$ rpki-client -vvf rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft File: 8CJFNT_B8ZSpAipKwBl33l_eNvk.mft (raw, json) Hash identifier: 2WLE5kN5icInvH7whaAWcvFWMfkwCmJLaodCSH2eqAw= Subject key identifier: 7A:CC:FE:E2:77:78:25:A2:D3:23:34:B3:BC:81:12:12:5B:5B:80:4B Authority key identifier: F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 Certificate issuer: /CN=A918A96A/serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft Manifest number: 037C Signing time: Tue 29 Jul 2025 01:34:08 +0000 Manifest this update: Tue 29 Jul 2025 01:34:07 +0000 Manifest next update: Tue 05 Aug 2025 01:34:07 +0000 Files and hashes: 1: 8CJFNT_B8ZSpAipKwBl33l_eNvk.crl (hash: ZgRiUEd6w3VYvqnUBIKGMSrmKuNufxVdI19HCorsh2g=) 2: 2DE4C8AA9B6111EF99A97B52C4F9AE02.roa (hash: XtdmJSxuSqJLeY4yGf6y31fYXsFvKu/1qBD/nGzqK1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 01:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A96A, serialNumber=F02245353FC1F194A9022A4AC01977DE5FDE36F9 Validity Not Before: Jul 29 01:34:07 2025 GMT Not After : Aug 5 01:34:07 2025 GMT Subject: CN=6888250f-5419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:0c:c1:6b:d5:49:1c:79:96:c8:d4:b2:38: a3:91:b2:2d:dd:d8:86:8e:22:bf:1e:27:24:a9:93: 60:ef:32:2c:20:f1:66:34:d1:a3:0a:78:ec:c7:b3: 18:90:d7:b9:a9:1c:7e:b4:05:40:37:57:6e:81:bc: 14:0e:9c:91:92:eb:86:a4:f7:86:9f:4c:b8:bc:57: d0:43:0e:f7:63:ac:0f:e0:99:ed:6e:3e:9d:02:d2: 83:60:b3:85:14:e8:e1:6e:12:bd:4d:99:94:ad:26: 50:51:94:13:0f:7b:ea:17:9e:8f:5a:45:be:68:21: 46:22:c8:ba:a8:ee:72:5b:e2:b6:c4:25:33:a6:53: 20:82:52:1a:4f:84:ee:98:e1:6c:df:27:58:c4:8c: 9b:12:e0:ae:9d:35:4e:ee:1f:39:ff:26:c1:a8:13: f2:46:88:73:63:70:99:d1:3a:bb:97:63:b0:64:d2: 0e:cd:3c:c8:79:9a:5a:f2:db:87:b4:9e:93:37:79: 0c:8d:bd:42:90:e7:c8:a6:0d:82:f3:dd:e2:b0:c8: be:30:a5:4c:92:a6:40:70:1c:f0:a0:af:d2:5a:f5: 36:92:70:bb:eb:e6:ff:99:77:cf:2f:ca:cf:4d:19: ae:55:e0:88:46:b1:05:ef:f4:c6:95:75:a3:f0:7a: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CC:FE:E2:77:78:25:A2:D3:23:34:B3:BC:81:12:12:5B:5B:80:4B X509v3 Authority Key Identifier: keyid:F0:22:45:35:3F:C1:F1:94:A9:02:2A:4A:C0:19:77:DE:5F:DE:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CJFNT_B8ZSpAipKwBl33l_eNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A96A/28785F60BFBF11ECAED48C71C4F9AE02/8CJFNT_B8ZSpAipKwBl33l_eNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:82:2f:83:09:32:46:26:28:9f:52:a9:c6:76:04:ac:f6:1c: 