$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: pQXC/NRYAWIaKPuIksgcaqevZZ42UZ6lgk7E6Z61Fi0= Subject key identifier: 77:96:80:DB:D2:B7:C6:BB:44:C8:F2:33:FD:81:03:6C:05:EF:5B:9B Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0E1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0E11 Signing time: Fri 18 Jul 2025 17:59:33 +0000 Manifest this update: Fri 18 Jul 2025 17:59:32 +0000 Manifest next update: Fri 25 Jul 2025 17:59:32 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: LWBQ/oEpw6zW5jsbKRdnHejsDIIN9+Qx4Bq9WBA722Y=) 2: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: aiQgD71KIHf3EulghLpV7U2on7ornTtSdk1QL8F6cWM=) 3: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: ueAPuc77rri4PQKwtmMLByRiVZjsosToomd9waxslTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3615 (0xe1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Jul 18 17:59:32 2025 GMT Not After : Jul 25 17:59:32 2025 GMT Subject: CN=687a8b84-de74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d2:f3:79:f1:b3:c4:e4:95:47:b0:dc:04:47: ab:2a:e8:10:19:52:f7:46:cb:b7:80:0b:44:a6:a3: 30:48:4f:7c:23:4a:e2:14:9b:4a:19:81:05:07:f8: 32:76:36:37:23:96:bd:55:e1:69:4f:15:d3:2c:bf: 84:b4:65:29:62:41:8c:a0:b1:1e:40:c0:f9:db:28: bd:76:50:f0:f6:13:20:27:36:e9:2e:a0:43:fd:23: 9b:7e:32:31:df:31:dc:d7:b5:11:3b:64:d0:8a:53: 54:d5:f9:e6:16:15:b0:a4:54:8a:6a:63:19:94:8e: 30:7f:2d:5f:da:71:25:3a:4d:87:38:74:8d:7c:6a: 73:d6:c3:38:88:9e:50:6e:3f:5c:42:b5:3a:fc:a2: a3:e1:81:b2:7b:7b:d1:a4:5a:7b:51:53:61:c3:93: b9:e4:e3:ee:78:9e:b9:45:ef:81:66:41:4f:55:17: 28:96:ed:6e:fa:70:da:ae:c2:66:b7:aa:c0:69:30: d6:0f:73:4b:a3:b2:41:3a:8d:44:41:ad:9f:e0:08: 62:53:bf:68:e9:65:4f:55:e0:dd:db:a5:d7:bb:ec: d8:4c:04:08:04:f2:a2:f3:1a:ae:6e:82:ec:28:79: 94:11:ec:dc:a9:8e:5b:d6:01:a1:18:a7:62:3d:b4: 6a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:96:80:DB:D2:B7:C6:BB:44:C8:F2:33:FD:81:03:6C:05:EF:5B:9B X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:38:7b:ff:2a:c3:6f:c3:9a:ff:4a:5c:e7:e9:69:ad:df:37: 26:aa:b8:94:03:ad:68:ed:8b:68:e1:93:37:9e:89:6f:90:7f: b0:24:a1:9c:02:63:48:e8:1e:e9:36:d4:70:ca:14:9e:9f:47: 19:d5:62:fd:89:f8:17:fa:d0:42:d2:79:ea:13:d3:ba:c5:0e: d6:25:6f:b9:dd:e2:59:5d:e6:43:5a:71:0c:17:0a:d7:20:8f: 70:a0:24:f0:28:e2:4b:2c:68:41:04:34:0d:13:00:06:56:c9: a2:7a:97:30:59:d5:b7:18:e2:00:06:8f:e2:a6:77:2e:18:32: a6:b7:b3:9f:12:b0:9a:b9:e8:f9:06:ac:3f:72:86:9e:cf:7b: 83:7d:dc:2f:65:70:ae:67:f6:df:88:8b:6b:e8:bf:37:49:07: 21:5f:e3:19:23:61:6b:2d:24:94:15:6f:d5:5b:33:d3:cf:3b: 56:1d:9a:a9:2e:b9:08:2e:3a:58:f0:9e:98:c3:c7:f6:df:23: 14:29:5d:64:13:32:e7:ff:c3:12:e4:82:0a:e3:d9:10:d6:0d: a7:bd:9a:8e:6a:8a:e3:2e:3d:a5:a7:73:73:09:73:1d:fb:ac: 60:4d:76:be:a8:16:2b:69:69:77:ff:cc:d7:16:79:ce:4b:01: 84:75:cc:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjUwNzE4MTc1OTMyWhcNMjUwNzI1MTc1OTMyWjAYMRYwFAYD VQQDEw02ODdhOGI4NC1kZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09LzefGzxOSVR7DcBEerKugQGVL3Rsu3gAtEpqMwSE98I0riFJtKGYEFB/gy djY3I5a9VeFpTxXTLL+EtGUpYkGMoLEeQMD52yi9dlDw9hMgJzbpLqBD/SObfjIx 3zHc17URO2TQilNU1fnmFhWwpFSKamMZlI4wfy1f2nElOk2HOHSNfGpz1sM4iJ5Q bj9cQrU6/KKj4YGye3vRpFp7UVNhw5O55OPueJ65Re+BZkFPVRcolu1u+nDarsJm t6rAaTDWD3NLo7JBOo1EQa2f4AhiU79o6WVPVeDd26XXu+zYTAQIBPKi8xquboLs KHmUEezcqY5b1gGhGKdiPbRq1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeWgNvS t8a7RMjyM/2BA2wF71ubMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEOHv/KsNvw5r/Slzn6Wmt3zcmqriUA61o7Yto4ZM3nolvkH+wJKGc AmNI6B7pNtRwyhSen0cZ1WL9ifgX+tBC0nnqE9O6xQ7WJW+53eJZXeZDWnEMFwrX II9woCTwKOJLLGhBBDQNEwAGVsmiepcwWdW3GOIABo/ipncuGDKmt7OfErCauej5 Bqw/coaez3uDfdwvZXCuZ/bfiItr6L83SQchX+MZI2FrLSSUFW/VWzPTzztWHZqp LrkILjpY8J6Yw8f23yMUKV1kEzLn/8MS5IIK49kQ1g2nvZqOaorjLj2lp3NzCXMd +6xgTXa+qBYraWl3/8zXFnnOSwGEdcxh -----END CERTIFICATE-----Generated at Sun Jul 20 16:32:45 2025 by rpki-client