$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json) Hash identifier: T/I0vonMXAnlYhFAAhF4bJSNSrPIIfPaxUNldUb4bE8= Subject key identifier: 7B:C9:77:5B:9C:6D:F6:55:89:FC:32:6E:02:2E:68:BE:4B:B6:4B:D5 Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft Manifest number: 0152 Signing time: Sat 19 Jul 2025 04:18:39 +0000 Manifest this update: Sat 19 Jul 2025 04:18:39 +0000 Manifest next update: Sat 26 Jul 2025 04:18:39 +0000 Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: vEfkl0CF58/9lqks5ELYNwJjJ97npBLSnEbWsMjCdhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Validity Not Before: Jul 19 04:18:39 2025 GMT Not After : Jul 26 04:18:39 2025 GMT Subject: CN=687b1c9f-29bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:60:63:d6:f9:2e:df:8f:75:fa:e3:a7:8c: b9:c3:50:c6:0a:81:06:84:a5:5a:9b:bc:f6:b9:25: 9a:32:29:d6:d3:e2:b3:9b:2d:54:ba:29:a8:1a:88: b1:aa:a4:34:13:2c:db:ca:51:09:c1:3c:a1:71:f2: 0d:a7:0b:23:a0:ec:42:70:e0:aa:ea:ef:21:23:be: c1:d4:ad:88:b3:de:b2:d0:f2:3f:9c:34:df:23:84: 03:5a:86:ee:ff:06:36:73:6d:5d:95:31:8b:76:86: aa:77:a8:28:f0:c8:d4:84:05:17:e5:0d:92:d5:84: 6c:e9:27:48:c8:15:cf:8e:d6:05:55:b9:d7:1a:c6: 67:97:36:08:44:68:f2:54:ed:fe:93:d0:bb:cd:2a: e5:b1:54:f5:bf:11:03:95:cf:f4:ba:09:11:ff:34: 05:de:f5:f2:b2:a8:98:6a:72:fb:94:17:fe:f6:55: 21:27:6c:f7:29:c3:56:5e:d4:a4:07:94:6e:fe:41: bb:80:65:8a:46:3d:09:ae:56:c8:84:ad:f0:d2:43: 41:02:23:e7:32:62:72:64:70:b3:37:54:e6:36:bd: 56:2a:7d:bb:5c:1e:1c:de:ee:8f:4f:fd:d4:bc:50: 87:99:08:29:6a:a8:33:3d:99:97:4a:c7:a1:73:a5: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C9:77:5B:9C:6D:F6:55:89:FC:32:6E:02:2E:68:BE:4B:B6:4B:D5 X509v3 Authority Key Identifier: keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e5:5d:29:aa:b0:70:26:b1:89:24:d1:c5:29:58:33:27:62: 50:1f:60:49:02:43:b9:e3:bc:4f:71:d4:a9:a2:24:91:d2:0b: fe:65:59:94:0f:22:3d:01:c3:11:fc:c9:8a:8b:9f:d8:fc:eb: 8e:39:e4:71:4e:f5:ea:e8:fc:39:3b:97:95:68:76:9a:6e:a2: 6b:88:d8:81:4b:d0:87:8c:e4:79:68:34:5a:ed:bc:ae:1b:b4: b1:c8:d2:35:35:91:43:5b:5a:a4:65:bb:74:c1:5c:a6:32:e4: 31:6d:5f:ef:72:ba:e5:a3:8b:2e:5c:41:f8:92:89:bc:a7:e4: d9:7f:d1:34:12:2c:b5:bc:ae:7b:57:b2:49:7a:e8:49:5a:d5: fe:c1:c8:74:e0:e1:1c:46:81:e5:2b:5d:89:24:f5:02:85:69: 8f:c8:05:42:57:39:04:3a:36:ed:1b:e1:a2:ea:69:a5:cf:fb: c9:a6:02:03:ab:88:52:0c:96:f0:f4:78:76:a2:40:4f:27:4d: e2:fd:d8:a9:c2:89:a3:08:3c:38:e1:54:97:b1:8d:5c:1c:4f: b5:b3:e6:ae:10:3e:15:05:53:18:6f:9c:7e:0f:2d:f7:49:c0: 3b:e3:10:2c:3c:7d:9a:9d:f0:46:ce:a8:20:2c:b5:3a:bf:47: 72:4b:57:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKEMwMEYwNUFFMEZBOUI2ODBBOTFCNTZGMEQzMjFDNTE4 OEMxRTcxMkMwHhcNMjUwNzE5MDQxODM5WhcNMjUwNzI2MDQxODM5WjAYMRYwFAYD VQQDEw02ODdiMWM5Zi0yOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDJgY9b5Lt+Pdfrjp4y5w1DGCoEGhKVam7z2uSWaMinW0+Kzmy1UuimoGoix qqQ0EyzbylEJwTyhcfINpwsjoOxCcOCq6u8hI77B1K2Is96y0PI/nDTfI4QDWobu /wY2c21dlTGLdoaqd6go8MjUhAUX5Q2S1YRs6SdIyBXPjtYFVbnXGsZnlzYIRGjy VO3+k9C7zSrlsVT1vxEDlc/0ugkR/zQF3vXysqiYanL7lBf+9lUhJ2z3KcNWXtSk B5Ru/kG7gGWKRj0JrlbIhK3w0kNBAiPnMmJyZHCzN1TmNr1WKn27XB4c3u6PT/3U vFCHmQgpaqgzPZmXSsehc6VfOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvJd1uc bfZVifwybgIuaL5LtkvVMB8GA1UdIwQYMBaAFMAPBa4PqbaAqRtW8NMhxRiMHnEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yRjJCM0YyMDVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRvQ3BHMWJ3MHlIRkdJd2Vj U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yRjJCM0YyMDVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRv Q3BHMWJ3MHlIRkdJd2VjU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF5V0pqrBwJrGJJNHFKVgzJ2JQH2BJAkO547xPcdSpoiSR0gv+ZVmU DyI9AcMR/MmKi5/Y/OuOOeRxTvXq6Pw5O5eVaHaabqJriNiBS9CHjOR5aDRa7byu G7SxyNI1NZFDW1qkZbt0wVymMuQxbV/vcrrlo4suXEH4kom8p+TZf9E0Eiy1vK57 V7JJeuhJWtX+wch04OEcRoHlK12JJPUChWmPyAVCVzkEOjbtG+Gi6mmlz/vJpgID q4hSDJbw9Hh2okBPJ03i/dipwomjCDw44VSXsY1cHE+1s+auED4VBVMYb5x+Dy33 ScA74xAsPH2anfBGzqggLLU6v0dyS1dZ -----END CERTIFICATE-----Generated at Sun Jul 20 07:34:14 2025 by rpki-client