$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: 9gezD4O3NIsDIL6Y/QInzbI9bs1hfBuOw3L+iwgQC2s= Subject key identifier: 1E:6E:F5:3D:02:FE:BC:CD:FB:B6:8D:D5:C8:76:41:C3:57:36:6F:0F Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 08BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 08B0 Signing time: Fri 18 Jul 2025 20:44:35 +0000 Manifest this update: Fri 18 Jul 2025 20:44:35 +0000 Manifest next update: Fri 25 Jul 2025 20:44:35 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: kNGlVtEx2KPlahi4LG3vjoHGOOFgHFtt5qUdWjT2OdY=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Jul 18 20:44:35 2025 GMT Not After : Jul 25 20:44:35 2025 GMT Subject: CN=687ab233-d10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:9e:c5:0e:98:8b:df:1d:84:db:f2:00:75: fd:44:06:77:48:1e:cc:7c:0d:30:65:0f:08:df:fa: 16:3d:a2:e7:7b:da:45:19:8e:8c:00:27:98:16:70: 55:b8:4b:8c:a6:62:1c:5e:89:a7:df:a7:e6:c8:8b: 95:7c:1a:84:79:20:17:55:56:0f:d7:80:ca:0a:02: 12:76:df:83:4d:1e:74:9d:a1:85:5d:16:a9:ca:8d: 3e:86:db:b7:61:98:0b:9d:86:f6:f3:14:84:4e:16: dc:5c:4b:c1:f7:96:84:26:4f:26:8c:48:ba:c3:5b: 33:12:35:23:c1:36:bf:62:55:ec:7d:7f:86:98:86: ba:81:9c:e5:15:5f:49:cf:72:a1:3f:1e:0c:6f:aa: 06:8a:77:0e:8f:15:1d:28:00:65:d8:af:54:cb:4e: 38:1e:e8:1a:f1:ef:4e:7e:e5:4b:e4:50:8a:10:6b: e0:b0:3f:7e:ff:cc:f6:fa:77:19:25:1b:35:b8:db: 5b:f5:3a:8f:f0:b7:15:a0:b4:9c:2b:c0:4f:33:33: be:33:d1:b4:91:ad:8b:5a:b9:df:26:b5:d7:54:e6: b7:09:85:f5:fc:22:44:fb:64:9a:61:89:81:84:9a: 44:9b:20:50:d6:d2:5e:49:15:34:2c:a1:32:37:c8: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6E:F5:3D:02:FE:BC:CD:FB:B6:8D:D5:C8:76:41:C3:57:36:6F:0F X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:dd:72:06:fb:8f:3f:5e:61:e2:16:73:a6:8b:6e:29:69:b4: 6f:7f:44:b1:a5:08:dd:75:00:e5:19:28:02:8d:6f:cb:09:e8: f6:62:03:28:ed:8e:f9:0a:27:7d:39:74:20:84:e7:d6:c3:87: bf:1e:8b:5b:5b:a9:71:54:77:92:02:e5:93:cb:eb:4b:67:22: 51:5f:c4:3a:4a:ff:d6:7f:ae:de:2d:fd:b0:fe:97:ed:90:e1: e1:e4:03:b7:9f:1b:5d:e3:1d:7e:29:d1:f0:7e:39:ea:05:78: bf:f7:64:e1:45:b8:5b:fe:0c:97:00:cf:9d:a4:5c:6a:e7:0f: 0d:02:64:a6:a2:ea:23:74:26:f6:c1:9a:c5:51:3f:66:f9:62: f1:89:02:8b:01:96:82:44:88:a4:88:54:41:f8:3e:8a:88:26: b7:04:db:10:76:52:a1:15:bb:71:b8:75:10:26:8a:55:5b:82: a4:c8:ed:8f:b5:3e:8c:9a:08:cf:19:d7:7a:62:bb:a8:eb:d6: ff:8c:b4:ea:c3:12:c9:ea:fb:8e:00:f4:d8:8b:50:3f:48:0e: 1d:29:36:4d:9b:97:d7:b4:7c:13:ad:a5:53:58:39:63:b2:d8: ae:89:97:e6:20:01:13:06:00:f7:71:be:dd:bf:c3:a1:9c:9e: c9:8f:f1:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwNzE4MjA0NDM1WhcNMjUwNzI1MjA0NDM1WjAYMRYwFAYD VQQDEw02ODdhYjIzMy1kMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuduexQ6Yi98dhNvyAHX9RAZ3SB7MfA0wZQ8I3/oWPaLne9pFGY6MACeYFnBV uEuMpmIcXomn36fmyIuVfBqEeSAXVVYP14DKCgISdt+DTR50naGFXRapyo0+htu3 YZgLnYb28xSEThbcXEvB95aEJk8mjEi6w1szEjUjwTa/YlXsfX+GmIa6gZzlFV9J z3KhPx4Mb6oGincOjxUdKABl2K9Uy044Huga8e9OfuVL5FCKEGvgsD9+/8z2+ncZ JRs1uNtb9TqP8LcVoLScK8BPMzO+M9G0ka2LWrnfJrXXVOa3CYX1/CJE+2SaYYmB hJpEmyBQ1tJeSRU0LKEyN8gTgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5u9T0C /rzN+7aN1ch2QcNXNm8PMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn3XIG+48/XmHiFnOmi24pabRvf0SxpQjddQDlGSgCjW/LCej2YgMo 7Y75Cid9OXQghOfWw4e/HotbW6lxVHeSAuWTy+tLZyJRX8Q6Sv/Wf67eLf2w/pft kOHh5AO3nxtd4x1+KdHwfjnqBXi/92ThRbhb/gyXAM+dpFxq5w8NAmSmouojdCb2 wZrFUT9m+WLxiQKLAZaCRIikiFRB+D6KiCa3BNsQdlKhFbtxuHUQJopVW4KkyO2P tT6MmgjPGdd6Yruo69b/jLTqwxLJ6vuOAPTYi1A/SA4dKTZNm5fXtHwTraVTWDlj stiuiZfmIAETBgD3cb7dv8OhnJ7Jj/Hy -----END CERTIFICATE-----Generated at Sun Jul 20 13:59:18 2025 by rpki-client