$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json) Hash identifier: EoteulJnZVlGir508YLigY6JtXHyKu+a2oFc6zysIlE= Subject key identifier: B6:F8:BA:FD:E6:16:FC:AD:15:A5:5C:46:A9:0B:ED:AB:9D:62:B2:8D Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft Manifest number: 0677 Signing time: Mon 21 Jul 2025 00:27:51 +0000 Manifest this update: Mon 21 Jul 2025 00:27:50 +0000 Manifest next update: Mon 28 Jul 2025 00:27:50 +0000 Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: JqRUZdMmqpimf7h4IPExgSKzv5snBpGUomvboUNpj48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Validity Not Before: Jul 21 00:27:50 2025 GMT Not After : Jul 28 00:27:50 2025 GMT Subject: CN=687d8986-5ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c0:e8:4a:69:c1:90:4f:02:74:18:31:6f:7d: 32:95:0b:69:f7:2e:ac:d2:8a:cb:93:84:13:ac:ed: 5a:bf:09:62:46:bc:bb:4b:cc:42:12:56:f6:45:f8: 18:ee:03:3c:ab:19:d7:91:96:04:a6:76:04:97:23: 3d:dc:31:ec:13:32:cc:b9:2c:91:1b:75:34:1d:13: e6:17:28:47:d3:79:98:f0:75:77:b7:ed:b2:fc:77: 6d:50:33:d5:22:05:54:54:6f:6a:48:57:a9:29:ff: 8a:d4:f7:16:b1:d0:86:04:19:68:c2:19:3c:86:1b: 37:01:b6:8f:52:30:fc:c0:0d:47:38:98:ce:77:99: 22:29:db:7c:47:48:ad:20:30:5b:7c:25:08:37:8b: ad:49:be:2c:fa:39:0a:02:db:2a:57:87:fd:15:14: c3:d4:ad:02:49:7f:5d:f7:b7:2c:8b:e3:88:d3:dc: df:59:9b:7d:dc:d3:b5:4a:6c:3b:e7:64:2e:8e:a3: fa:74:eb:c5:f7:6c:6a:8a:c4:bd:b3:a4:34:a7:13: 83:be:3f:fc:03:af:52:37:83:d6:4f:d4:16:5c:a2: 37:94:33:7f:eb:43:19:35:85:51:35:92:ee:9b:b8: 48:eb:89:35:4d:18:62:1e:69:24:40:47:fc:20:3d: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F8:BA:FD:E6:16:FC:AD:15:A5:5C:46:A9:0B:ED:AB:9D:62:B2:8D X509v3 Authority Key Identifier: keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:06:8b:ba:0c:e4:55:e1:3e:86:79:03:8a:ba:e8:f3:07:5a: 4d:f8:99:5c:4f:18:ce:a7:9d:4c:15:22:1c:00:0d:56:eb:bc: 2b:f6:3a:7b:4b:18:52:4e:b3:72:32:c4:ae:4a:8f:50:92:c3: 65:b8:a5:be:35:39:ba:33:eb:ae:4a:90:ca:42:8b:eb:95:0c: 4e:9b:9b:b0:91:49:bb:13:af:aa:77:8f:7d:b8:35:82:f6:fc: ad:bd:35:da:ed:63:5e:7d:3e:ce:9f:b2:0a:05:41:7e:a3:ae: 92:e4:7c:3c:10:0f:5e:01:33:0d:2c:62:b4:bc:95:ef:f2:a8: 6e:57:12:b4:81:95:2f:d5:f3:86:d2:81:c8:f3:03:7d:93:24: ec:8e:74:4f:4d:32:c9:bd:e0:2a:a7:cd:4b:af:f6:38:4e:fa: 32:29:5f:f9:d0:3c:ea:72:51:e6:38:cb:e9:62:bc:a4:e5:91: 96:60:1e:e1:7f:ab:8b:c7:06:0c:a9:90:47:8e:27:9f:49:c0: 86:c1:b1:21:f9:e8:f9:8d:37:29:99:e7:6a:e6:6c:d8:8b:75: 16:d3:99:77:3c:e2:c2:ad:e6:44:ef:8a:7a:63:24:b1:fe:27: a6:ef:85:c7:19:95:18:d7:3c:c7:b3:ea:af:0b:b8:48:c9:41: b4:cc:70:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB RTBCMzVBMTgwHhcNMjUwNzIxMDAyNzUwWhcNMjUwNzI4MDAyNzUwWjAYMRYwFAYD VQQDEw02ODdkODk4Ni01ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7sDoSmnBkE8CdBgxb30ylQtp9y6s0orLk4QTrO1avwliRry7S8xCElb2RfgY 7gM8qxnXkZYEpnYElyM93DHsEzLMuSyRG3U0HRPmFyhH03mY8HV3t+2y/HdtUDPV IgVUVG9qSFepKf+K1PcWsdCGBBlowhk8hhs3AbaPUjD8wA1HOJjOd5kiKdt8R0it IDBbfCUIN4utSb4s+jkKAtsqV4f9FRTD1K0CSX9d97csi+OI09zfWZt93NO1Smw7 52QujqP6dOvF92xqisS9s6Q0pxODvj/8A69SN4PWT9QWXKI3lDN/60MZNYVRNZLu m7hI64k1TRhiHmkkQEf8ID3vYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb4uv3m FvytFaVcRqkL7audYrKNMB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf b2JZM0MzUlE4by11Q3pXaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlBou6DORV4T6GeQOKuujzB1pN+JlcTxjOp51MFSIcAA1W67wr9jp7 SxhSTrNyMsSuSo9QksNluKW+NTm6M+uuSpDKQovrlQxOm5uwkUm7E6+qd499uDWC 9vytvTXa7WNefT7On7IKBUF+o66S5Hw8EA9eATMNLGK0vJXv8qhuVxK0gZUv1fOG 0oHI8wN9kyTsjnRPTTLJveAqp81Lr/Y4TvoyKV/50DzqclHmOMvpYryk5ZGWYB7h f6uLxwYMqZBHjiefScCGwbEh+ej5jTcpmedq5mzYi3UW05l3POLCreZE74p6YySx /iem74XHGZUY1zzHs+qvC7hIyUG0zHBy -----END CERTIFICATE-----Generated at Mon Jul 21 12:29:07 2025 by rpki-client