$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft File: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft (raw, json) Hash identifier: 78ANLmOrJxWNtc9P8UYOT9wAzEXMeb9PIoLYHEDeHdU= Subject key identifier: 91:63:EE:99:1E:89:CE:61:DE:70:CE:F9:21:F6:D1:79:59:F0:A2:89 Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Certificate serial: 2772 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft Manifest number: 274A Signing time: Sat 31 May 2025 15:37:30 +0000 Manifest this update: Sat 31 May 2025 15:37:29 +0000 Manifest next update: Sat 07 Jun 2025 15:37:29 +0000 Files and hashes: 1: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl (hash: kIUhSok/o7VQ7XnBmmhV0q/mYRWWVZ2mz2X6xOFGl+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10098 (0x2772) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B12B, serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Validity Not Before: May 31 15:37:29 2025 GMT Not After : Jun 7 15:37:29 2025 GMT Subject: CN=683b223a-2078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:99:78:be:c7:d7:04:c1:3a:72:be:95:bb:75: 5e:ec:6d:d8:2d:70:da:93:47:c5:30:d6:dc:9a:98: dc:fa:67:1c:9e:56:65:33:45:9d:22:48:72:00:d1: 85:73:72:81:d7:4e:38:2c:fd:39:ec:91:d9:6d:a4: 9f:a3:34:d4:f8:05:9f:33:6e:3b:af:e6:68:b0:76: e0:b5:68:76:02:1a:84:9a:73:e0:99:42:7b:88:26: c1:43:fa:ef:b2:7e:05:a7:e6:51:77:25:2d:97:7c: d0:c4:b3:39:0d:2e:6a:71:08:b1:00:69:dc:a4:59: f4:7d:ee:52:bd:ca:b6:80:b1:10:37:16:cc:82:ce: 9f:fd:5f:13:22:d2:ad:f1:81:57:e8:17:2e:0b:d3: fa:9b:f9:e3:46:2e:da:92:02:fa:44:f2:70:42:31: be:2c:63:c3:d0:7f:38:39:ec:7a:12:9e:43:47:c0: 8d:7c:37:0f:1c:be:d7:3f:c1:2f:69:f7:7f:6d:b0: 4f:f7:5b:bb:65:f5:b7:80:70:00:25:d8:91:b5:95: 18:25:bf:4e:e6:00:01:39:05:50:74:e0:67:f9:d7: 19:9a:36:b6:29:35:3d:99:26:32:8c:eb:3f:73:c4: d9:61:bb:ef:12:46:8f:c0:a7:8f:22:9d:f4:8b:16: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:63:EE:99:1E:89:CE:61:DE:70:CE:F9:21:F6:D1:79:59:F0:A2:89 X509v3 Authority Key Identifier: keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b6:bf:83:b7:12:ac:b3:e1:b3:c2:20:f2:75:c4:b8:2d:29: 0a:3e:17:d4:39:98:eb:50:b2:44:1f:fb:e3:c0:fb:d4:db:06: a3:0e:11:ed:a4:1a:34:d2:68:79:bb:d8:24:69:99:f0:82:fe: cd:c7:ac:2e:87:38:2c:79:2b:0e:db:99:d0:3b:a8:3f:20:de: 44:56:a6:1e:8c:e2:2c:60:2c:1e:61:67:9f:ce:38:f8:a6:f9: 68:05:9c:10:dd:9e:9b:08:df:f6:69:ef:42:43:57:9a:85:94: 51:92:24:f3:df:5e:40:aa:8b:f4:95:73:3d:bf:16:2f:ec:a7: 13:2c:65:f5:3f:1c:b0:81:d0:cb:2d:20:9f:1d:ba:b8:f4:60: 1f:a0:24:d8:d7:32:e7:59:c9:85:bb:fc:7d:af:87:d3:3b:4c: 4b:24:d1:45:0c:e1:dd:b8:49:f6:48:10:01:fc:fb:41:16:ff: 71:f9:b5:a9:ed:07:ea:44:23:1e:23:68:5f:80:92:1d:5d:ad: 74:91:45:05:f8:59:86:93:d8:8e:58:87:39:f5:31:f9:79:4f: 21:34:96:51:e4:b5:68:c3:fb:e5:db:8c:f2:84:e1:0f:5e:02: ea:aa:f9:56:81:24:e0:83:32:76:da:8d:04:8b:f6:be:dd:34: b4:e7:dc:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxMkIxMTAvBgNVBAUTKEYyNjkyMzQ1M0YwMTcwMzA5RkQ1OEJGM0IwQjVEQ0U0 M0ZGOUI0MUMwHhcNMjUwNTMxMTUzNzI5WhcNMjUwNjA3MTUzNzI5WjAYMRYwFAYD VQQDEw02ODNiMjIzYS0yMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Jl4vsfXBME6cr6Vu3Ve7G3YLXDak0fFMNbcmpjc+mccnlZlM0WdIkhyANGF c3KB1044LP057JHZbaSfozTU+AWfM247r+ZosHbgtWh2AhqEmnPgmUJ7iCbBQ/rv sn4Fp+ZRdyUtl3zQxLM5DS5qcQixAGncpFn0fe5Svcq2gLEQNxbMgs6f/V8TItKt 8YFX6BcuC9P6m/njRi7akgL6RPJwQjG+LGPD0H84Oex6Ep5DR8CNfDcPHL7XP8Ev afd/bbBP91u7ZfW3gHAAJdiRtZUYJb9O5gABOQVQdOBn+dcZmja2KTU9mSYyjOs/ c8TZYbvvEkaPwKePIp30ixa9yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFj7pke ic5h3nDO+SH20XlZ8KKJMB8GA1UdIwQYMBaAFPJpI0U/AXAwn9WL87C13OQ/+bQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjEyQi9BNTA5RUMxRUJE OUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNEQ2YxWXZ6c0xYYzVEXzV0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhta2pSVDhCY0RDZjFZdnpzTFhjNURfNXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjEyQi9BNTA5RUMxRUJEOUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNE Q2YxWXZ6c0xYYzVEXzV0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCItr+DtxKss+GzwiDydcS4LSkKPhfUOZjrULJEH/vjwPvU2wajDhHt pBo00mh5u9gkaZnwgv7Nx6wuhzgseSsO25nQO6g/IN5EVqYejOIsYCweYWefzjj4 pvloBZwQ3Z6bCN/2ae9CQ1eahZRRkiTz315Aqov0lXM9vxYv7KcTLGX1PxywgdDL LSCfHbq49GAfoCTY1zLnWcmFu/x9r4fTO0xLJNFFDOHduEn2SBAB/PtBFv9x+bWp 7QfqRCMeI2hfgJIdXa10kUUF+FmGk9iOWIc59TH5eU8hNJZR5LVow/vl24zyhOEP XgLqqvlWgSTggzJ22o0Ei/a+3TS059zo -----END CERTIFICATE-----Generated at Sat May 31 17:14:45 2025 by rpki-client