$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: 62rYPkJZugXjC4l99+bV45pdknWO0ZLGvgqwnMLqA60= Subject key identifier: 93:E9:B0:EA:22:34:22:1C:72:81:D4:E3:BF:A8:AC:8B:C4:CC:38:6F Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 099F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 0999 Signing time: Fri 18 Jul 2025 20:17:29 +0000 Manifest this update: Fri 18 Jul 2025 20:17:28 +0000 Manifest next update: Fri 25 Jul 2025 20:17:28 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: RU7Wik0OcT17kAC8K7xyBt9HTmPNRwCiob3l6zc6Vns=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: LjFZkARdigofgjMJFtc/qBM/m3OntU9kJkRF62lZTLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2463 (0x99f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Jul 18 20:17:28 2025 GMT Not After : Jul 25 20:17:28 2025 GMT Subject: CN=687aabd8-3f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:6e:e3:f6:90:e4:73:6b:f2:36:59:be:70: 21:66:29:6b:12:b3:37:1e:a9:17:86:3c:31:37:4f: 26:b9:89:80:24:fa:f1:c4:ae:0b:4e:95:f0:b6:f9: 00:d9:23:2f:e7:c9:c7:ee:63:6e:fb:a7:ea:9a:44: 2c:93:e2:a0:6b:08:4b:18:47:aa:41:24:a4:48:8f: c5:56:ec:89:44:b2:34:5c:76:ba:f6:6a:85:60:91: 1d:13:7d:cd:2d:1b:65:0b:d6:a7:a0:03:95:38:f4: 2b:f4:df:b2:d0:e4:2b:d0:b3:fc:48:34:99:e9:a5: 85:9a:c4:9a:37:29:49:28:d0:5a:49:59:19:e2:d8: ed:1b:9b:07:d5:b0:24:37:fb:40:ff:27:52:80:7c: ed:d6:fe:db:d7:5c:0a:7b:20:b1:56:26:d3:bb:71: c1:51:7f:3d:0e:2b:1b:ff:48:63:d8:90:a7:56:8f: 34:f3:8a:c9:55:fd:be:d8:8e:63:7e:3b:6f:1f:25: bf:c0:35:51:5c:80:ed:a4:5b:e0:e2:5d:28:5f:51: 03:ff:01:16:a9:86:22:7b:34:2b:3c:85:4d:92:1a: 7e:59:24:f3:bf:57:86:00:e8:21:42:1f:fe:a0:c7: 02:45:49:8e:14:66:ed:b6:aa:96:ae:af:ea:6a:6f: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E9:B0:EA:22:34:22:1C:72:81:D4:E3:BF:A8:AC:8B:C4:CC:38:6F X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:29:58:4e:28:80:46:8e:23:a3:25:ab:6f:c5:9b:fc:15:36: e7:02:ae:42:cc:8f:3f:2b:8a:4e:ec:e7:97:0e:0a:36:3f:21: 68:11:f2:12:d0:f5:3b:0e:0f:04:5e:be:da:e5:47:23:c0:a1: 74:c0:46:18:09:98:b6:d0:84:95:a7:2b:8d:de:eb:81:7a:1a: cc:19:af:59:88:18:53:02:c8:a7:6e:37:d9:95:08:f6:e5:a7: 2c:30:fd:b4:b7:ae:e1:ca:8f:4d:43:77:53:d0:ac:dc:0a:a8: 3d:b0:c8:71:04:0e:93:e5:47:41:b7:10:5b:4a:2b:78:2f:39: e1:3b:33:79:41:06:56:72:99:f1:e6:6a:4a:7f:2c:de:e5:dc: 0b:a1:43:e8:72:f2:ee:c2:47:23:fc:58:fe:4d:ba:c9:3c:dd: 12:84:37:bd:18:0a:1d:1c:73:4b:a6:f8:21:77:f4:2d:b3:14: 8c:81:c3:af:53:7d:8a:1c:05:be:85:d2:27:59:5c:27:bb:4f: 8a:64:ac:9e:b8:0f:66:d6:aa:b6:79:52:37:dc:de:8f:60:b4: f5:fa:e9:27:31:e1:7b:b9:a6:95:7f:60:d9:5b:ff:4b:d0:9c: 40:17:0d:9b:85:f9:a7:69:ae:a6:2a:97:6b:45:cb:51:92:51: cc:66:cb:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjUwNzE4MjAxNzI4WhcNMjUwNzI1MjAxNzI4WjAYMRYwFAYD VQQDEw02ODdhYWJkOC0zZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnJu4/aQ5HNr8jZZvnAhZilrErM3HqkXhjwxN08muYmAJPrxxK4LTpXwtvkA 2SMv58nH7mNu+6fqmkQsk+KgawhLGEeqQSSkSI/FVuyJRLI0XHa69mqFYJEdE33N LRtlC9anoAOVOPQr9N+y0OQr0LP8SDSZ6aWFmsSaNylJKNBaSVkZ4tjtG5sH1bAk N/tA/ydSgHzt1v7b11wKeyCxVibTu3HBUX89Disb/0hj2JCnVo8084rJVf2+2I5j fjtvHyW/wDVRXIDtpFvg4l0oX1ED/wEWqYYiezQrPIVNkhp+WSTzv1eGAOghQh/+ oMcCRUmOFGbttqqWrq/qam/6gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPpsOoi NCIccoHU47+orIvEzDhvMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbKVhOKIBGjiOjJatvxZv8FTbnAq5CzI8/K4pO7OeXDgo2PyFoEfIS 0PU7Dg8EXr7a5UcjwKF0wEYYCZi20ISVpyuN3uuBehrMGa9ZiBhTAsinbjfZlQj2 5acsMP20t67hyo9NQ3dT0KzcCqg9sMhxBA6T5UdBtxBbSit4LznhOzN5QQZWcpnx 5mpKfyze5dwLoUPocvLuwkcj/Fj+TbrJPN0ShDe9GAodHHNLpvghd/QtsxSMgcOv U32KHAW+hdInWVwnu0+KZKyeuA9m1qq2eVI33N6PYLT1+uknMeF7uaaVf2DZW/9L 0JxAFw2bhfmnaa6mKpdrRctRklHMZss2 -----END CERTIFICATE-----Generated at Sun Jul 20 15:17:06 2025 by rpki-client