$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json) Hash identifier: EPOtzP9U8p4Z3a/ighekL3+DrdqYILx1bEITJatoYwU= Subject key identifier: E5:4A:9C:15:6B:92:28:D5:E2:29:B7:87:A2:51:92:1F:E9:FA:86:E6 Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft Manifest number: 0365 Signing time: Tue 17 Jun 2025 00:36:55 +0000 Manifest this update: Tue 17 Jun 2025 00:36:54 +0000 Manifest next update: Tue 24 Jun 2025 00:36:54 +0000 Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: hj/oW0CUp+jq5BRxWNynXkjk6cFVKRJQUSUDqcp1h8M=) 2: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (hash: oClBIXKP+EDIKR3fw5dWC7oe0B/VfV56q8PacjPvcqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A96A, serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Validity Not Before: Jun 17 00:36:54 2025 GMT Not After : Jun 24 00:36:54 2025 GMT Subject: CN=6850b8a6-dbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:44:f1:2d:7c:24:80:a4:70:00:bd:b8:05: 56:97:e0:de:e2:b0:4e:b4:a3:f2:f6:fc:18:6a:02: e3:d1:01:c0:91:26:76:b9:7f:65:a3:9d:a9:e0:d8: 53:0d:be:d4:c1:cb:32:a0:6f:f4:9c:6b:15:f9:e4: e0:72:c6:36:a3:62:e4:9d:0e:9c:64:93:62:f7:f9: 80:89:8a:24:23:ee:40:82:92:f3:50:60:ea:b6:90: 09:62:6f:7f:70:10:3c:b6:a2:ca:52:96:9c:3d:2c: 8b:ea:68:6d:ae:67:f6:7f:8e:c9:0e:78:f7:2d:6a: 56:2c:cc:48:c6:1c:13:6a:f2:f4:d2:ff:b4:76:95: 46:e3:c9:5b:74:25:28:92:37:88:2d:3c:17:97:a2: bf:ec:f7:6b:2b:e7:9d:9a:2d:d9:39:81:f8:ef:46: 5e:03:e4:b0:c3:05:90:d8:70:4f:bd:48:55:1e:0c: bb:de:c8:05:66:99:2d:88:00:74:2f:bf:b8:44:0e: 6a:56:11:bc:e0:69:b2:da:7d:9b:c9:47:3a:1c:23: 25:bb:59:95:b5:d0:d7:38:2f:9d:6d:54:6b:83:e8: 03:aa:17:04:95:2d:d3:35:0b:13:08:ff:54:e1:4a: e5:3c:b5:e1:b7:d5:98:6f:3e:14:0e:d3:3b:5f:2d: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4A:9C:15:6B:92:28:D5:E2:29:B7:87:A2:51:92:1F:E9:FA:86:E6 X509v3 Authority Key Identifier: keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:8d:58:bf:fb:97:63:79:b3:f3:25:f2:a1:46:b0:7e:15:52: f9:61:8a:8f:9a:ea:09:8e:25:71:2f:f2:1d:76:62:ef:a2:ba: 0e:78:58:92:93:d4:56:a3:ae:a8:f0:1b:ee:61:eb:64:52:e1: 1f:a6:9d:a8:82:c9:60:70:e6:42:3e:c1:a7:89:e3:b4:44:d5: 8a:a3:8c:a7:40:01:a4:63:68:f9:5b:5f:e1:30:82:92:fa:83: b7:f5:a0:19:26:91:81:e6:4f:d0:10:19:f6:2f:61:5d:6a:69: aa:97:28:3b:c0:6f:2c:8c:8c:ba:70:26:89:48:b0:ae:36:51: a9:00:51:b5:56:82:1b:1e:19:de:50:06:71:00:81:9b:18:22: df:08:ae:d5:fa:3e:26:e9:49:48:29:0c:23:ef:19:49:5d:ae: 61:bb:7a:31:35:0f:58:ed:1f:3b:2e:8f:42:65:13:1c:2e:3d: 93:6e:50:12:e9:2e:43:df:95:b4:28:73:a1:1e:1d:29:33:10: d0:2b:cd:c1:bd:f4:fb:38:e4:14:92:a1:4d:08:b4:dd:21:66: a2:4d:26:72:d4:13:8c:0a:bc:32:b3:ef:f3:f8:55:d9:a9:ec: 35:71:f0:63:c5:53:02:05:72:5a:65:f4:43:17:3d:86:e3:9a: 75:4a:03:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5NkExMTAvBgNVBAUTKEYwMjI0NTM1M0ZDMUYxOTRBOTAyMkE0QUMwMTk3N0RF NUZERTM2RjkwHhcNMjUwNjE3MDAzNjU0WhcNMjUwNjI0MDAzNjU0WjAYMRYwFAYD VQQDEw02ODUwYjhhNi1kYmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfJE8S18JICkcAC9uAVWl+De4rBOtKPy9vwYagLj0QHAkSZ2uX9lo52p4NhT Db7UwcsyoG/0nGsV+eTgcsY2o2LknQ6cZJNi9/mAiYokI+5AgpLzUGDqtpAJYm9/ cBA8tqLKUpacPSyL6mhtrmf2f47JDnj3LWpWLMxIxhwTavL00v+0dpVG48lbdCUo kjeILTwXl6K/7PdrK+edmi3ZOYH470ZeA+SwwwWQ2HBPvUhVHgy73sgFZpktiAB0 L7+4RA5qVhG84Gmy2n2byUc6HCMlu1mVtdDXOC+dbVRrg+gDqhcElS3TNQsTCP9U 4UrlPLXht9WYbz4UDtM7Xy2c/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVKnBVr kijV4im3h6JRkh/p+obmMB8GA1UdIwQYMBaAFPAiRTU/wfGUqQIqSsAZd95f3jb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk2QS8yODc4NUY2MEJG QkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjhaU3BBaXBLd0JsMzNsX2VO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDSkZOVF9COFpTcEFpcEt3QmwzM2xfZU52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk2QS8yODc4NUY2MEJGQkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjha U3BBaXBLd0JsMzNsX2VOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4jVi/+5djebPzJfKhRrB+FVL5YYqPmuoJjiVxL/IddmLvoroOeFiS k9RWo66o8BvuYetkUuEfpp2ogslgcOZCPsGnieO0RNWKo4ynQAGkY2j5W1/hMIKS +oO39aAZJpGB5k/QEBn2L2Fdammqlyg7wG8sjIy6cCaJSLCuNlGpAFG1VoIbHhne UAZxAIGbGCLfCK7V+j4m6UlIKQwj7xlJXa5hu3oxNQ9Y7R87Lo9CZRMcLj2TblAS 6S5D35W0KHOhHh0pMxDQK83BvfT7OOQUkqFNCLTdIWaiTSZy1BOMCrwys+/z+FXZ qew1cfBjxVMCBXJaZfRDFz2G45p1SgPO -----END CERTIFICATE-----Generated at Wed Jun 18 04:44:44 2025 by rpki-client