73:a3:0f:e2:a7:dd:d2:f8:f3:f5:33:40:56:7d:9c:05:56:8f: e4:44:27:c6:9f:a3:b3:ae:5e:0a:c5:4f:43:d1:dd:38:be:26: e0:e1:aa:6e:40:af:4b:10:2b:b7:d4:43:4c:7f:06:d3:5f:c5: 8a:38:7f:db:49:12:24:82:8f:f8:fb:93:fc:2b:06:12:39:6f: c1:49:e0:e4:79:f8:c8:0d:1a:af:e5:56:6d:f3:b5:78:31:d8: 9d:13:d3:28:a4:c0:c5:c6:bc:56:6a:a7:44:52:10:03:ad:d6: 1e:2e:0a:30:2e:0f:37:07:a8:03:3b:d8:fc:e7:62:a1:4c:7e: 05:79:1f:79:9e:2b:cf:46:d7:8d:13:78:6f:7b:e4:22:cf:dc: 1e:29:e5:2a:01:a9:34:2f:42:f6:9e:13:18:34:a2:76:16:51: f5:8e:7b:8a:e5:5c:74:c9:15:63:1d:dc:e0:43:c1:06:15:20: e5:33:ca:1a:fa:6c:01:87:a1:52:d9:cd:ff:c2:40:45:ad:f6: 26:15:13:2a:f5:fa:c3:a0:94:19:bd:ad:11:a8:eb:bb:d6:cd: c3:8e:e7:72:af:fa:27:2d:6e:09:37:8d:56:4d:90:ca:35:26: bf:73:32:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5NkExMTAvBgNVBAUTKEYwMjI0NTM1M0ZDMUYxOTRBOTAyMkE0QUMwMTk3N0RF NUZERTM2RjkwHhcNMjUwNzI5MDEzNDA3WhcNMjUwODA1MDEzNDA3WjAYMRYwFAYD VQQDEw02ODg4MjUwZi01NDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW0MwWvVSRx5lsjUsjijkbIt3diGjiK/HickqZNg7zIsIPFmNNGjCnjsx7MY kNe5qRx+tAVAN1dugbwUDpyRkuuGpPeGn0y4vFfQQw73Y6wP4Jntbj6dAtKDYLOF FOjhbhK9TZmUrSZQUZQTD3vqF56PWkW+aCFGIsi6qO5yW+K2xCUzplMgglIaT4Tu mOFs3ydYxIybEuCunTVO7h85/ybBqBPyRohzY3CZ0Tq7l2OwZNIOzTzIeZpa8tuH tJ6TN3kMjb1CkOfIpg2C893isMi+MKVMkqZAcBzwoK/SWvU2knC76+b/mXfPL8rP TRmuVeCIRrEF7/TGlXWj8HppdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrM/uJ3 eCWi0yM0s7yBEhJbW4BLMB8GA1UdIwQYMBaAFPAiRTU/wfGUqQIqSsAZd95f3jb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk2QS8yODc4NUY2MEJG QkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjhaU3BBaXBLd0JsMzNsX2VO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDSkZOVF9COFpTcEFpcEt3QmwzM2xfZU52ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk2QS8yODc4NUY2MEJGQkYxMUVDQUVENDhDNzFDNEY5QUUwMi84Q0pGTlRfQjha U3BBaXBLd0JsMzNsX2VOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsgi+DCTJGJiifUqnGdgSs9hxzow/ip93S+PP1M0BWfZwFVo/kRCfG n6Ozrl4KxU9D0d04vibg4apuQK9LECu31ENMfwbTX8WKOH/bSRIkgo/4+5P8KwYS OW/BSeDkefjIDRqv5VZt87V4MdidE9MopMDFxrxWaqdEUhADrdYeLgowLg83B6gD O9j852KhTH4FeR95nivPRteNE3hve+Qiz9weKeUqAak0L0L2nhMYNKJ2FlH1jnuK 5Vx0yRVjHdzgQ8EGFSDlM8oa+mwBh6FS2c3/wkBFrfYmFRMq9frDoJQZva0RqOu7 1s3Djudyr/onLW4JN41WTZDKNSa/czJx -----END CERTIFICATE-----Generated at Wed Jul 30 05:54:06 2025 by rpki-client