$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: tzlhuLeyR2tIBByw59aGT7Ou2rjLhuZeTZyHD/CzuBs= Subject key identifier: C6:B7:21:1A:DB:DD:A3:CB:5B:8A:58:1B:8E:6F:09:92:9C:3B:4B:71 Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 262A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 2612 Signing time: Fri 06 Jun 2025 15:45:53 +0000 Manifest this update: Fri 06 Jun 2025 15:45:53 +0000 Manifest next update: Fri 13 Jun 2025 15:45:53 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: 2XCn6MlLjMZCINXvThVHgtPqBguZmL1Vp3NFGIkFQC4=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 15:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9770 (0x262a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: Jun 6 15:45:53 2025 GMT Not After : Jun 13 15:45:53 2025 GMT Subject: CN=68430d31-0edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:b1:60:23:97:d1:83:26:b4:38:33:21:8c: 48:cd:f8:97:a4:cc:12:d2:7d:1c:09:75:ad:db:2a: 55:78:cb:1d:a7:72:c8:3d:5a:8d:d1:b3:43:0c:04: 4f:36:65:78:7b:56:72:a8:d2:5b:f2:87:62:13:bb: 7e:65:49:29:fe:77:c4:7c:cd:ee:ee:10:97:a7:61: 56:19:96:df:a7:40:7f:bf:d8:be:28:a1:8d:af:1a: f8:e9:65:95:ec:f0:51:f9:35:61:1e:b7:89:39:b7: bd:6c:23:5d:bd:2d:b8:67:86:16:e4:95:e7:eb:ce: 65:98:ce:76:47:05:ce:05:04:b4:68:29:74:6a:e6: 08:54:41:57:73:9e:72:af:82:d2:99:e1:a8:bd:a3: 53:75:c1:d3:b3:32:7d:03:1b:3a:25:c0:dc:26:a5: cf:72:4e:25:99:5f:78:53:9d:20:be:a8:45:9e:72: bc:77:92:b8:45:9d:3d:6b:9c:b5:f8:59:c4:58:11: 64:7a:5d:ab:84:dc:00:4f:01:c5:8d:31:c9:b0:5d: ef:b5:5e:16:ea:25:64:50:e0:ec:b9:17:47:12:51: 22:33:a1:03:9b:2d:44:12:28:b5:b6:6b:6e:bb:3e: 73:89:89:0e:39:e9:55:52:85:bb:e1:de:21:d0:89: 40:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B7:21:1A:DB:DD:A3:CB:5B:8A:58:1B:8E:6F:09:92:9C:3B:4B:71 X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:cc:df:de:e2:1a:db:5f:99:2e:82:21:81:b9:5b:81:a8:eb: f0:ab:f3:d1:81:2a:ce:13:41:c0:71:ed:6f:b0:0a:e1:81:37: 06:a6:63:44:67:e0:fc:81:1c:a5:7c:18:f4:bc:1e:0a:62:af: 17:36:13:ea:72:19:55:c9:98:70:b2:53:cb:e3:69:ca:6d:b7: d8:4b:9a:a6:1f:92:a4:ea:1d:bb:22:df:75:b7:f4:88:16:b3: a6:bb:47:3f:3e:8e:79:1e:9d:fe:d2:8c:1c:db:50:66:d7:6c: 5e:50:ff:c4:ae:5f:e3:a3:25:d9:60:4c:33:30:ea:ba:28:1b: ae:f9:ab:46:14:e3:43:12:57:93:7b:fd:0a:2e:fe:ed:f5:ae: 1b:a6:cb:5a:32:4b:9c:83:c9:be:91:57:c6:66:02:e8:89:5b: 01:b5:ea:c8:a3:b8:72:7c:7d:c7:ea:1e:27:41:5a:59:4f:10: 12:ed:c8:20:75:00:07:cc:eb:7e:e0:a9:46:4f:84:49:af:c4: eb:46:2c:3f:e0:c1:23:67:46:f7:d5:13:bf:a5:93:72:fe:af: d1:a9:3f:1c:9e:6a:bb:33:99:79:4c:61:dd:cc:a0:17:c8:3b: 13:52:17:b1:44:01:90:fe:ad:25:18:12:26:d1:a1:f5:bd:bb: 83:63:ce:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUwNjA2MTU0NTUzWhcNMjUwNjEzMTU0NTUzWjAYMRYwFAYD VQQDEw02ODQzMGQzMS0wZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVmxYCOX0YMmtDgzIYxIzfiXpMwS0n0cCXWt2ypVeMsdp3LIPVqN0bNDDARP NmV4e1ZyqNJb8odiE7t+ZUkp/nfEfM3u7hCXp2FWGZbfp0B/v9i+KKGNrxr46WWV 7PBR+TVhHreJObe9bCNdvS24Z4YW5JXn685lmM52RwXOBQS0aCl0auYIVEFXc55y r4LSmeGovaNTdcHTszJ9Axs6JcDcJqXPck4lmV94U50gvqhFnnK8d5K4RZ09a5y1 +FnEWBFkel2rhNwATwHFjTHJsF3vtV4W6iVkUODsuRdHElEiM6EDmy1EEii1tmtu uz5ziYkOOelVUoW74d4h0IlAtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMa3IRrb 3aPLW4pYG45vCZKcO0txMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3zN/e4hrbX5kugiGBuVuBqOvwq/PRgSrOE0HAce1vsArhgTcGpmNE Z+D8gRylfBj0vB4KYq8XNhPqchlVyZhwslPL42nKbbfYS5qmH5Kk6h27It91t/SI FrOmu0c/Po55Hp3+0owc21Bm12xeUP/Erl/joyXZYEwzMOq6KBuu+atGFONDEleT e/0KLv7t9a4bpstaMkucg8m+kVfGZgLoiVsBterIo7hyfH3H6h4nQVpZTxAS7cgg dQAHzOt+4KlGT4RJr8TrRiw/4MEjZ0b31RO/pZNy/q/RqT8cnmq7M5l5TGHdzKAX yDsTUhexRAGQ/q0lGBIm0aH1vbuDY87i -----END CERTIFICATE-----Generated at Sun Jun 8 17:15:27 2025 by rpki-client