$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: 6zEu/PCI9OngHEOX/MYSd/Fruja320i9uJR2MQiSMck= Subject key identifier: 77:A4:78:2C:3F:19:FE:6E:D2:63:3F:26:7D:F2:CF:6F:80:28:54:72 Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0C5D Signing time: Fri 18 Jul 2025 18:31:22 +0000 Manifest this update: Fri 18 Jul 2025 18:31:21 +0000 Manifest next update: Fri 25 Jul 2025 18:31:21 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: 5/NssY3PPj+8g29UfIOEBICR3ivZM+BGmhP3vLUXr2o=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: ++efN2YnvlpaiN/cGnRcdVoz/L09sx0IMn5rgvBIJi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02, serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Validity Not Before: Jul 18 18:31:21 2025 GMT Not After : Jul 25 18:31:21 2025 GMT Subject: CN=687a92f9-aad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:e6:74:64:b7:59:7f:ac:52:02:3a:a6:3f: ed:2a:23:83:ec:d2:e6:ba:7d:82:73:c1:0e:61:f6: e6:96:0b:0c:5c:14:d5:1d:75:0b:54:07:61:55:a8: 6c:7e:b0:f2:5d:99:cb:5f:e9:9c:96:ac:93:35:c5: 17:9d:43:c8:bb:c4:0c:38:9f:e4:01:7b:c4:7b:c1: 45:91:07:5c:f0:f7:c8:d4:77:3f:59:a1:04:9b:d8: 2a:24:ae:df:42:95:bd:82:c1:62:8f:ac:f8:02:81: 51:a0:98:8f:5a:5b:33:66:07:fb:bc:38:37:83:85: 82:8a:4a:de:ac:96:fc:6d:ea:11:bc:3a:94:1a:7f: 8b:44:85:83:84:74:e6:1c:e9:ec:a2:60:92:90:e2: 3f:a3:34:c2:50:91:d3:49:3a:df:e5:ee:39:40:1e: a5:d4:19:79:9a:c3:57:06:73:77:cc:bc:76:bb:b4: f0:ae:d3:0a:57:3b:7c:80:8f:fd:c7:a1:08:08:cd: 36:16:48:c6:a8:ab:3b:e0:1e:45:94:69:43:9e:a8: 80:55:d5:a8:2c:ab:24:fa:66:34:61:a2:0c:50:41: 43:ba:1e:be:95:a0:15:16:1c:00:d7:3b:67:78:aa: 35:07:b6:bc:b6:de:f0:bb:e8:2c:a6:4c:8e:22:06: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A4:78:2C:3F:19:FE:6E:D2:63:3F:26:7D:F2:CF:6F:80:28:54:72 X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:59:9e:23:ef:04:7c:f2:44:6a:4d:cc:9e:0c:8b:75:1c:43: b8:93:0e:04:41:3b:da:8c:ae:e3:da:e8:cd:7b:68:a5:73:d9: b1:89:52:d9:7e:83:f7:63:f1:a5:e4:db:23:63:8c:6d:bb:e8: 7b:79:b6:8e:b8:b6:88:5d:c3:7e:d2:ba:b2:6a:c8:8a:b5:81: 6c:ae:9e:0d:ae:32:a3:90:fa:a8:db:39:3d:92:b9:08:31:78: d8:d2:79:22:99:dc:e9:04:03:7c:0f:87:a0:40:39:34:06:41: 4c:ee:f7:3e:4f:94:eb:bc:7a:ad:9c:d3:14:7c:2d:ad:d5:7d: 4f:32:f2:dd:d5:7f:5d:d7:0d:10:66:16:e5:24:0b:06:d0:b9: 1b:c4:2f:f9:0e:b7:90:4f:92:fc:dc:af:de:37:f1:37:c1:8e: 60:ee:c0:7a:f7:f4:41:a9:65:a6:66:96:6e:b1:d1:5a:a0:af: f1:ef:ea:e0:03:8c:a3:49:bd:aa:f2:78:84:04:bb:2c:09:87: 03:28:ae:fe:cd:a8:be:cd:d8:80:d5:b6:e0:1d:30:a2:9c:b0: 20:c1:db:ee:72:7f:0b:b5:f0:f1:0c:98:b2:d4:40:92:cb:c7: 81:d4:a6:bf:d0:29:47:89:91:fe:f0:29:36:a5:ef:89:50:7d: c5:b8:26:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjUwNzE4MTgzMTIxWhcNMjUwNzI1MTgzMTIxWjAYMRYwFAYD VQQDEw02ODdhOTJmOS1hYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp33mdGS3WX+sUgI6pj/tKiOD7NLmun2Cc8EOYfbmlgsMXBTVHXULVAdhVahs frDyXZnLX+mclqyTNcUXnUPIu8QMOJ/kAXvEe8FFkQdc8PfI1Hc/WaEEm9gqJK7f QpW9gsFij6z4AoFRoJiPWlszZgf7vDg3g4WCikrerJb8beoRvDqUGn+LRIWDhHTm HOnsomCSkOI/ozTCUJHTSTrf5e45QB6l1Bl5msNXBnN3zLx2u7TwrtMKVzt8gI/9 x6EICM02FkjGqKs74B5FlGlDnqiAVdWoLKsk+mY0YaIMUEFDuh6+laAVFhwA1ztn eKo1B7a8tt7wu+gspkyOIgb/awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHekeCw/ Gf5u0mM/Jn3yz2+AKFRyMB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCWZ4j7wR88kRqTcyeDIt1HEO4kw4EQTvajK7j2ujNe2ilc9mxiVLZ foP3Y/Gl5NsjY4xtu+h7ebaOuLaIXcN+0rqyasiKtYFsrp4NrjKjkPqo2zk9krkI MXjY0nkimdzpBAN8D4egQDk0BkFM7vc+T5TrvHqtnNMUfC2t1X1PMvLd1X9d1w0Q ZhblJAsG0LkbxC/5DreQT5L83K/eN/E3wY5g7sB69/RBqWWmZpZusdFaoK/x7+rg A4yjSb2q8niEBLssCYcDKK7+zai+zdiA1bbgHTCinLAgwdvucn8LtfDxDJiy1ECS y8eB1Ka/0ClHiZH+8Ck2pe+JUH3FuCY8 -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:19 2025 by rpki-client