$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: yakteo4HgmrVmvJlJkTq4KgiyasyexsA3xzjszc0TMI= Subject key identifier: 4F:B4:13:05:C0:36:6E:65:C5:79:4C:3D:66:91:9B:6A:CB:12:AF:BB Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 04B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 0495 Signing time: Mon 21 Jul 2025 00:20:33 +0000 Manifest this update: Mon 21 Jul 2025 00:20:33 +0000 Manifest next update: Mon 28 Jul 2025 00:20:33 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: 97DmxYn4hPisP/MknOSRApCLBOXD+GcMcYobSDDYTTw=) 2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: 6Gx+BiutQSrEbY8mFBzgAsNKgb1qIvA80j3THb6HaOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: Jul 21 00:20:33 2025 GMT Not After : Jul 28 00:20:33 2025 GMT Subject: CN=687d87d1-51c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e0:af:26:84:bc:81:7b:d8:e7:bd:ef:95:d6: 05:77:ec:f3:f8:be:18:56:f1:9b:de:af:57:05:24: c9:43:0e:6c:cd:44:c3:6f:41:ce:0b:47:26:58:6b: cc:f6:c9:56:04:f5:65:9a:f4:91:6e:5f:92:9e:3b: 3a:19:58:74:e7:15:2c:f2:34:56:07:b1:7b:5b:a5: 24:ec:31:bc:19:27:f1:d8:e0:3e:0a:b5:f7:63:97: e7:17:ed:c1:e5:a8:d6:c3:4e:e1:19:18:e8:38:9d: ed:96:ef:31:55:84:06:30:70:5f:c8:86:f0:87:9a: 5b:77:41:a0:09:14:4b:b0:79:25:bb:c0:91:3d:94: 7d:0b:0e:e1:91:69:53:49:dc:9c:0b:8c:00:bc:25: 42:7a:11:8a:76:79:7a:cf:7f:06:43:d1:b8:6c:4f: 44:06:e2:cb:e5:9f:7a:5f:cb:c1:35:59:bc:34:91: f9:20:95:be:f3:b0:f5:de:80:2b:f9:31:27:13:4f: 90:f5:33:dd:31:3e:b2:dd:44:c9:38:6f:14:be:a4: 5b:56:ae:16:ad:e0:3b:cf:ed:38:66:cb:28:0c:c2: da:dd:47:00:56:b8:ce:c1:16:c0:48:97:a0:f7:0e: 5b:e0:16:62:27:09:17:a5:af:77:cc:db:6d:5e:62: 7e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B4:13:05:C0:36:6E:65:C5:79:4C:3D:66:91:9B:6A:CB:12:AF:BB X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:bc:60:24:7c:e3:49:5d:ac:7d:10:04:69:93:ab:1a:df:4b: b4:78:ad:3d:b2:22:11:65:d0:01:82:9c:e3:2a:c8:23:53:16: 03:b3:84:19:ca:88:44:a6:23:62:63:f2:51:e4:e4:d1:cd:76: c9:72:66:6c:08:df:f8:59:98:2d:47:cb:c5:3f:ca:f2:fa:bc: 91:35:2e:73:98:36:ca:a9:1c:6e:88:e7:57:60:76:7b:a8:64: ed:5d:ef:d7:cb:88:86:93:ca:41:76:c4:b1:c5:b2:af:84:4d: 33:2b:54:57:d0:98:49:c5:c1:5e:66:59:a0:6d:65:9c:78:ab: 9a:19:92:38:3d:51:26:5f:1a:68:55:f1:1b:dc:65:f6:a8:d6: b0:41:d1:8c:07:47:b3:6a:a1:58:df:89:ef:ff:e5:60:e6:e5: f0:8f:1f:20:14:44:72:0a:88:7c:6b:f8:61:ec:e8:48:ad:cb: c4:80:e2:18:82:77:e4:55:5b:3e:98:ab:d4:a5:3f:a9:d4:1c: f5:13:c7:50:e2:4a:e0:43:c0:cd:87:34:eb:e3:d7:61:33:8f: ad:55:8a:28:38:00:2c:7f:1e:ff:23:5b:9c:3d:f1:cc:75:1e: 99:10:b3:02:c3:b6:74:5e:10:c3:39:04:91:65:1c:f0:f5:67: f1:83:c3:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjUwNzIxMDAyMDMzWhcNMjUwNzI4MDAyMDMzWjAYMRYwFAYD VQQDEw02ODdkODdkMS01MWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+CvJoS8gXvY573vldYFd+zz+L4YVvGb3q9XBSTJQw5szUTDb0HOC0cmWGvM 9slWBPVlmvSRbl+Snjs6GVh05xUs8jRWB7F7W6Uk7DG8GSfx2OA+CrX3Y5fnF+3B 5ajWw07hGRjoOJ3tlu8xVYQGMHBfyIbwh5pbd0GgCRRLsHklu8CRPZR9Cw7hkWlT SdycC4wAvCVCehGKdnl6z38GQ9G4bE9EBuLL5Z96X8vBNVm8NJH5IJW+87D13oAr +TEnE0+Q9TPdMT6y3UTJOG8UvqRbVq4WreA7z+04ZssoDMLa3UcAVrjOwRbASJeg 9w5b4BZiJwkXpa93zNttXmJ+WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+0EwXA Nm5lxXlMPWaRm2rLEq+7MB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkvGAkfONJXax9EARpk6sa30u0eK09siIRZdABgpzjKsgjUxYDs4QZ yohEpiNiY/JR5OTRzXbJcmZsCN/4WZgtR8vFP8ry+ryRNS5zmDbKqRxuiOdXYHZ7 qGTtXe/Xy4iGk8pBdsSxxbKvhE0zK1RX0JhJxcFeZlmgbWWceKuaGZI4PVEmXxpo VfEb3GX2qNawQdGMB0ezaqFY34nv/+Vg5uXwjx8gFERyCoh8a/hh7OhIrcvEgOIY gnfkVVs+mKvUpT+p1Bz1E8dQ4krgQ8DNhzTr49dhM4+tVYooOAAsfx7/I1ucPfHM dR6ZELMCw7Z0XhDDOQSRZRzw9Wfxg8M2 -----END CERTIFICATE-----Generated at Mon Jul 21 08:31:10 2025 by rpki-client