$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: IxFvFIi2vKO0ReYqJH3zVoGkyjwROBk0ZC0IFOUjzgM= Subject key identifier: A8:ED:07:5B:99:66:D6:72:FB:C8:C0:E8:4A:DD:5B:42:E8:49:43:58 Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 09A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 0999 Signing time: Sun 20 Jul 2025 20:11:26 +0000 Manifest this update: Sun 20 Jul 2025 20:11:25 +0000 Manifest next update: Sun 27 Jul 2025 20:11:25 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: 8hcrkunaWngmwyDJCY8udepv1qa4UoXNgtDwDYv98h4=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: onBNfM/Pn1GMIqfcUmL/COXE+dl4lbaBIGgghkrv3qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2464 (0x9a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Jul 20 20:11:25 2025 GMT Not After : Jul 27 20:11:25 2025 GMT Subject: CN=687d4d6e-0523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:73:ed:28:a6:d0:27:88:4b:74:6e:21:6b: 11:08:f6:4f:20:6c:d1:0c:94:e9:f8:13:72:c9:b0: c5:b1:95:8f:5b:b6:b3:2a:95:ff:ea:ef:de:a1:43: ac:ca:8d:9f:8d:2f:af:5b:2d:dc:a0:47:91:a0:dd: fb:49:1f:e6:b3:c9:1b:9a:de:ad:99:42:75:48:b9: c7:eb:ad:6b:14:5c:53:d2:89:c2:d2:0c:51:52:d6: 32:0b:a0:ff:e0:51:17:27:58:ca:20:3b:fd:22:a8: 05:74:dd:ac:8b:fd:4d:1c:dc:e8:c2:c7:0d:fd:d7: dd:04:aa:68:dd:c3:84:90:10:bb:d8:21:36:1d:bc: 9b:4f:0b:7f:12:d4:bd:b5:8f:79:17:73:93:e3:2a: bf:06:bc:e8:b6:b8:d4:66:91:09:15:ec:2a:7f:16: 20:44:c1:bf:cb:58:3e:c4:ac:d1:0d:8e:b5:cb:8a: 28:f9:b2:6e:27:87:85:2d:00:d4:a1:68:fd:22:be: ff:da:6a:5e:0d:d3:32:e1:d0:6e:6b:c6:d6:a7:5e: f4:de:48:58:9a:6b:e1:2a:b7:a1:2b:93:6f:63:17: bc:f7:d8:89:88:c5:49:03:59:56:f3:df:80:c4:89: fa:4b:7d:39:50:0f:8d:94:1b:62:ab:0c:3b:35:f3: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:ED:07:5B:99:66:D6:72:FB:C8:C0:E8:4A:DD:5B:42:E8:49:43:58 X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:74:1a:cb:12:47:ed:87:5f:4f:b5:65:4c:08:6e:08:83:db: 7d:f0:5e:ef:5e:a7:ca:af:42:97:f4:a2:61:d7:7e:cc:64:1c: 2f:56:39:d7:e4:ec:82:f2:00:f0:c2:68:e8:b7:90:c3:fc:07: 02:cc:0d:f2:9c:56:19:79:03:00:a4:f0:79:b0:84:e5:20:67: 78:77:c7:f6:e2:36:32:de:c8:43:8a:72:63:f6:a6:ec:bf:83: f9:15:64:44:b0:34:59:c0:f2:d0:a8:ce:bf:88:f0:60:2d:b8: a5:d4:e9:3b:9b:ff:35:16:31:24:4f:00:1a:c8:8e:f9:a0:66: 79:ae:b0:64:52:54:56:ca:8c:17:88:c8:93:d0:57:1c:b7:6d: 19:b5:cc:35:a8:1f:10:fc:07:cb:4d:be:aa:13:f4:64:bb:e8: b3:cd:16:3b:df:c2:96:34:bd:af:af:8a:2e:5d:67:d8:20:a8: fe:b1:1d:26:b6:dd:07:43:49:e5:dd:2c:7f:b4:49:6c:3b:cf: 72:23:ec:69:85:a4:ba:3a:61:6c:c4:fe:24:09:d7:2a:00:c6: 5e:4a:9c:9a:cd:a6:57:f6:df:54:21:27:87:4e:14:d5:33:fc: a5:93:25:36:9a:0b:34:2c:c6:3d:6f:f3:72:c7:d6:a5:03:59: 51:dc:1d:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjUwNzIwMjAxMTI1WhcNMjUwNzI3MjAxMTI1WjAYMRYwFAYD VQQDEw02ODdkNGQ2ZS0wNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxNz7Sim0CeIS3RuIWsRCPZPIGzRDJTp+BNyybDFsZWPW7azKpX/6u/eoUOs yo2fjS+vWy3coEeRoN37SR/ms8kbmt6tmUJ1SLnH661rFFxT0onC0gxRUtYyC6D/ 4FEXJ1jKIDv9IqgFdN2si/1NHNzowscN/dfdBKpo3cOEkBC72CE2HbybTwt/EtS9 tY95F3OT4yq/BrzotrjUZpEJFewqfxYgRMG/y1g+xKzRDY61y4oo+bJuJ4eFLQDU oWj9Ir7/2mpeDdMy4dBua8bWp1703khYmmvhKrehK5NvYxe899iJiMVJA1lW89+A xIn6S305UA+NlBtiqww7NfOd4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjtB1uZ ZtZy+8jA6ErdW0LoSUNYMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9dBrLEkfth19PtWVMCG4Ig9t98F7vXqfKr0KX9KJh137MZBwvVjnX 5OyC8gDwwmjot5DD/AcCzA3ynFYZeQMApPB5sITlIGd4d8f24jYy3shDinJj9qbs v4P5FWREsDRZwPLQqM6/iPBgLbil1Ok7m/81FjEkTwAayI75oGZ5rrBkUlRWyowX iMiT0Fcct20Ztcw1qB8Q/AfLTb6qE/Rku+izzRY738KWNL2vr4ouXWfYIKj+sR0m tt0HQ0nl3Sx/tElsO89yI+xphaS6OmFsxP4kCdcqAMZeSpyazaZX9t9UISeHThTV M/ylkyU2mgs0LMY9b/Nyx9alA1lR3B3A -----END CERTIFICATE-----Generated at Mon Jul 21 08:10:17 2025 by rpki-client