$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: BFttXaUWJswXz6HWOKO2rhRRDzobP1OBqtP04LzSIu4= Subject key identifier: F3:59:31:25:A2:C2:05:72:BF:9F:FE:80:1D:BD:49:12:05:09:80:21 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: A4 Signing time: Fri 18 Jul 2025 14:23:31 +0000 Manifest this update: Fri 18 Jul 2025 14:23:30 +0000 Manifest next update: Fri 25 Jul 2025 14:23:30 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: 7LtgEcsXRrd6Ey++Jg9sDPzvJWflANHzzcsx5TkWqiM=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Jul 18 14:23:30 2025 GMT Not After : Jul 25 14:23:30 2025 GMT Subject: CN=687a58e3-4735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:00:6e:2f:9a:66:f6:fc:99:da:80:b3:b2: a3:58:24:b9:18:f1:b5:e4:2e:96:04:3a:b2:2a:59: 6c:d7:2b:62:45:ce:0c:96:2f:95:20:82:3e:c8:e9: d0:e2:b1:ad:42:fd:1e:e2:89:f3:15:9e:c9:e1:11: d7:2a:6a:a8:53:dd:e9:0b:4e:be:a4:d1:e1:80:b2: f6:c2:2c:e0:3b:c4:18:42:2f:5f:25:f0:6f:e9:8f: 84:b5:57:54:52:f0:4b:5c:39:a3:86:3f:04:6c:a6: 88:f0:56:2f:0d:4a:8c:cf:67:0a:0b:46:9f:10:d7: e8:3c:1e:a4:55:22:5f:e5:2d:aa:45:6f:09:ea:2d: 1e:f3:c6:05:30:27:34:8c:53:5d:81:ad:dc:7f:b2: d4:e7:99:84:93:8c:a6:60:6c:7e:15:ce:c7:db:61: 9f:00:0d:2e:1c:7f:34:63:c1:96:54:c4:48:7c:38: c4:11:05:ec:20:fd:3f:fe:58:9a:0a:00:cc:77:32: 00:de:c0:bd:23:45:5e:a1:8e:61:0e:c1:f7:d3:5a: 2a:62:7a:0d:3e:ff:1f:46:6e:fc:61:cf:cc:6e:45: fc:77:50:30:20:36:fd:52:2c:76:6c:ee:6f:bd:bb: e9:fd:52:d2:26:6b:fd:ec:dc:89:da:b4:60:eb:7a: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:59:31:25:A2:C2:05:72:BF:9F:FE:80:1D:BD:49:12:05:09:80:21 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:70:3e:7f:f0:8b:30:23:b5:e8:e5:0a:08:ee:ac:0b:f8:c2: 4d:45:61:ed:f9:fd:6e:eb:69:7b:b3:77:81:b9:6a:71:69:17: 2e:3f:86:ee:5f:24:90:17:e2:8f:23:79:cd:6a:90:9f:58:da: be:5c:39:7b:45:42:e0:2b:44:a7:a2:c8:c9:77:11:c6:b5:67: 36:1b:85:f1:52:31:6b:f4:f9:38:49:eb:ec:7c:01:87:f0:46: d5:51:82:28:7d:a9:ca:56:6f:5c:48:c2:66:cd:0b:60:af:7a: 9d:86:a3:18:3f:56:6a:a4:c0:0f:fc:2f:ba:0a:c5:6c:81:2e: e3:20:0b:01:b7:27:74:ea:21:48:ee:4d:b1:c8:9b:5f:58:de: 52:15:bc:52:fb:d3:a7:51:ed:4e:3a:4f:b9:89:82:20:ee:8c: 02:11:de:aa:d8:a1:0d:9d:74:49:43:da:0b:94:3a:39:8e:65: 34:4b:7c:30:fc:12:db:9c:ff:73:7d:94:15:22:3d:fe:6a:00: 35:03:26:89:b6:5b:de:54:81:8b:e7:38:3e:c9:e5:69:84:89: 4c:2b:29:38:b5:bf:76:7d:af:e1:70:f9:70:7e:af:5d:3b:83: 36:fd:b3:8c:50:12:6b:d6:3c:b9:20:50:6d:d0:39:92:0c:cc: 2d:e8:63:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjUwNzE4MTQyMzMwWhcNMjUwNzI1MTQyMzMwWjAYMRYwFAYD VQQDEw02ODdhNThlMy00NzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuccAbi+aZvb8mdqAs7KjWCS5GPG15C6WBDqyKlls1ytiRc4Mli+VIII+yOnQ 4rGtQv0e4onzFZ7J4RHXKmqoU93pC06+pNHhgLL2wizgO8QYQi9fJfBv6Y+EtVdU UvBLXDmjhj8EbKaI8FYvDUqMz2cKC0afENfoPB6kVSJf5S2qRW8J6i0e88YFMCc0 jFNdga3cf7LU55mEk4ymYGx+Fc7H22GfAA0uHH80Y8GWVMRIfDjEEQXsIP0//lia CgDMdzIA3sC9I0VeoY5hDsH301oqYnoNPv8fRm78Yc/MbkX8d1AwIDb9Uix2bO5v vbvp/VLSJmv97NyJ2rRg63odSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNZMSWi wgVyv5/+gB29SRIFCYAhMB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHcD5/8IswI7Xo5QoI7qwL+MJNRWHt+f1u62l7s3eBuWpxaRcuP4bu XySQF+KPI3nNapCfWNq+XDl7RULgK0SnosjJdxHGtWc2G4XxUjFr9Pk4SevsfAGH 8EbVUYIofanKVm9cSMJmzQtgr3qdhqMYP1ZqpMAP/C+6CsVsgS7jIAsBtyd06iFI 7k2xyJtfWN5SFbxS+9OnUe1OOk+5iYIg7owCEd6q2KENnXRJQ9oLlDo5jmU0S3ww /BLbnP9zfZQVIj3+agA1AyaJtlveVIGL5zg+yeVphIlMKyk4tb92fa/hcPlwfq9d O4M2/bOMUBJr1jy5IFBt0DmSDMwt6GOb -----END CERTIFICATE-----Generated at Sun Jul 20 09:58:21 2025 by rpki-client