$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: bVAtOZqi/Bib0Nf8JDUeLlFuM/bYngnW67qgfduy8Dw= Subject key identifier: 8E:21:37:5B:E7:D1:DF:90:A9:5E:22:20:6B:39:71:6E:52:99:C8:E9 Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 0460 Signing time: Mon 21 Jul 2025 00:22:10 +0000 Manifest this update: Mon 21 Jul 2025 00:22:10 +0000 Manifest next update: Mon 28 Jul 2025 00:22:10 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: Xq1ziLzpa82RYJ4anLrfb8YUDE6m17j59gmCZUwI9og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Validity Not Before: Jul 21 00:22:10 2025 GMT Not After : Jul 28 00:22:10 2025 GMT Subject: CN=687d8832-2774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:4b:93:4c:ec:9e:c0:e5:9a:c5:73:f2:b2: 9c:c7:d1:c6:56:fa:fc:a7:00:e6:18:91:fe:54:f4: cd:66:4e:51:d8:0b:43:a8:1f:bd:02:d2:eb:f1:02: 09:17:d9:6f:a5:1d:29:a3:9d:a7:da:bf:f5:94:e1: 18:6a:8e:cb:4f:31:60:55:45:8f:1a:af:db:45:0b: 41:37:3c:d8:8b:67:bf:79:b7:8f:d7:c7:3f:2b:90: 4c:e2:0d:ad:8a:b9:cf:c6:78:5b:1e:ad:f4:81:20: 1c:1b:4c:9e:91:15:80:29:b3:05:19:2e:10:5c:37: cc:a1:51:cf:f1:38:45:20:60:51:67:aa:ce:6f:29: 54:7b:3a:74:eb:9d:2b:ee:6b:b7:85:11:af:e2:c1: 9e:13:47:a9:5a:89:8b:8b:43:bf:d3:a7:b1:45:d1: 32:1a:f1:bb:b7:0c:0d:a2:69:1b:98:f3:52:ff:d9: ce:76:0f:1d:e5:5b:3d:f7:bc:e0:43:ab:36:aa:11: 8f:59:4f:42:15:c9:02:66:fb:ec:13:aa:49:5f:5b: 8b:00:da:4c:d4:4b:5a:c4:7c:3f:1e:0d:aa:ca:dd: f8:bd:26:24:14:77:2c:25:9c:ed:d7:af:04:89:2d: ce:bf:aa:77:ca:53:5a:72:e1:4d:ff:0a:d5:8f:09: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:21:37:5B:E7:D1:DF:90:A9:5E:22:20:6B:39:71:6E:52:99:C8:E9 X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ae:8a:5b:68:9f:ca:7c:0e:c3:21:6b:cc:84:88:a2:d9:e9: 58:44:bf:06:73:df:ed:03:52:d5:22:92:a2:29:53:17:37:e8: 20:d2:9b:b3:7d:49:68:55:27:85:a9:8b:b4:10:23:2b:02:54: 63:94:dc:b7:27:d6:24:9d:3f:fa:8d:31:6e:b7:4d:64:d5:19: 7a:c5:8c:8d:f7:ce:95:3d:f8:e5:3d:9d:0f:84:2b:c5:8e:d3: ed:47:a9:40:19:80:31:32:e0:19:93:ea:29:49:30:1b:25:3d: 5b:50:4d:91:f3:e3:5f:0c:b3:c3:d9:40:5b:33:c3:ad:01:90: d9:38:56:eb:69:cd:f9:de:2b:c5:e5:a5:1f:c9:33:6d:f1:92: 53:37:e6:5f:a0:d4:93:01:4a:ba:9e:23:e5:3d:c6:73:9e:87: 1e:61:d3:c4:60:91:cf:eb:32:2b:cd:b0:81:d3:db:95:4d:72: 3d:20:92:10:4d:cb:16:52:a0:a3:7e:84:27:0a:a8:74:72:c0: 58:32:bf:72:60:a6:2c:9b:f2:97:8a:28:2d:9b:4e:47:56:3f: ab:d1:43:14:83:4d:c2:d4:b1:59:de:bc:b1:c7:ee:5c:b3:2e: 4b:b6:ba:86:5f:4a:76:eb:71:14:9f:3c:6d:a0:2c:ed:2d:ef: 15:fa:eb:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjUwNzIxMDAyMjEwWhcNMjUwNzI4MDAyMjEwWjAYMRYwFAYD VQQDEw02ODdkODgzMi0yNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcdLk0zsnsDlmsVz8rKcx9HGVvr8pwDmGJH+VPTNZk5R2AtDqB+9AtLr8QIJ F9lvpR0po52n2r/1lOEYao7LTzFgVUWPGq/bRQtBNzzYi2e/ebeP18c/K5BM4g2t irnPxnhbHq30gSAcG0yekRWAKbMFGS4QXDfMoVHP8ThFIGBRZ6rObylUezp0650r 7mu3hRGv4sGeE0epWomLi0O/06exRdEyGvG7twwNomkbmPNS/9nOdg8d5Vs997zg Q6s2qhGPWU9CFckCZvvsE6pJX1uLANpM1EtaxHw/Hg2qyt34vSYkFHcsJZzt168E iS3Ov6p3ylNacuFN/wrVjwkUvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4hN1vn 0d+QqV4iIGs5cW5SmcjpMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcropbaJ/KfA7DIWvMhIii2elYRL8Gc9/tA1LVIpKiKVMXN+gg0puz fUloVSeFqYu0ECMrAlRjlNy3J9YknT/6jTFut01k1Rl6xYyN986VPfjlPZ0PhCvF jtPtR6lAGYAxMuAZk+opSTAbJT1bUE2R8+NfDLPD2UBbM8OtAZDZOFbrac353ivF 5aUfyTNt8ZJTN+ZfoNSTAUq6niPlPcZznoceYdPEYJHP6zIrzbCB09uVTXI9IJIQ TcsWUqCjfoQnCqh0csBYMr9yYKYsm/KXiigtm05HVj+r0UMUg03C1LFZ3ryxx+5c sy5LtrqGX0p263EUnzxtoCztLe8V+uua -----END CERTIFICATE-----Generated at Mon Jul 21 08:09:18 2025 by rpki-client