$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json) Hash identifier: oL262vjbO2rZarMgDKJ6brIBRryhCpyGVdQk40nOc0Q= Subject key identifier: 7C:85:40:CB:FD:0A:22:18:B1:88:3D:3C:FE:62:FC:02:D2:F2:B1:1F Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft Manifest number: 01B2 Signing time: Sat 19 Jul 2025 03:21:08 +0000 Manifest this update: Sat 19 Jul 2025 03:21:07 +0000 Manifest next update: Sat 26 Jul 2025 03:21:07 +0000 Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: yX97o0nETYKgHLDT0NlC/T4XNHtHgGQ0aV+c8xzJ9Ac=) 2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: aeO1Mj/elW/xh7ym1J+KF848UMK5HdQa3I9hteU56q0=) 3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: pPZ9JIadC5wyaOareOX2satHOT6x5cmd8WRCUuxQZvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C20, serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Validity Not Before: Jul 19 03:21:07 2025 GMT Not After : Jul 26 03:21:07 2025 GMT Subject: CN=687b0f23-2afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:02:4f:6a:28:34:11:3e:b6:aa:eb:c1:95: 08:14:fa:c8:b4:90:86:d0:dc:07:a2:71:7c:7b:13: 12:f1:b1:c5:fe:27:8d:13:19:a0:aa:58:d0:18:69: 55:e8:0e:9e:82:e8:e1:aa:fb:15:3d:a6:2b:b2:51: de:18:43:6e:2c:08:76:e8:ca:58:8d:9d:20:73:cc: 53:ea:9b:d8:2a:1d:3d:86:17:4a:74:5a:8b:e6:23: ba:93:10:58:c0:8c:11:1f:a5:7f:19:8d:af:33:c0: 45:a0:a1:f1:5b:3d:a0:94:14:fe:e9:cb:e8:7f:9e: 74:3a:2e:ba:96:cd:a3:0e:00:61:f3:60:7d:69:8a: ac:8f:8f:3e:45:b6:ef:50:90:bf:1c:94:0a:1b:87: 26:29:28:b1:10:d2:1a:19:68:14:92:f8:a5:d5:41: 03:f5:10:96:1c:1e:01:56:c4:52:c5:f1:46:b6:2f: 79:03:bd:c5:50:ae:e0:ef:74:ca:dd:6b:a2:3c:91: 82:5d:df:5d:a3:58:58:ba:a9:16:65:24:d3:a7:8f: fe:60:52:71:75:20:77:e9:ed:1b:a5:98:f1:4d:31: 63:67:4c:f0:5a:a9:06:59:ef:d2:15:d7:ba:58:83: 30:a4:2d:17:50:d8:87:09:0c:e6:cc:ae:92:bd:5f: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:85:40:CB:FD:0A:22:18:B1:88:3D:3C:FE:62:FC:02:D2:F2:B1:1F X509v3 Authority Key Identifier: keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:24:2d:48:a2:d5:dd:81:2f:a4:5a:2d:b2:f8:55:54:67:5c: 14:1e:78:89:f5:80:1c:76:4b:da:3f:ed:c5:9b:bc:61:db:83: 48:c9:f0:9a:e7:f1:29:d7:aa:3d:cd:63:bc:9e:19:f2:3b:d3: e7:88:81:89:a8:a8:b6:25:79:62:b8:51:6b:03:16:a2:89:87: 51:b5:01:aa:63:2b:6f:3d:b8:cc:e5:58:84:1f:52:67:07:36: 21:d9:a5:d7:a4:c5:86:bd:48:8d:b2:21:a9:65:9e:ad:a2:c5: 4f:fe:35:66:88:72:57:31:6d:ad:18:bf:b9:07:22:9f:8f:ae: 08:68:03:a6:14:69:b1:85:cd:6d:38:d7:71:e8:96:66:9e:0a: ca:b7:52:fd:44:52:57:d1:ca:75:9c:20:0b:11:aa:3f:ac:4d: 21:3c:15:bc:a6:1d:f3:e2:85:02:d7:22:3c:ed:46:d1:33:1c: 70:a0:3b:41:46:15:d9:05:53:01:19:fe:91:cc:45:2a:c2:d9: 4c:29:4a:8b:70:1a:dc:85:de:51:1b:0d:86:84:77:21:0e:34: 27:a6:67:3c:12:5f:73:fc:79:62:bd:00:79:bc:0b:69:5e:40: 0c:3d:6b:1b:90:b0:6d:4c:b8:b6:c3:95:c5:e8:ad:b4:eb:d8: 78:b2:98:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy OUYzQzg4NUIwHhcNMjUwNzE5MDMyMTA3WhcNMjUwNzI2MDMyMTA3WjAYMRYwFAYD VQQDEw02ODdiMGYyMy0yYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuACT2ooNBE+tqrrwZUIFPrItJCG0NwHonF8exMS8bHF/ieNExmgqljQGGlV 6A6egujhqvsVPaYrslHeGENuLAh26MpYjZ0gc8xT6pvYKh09hhdKdFqL5iO6kxBY wIwRH6V/GY2vM8BFoKHxWz2glBT+6cvof550Oi66ls2jDgBh82B9aYqsj48+Rbbv UJC/HJQKG4cmKSixENIaGWgUkvil1UED9RCWHB4BVsRSxfFGti95A73FUK7g73TK 3WuiPJGCXd9do1hYuqkWZSTTp4/+YFJxdSB36e0bpZjxTTFjZ0zwWqkGWe/SFde6 WIMwpC0XUNiHCQzmzK6SvV/urwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyFQMv9 CiIYsYg9PP5i/ALS8rEfMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEMyMC9BNUE0Q0QxMENDNzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlm VVJHdDc2d1plWndwODhpRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3JC1IotXdgS+kWi2y+FVUZ1wUHniJ9YAcdkvaP+3Fm7xh24NIyfCa 5/Ep16o9zWO8nhnyO9PniIGJqKi2JXliuFFrAxaiiYdRtQGqYytvPbjM5ViEH1Jn BzYh2aXXpMWGvUiNsiGpZZ6tosVP/jVmiHJXMW2tGL+5ByKfj64IaAOmFGmxhc1t ONdx6JZmngrKt1L9RFJX0cp1nCALEao/rE0hPBW8ph3z4oUC1yI87UbRMxxwoDtB RhXZBVMBGf6RzEUqwtlMKUqLcBrchd5RGw2GhHchDjQnpmc8El9z/HlivQB5vAtp XkAMPWsbkLBtTLi2w5XF6K2069h4spiE -----END CERTIFICATE-----Generated at Sun Jul 20 10:04:17 2025 by rpki-client