$ rpki-client -vvf rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft File: 8n_4duRl5zyaUv04SNvXZb-yNdQ.mft (raw, json) Hash identifier: H32Pe2CgvOVdf9FlZxleVKaXn9s/w1hVxCyPL6eeP58= Subject key identifier: 1D:86:F1:23:56:BC:C1:7E:3E:17:CB:3F:F8:C0:13:BA:40:9A:87:C2 Authority key identifier: F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 Certificate issuer: /CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Certificate serial: 0D6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft Manifest number: 0D5E Signing time: Wed 02 Jul 2025 18:11:25 +0000 Manifest this update: Wed 02 Jul 2025 18:11:24 +0000 Manifest next update: Wed 09 Jul 2025 18:11:24 +0000 Files and hashes: 1: 8n_4duRl5zyaUv04SNvXZb-yNdQ.crl (hash: qH4PqAWogklEdHj++/LsU9jQxKsQUr6syiN/v6lE5To=) 2: 3833FD20D09711E987F73A60C4F9AE02.roa (hash: IUQ+m8jWqnf3vf6hcCuC0VogjthEOWb1ceqBAZq2VPM=) 3: 8A00E9284FB111EDBE702516C4F9AE02.roa (hash: s8FViwNwbQunitwqHzsjUNkNGV0Mlz+MOgwlD5JB+Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3436 (0xd6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175FF, serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Validity Not Before: Jul 2 18:11:24 2025 GMT Not After : Jul 9 18:11:24 2025 GMT Subject: CN=6865764c-744f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:41:ab:80:b7:c2:7f:e7:d6:5f:e2:a0:cb: 71:10:8b:1f:59:41:78:db:8d:f0:7d:91:15:32:15: 52:34:70:19:52:e2:5c:35:ca:2f:fa:11:cb:b9:0e: a9:07:77:50:6a:ae:75:99:ec:60:40:42:60:24:53: f6:fd:5a:da:a7:aa:41:62:15:5d:93:b6:b3:91:19: 65:df:11:ff:ae:b4:8b:4c:06:aa:36:80:90:1d:40: 2f:87:24:f9:99:81:4d:82:55:8c:b4:bb:f9:15:3a: 55:5b:c1:2a:27:95:c2:7f:ed:47:15:a3:7f:39:a0: d6:bf:95:d1:b5:a7:4c:82:90:2d:14:e0:61:fb:c4: e1:09:a8:21:8a:bd:10:9f:aa:51:eb:1a:43:fc:65: c6:14:f6:b2:81:8f:81:78:f6:2b:f7:27:cc:25:5b: 04:b2:09:3e:31:2c:8a:2d:2a:6f:68:d2:56:01:63: 11:e7:7f:6d:c4:c6:dd:90:7a:da:c2:2e:ed:cc:8c: 7a:89:ed:8e:00:aa:01:71:e0:91:b6:b4:8f:ec:3e: 6c:b4:94:23:ce:b6:60:36:2b:56:29:4d:4f:f9:de: 5b:b3:fb:61:e8:8d:f2:dd:48:61:69:93:e7:ec:e1: a4:8a:75:ea:8d:9a:c5:0a:72:23:1a:7f:62:c9:dc: 8c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:86:F1:23:56:BC:C1:7E:3E:17:CB:3F:F8:C0:13:BA:40:9A:87:C2 X509v3 Authority Key Identifier: keyid:F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a3:57:7a:5a:33:00:29:21:5b:55:68:1d:b6:34:05:d2:e5: de:f7:04:d4:b2:3b:fa:58:4c:e3:ff:0a:b4:c5:b0:2f:29:b3: 7b:73:b8:0f:99:d5:e9:00:28:1b:91:ed:9b:90:8c:da:24:1c: d8:60:57:34:58:60:c1:46:2c:d1:9e:c2:6b:17:cb:2b:a4:3a: 94:8c:de:bd:1e:02:fb:d8:5d:cc:9f:4e:95:af:47:22:13:ee: 1e:49:d1:ad:0b:e6:15:3c:e0:8e:9c:5a:f0:b2:0f:ea:df:7a: a2:b8:d2:38:c3:15:a5:17:bd:7e:89:20:a0:85:58:24:92:dc: b2:f2:f0:6b:c0:72:20:a1:4e:46:c0:a9:e6:60:f7:c1:bd:80: 1d:e6:2f:ea:5d:93:d3:09:5e:2c:4d:22:00:01:8a:00:f4:fc: 92:8b:81:9b:da:ac:a3:ff:96:29:cb:96:8e:90:b6:2f:9e:24: 3f:9c:52:7d:cc:21:6b:a0:fd:e1:66:f3:1b:f0:f5:33:5f:03: d2:be:5c:bb:9e:a8:8a:4e:0f:5e:d6:50:67:82:e8:0c:b7:8c: 68:2c:7d:5c:ac:8a:16:06:cb:f5:ed:af:de:2d:e7:83:a0:86: 00:69:88:d4:9c:08:00:1b:0c:32:27:12:b5:1e:c6:be:29:a9: f8:ea:c9:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RkYxMTAvBgNVBAUTKEYyN0ZGODc2RTQ2NUU3M0M5QTUyRkQzODQ4REJENzY1 QkZCMjM1RDQwHhcNMjUwNzAyMTgxMTI0WhcNMjUwNzA5MTgxMTI0WjAYMRYwFAYD VQQDEw02ODY1NzY0Yy03NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7NBq4C3wn/n1l/ioMtxEIsfWUF4243wfZEVMhVSNHAZUuJcNcov+hHLuQ6p B3dQaq51mexgQEJgJFP2/Vrap6pBYhVdk7azkRll3xH/rrSLTAaqNoCQHUAvhyT5 mYFNglWMtLv5FTpVW8EqJ5XCf+1HFaN/OaDWv5XRtadMgpAtFOBh+8ThCaghir0Q n6pR6xpD/GXGFPaygY+BePYr9yfMJVsEsgk+MSyKLSpvaNJWAWMR539txMbdkHra wi7tzIx6ie2OAKoBceCRtrSP7D5stJQjzrZgNitWKU1P+d5bs/th6I3y3UhhaZPn 7OGkinXqjZrFCnIjGn9iydyMHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2G8SNW vMF+PhfLP/jAE7pAmofCMB8GA1UdIwQYMBaAFPJ/+HbkZec8mlL9OEjb12W/sjXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGRi9FMTc2RDY3QUQw OTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6eWFVdjA0U052WFpiLXlO ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuXzRkdVJsNXp5YVV2MDRTTnZYWmIteU5kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGRi9FMTc2RDY3QUQwOTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6 eWFVdjA0U052WFpiLXlOZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUo1d6WjMAKSFbVWgdtjQF0uXe9wTUsjv6WEzj/wq0xbAvKbN7c7gP mdXpACgbke2bkIzaJBzYYFc0WGDBRizRnsJrF8srpDqUjN69HgL72F3Mn06Vr0ci E+4eSdGtC+YVPOCOnFrwsg/q33qiuNI4wxWlF71+iSCghVgkktyy8vBrwHIgoU5G wKnmYPfBvYAd5i/qXZPTCV4sTSIAAYoA9PySi4Gb2qyj/5Ypy5aOkLYvniQ/nFJ9 zCFroP3hZvMb8PUzXwPSvly7nqiKTg9e1lBngugMt4xoLH1crIoWBsv17a/eLeeD oIYAaYjUnAgAGwwyJxK1Hsa+Kan46skh -----END CERTIFICATE-----Generated at Wed Jul 2 19:44:49 2025 by rpki-client