$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft File: 8q-Rix8UisrksDlFAoTeSQ15Dlk.mft (raw, json) Hash identifier: wrFsHd3wXWLyvlgq3oOGhq/suAD+fiHslg48Mo25Wrw= Subject key identifier: 55:4C:2E:CF:DB:CD:4F:B5:26:4D:EA:A2:26:7B:91:1B:8C:F8:65:C3 Authority key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 Certificate issuer: /CN=A9114EF6/serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft Manifest number: 61 Signing time: Sat 19 Jul 2025 07:18:08 +0000 Manifest this update: Sat 19 Jul 2025 07:18:07 +0000 Manifest next update: Sat 26 Jul 2025 07:18:07 +0000 Files and hashes: 1: 8q-Rix8UisrksDlFAoTeSQ15Dlk.crl (hash: qRzi6i4xebw3dnAlGynqd9wFOTAADVUsOPaQ50bFQrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Validity Not Before: Jul 19 07:18:07 2025 GMT Not After : Jul 26 07:18:07 2025 GMT Subject: CN=687b46b0-2176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d4:a5:df:65:99:31:27:0d:57:43:68:ce:74: 24:ba:df:93:c8:48:b4:f1:fa:b3:81:32:fb:98:99: 0e:26:72:09:e6:e6:5b:14:93:69:b8:a4:c0:9d:8c: 3b:6b:38:8a:62:c7:ed:40:66:d9:b8:1a:27:14:81: 6b:38:92:b2:13:6d:2a:55:c8:a6:f2:fa:04:24:fe: aa:8b:43:c6:3f:5b:9d:1d:3b:80:72:45:76:6a:a9: 1d:d2:c8:26:04:66:84:43:25:d6:92:02:3b:71:d6: 57:b0:3b:38:6a:09:4d:4d:df:5e:93:20:15:8b:10: 2e:f3:a1:48:26:53:a7:9f:b8:d7:b0:3a:2b:ab:3d: 8f:b3:d5:e5:a0:2b:5e:6d:bd:7d:bf:1c:cf:66:62: d3:66:5b:70:a9:47:2b:ab:e0:7d:40:45:12:c9:9d: 6d:27:3b:0f:5f:30:8c:00:d3:1a:ac:37:74:07:ea: ca:da:83:11:9a:ce:a4:95:aa:63:75:26:1b:7e:22: 88:c1:71:0b:67:32:e0:0e:73:0f:62:7b:59:64:60: 8b:f4:f7:00:bf:ec:1f:f1:ca:ce:05:bb:f1:21:af: 27:0d:33:9c:0b:cb:44:6c:9f:03:69:94:02:a3:ef: ad:42:df:4f:ee:47:10:fa:59:0b:37:f4:45:be:5b: e8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4C:2E:CF:DB:CD:4F:B5:26:4D:EA:A2:26:7B:91:1B:8C:F8:65:C3 X509v3 Authority Key Identifier: keyid:F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:63:ad:23:04:43:27:c4:02:9e:75:e7:4f:3f:47:03:d0:a1: 2d:bf:94:cb:c6:6d:0c:aa:b5:23:00:32:73:61:97:8c:68:d5: b4:a9:70:1c:25:76:77:d1:07:61:6c:8f:2a:b9:66:47:d4:55: e3:ab:fb:9e:ae:c3:2f:a9:d7:01:50:ea:d1:f7:85:5f:87:08: 39:86:0b:27:5d:d8:e5:2f:2e:3c:5c:29:af:f9:9f:fb:a8:80: ba:6d:1c:a9:be:bd:95:12:54:e0:e1:86:36:5f:a5:2b:de:85: ed:40:1f:15:8a:ea:39:bf:84:ce:7c:61:d2:61:31:0f:a8:f8: e6:03:80:d1:06:b2:46:a4:c2:60:54:96:fe:41:7d:e8:28:86: ae:02:0d:95:a2:e8:7c:60:9f:71:fb:a3:ed:0b:57:98:53:14: e9:ba:27:d4:f3:e6:1f:e5:32:81:89:11:ea:1e:13:7e:ed:65: 88:e2:d5:71:74:5f:a4:dd:1f:a7:6c:14:ec:4d:9a:5b:ec:1c: 4e:64:be:ff:4f:96:f0:06:dd:6e:64:fe:7c:63:67:91:57:99: f0:7b:60:be:c9:d7:8a:c4:bf:68:1b:a2:de:5e:28:aa:b4:1d: 24:86:b4:40:79:0e:d0:ee:ef:b3:3e:d8:47:90:4f:cc:01:f6: 54:9f:34:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoRjJBRjkxOEIxRjE0OEFDQUU0QjAzOTQ1MDI4NERFNDkw RDc5MEU1OTAeFw0yNTA3MTkwNzE4MDdaFw0yNTA3MjYwNzE4MDdaMBgxFjAUBgNV BAMTDTY4N2I0NmIwLTIxNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD31KXfZZkxJw1XQ2jOdCS635PISLTx+rOBMvuYmQ4mcgnm5lsUk2m4pMCdjDtr OIpix+1AZtm4GicUgWs4krITbSpVyKby+gQk/qqLQ8Y/W50dO4ByRXZqqR3SyCYE ZoRDJdaSAjtx1lewOzhqCU1N316TIBWLEC7zoUgmU6efuNewOiurPY+z1eWgK15t vX2/HM9mYtNmW3CpRyur4H1ARRLJnW0nOw9fMIwA0xqsN3QH6sragxGazqSVqmN1 Jht+IojBcQtnMuAOcw9ie1lkYIv09wC/7B/xys4Fu/EhrycNM5wLy0RsnwNplAKj 761C30/uRxD6WQs39EW+W+jFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVUwuz9vN T7UmTeqiJnuRG4z4ZcMwHwYDVR0jBBgwFoAU8q+Rix8UisrksDlFAoTeSQ15Dlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2Lzk2NDYzNDU4RDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNya3NEbEZBb1RlU1ExNURs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHEtUml4OFVpc3Jrc0RsRkFvVGVTUTE1RGxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2Lzk2NDYzNDU4RDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNy a3NEbEZBb1RlU1ExNURsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALljrSMEQyfEAp51508/RwPQoS2/lMvGbQyqtSMAMnNhl4xo1bSpcBwl dnfRB2Fsjyq5ZkfUVeOr+56uwy+p1wFQ6tH3hV+HCDmGCydd2OUvLjxcKa/5n/uo gLptHKm+vZUSVODhhjZfpSvehe1AHxWK6jm/hM58YdJhMQ+o+OYDgNEGskakwmBU lv5Bfegohq4CDZWi6Hxgn3H7o+0LV5hTFOm6J9Tz5h/lMoGJEeoeE37tZYji1XF0 X6TdH6dsFOxNmlvsHE5kvv9PlvAG3W5k/nxjZ5FXmfB7YL7J14rEv2gbot5eKKq0 HSSGtEB5DtDu77M+2EeQT8wB9lSfNAE= -----END CERTIFICATE-----Generated at Sun Jul 20 07:44:03 2025 by rpki-client