$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft File: p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json) Hash identifier: zDFXpHuQJbEldaEkBGm/wv7i7Hg58ud9jqv2dyYu/rM= Subject key identifier: 0C:8F:C4:4C:6A:66:D9:0E:79:2C:70:48:C8:A0:5D:F8:4D:6B:1B:D1 Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 Certificate issuer: /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft Manifest number: 01C0 Signing time: Sat 19 Jul 2025 03:09:27 +0000 Manifest this update: Sat 19 Jul 2025 03:09:27 +0000 Manifest next update: Sat 26 Jul 2025 03:09:27 +0000 Files and hashes: 1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: OOcdzx7ClYi+SZV0/WmaETexv1f9n47pqLbC+5B8ChI=) 2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 5g7RrFvBwgNiKlK3rQGnarO7ApLyrSM6Xg9ERGMGz5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Validity Not Before: Jul 19 03:09:27 2025 GMT Not After : Jul 26 03:09:27 2025 GMT Subject: CN=687b0c67-adf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:10:9a:4c:d0:86:aa:46:bb:3d:8f:60:10: b9:3f:74:e0:b7:5f:08:b5:d6:63:b2:a9:62:02:ae: 2a:1b:a8:bb:97:ff:9f:eb:d4:df:30:09:94:58:1f: 24:76:b5:45:9e:ed:8f:f3:26:69:ea:10:44:36:27: d8:be:89:1a:f0:da:56:39:cc:ce:ec:43:c8:1b:84: d1:6a:1b:56:0b:83:e1:53:b7:7f:03:95:83:cb:c6: 71:5c:74:fb:ad:f4:f4:1b:a3:f5:a9:a3:02:71:25: 96:a5:c4:b2:66:ad:26:0f:4e:c1:a3:41:8f:e3:c1: 91:bf:ce:e6:d3:bb:0f:b4:cf:18:49:b1:ca:10:39: 30:39:79:27:f8:b8:45:e8:ca:61:7e:6b:43:d8:c4: e1:9d:1f:3f:7f:d7:34:e8:ae:9a:92:38:46:0a:d8: 92:a9:ff:a2:f1:18:16:6e:a2:f6:dd:ad:10:b8:cf: 2a:8e:fc:23:f5:85:2c:90:be:b8:f1:a7:be:21:28: e2:b8:52:60:df:f9:08:57:32:2e:99:43:91:c5:d0: e6:06:5d:c1:61:9e:3e:2b:84:f3:64:15:42:19:72: 9b:75:3c:36:d6:ff:18:bc:b6:89:10:8a:c8:85:ac: 75:4f:9a:74:14:64:04:4f:d0:54:89:dd:b3:25:98: 03:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8F:C4:4C:6A:66:D9:0E:79:2C:70:48:C8:A0:5D:F8:4D:6B:1B:D1 X509v3 Authority Key Identifier: keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:85:e9:ae:58:03:0e:2d:93:1f:f8:0e:47:97:bd:c2:8e:ec: 6d:4a:e7:e7:d9:aa:de:47:8a:b2:e1:b2:b7:de:9e:e9:31:5d: 54:4c:67:59:70:00:8c:d9:aa:85:bd:e4:0c:f1:64:14:69:43: 4f:14:eb:dd:c3:2b:3c:d0:d1:e6:50:05:2b:a7:af:cb:0b:59: 0c:07:64:62:14:ba:ae:a3:24:6f:80:98:95:47:62:d9:38:9f: 02:e0:80:15:ff:81:5f:05:b2:4c:26:c1:07:bd:c2:76:d4:55: e9:63:ac:a6:74:3d:28:fb:7d:c0:ae:b0:d6:9b:91:be:8b:a4: 40:8d:31:8e:72:8d:95:52:20:cc:c2:b7:a0:dd:43:5e:79:f1: 0a:ab:ad:39:e2:8a:3c:4e:63:a2:a2:97:27:59:8d:5f:0e:6a: 67:3a:b1:e7:32:1b:ea:e6:40:55:59:04:c4:18:b6:18:8c:aa: 8e:b5:e6:a3:09:ac:c2:c5:14:ed:b5:c3:f7:b3:45:5a:6d:8c: c1:7c:57:61:28:df:d3:ff:c8:f8:54:59:d8:5b:a5:34:f7:7a: 38:eb:ff:6e:9d:2e:3a:72:4f:c5:de:23:bc:64:91:38:d0:fc: a8:7e:77:e9:f7:23:e9:e7:fb:09:38:b9:fd:4f:9a:eb:85:b0: fd:1e:11:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDNjQxMTAvBgNVBAUTKEE3QzE4MkNCMEM1NkVDQzY4RDc0OTFBMjkxNDE0NEI0 Nzc0Rjc3MzIwHhcNMjUwNzE5MDMwOTI3WhcNMjUwNzI2MDMwOTI3WjAYMRYwFAYD VQQDEw02ODdiMGM2Ny1hZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypwQmkzQhqpGuz2PYBC5P3Tgt18ItdZjsqliAq4qG6i7l/+f69TfMAmUWB8k drVFnu2P8yZp6hBENifYvoka8NpWOczO7EPIG4TRahtWC4PhU7d/A5WDy8ZxXHT7 rfT0G6P1qaMCcSWWpcSyZq0mD07Bo0GP48GRv87m07sPtM8YSbHKEDkwOXkn+LhF 6MphfmtD2MThnR8/f9c06K6akjhGCtiSqf+i8RgWbqL23a0QuM8qjvwj9YUskL64 8ae+ISjiuFJg3/kIVzIumUORxdDmBl3BYZ4+K4TzZBVCGXKbdTw21v8YvLaJEIrI hax1T5p0FGQET9BUid2zJZgD4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyPxExq ZtkOeSxwSMigXfhNaxvRMB8GA1UdIwQYMBaAFKfBgssMVuzGjXSRopFBRLR3T3cy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0M2NC9BNkRFRjFFRUIz MEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdNYU5kSkdpa1VGRXRIZFBk ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4R0N5d3hXN01hTmRKR2lrVUZFdEhkUGR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0M2NC9BNkRFRjFFRUIzMEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdN YU5kSkdpa1VGRXRIZFBkekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8hemuWAMOLZMf+A5Hl73CjuxtSufn2areR4qy4bK33p7pMV1UTGdZ cACM2aqFveQM8WQUaUNPFOvdwys80NHmUAUrp6/LC1kMB2RiFLquoyRvgJiVR2LZ OJ8C4IAV/4FfBbJMJsEHvcJ21FXpY6ymdD0o+33ArrDWm5G+i6RAjTGOco2VUiDM wreg3UNeefEKq6054oo8TmOiopcnWY1fDmpnOrHnMhvq5kBVWQTEGLYYjKqOteaj CazCxRTttcP3s0VabYzBfFdhKN/T/8j4VFnYW6U093o46/9unS46ck/F3iO8ZJE4 0Pyofnfp9yPp5/sJOLn9T5rrhbD9HhHV -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:51 2025 by rpki-client