$ rpki-client -vvf rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft File: k32ZUe4fk_ysJDM7CD-dfy458Pk.mft (raw, json) Hash identifier: flRPoNT+vUc/Ex+Wx6m/JseQnW9C4Vgn9tqEWfjPbgU= Subject key identifier: 16:89:96:E0:DF:36:0D:B1:78:D5:E9:79:7C:EB:CC:98:2F:24:05:52 Authority key identifier: 93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 Certificate issuer: /CN=A919C8C4/serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Certificate serial: 08BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft Manifest number: 08B8 Signing time: Mon 04 Aug 2025 20:46:46 +0000 Manifest this update: Mon 04 Aug 2025 20:46:45 +0000 Manifest next update: Mon 11 Aug 2025 20:46:45 +0000 Files and hashes: 1: k32ZUe4fk_ysJDM7CD-dfy458Pk.crl (hash: nvIKe5xvHOUpoQ20rHA54LIg1pRiFQRWElYYs4a6w1g=) 2: 6A3C327ABD1711EA8A3C8E20C4F9AE02.roa (hash: chUNg5uPEOUI/4y/JkNyLjCI88SKibEBtbB6b3Giy1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C8C4, serialNumber=937D9951EE1F93FCAC24333B083F9D7F2E39F0F9 Validity Not Before: Aug 4 20:46:45 2025 GMT Not After : Aug 11 20:46:45 2025 GMT Subject: CN=68911c35-5946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:30:6f:3a:a7:4f:3b:c4:2e:35:fa:9e:ef:e1: 7b:8a:5b:f2:f2:fc:82:b9:7d:0b:81:70:40:5b:c8: 71:25:9f:9a:21:d2:06:c3:13:3a:a0:bd:df:ac:81: 95:7b:e6:96:9f:3d:04:ba:a2:45:f9:8f:cb:fa:d5: b0:1e:bb:ba:c4:28:7f:df:60:b2:91:08:9a:73:f7: 1c:2c:90:cd:81:eb:1c:d2:0b:ed:f0:07:dc:13:1d: ba:54:83:d6:4a:7f:af:3e:c7:24:d4:4a:45:e6:4e: 62:4c:55:f0:27:18:1b:bd:b8:51:a6:8e:5b:ff:38: 3e:8f:13:5b:e1:dd:f8:9d:e5:b5:f7:4e:c7:15:6f: c8:79:d5:76:a1:96:c6:c8:75:53:0f:73:f0:ee:73: 8a:b4:e6:d0:fb:a6:dc:f5:f8:fc:b0:16:03:15:71: 72:08:2d:75:dc:7c:34:ba:24:f4:4e:fb:f9:f4:93: fd:20:44:28:67:e1:7f:e5:18:64:76:a7:d1:dd:eb: a2:90:7c:43:54:98:b8:a0:9b:84:2f:83:8f:8d:33: 22:98:4b:9a:43:cb:b8:ee:65:94:f9:86:9e:99:c9: a1:bb:d4:43:32:67:dd:8a:00:f0:0d:4e:65:65:cf: b3:67:b5:3a:a7:c0:70:ac:d3:74:71:c3:2b:81:47: f1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:89:96:E0:DF:36:0D:B1:78:D5:E9:79:7C:EB:CC:98:2F:24:05:52 X509v3 Authority Key Identifier: keyid:93:7D:99:51:EE:1F:93:FC:AC:24:33:3B:08:3F:9D:7F:2E:39:F0:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k32ZUe4fk_ysJDM7CD-dfy458Pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C8C4/C244C83ABD1511EAABDEB01DC4F9AE02/k32ZUe4fk_ysJDM7CD-dfy458Pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:b8:1d:ac:12:39:0e:c0:fb:f3:d3:23:50:19:a7:9b:f7:b7: