBq5WhY8IMEluljCHUmLHYQcMu cmHbwNxFfOC6l46kxY4eAodRYgRzP2+bQpxnONjoxwMA75FVuG8vzWSHse8ExUeQ RgPG8HWOcLrRzVVGlf3x+nCbaJFV9NwDzWGXBdaa9uubymU/g92OHD6HpKL7+THj VbjdxYmjF2pxS7h0JnL8H4xYg2SsccO0 -----END CERTIFICATE-----Generated at Sat Jun 14 19:40:50 2025 by rpki-client