$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft File: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json) Hash identifier: 29FfoOZzgGkcaFqJGWB8WEM1Lj++RjHJ3GcvKpUlxkw= Subject key identifier: 07:D6:40:D5:92:53:77:88:EC:D5:EA:9C:57:BA:0D:00:9D:D0:71:7C Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Certificate serial: 0F8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft Manifest number: 0F6B Signing time: Fri 18 Jul 2025 17:45:59 +0000 Manifest this update: Fri 18 Jul 2025 17:45:58 +0000 Manifest next update: Fri 25 Jul 2025 17:45:58 +0000 Files and hashes: 1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: De30qyB7+GOZzR7DhoVAhtyGhVYr/+7GJSOL+kxjBQQ=) 2: B1F01F2A025C11F0BCAB0F12C4F9AE02.roa (hash: wNl2vPAfQOmVBCkud9vffEnTL87IbN3lfDYFsp2wc4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3979 (0xf8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Validity Not Before: Jul 18 17:45:58 2025 GMT Not After : Jul 25 17:45:58 2025 GMT Subject: CN=687a8856-4690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:9b:09:1d:af:61:c1:65:44:94:f7:79:77: fc:9d:c2:0c:d4:26:cd:c4:dc:7c:29:10:7a:de:71: ba:a0:9e:76:15:71:bd:55:45:c7:40:22:4e:1d:66: 97:2a:dd:62:5e:83:b1:f9:6a:b8:b9:5a:a4:7d:54: f8:dd:8d:4e:99:24:57:a3:53:08:7d:d2:da:17:ae: 6c:06:a0:81:f5:a3:34:05:84:29:25:a2:c1:aa:80: 36:b7:cd:22:71:5b:18:62:0d:e5:c4:2d:21:b6:ec: ce:dc:93:4b:90:7a:bc:3e:31:51:28:fc:d3:af:7b: 5a:9e:3e:1e:33:c7:ff:52:b1:c4:6a:ee:a0:d4:24: 5d:d1:05:06:17:58:29:84:6c:48:d3:a5:fd:9e:c0: 6d:38:c3:95:a2:94:88:0f:92:53:c2:82:57:b9:39: 8b:79:ff:dd:ec:d4:71:9c:d2:58:5e:9f:fc:ee:cf: 20:a4:42:d4:ae:db:b8:f0:c8:82:71:b0:00:98:c0: 1c:32:0a:9f:a6:16:53:cd:dc:bb:44:d8:ca:ff:54: 36:07:b9:7a:0a:e1:2e:54:b4:13:73:7b:4b:f9:36: 92:90:dd:85:ec:a1:47:c1:f7:c5:80:71:e3:f3:02: 09:91:9c:c4:2e:47:48:2f:e3:60:c5:c3:37:61:5a: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D6:40:D5:92:53:77:88:EC:D5:EA:9C:57:BA:0D:00:9D:D0:71:7C X509v3 Authority Key Identifier: keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:32:a2:dc:d2:2c:ca:b2:39:f5:26:dc:ae:d1:a8:8a:7a:93: 4c:85:8a:e3:1c:b9:a9:da:f3:df:d0:5b:b6:8e:02:66:7c:23: 26:45:c2:eb:ea:bc:5a:73:5a:aa:48:75:7f:1e:86:e9:03:2e: 71:77:d7:54:dd:6f:09:76:4d:0a:63:54:a2:f1:a3:73:53:b8: 3d:e8:bf:3f:bd:c6:ff:97:72:92:d1:a0:bd:2c:e6:d2:1c:c2: 4c:15:d0:d1:1e:dc:93:ac:08:99:39:50:e6:68:58:15:a8:83: 69:bf:87:84:37:05:a8:6f:b7:96:6d:5e:09:7c:d6:f8:6b:84: f6:61:6a:ca:1d:a1:1a:3c:0f:1f:8e:2a:74:3d:75:08:4c:44: 72:a8:3e:40:60:08:52:4f:ef:17:c4:50:c9:a3:4d:30:bb:e7: 27:1a:81:8a:47:82:29:12:b7:33:36:ae:fe:cf:a0:f4:ee:d4: e4:68:ec:88:20:78:1b:12:f9:77:cb:b2:68:1e:74:4d:3f:6f: 1e:63:03:a4:87:da:ed:84:03:3c:9a:2e:2d:0c:a5:29:7f:ff: 6c:92:4b:4f:0a:7a:ae:d5:f6:19:f3:49:85:c4:ae:33:30:91: 46:d4:82:8c:d9:ce:81:46:8e:33:d9:c8:86:86:84:6d:d2:7b: 6e:2e:75:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2M0QxMTAvBgNVBAUTKEYyMjFFOTQzMkExOUYyODUwNzgzMUIxMkVEODZCQzRC QjU5NjM5ODEwHhcNMjUwNzE4MTc0NTU4WhcNMjUwNzI1MTc0NTU4WjAYMRYwFAYD VQQDEw02ODdhODg1Ni00NjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUabCR2vYcFlRJT3eXf8ncIM1CbNxNx8KRB63nG6oJ52FXG9VUXHQCJOHWaX Kt1iXoOx+Wq4uVqkfVT43Y1OmSRXo1MIfdLaF65sBqCB9aM0BYQpJaLBqoA2t80i cVsYYg3lxC0htuzO3JNLkHq8PjFRKPzTr3tanj4eM8f/UrHEau6g1CRd0QUGF1gp hGxI06X9nsBtOMOVopSID5JTwoJXuTmLef/d7NRxnNJYXp/87s8gpELUrtu48MiC cbAAmMAcMgqfphZTzdy7RNjK/1Q2B7l6CuEuVLQTc3tL+TaSkN2F7KFHwffFgHHj 8wIJkZzELkdIL+NgxcM3YVplEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfWQNWS U3eI7NXqnFe6DQCd0HF8MB8GA1UdIwQYMBaAFPIh6UMqGfKFB4MbEu2GvEu1ljmB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTYzRC9GOUM5NzY2Qzcy NjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhvVUhneHNTN1lhOFM3V1dP WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpSHBReW9aOG9VSGd4c1M3WWE4UzdXV09ZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTYzRC9GOUM5NzY2QzcyNjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhv VUhneHNTN1lhOFM3V1dPWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0MqLc0izKsjn1Jtyu0aiKepNMhYrjHLmp2vPf0Fu2jgJmfCMmRcLr 6rxac1qqSHV/HobpAy5xd9dU3W8Jdk0KY1Si8aNzU7g96L8/vcb/l3KS0aC9LObS HMJMFdDRHtyTrAiZOVDmaFgVqINpv4eENwWob7eWbV4JfNb4a4T2YWrKHaEaPA8f jip0PXUITERyqD5AYAhST+8XxFDJo00wu+cnGoGKR4IpErczNq7+z6D07tTkaOyI IHgbEvl3y7JoHnRNP28eYwOkh9rthAM8mi4tDKUpf/9skktPCnqu1fYZ80mFxK4z MJFG1IKM2c6BRo4z2ciGhoRt0ntuLnUv -----END CERTIFICATE-----Generated at Sun Jul 20 07:39:38 2025 by rpki-client