$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft File: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json) Hash identifier: buS5RbCpnTkdRH0BJpI1aWIUe1zJgVcilTGmd+/Xw9g= Subject key identifier: FD:C6:E3:01:D0:37:00:EA:BC:3B:7A:4A:62:71:F1:CA:C1:53:DC:0B Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 Certificate issuer: /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft Manifest number: 67 Signing time: Sat 19 Jul 2025 07:14:30 +0000 Manifest this update: Sat 19 Jul 2025 07:14:30 +0000 Manifest next update: Sat 26 Jul 2025 07:14:30 +0000 Files and hashes: 1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: lQ4pvEsrnDT8SRwMmsYoYVksxT2Tr7/alt5fOISQaIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Validity Not Before: Jul 19 07:14:30 2025 GMT Not After : Jul 26 07:14:30 2025 GMT Subject: CN=687b45d6-6904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c4:15:1e:60:c5:de:93:7a:7d:f6:e9:3a:22: ab:b6:a4:8e:b4:19:7f:f2:d9:89:3b:53:da:6f:4c: 04:dc:c4:c6:5d:79:37:78:32:84:ec:c0:0d:16:5f: b2:6f:06:b4:7e:0b:2f:ab:89:e6:84:16:cd:80:39: 38:ff:5c:6a:9a:12:63:56:14:13:87:37:b8:1a:b2: 8b:7b:2e:80:07:5e:d6:bb:93:e3:10:55:dd:4a:b7: f8:af:46:77:a0:fb:9d:15:d6:23:ca:60:93:2a:05: 5c:93:25:47:01:15:1c:74:a5:12:7d:e8:e4:56:ff: d2:3c:ba:17:cb:63:7e:9d:75:ad:0d:47:bc:bd:4f: 6a:07:31:58:d8:8d:9f:80:11:be:7b:4c:7e:1d:cb: 0c:58:98:64:97:93:00:7c:db:2f:7f:f8:4b:38:b0: f1:95:d5:1f:33:dd:b7:75:0b:54:9d:13:63:d4:2d: ee:46:02:ad:7d:c4:6d:96:ea:f6:ed:37:ff:69:7d: cf:8c:80:14:81:99:fc:a2:6c:f3:7e:5e:3b:9a:12: 4a:80:99:31:31:18:a5:2a:e6:35:3a:8a:0e:4e:b7: 65:97:dd:51:dd:2e:78:c9:67:79:95:d4:90:00:b0: e2:4c:5d:91:3e:28:54:80:82:e4:67:89:9e:1b:3d: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C6:E3:01:D0:37:00:EA:BC:3B:7A:4A:62:71:F1:CA:C1:53:DC:0B X509v3 Authority Key Identifier: keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b8:69:39:03:c2:67:8d:b5:11:63:43:84:26:61:27:1e:83: fc:17:98:2e:df:a7:fd:5b:cf:06:e8:8a:04:40:96:4f:d4:5c: e1:2f:71:ed:15:2c:13:5c:53:ce:63:fe:53:86:9f:5c:87:37: 4d:d4:73:71:9b:0f:64:b5:8f:99:de:13:ed:fb:19:0f:67:f8: 27:a7:1c:6e:9e:e0:c3:4c:ef:4b:dd:59:4e:6a:67:bd:05:67: 4c:83:30:c7:40:e5:fb:8a:90:5e:88:79:a6:3b:b8:44:0f:44: fd:ff:b1:e0:dc:82:fd:94:bb:d7:d1:dc:04:8b:41:03:8e:b3: 6a:45:5a:6b:9a:8a:99:03:d7:8e:81:6d:11:85:52:4d:92:8b: 90:e0:b2:3e:f2:9e:b8:a2:74:c2:5d:79:c7:6c:48:fa:43:1f: d9:6e:87:d1:4e:dc:ed:e0:6c:bf:43:50:0a:e6:d1:5a:a6:b0: 11:41:53:b8:3d:c4:47:e3:c7:2f:4e:91:64:76:44:06:b2:58: 2d:bd:db:6c:8d:c2:a8:90:ef:34:50:1b:ed:13:33:4a:80:d4: 8c:3a:31:b0:b7:a3:97:3f:68:54:fb:a4:94:00:26:bb:ff:cd: 19:51:b5:e6:f9:b7:ab:8d:22:a0:13:bc:e0:fb:fa:57:54:79: 90:38:2e:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QTVBRjExMC8GA1UEBRMoRjNFQkJGQjRBOTM4MEZFMDlBNTYxRkM2QUZBMkExQ0My MTQ4ODYxMTAeFw0yNTA3MTkwNzE0MzBaFw0yNTA3MjYwNzE0MzBaMBgxFjAUBgNV BAMTDTY4N2I0NWQ2LTY5MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZxBUeYMXek3p99uk6Iqu2pI60GX/y2Yk7U9pvTATcxMZdeTd4MoTswA0WX7Jv BrR+Cy+rieaEFs2AOTj/XGqaEmNWFBOHN7gasot7LoAHXta7k+MQVd1Kt/ivRneg +50V1iPKYJMqBVyTJUcBFRx0pRJ96ORW/9I8uhfLY36dda0NR7y9T2oHMVjYjZ+A Eb57TH4dywxYmGSXkwB82y9/+Es4sPGV1R8z3bd1C1SdE2PULe5GAq19xG2W6vbt N/9pfc+MgBSBmfyibPN+XjuaEkqAmTExGKUq5jU6ig5Ot2WX3VHdLnjJZ3mV1JAA sOJMXZE+KFSAguRniZ4bPdNPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/cbjAdA3 AOq8O3pKYnHxysFT3AswHwYDVR0jBBgwFoAU8+u/tKk4D+CaVh/Gr6KhzCFIhhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBNUFGLzg4REJBOTgyQ0JD MTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1DYVZoX0dyNktoekNGSWho RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOC11X3RLazRELUNhVmhfR3I2S2h6Q0ZJaGhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB NUFGLzg4REJBOTgyQ0JDMTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1D YVZoX0dyNktoekNGSWhoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHi4aTkDwmeNtRFjQ4QmYSceg/wXmC7fp/1bzwboigRAlk/UXOEvce0V LBNcU85j/lOGn1yHN03Uc3GbD2S1j5neE+37GQ9n+CenHG6e4MNM70vdWU5qZ70F Z0yDMMdA5fuKkF6IeaY7uEQPRP3/seDcgv2Uu9fR3ASLQQOOs2pFWmuaipkD146B bRGFUk2Si5Dgsj7ynriidMJdecdsSPpDH9luh9FO3O3gbL9DUArm0VqmsBFBU7g9 xEfjxy9OkWR2RAayWC2922yNwqiQ7zRQG+0TM0qA1Iw6MbC3o5c/aFT7pJQAJrv/ zRlRteb5t6uNIqATvOD7+ldUeZA4Ll4= -----END CERTIFICATE-----Generated at Sun Jul 20 07:48:18 2025 by rpki-client