$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft File: 8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json) Hash identifier: fl+TP6bwjohQ9TyU5yP6fXCmb0ZUHlUL5tqkqWPaiI8= Subject key identifier: 45:65:CE:CA:2C:44:19:C1:03:E1:B3:61:A6:A1:F5:2F:6F:39:35:76 Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft Manifest number: 078C Signing time: Fri 18 Jul 2025 21:41:22 +0000 Manifest this update: Fri 18 Jul 2025 21:41:22 +0000 Manifest next update: Fri 25 Jul 2025 21:41:22 +0000 Files and hashes: 1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: 0xrvpeaoX0W1xA2OTFKx/EpdWBewpVJVT1Uy/7s4eGE=) 2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: 4ZdvboJ8mrbqq75dMjpcRNVXA0/Wmpp30CU0dXWt/yQ=) 3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: nma4xkXXDMJG7QciaymwPc3dJsJxzYlJjEDf7RTo8RE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010 Validity Not Before: Jul 18 21:41:22 2025 GMT Not After : Jul 25 21:41:22 2025 GMT Subject: CN=687abf82-0504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:36:82:4b:21:53:f5:39:a4:d5:ce:8f:bf:5b: b7:ea:1e:79:3c:2a:51:04:09:4b:f7:ac:95:bf:dc: eb:0e:a7:36:fa:78:40:97:c0:95:13:9f:8d:4e:38: 69:1c:ca:b4:da:b2:95:e4:8e:2a:6e:28:eb:c9:c5: e5:01:8e:f1:61:bb:86:64:23:3f:b1:e4:5d:92:fe: 19:bc:14:c4:96:62:5f:a1:28:cf:38:df:42:82:d6: f1:b2:fd:96:e3:2d:be:4f:d3:4d:93:b1:d2:e4:de: 8a:9c:16:33:b8:ca:62:c5:da:c7:ea:6b:8f:07:d9: c1:3d:d1:b8:7b:fd:66:6f:a2:d8:f4:99:e0:89:3f: 0f:a1:df:fa:51:80:a0:dd:25:e4:14:7f:15:72:cf: 28:11:e9:8e:62:af:5d:55:88:6f:50:ee:49:4e:53: e0:c4:d8:9d:89:8b:b2:ce:5d:50:54:09:c7:d3:f5: 5e:16:dc:0a:95:3f:7e:b0:20:6f:ca:b9:0c:b6:16: f2:13:6a:91:1c:50:c6:d9:ce:bd:02:53:f7:85:71: 7b:d1:c3:76:66:e9:35:61:08:bf:03:34:1d:b3:da: 18:ed:43:0f:a7:6f:97:be:f6:cc:a7:a4:c6:81:68: 9c:33:9f:dc:41:0d:3c:47:29:52:af:ef:8f:68:a3: 53:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:CE:CA:2C:44:19:C1:03:E1:B3:61:A6:A1:F5:2F:6F:39:35:76 X509v3 Authority Key Identifier: keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c2:53:f3:40:ff:29:b1:a7:d5:9d:72:3d:cf:83:3c:83:92: 00:80:67:fd:a9:9b:71:6a:f9:84:06:b3:30:1b:67:d6:90:ae: 6d:ee:8f:8b:a4:02:1c:0b:26:10:5b:bb:5e:3f:f5:ab:dd:5b: 24:41:f5:41:8f:78:ed:a7:34:91:6f:ca:71:32:da:14:62:5c: 2f:75:cd:06:92:79:74:2e:6f:86:f3:5a:13:a5:3a:05:b3:9d: 9f:d6:07:4b:a5:fc:d1:23:82:3d:0f:17:af:72:3f:88:c4:0d: c6:a3:66:9a:1d:48:1f:c7:68:ab:05:77:97:7e:f8:b2:ba:c6: 75:c0:ea:c8:52:31:db:90:28:2c:41:47:e8:ad:08:fd:db:68: 98:5d:91:0c:aa:f3:1d:95:73:a0:97:c0:5e:02:c6:ec:bc:56: 62:fd:b4:41:b8:cc:2b:bf:69:8f:ec:04:47:df:ff:89:10:8b: f8:ea:43:52:83:2c:c4:81:23:7a:e0:29:ce:8e:31:e2:66:7a: 5a:f7:84:e9:a8:e4:02:ed:1d:be:86:f8:c7:1c:a7:d4:f3:fe: 75:6a:59:76:d5:e3:bf:92:f5:a5:81:7a:03:5c:00:31:7e:2e: e4:c9:ac:2d:bb:f1:d7:93:4f:e6:be:86:97:05:05:d5:eb:4a: c9:54:09:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw MkU5NTYwMTAwHhcNMjUwNzE4MjE0MTIyWhcNMjUwNzI1MjE0MTIyWjAYMRYwFAYD VQQDEw02ODdhYmY4Mi0wNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zaCSyFT9Tmk1c6Pv1u36h55PCpRBAlL96yVv9zrDqc2+nhAl8CVE5+NTjhp HMq02rKV5I4qbijrycXlAY7xYbuGZCM/seRdkv4ZvBTElmJfoSjPON9Cgtbxsv2W 4y2+T9NNk7HS5N6KnBYzuMpixdrH6muPB9nBPdG4e/1mb6LY9JngiT8Pod/6UYCg 3SXkFH8Vcs8oEemOYq9dVYhvUO5JTlPgxNidiYuyzl1QVAnH0/VeFtwKlT9+sCBv yrkMthbyE2qRHFDG2c69AlP3hXF70cN2Zuk1YQi/AzQds9oY7UMPp2+XvvbMp6TG gWicM5/cQQ08RylSr++PaKNTOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVlzsos RBnBA+GzYaah9S9vOTV2MB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2 OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz TG9hSTNxU0lmWk1DNlZZQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWwlPzQP8psafVnXI9z4M8g5IAgGf9qZtxavmEBrMwG2fWkK5t7o+L pAIcCyYQW7teP/Wr3VskQfVBj3jtpzSRb8pxMtoUYlwvdc0Gknl0Lm+G81oTpToF s52f1gdLpfzRI4I9Dxevcj+IxA3Go2aaHUgfx2irBXeXfviyusZ1wOrIUjHbkCgs QUforQj922iYXZEMqvMdlXOgl8BeAsbsvFZi/bRBuMwrv2mP7ARH3/+JEIv46kNS gyzEgSN64CnOjjHiZnpa94TpqOQC7R2+hvjHHKfU8/51all21eO/kvWlgXoDXAAx fi7kyawtu/HXk0/mvoaXBQXV60rJVAlE -----END CERTIFICATE-----Generated at Sun Jul 20 22:32:38 2025 by rpki-client