$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json) Hash identifier: 73NdJ2FAgaglN982t07D03Zp+4buoYfMcM8K00OWcuY= Subject key identifier: F9:86:C5:67:02:8A:50:43:69:BB:04:DA:90:3D:0D:D2:FE:A6:4B:1E Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft Manifest number: 0357 Signing time: Mon 21 Jul 2025 01:14:50 +0000 Manifest this update: Mon 21 Jul 2025 01:14:50 +0000 Manifest next update: Mon 28 Jul 2025 01:14:50 +0000 Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: BbOXtSG1bk5D3EU9saIFvOyC/vuNqdveXUUVB+M6RZs=) 2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: S7JF/bNkGQBKzWyyMCIfasqHndqaViHJP5nFlj8AfpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Validity Not Before: Jul 21 01:14:50 2025 GMT Not After : Jul 28 01:14:50 2025 GMT Subject: CN=687d948a-dabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:46:59:57:6c:7b:60:bd:5f:1e:11:0b:67: be:4a:8e:e5:a2:71:b4:f8:9f:db:db:97:6e:b3:30: 20:09:3d:30:e8:97:2e:ba:79:34:89:c2:f9:e5:bd: f1:de:bf:44:6d:0e:8e:bd:5d:98:a3:c1:b1:e9:47: cb:f8:bf:85:05:6f:8e:16:8a:67:42:bd:fd:c6:17: 53:cd:e0:d3:9c:22:da:7b:71:ee:39:04:10:a1:e3: e8:0a:08:df:a8:9d:59:a4:ee:99:6d:4d:ca:b3:f6: 79:c7:99:6d:16:f1:62:2a:76:f8:d1:93:22:dd:9a: ae:a0:38:02:7b:83:06:fe:ca:d5:43:6d:aa:c9:45: 6f:7e:8d:62:74:00:21:ce:aa:ce:e1:e3:d9:d4:89: cf:93:db:7c:ae:df:8a:ef:bb:05:c6:6b:7e:56:f4: aa:cb:82:c6:cf:ab:13:86:eb:f6:36:f9:ed:cf:79: 06:d5:02:e3:cb:e6:39:a8:02:bd:84:ba:11:94:b8: a7:e9:67:0c:c6:54:e2:ff:1d:52:19:36:4d:02:2d: a5:ca:70:bc:18:3b:82:77:44:96:cc:9c:d8:71:c5: 31:fe:aa:1a:d4:3d:76:03:29:e3:57:54:7e:40:34: 6b:50:b7:44:6a:94:76:4a:3d:28:7b:fb:2f:e3:17: 11:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:86:C5:67:02:8A:50:43:69:BB:04:DA:90:3D:0D:D2:FE:A6:4B:1E X509v3 Authority Key Identifier: keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:46:9c:11:43:0f:03:07:26:fe:41:13:f7:a0:ae:e4:06:21: c7:26:28:00:96:3a:e1:08:60:50:12:4d:ef:7f:a9:1b:05:ac: f9:d1:22:ed:7d:f6:3d:97:40:9c:c1:fc:f6:56:98:05:9a:cb: 68:ed:18:44:1d:c1:0e:b1:ea:92:81:b9:2b:5a:05:97:0c:b1: 96:7a:55:30:09:4d:f0:a2:ea:1c:ae:50:34:cb:3a:01:01:64: 37:a3:2c:f8:92:75:ce:4c:3c:79:ec:83:8d:bd:b0:38:0e:39: d3:03:60:48:8f:43:84:8c:76:9d:0b:8a:86:66:5e:63:b0:71: de:6d:f2:dc:7e:14:46:52:21:2c:6c:97:d5:5c:2c:e6:8a:1a: 1d:67:07:40:50:2c:d0:60:f5:21:31:a5:eb:39:b9:38:7c:43: c4:c8:8a:c4:64:fc:78:a3:ed:3a:42:3a:67:48:c4:ce:6b:31: 8b:24:30:ca:9b:fc:ff:41:b7:2e:97:48:e8:25:c4:03:22:44: ec:cd:e0:b2:a3:84:de:a1:03:11:52:40:31:c5:fa:4a:d9:44: cb:7a:44:b7:9c:dd:05:32:84:59:72:68:10:45:0b:28:7c:06: 63:b0:47:19:07:a7:3c:b8:08:09:d5:1e:52:46:5f:4c:75:ef: bb:a3:3f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCNUYxMTAvBgNVBAUTKEYwMkE1RDEwMkY3RjMzQjI2MTExQjRBMjg3NDJGN0JB MkYxRTlBOTkwHhcNMjUwNzIxMDExNDUwWhcNMjUwNzI4MDExNDUwWjAYMRYwFAYD VQQDEw02ODdkOTQ4YS1kYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprpGWVdse2C9Xx4RC2e+So7lonG0+J/b25duszAgCT0w6Jcuunk0icL55b3x 3r9EbQ6OvV2Yo8Gx6UfL+L+FBW+OFopnQr39xhdTzeDTnCLae3HuOQQQoePoCgjf qJ1ZpO6ZbU3Ks/Z5x5ltFvFiKnb40ZMi3ZquoDgCe4MG/srVQ22qyUVvfo1idAAh zqrO4ePZ1InPk9t8rt+K77sFxmt+VvSqy4LGz6sThuv2Nvntz3kG1QLjy+Y5qAK9 hLoRlLin6WcMxlTi/x1SGTZNAi2lynC8GDuCd0SWzJzYccUx/qoa1D12AynjV1R+ QDRrULdEapR2Sj0oe/sv4xcRrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmGxWcC ilBDabsE2pA9DdL+pkseMB8GA1UdIwQYMBaAFPAqXRAvfzOyYRG0oodC97ovHpqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I1Ri8wMDVFNTlBQ0Mw OTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003SmhFYlNpaDBMM3VpOGVt cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDcGRFQzlfTTdKaEViU2loMEwzdWk4ZW1way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I1Ri8wMDVFNTlBQ0MwOTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003 SmhFYlNpaDBMM3VpOGVtcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBRpwRQw8DByb+QRP3oK7kBiHHJigAljrhCGBQEk3vf6kbBaz50SLt ffY9l0Ccwfz2VpgFmsto7RhEHcEOseqSgbkrWgWXDLGWelUwCU3wouocrlA0yzoB AWQ3oyz4knXOTDx57IONvbA4DjnTA2BIj0OEjHadC4qGZl5jsHHebfLcfhRGUiEs bJfVXCzmihodZwdAUCzQYPUhMaXrObk4fEPEyIrEZPx4o+06QjpnSMTOazGLJDDK m/z/Qbcul0joJcQDIkTszeCyo4TeoQMRUkAxxfpK2UTLekS3nN0FMoRZcmgQRQso fAZjsEcZB6c8uAgJ1R5SRl9Mde+7oz+Z -----END CERTIFICATE-----Generated at Mon Jul 21 12:35:41 2025 by rpki-client