$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft File: 8uBzCSl2BY65hlYUFDf4-2i3IV0.mft (raw, json) Hash identifier: m2zDFZUawmJWsT3EZ+fzgmvgzCW3agpLm4MPEKsaVkU= Subject key identifier: A6:89:A7:29:97:40:AE:18:C7:9C:D4:50:64:E0:B4:DF:3F:AE:A0:BB Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft Manifest number: 2C Signing time: Sat 19 Jul 2025 07:59:58 +0000 Manifest this update: Sat 19 Jul 2025 07:59:58 +0000 Manifest next update: Sat 26 Jul 2025 07:59:58 +0000 Files and hashes: 1: 8uBzCSl2BY65hlYUFDf4-2i3IV0.crl (hash: PTjaKtzFFvYddTCXpP28QaMuaEhOXvkjI4YhTj+bnAU=) 2: CFED56A4240411F0B73CB374C4F9AE02.roa (hash: Zn3nz0esus3n+Qr7MjHUDFZOowDDsYzs6GVur4c4Gdw=) 3: CF53E5E6240411F0B73CB374C4F9AE02.roa (hash: aGXXY3h8pMjRmE6vJ9+0EmvsUGymYki2tMrN0LjTaWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: Jul 19 07:59:58 2025 GMT Not After : Jul 26 07:59:58 2025 GMT Subject: CN=687b507e-e90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:42:76:f4:15:52:63:5b:8e:b4:30:5b:92:77: a8:76:cd:bb:2a:66:cb:38:00:f7:8b:2d:bf:c8:a5: 2e:73:28:75:0f:4f:2c:89:d3:88:1d:80:d0:f5:17: bb:35:08:15:b3:cd:7d:90:59:52:26:c7:15:6f:e4: 4e:6b:ff:c2:36:6d:96:3f:a7:38:1b:e6:36:48:57: 39:f8:b8:c7:72:3c:8d:30:b3:32:a3:14:c3:1a:22: 52:91:75:48:f8:10:83:75:be:8a:09:e1:e5:78:7d: 52:5a:ac:11:e9:b0:a7:8f:e5:15:23:84:ea:02:97: f5:29:9c:b3:b3:a1:db:2a:e8:8f:3b:51:76:bd:a3: e5:62:50:54:52:64:4c:60:d4:60:fb:58:1c:6c:1b: 3a:db:4f:12:49:2f:fb:50:e9:5d:e0:52:07:f3:98: 85:47:b3:c5:11:1a:d6:c7:0b:6a:a3:d8:ad:ab:e6: 0f:d7:13:9f:26:41:18:0b:f1:89:2e:65:01:1f:c3: 22:5a:aa:05:1c:82:77:92:52:35:5b:bc:91:52:a2: 06:53:ee:50:af:ce:a1:c0:1c:0a:27:c4:3f:6e:22: 2d:d3:53:90:af:16:23:ea:93:de:5f:06:86:aa:bf: 58:f0:66:d3:a1:d6:bf:81:e7:9a:aa:3b:67:50:f6: 8a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:89:A7:29:97:40:AE:18:C7:9C:D4:50:64:E0:B4:DF:3F:AE:A0:BB X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:17:78:79:9c:df:25:72:42:4e:4f:ba:c2:4d:fb:cb:c9:8c: f4:f3:f5:dc:82:eb:3c:44:60:91:3c:fb:95:f5:93:ea:ee:95: e7:8e:e1:b6:52:7c:dd:9c:06:b9:bc:38:b2:fa:86:1f:36:ae: e3:12:82:a5:b1:47:b8:0f:0e:bc:ea:10:32:3e:17:79:66:01: b3:02:ae:ca:64:1a:9b:d8:5e:5e:1e:e0:a4:01:e1:bc:72:33: 2f:08:2f:4c:84:04:47:bc:6a:5e:69:7c:f2:86:c4:f5:8d:f0: 83:c0:2b:25:d7:59:aa:f1:88:75:21:3a:1e:01:60:a7:a4:d5: 77:24:7e:3b:16:32:3e:bb:35:35:d9:18:25:3d:4f:a3:87:2e: 12:44:f2:ae:56:42:80:83:b2:fb:5e:3e:d6:80:6f:c0:ad:1a: 75:32:78:54:53:8a:5d:c1:dc:9c:eb:5b:da:6f:66:c0:b0:ee: fe:64:90:40:13:50:f6:f9:94:e9:f1:b1:d4:86:56:dd:a3:74: 1b:a2:5f:54:9c:f1:c1:d0:c3:da:d5:36:99:1a:76:db:3b:53: 3c:8f:33:e9:d4:de:81:a7:80:ab:a2:78:64:44:48:52:d0:2f: c7:a1:53:a4:5d:10:81:50:6f:51:93:88:f8:03:95:68:fb:1f: 0c:17:c4:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYyQjExMC8GA1UEBRMoRjJFMDczMDkyOTc2MDU4RUI5ODY1NjE0MTQzN0Y4RkI2 OEI3MjE1RDAeFw0yNTA3MTkwNzU5NThaFw0yNTA3MjYwNzU5NThaMBgxFjAUBgNV BAMTDTY4N2I1MDdlLWU5MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvQnb0FVJjW460MFuSd6h2zbsqZss4APeLLb/IpS5zKHUPTyyJ04gdgND1F7s1 CBWzzX2QWVImxxVv5E5r/8I2bZY/pzgb5jZIVzn4uMdyPI0wszKjFMMaIlKRdUj4 EIN1vooJ4eV4fVJarBHpsKeP5RUjhOoCl/UpnLOzodsq6I87UXa9o+ViUFRSZExg 1GD7WBxsGzrbTxJJL/tQ6V3gUgfzmIVHs8URGtbHC2qj2K2r5g/XE58mQRgL8Yku ZQEfwyJaqgUcgneSUjVbvJFSogZT7lCvzqHAHAonxD9uIi3TU5CvFiPqk95fBoaq v1jwZtOh1r+B55qqO2dQ9orfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpomnKZdA rhjHnNRQZOC03z+uoLswHwYDVR0jBBgwFoAU8uBzCSl2BY65hlYUFDf4+2i3IV0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjJCLzYxQjM1NjE2MjQw NDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHVCekNTbDJCWTY1aGxZVUZEZjQtMmkzSVYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjJCLzYxQjM1NjE2MjQwNDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2 NWhsWVVGRGY0LTJpM0lWMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMoXeHmc3yVyQk5PusJN+8vJjPTz9dyC6zxEYJE8+5X1k+ruleeO4bZS fN2cBrm8OLL6hh82ruMSgqWxR7gPDrzqEDI+F3lmAbMCrspkGpvYXl4e4KQB4bxy My8IL0yEBEe8al5pfPKGxPWN8IPAKyXXWarxiHUhOh4BYKek1XckfjsWMj67NTXZ GCU9T6OHLhJE8q5WQoCDsvtePtaAb8CtGnUyeFRTil3B3JzrW9pvZsCw7v5kkEAT UPb5lOnxsdSGVt2jdBuiX1Sc8cHQw9rVNpkadts7UzyPM+nU3oGngKuieGRESFLQ L8ehU6RdEIFQb1GTiPgDlWj7HwwXxCE= -----END CERTIFICATE-----Generated at Sun Jul 20 11:56:20 2025 by rpki-client