$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: PDcu9IfzmhvNN4q7BZ59nT3K5Nq8KFG8FTzoJzeMXI8= Subject key identifier: 95:41:90:FC:A6:23:50:03:FF:67:D0:C7:76:F6:11:C8:D6:DC:AF:34 Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 054B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0543 Signing time: Sat 26 Jul 2025 23:46:05 +0000 Manifest this update: Sat 26 Jul 2025 23:46:05 +0000 Manifest next update: Sat 02 Aug 2025 23:46:05 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: ocJk53AcOoKaAZMLnWEc1oFuF2L2ZxVVP6BnbpDKhgc=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: aXSQnMlRqYHjlA+sWyHQ/h8SKDapqi9yLmH+QCm7j5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 23:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1355 (0x54b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Jul 26 23:46:05 2025 GMT Not After : Aug 2 23:46:05 2025 GMT Subject: CN=688568bd-77f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:15:6f:98:14:b0:96:b3:7c:56:f5:4c:e3: ac:c3:0f:59:aa:07:fd:91:af:f8:32:ef:0c:3d:57: 2a:db:51:95:46:3a:45:77:de:e0:d2:a1:46:86:bb: a4:ee:f0:15:ae:7c:a6:83:fb:82:be:81:c8:a9:49: 9e:05:ec:ac:26:50:c3:19:c1:82:45:90:b7:64:01: 30:51:4b:2e:75:d6:8a:f0:9f:4e:55:ec:dc:72:47: ea:1a:5a:01:60:39:db:51:63:7a:aa:13:e0:30:ed: 2b:9b:63:9a:28:a1:f7:fb:11:94:e6:8d:0c:38:ed: 95:a5:7f:b3:5e:cb:3a:32:6d:fe:13:f8:8a:cb:06: d2:d4:f3:5d:93:9b:48:16:9f:30:06:31:24:f6:67: 22:27:d9:07:1d:02:de:d6:b2:a1:6e:0c:76:f8:30: f0:d5:77:66:79:28:41:9b:ee:38:7f:92:dd:e3:2a: 6a:a9:87:31:b2:db:9f:a1:e2:5e:d4:70:3d:1e:df: 42:77:c2:72:7d:98:88:63:9b:c1:dc:e8:99:ba:ab: 40:b9:d9:34:54:9a:18:05:ad:a1:e2:95:ef:7f:47: 42:bb:74:2b:cd:92:76:22:44:02:6b:a9:23:ab:07: 6b:cd:56:18:00:e4:71:03:05:5f:f1:85:96:86:ff: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:41:90:FC:A6:23:50:03:FF:67:D0:C7:76:F6:11:C8:D6:DC:AF:34 X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a2:fd:53:d4:de:76:0e:9e:8e:b8:99:92:7b:35:07:87:76: 1b:54:9c:9e:97:46:95:b1:ab:a7:b8:e9:a9:0c:21:b8:b9:81: 2b:75:33:c4:bb:3b:4b:a0:9c:e1:2a:d6:6d:f5:74:50:1c:fd: 0f:1a:0a:ce:9a:f5:0a:c7:d6:e9:7f:48:14:0c:2f:87:df:30: b2:c3:8d:a2:ad:21:05:9a:be:aa:63:68:15:fd:bd:07:bc:7c: b2:5f:b2:33:a8:12:9d:f4:a5:b2:c9:81:ec:8e:0c:b4:fa:62: a2:a9:17:f8:c7:c7:07:29:af:91:9d:bb:b0:d6:30:b0:e4:f6: be:9e:4f:cb:f0:fe:ae:de:11:71:11:75:a6:84:ea:91:74:26: 92:4a:69:57:17:17:9a:63:d2:c3:de:04:6b:60:d4:52:2e:db: 5e:0e:f6:8b:ce:c8:32:93:2b:18:4b:38:64:a5:12:8b:e6:3d: 88:b9:de:3d:0d:11:bc:1a:53:29:0c:90:92:40:6b:78:87:fb: d0:5f:29:28:10:9c:3b:f6:07:38:9f:22:34:f6:14:1b:92:43: 37:75:ef:26:73:c3:58:06:3a:b7:65:1c:a0:a6:bb:e9:99:ef: f5:b4:98:ed:2f:84:a8:a9:cb:e3:8a:b3:4a:a8:ec:ca:bb:22: 59:f9:e5:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUwNzI2MjM0NjA1WhcNMjUwODAyMjM0NjA1WjAYMRYwFAYD VQQDEw02ODg1NjhiZC03N2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw70Vb5gUsJazfFb1TOOsww9Zqgf9ka/4Mu8MPVcq21GVRjpFd97g0qFGhruk 7vAVrnymg/uCvoHIqUmeBeysJlDDGcGCRZC3ZAEwUUsuddaK8J9OVezcckfqGloB YDnbUWN6qhPgMO0rm2OaKKH3+xGU5o0MOO2VpX+zXss6Mm3+E/iKywbS1PNdk5tI Fp8wBjEk9mciJ9kHHQLe1rKhbgx2+DDw1XdmeShBm+44f5Ld4ypqqYcxstufoeJe 1HA9Ht9Cd8JyfZiIY5vB3OiZuqtAudk0VJoYBa2h4pXvf0dCu3QrzZJ2IkQCa6kj qwdrzVYYAORxAwVf8YWWhv9SNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVBkPym I1AD/2fQx3b2EcjW3K80MB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvov1T1N52Dp6OuJmSezUHh3YbVJyel0aVsaunuOmpDCG4uYErdTPE uztLoJzhKtZt9XRQHP0PGgrOmvUKx9bpf0gUDC+H3zCyw42irSEFmr6qY2gV/b0H vHyyX7IzqBKd9KWyyYHsjgy0+mKiqRf4x8cHKa+Rnbuw1jCw5Pa+nk/L8P6u3hFx EXWmhOqRdCaSSmlXFxeaY9LD3gRrYNRSLtteDvaLzsgykysYSzhkpRKL5j2Iud49 DRG8GlMpDJCSQGt4h/vQXykoEJw79gc4nyI09hQbkkM3de8mc8NYBjq3ZRygprvp me/1tJjtL4SoqcvjirNKqOzKuyJZ+eXY -----END CERTIFICATE-----Generated at Sun Jul 27 12:24:30 2025 by rpki-client