$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: kq518c6voK7IoQJDifOcr4l5YXTCEjrsnJ7r/aVxW28= Subject key identifier: 62:74:12:62:83:69:56:B7:F7:27:97:9E:5E:00:CB:8B:F5:19:B3:12 Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 05C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 05BF Signing time: Sun 20 Jul 2025 23:16:57 +0000 Manifest this update: Sun 20 Jul 2025 23:16:57 +0000 Manifest next update: Sun 27 Jul 2025 23:16:57 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: ipAz+SpfAuVplCoZsFvS9iRxOMjhRxi77+QPgqvk8V4=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: RN+WuKj4+pEbBe+8XBpVSE8Eibjnma2NtmAKtaqSc2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1477 (0x5c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Jul 20 23:16:57 2025 GMT Not After : Jul 27 23:16:57 2025 GMT Subject: CN=687d78e9-efc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:64:f3:61:9c:6d:db:73:8b:16:e5:21:4f: f1:5a:53:cd:d0:96:9f:f8:c5:01:43:c8:3e:57:34: 71:2c:6c:82:cd:87:e7:60:56:84:c6:41:76:f8:ce: 59:ea:c4:09:57:7e:c8:0a:fe:4d:b3:9a:41:81:d8: af:07:d0:95:05:de:ce:dd:ce:ac:8a:1c:a7:c2:1d: 67:e6:cc:30:71:d8:93:2c:cf:8f:86:c6:e7:9a:09: 46:bd:d6:a5:3b:79:1d:2b:b9:53:0e:ae:8e:e2:93: bf:fb:6b:c3:30:a0:04:9f:16:23:22:19:55:c9:15: bb:e5:22:17:ad:5e:65:b4:f5:92:45:65:58:8f:6d: 0b:de:d7:84:b7:e8:5f:b7:df:7a:56:40:3b:86:85: 08:72:25:af:9d:c9:e4:e9:81:d1:7b:e4:1d:4b:97: 4b:8c:66:56:04:db:8a:92:35:7e:4d:df:f2:6f:b2: 10:67:a0:42:0b:71:51:92:92:13:59:e3:54:01:ae: 79:3e:0c:b4:9d:3a:fa:30:ad:90:0c:23:0c:7c:c6: 40:2d:72:28:cd:a1:27:34:94:bb:1d:f3:03:a8:0b: 4f:25:e6:20:1f:b1:8c:9d:7a:b6:d4:3a:93:2d:45: fc:e4:a0:33:f3:b1:44:d2:22:c8:bc:8c:4b:11:a3: fc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:74:12:62:83:69:56:B7:F7:27:97:9E:5E:00:CB:8B:F5:19:B3:12 X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:eb:a8:67:e0:19:7e:f8:bf:c8:01:69:34:38:3e:4e:c0:6a: 91:00:c3:f1:76:d8:14:39:08:b6:d4:10:d0:10:8e:5d:5b:fb: db:3e:a6:9b:35:63:f5:ef:d4:3e:e2:85:ac:b5:3f:b4:37:76: 75:7a:d3:79:58:87:ef:93:43:cf:22:38:ce:a2:78:5a:bd:0a: 30:92:d4:b0:14:c0:1b:4a:ef:2a:ce:44:d0:12:84:6a:7f:44: a7:b9:72:33:4f:20:5c:92:dc:4b:97:0c:88:36:e7:3b:3d:0d: d7:e2:35:52:ee:93:77:ae:9e:1f:8b:d4:f0:60:d8:d2:4d:58: 1c:8d:56:a6:5d:3c:da:d9:e7:63:55:b7:10:e5:df:57:0d:68: 25:88:7b:6f:c2:20:8a:35:32:e4:de:ce:35:76:fa:59:54:e1: 96:d5:21:9b:95:f7:78:7c:dc:a2:2f:fe:8c:66:01:ca:bf:02: f3:c4:41:ee:0c:7c:b9:f8:61:ab:2a:d6:d9:09:a6:bc:27:d2: da:66:64:88:3d:1e:73:00:1a:d6:ef:d9:aa:0c:26:dc:64:80: a2:89:c5:6f:b6:b6:ed:1f:1b:ca:1c:d0:03:03:46:27:b4:c6: a2:35:49:24:3d:53:5c:bd:ff:03:16:7f:d6:12:eb:cb:a4:da: 9f:82:f3:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjUwNzIwMjMxNjU3WhcNMjUwNzI3MjMxNjU3WjAYMRYwFAYD VQQDEw02ODdkNzhlOS1lZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSNk82GcbdtzixblIU/xWlPN0Jaf+MUBQ8g+VzRxLGyCzYfnYFaExkF2+M5Z 6sQJV37ICv5Ns5pBgdivB9CVBd7O3c6sihynwh1n5swwcdiTLM+PhsbnmglGvdal O3kdK7lTDq6O4pO/+2vDMKAEnxYjIhlVyRW75SIXrV5ltPWSRWVYj20L3teEt+hf t996VkA7hoUIciWvncnk6YHRe+QdS5dLjGZWBNuKkjV+Td/yb7IQZ6BCC3FRkpIT WeNUAa55Pgy0nTr6MK2QDCMMfMZALXIozaEnNJS7HfMDqAtPJeYgH7GMnXq21DqT LUX85KAz87FE0iLIvIxLEaP8ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJ0EmKD aVa39yeXnl4Ay4v1GbMSMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy66hn4Bl++L/IAWk0OD5OwGqRAMPxdtgUOQi21BDQEI5dW/vbPqab NWP179Q+4oWstT+0N3Z1etN5WIfvk0PPIjjOonhavQowktSwFMAbSu8qzkTQEoRq f0SnuXIzTyBcktxLlwyINuc7PQ3X4jVS7pN3rp4fi9TwYNjSTVgcjVamXTza2edj VbcQ5d9XDWgliHtvwiCKNTLk3s41dvpZVOGW1SGblfd4fNyiL/6MZgHKvwLzxEHu DHy5+GGrKtbZCaa8J9LaZmSIPR5zABrW79mqDCbcZICiicVvtrbtHxvKHNADA0Yn tMaiNUkkPVNcvf8DFn/WEuvLpNqfgvNt -----END CERTIFICATE-----Generated at Mon Jul 21 18:23:14 2025 by rpki-client