a0:a5:8a:21:f0:63:a4:ae:f3:b0:e8:e6:7f:a0:c0:32:e1:3b: b1:c1:fb:86:4a:a1:bf:67:ac:be:24:88:67:cc:98:cf:d8:0e: 97:4d:3b:b0:90:36:ef:ea:83:23:c8:c9:b3:02:49:59:f4:2f: 9a:d8:31:f1:ec:2a:e4:c4:67:3c:76:90:41:49:31:e9:0e:04: b2:33:33:4f:e6:c3:de:5b:04:87:35:de:88:3e:cd:ad:21:4f: 40:92:aa:da:6e:a2:66:a9:0c:50:06:59:c0:ef:a8:21:58:3b: f2:d7:92:98:3d:cf:af:65:2c:1c:46:a1:d2:38:64:07:d5:d2: 7d:91:51:cd:a8:d6:6d:15:65:4a:2c:ee:44:64:3b:14:39:13: 4d:7b:88:f8:37:e0:fc:41:1f:a5:8b:67:cc:9c:51:ae:49:e6: d3:31:b7:eb:c4:5f:e1:79:b4:4b:0c:b4:c6:ab:09:fe:ac:59: a0:6c:b8:f3:71:17:44:0f:1b:0c:99:79:ef:6d:ff:d2:85:ee: 63:45:87:df:98:5e:b9:83:d9:b5:ff:92:81:89:0f:6b:49:28: 75:c0:a4:d6:99:9a:bb:cb:8c:6b:d1:c8:2f:f6:13:09:69:a3: 92:52:5d:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM4QzQxMTAvBgNVBAUTKDkzN0Q5OTUxRUUxRjkzRkNBQzI0MzMzQjA4M0Y5RDdG MkUzOUYwRjkwHhcNMjUwODA0MjA0NjQ1WhcNMjUwODExMjA0NjQ1WjAYMRYwFAYD VQQDEw02ODkxMWMzNS01OTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTBvOqdPO8QuNfqe7+F7ilvy8vyCuX0LgXBAW8hxJZ+aIdIGwxM6oL3frIGV e+aWnz0EuqJF+Y/L+tWwHru6xCh/32CykQiac/ccLJDNgesc0gvt8AfcEx26VIPW Sn+vPsck1EpF5k5iTFXwJxgbvbhRpo5b/zg+jxNb4d34neW1907HFW/IedV2oZbG yHVTD3Pw7nOKtObQ+6bc9fj8sBYDFXFyCC113Hw0uiT0Tvv59JP9IEQoZ+F/5Rhk dqfR3euikHxDVJi4oJuEL4OPjTMimEuaQ8u47mWU+Yaemcmhu9RDMmfdigDwDU5l Zc+zZ7U6p8BwrNN0ccMrgUfx4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaJluDf Ng2xeNXpeXzrzJgvJAVSMB8GA1UdIwQYMBaAFJN9mVHuH5P8rCQzOwg/nX8uOfD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzhDNC9DMjQ0QzgzQUJE MTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0ZmtfeXNKRE03Q0QtZGZ5NDU4 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szMlpVZTRma195c0pETTdDRC1kZnk0NThQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzhDNC9DMjQ0QzgzQUJEMTUxMUVBQUJERUIwMURDNEY5QUUwMi9rMzJaVWU0Zmtf eXNKRE03Q0QtZGZ5NDU4UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEuB2sEjkOwPvz0yNQGaeb97egpYoh8GOkrvOw6OZ/oMAy4TuxwfuG SqG/Z6y+JIhnzJjP2A6XTTuwkDbv6oMjyMmzAklZ9C+a2DHx7CrkxGc8dpBBSTHp DgSyMzNP5sPeWwSHNd6IPs2tIU9AkqrabqJmqQxQBlnA76ghWDvy15KYPc+vZSwc RqHSOGQH1dJ9kVHNqNZtFWVKLO5EZDsUORNNe4j4N+D8QR+li2fMnFGuSebTMbfr xF/hebRLDLTGqwn+rFmgbLjzcRdEDxsMmXnvbf/She5jRYffmF65g9m1/5KBiQ9r SSh1wKTWmZq7y4xr0cgv9hMJaaOSUl0W -----END CERTIFICATE-----Generated at Wed Aug 6 04:08:52 2025 by rpki-client