$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft File: bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft (raw, json) Hash identifier: hY5poq0MhltPwh4ZQGsnRVCfgnlXIVtpYmAP7lzZjfo= Subject key identifier: 1C:77:5A:34:5C:CE:A1:55:12:CB:F7:D7:1E:1C:EF:BD:93:6F:5F:A2 Authority key identifier: 6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 Certificate issuer: /CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft Manifest number: E8 Signing time: Tue 01 Jul 2025 06:11:54 +0000 Manifest this update: Tue 01 Jul 2025 06:11:54 +0000 Manifest next update: Tue 08 Jul 2025 06:11:54 +0000 Files and hashes: 1: bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl (hash: c03DZbKPb8TdDZ1HGTD5wO0+9PeoKfQbjWsfUP2jdjA=) 2: EC873B66F37911EEA9FCAF6BC4F9AE02.roa (hash: R0DfmVDnEwGfUuvqVJCH+cmUjdIg5Xto6mNDm3yMbdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF8A, serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Validity Not Before: Jul 1 06:11:54 2025 GMT Not After : Jul 8 06:11:54 2025 GMT Subject: CN=68637c2a-4ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:28:7e:93:3e:5f:e0:1d:18:80:79:ff:53: 0f:b0:07:51:05:44:c2:24:9b:af:54:7f:91:e3:ce: dd:9c:9b:ff:a8:ff:58:23:12:b9:c0:ed:33:b4:e5: cf:72:8c:25:b4:58:84:91:b6:48:85:87:34:35:c5: 64:02:0e:b3:8d:82:bf:0d:33:6a:9b:41:76:af:b1: 18:27:f3:82:5a:b5:d8:1e:ce:d3:0f:50:15:9c:d2: f9:c8:aa:31:3d:f3:27:d9:71:01:69:86:d6:9c:2f: b7:7b:81:91:2c:33:66:65:c9:b0:60:fd:1b:73:42: d8:3d:ba:1e:18:8e:93:07:63:f5:2b:32:68:15:d4: 53:d1:d0:99:a9:ab:fc:78:d3:b1:01:15:00:28:8e: 8c:ea:54:17:47:ec:37:3d:85:90:77:46:67:c1:2e: ea:1f:ff:9a:7b:da:b4:a2:4a:61:28:e8:36:65:4f: e4:f0:fa:bf:54:ea:a6:ce:de:4c:a2:6e:90:a1:a6: 09:63:9f:a2:30:0a:11:e2:ad:4f:c7:71:5f:e2:c7: b1:51:7f:e5:60:1b:0d:9b:9a:ce:81:46:91:cb:b9: b3:66:fc:d7:96:2e:41:7c:60:18:a9:81:39:00:2a: 92:72:e7:19:72:77:d7:86:12:5f:82:06:79:e7:4f: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:77:5A:34:5C:CE:A1:55:12:CB:F7:D7:1E:1C:EF:BD:93:6F:5F:A2 X509v3 Authority Key Identifier: keyid:6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:24:64:ee:fa:e1:36:bb:ce:66:17:fc:f0:b1:cd:0e:8b:37: f1:68:ce:29:2a:16:f4:d1:6e:14:a0:d7:2f:2f:88:a1:70:49: 6d:5f:9b:44:5a:46:f9:1a:bf:b7:a8:6e:58:df:a0:64:7b:92: 80:f7:d3:78:05:f8:8b:5f:d8:90:57:c2:60:79:06:39:95:44: 87:fa:71:c6:2e:f3:d9:ac:97:a7:eb:d1:d5:12:1e:e3:38:e7: 8e:7a:b5:35:db:ab:de:40:e5:a8:25:4c:7d:68:67:9c:86:cf: ee:74:c4:79:52:c9:9b:5a:eb:da:73:81:b6:a9:71:a2:31:37: 06:97:7c:02:42:cb:74:44:ef:bd:a6:21:e9:4f:47:28:bb:c0: 9b:74:76:9e:53:11:38:00:43:32:45:e6:d3:d7:cf:9b:5e:8b: 3f:4a:c6:42:ba:a8:de:58:6d:21:64:a2:2a:da:b9:fb:19:31: ff:60:87:a9:9a:8e:1a:0a:34:28:1d:c0:2e:75:0f:0e:aa:6f: 04:53:99:dd:49:06:39:a1:71:da:d1:6c:09:37:71:d5:05:61: ef:6a:56:12:89:ba:ae:cd:52:d3:4a:55:25:20:0e:34:07:4d: c0:53:c6:00:7e:e2:59:83:9d:01:e5:c4:35:00:f8:ad:cd:a0: 5f:ed:f2:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGOEExMTAvBgNVBAUTKDZDOERGQTA0M0MyMkI4QTI3RUFCNjA0NzBBRjQwNjYw MjRBNjg0NDAwHhcNMjUwNzAxMDYxMTU0WhcNMjUwNzA4MDYxMTU0WjAYMRYwFAYD VQQDEw02ODYzN2MyYS00Y2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqucofpM+X+AdGIB5/1MPsAdRBUTCJJuvVH+R487dnJv/qP9YIxK5wO0ztOXP cowltFiEkbZIhYc0NcVkAg6zjYK/DTNqm0F2r7EYJ/OCWrXYHs7TD1AVnNL5yKox PfMn2XEBaYbWnC+3e4GRLDNmZcmwYP0bc0LYPboeGI6TB2P1KzJoFdRT0dCZqav8 eNOxARUAKI6M6lQXR+w3PYWQd0ZnwS7qH/+ae9q0okphKOg2ZU/k8Pq/VOqmzt5M om6QoaYJY5+iMAoR4q1Px3Ff4sexUX/lYBsNm5rOgUaRy7mzZvzXli5BfGAYqYE5 ACqScucZcnfXhhJfggZ550/GAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBx3WjRc zqFVEsv31x4c772Tb1+iMB8GA1UdIwQYMBaAFGyN+gQ8IriifqtgRwr0BmAkpoRA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREY4QS84RjAxMUM2RUYz NzkxMUVFQjdFOURDNkFDNEY5QUUwMi9iSTM2QkR3aXVLSi1xMkJIQ3ZRR1lDU21o RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJMzZCRHdpdUtKLXEyQkhDdlFHWUNTbWhFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REY4QS84RjAxMUM2RUYzNzkxMUVFQjdFOURDNkFDNEY5QUUwMi9iSTM2QkR3aXVL Si1xMkJIQ3ZRR1lDU21oRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFJGTu+uE2u85mF/zwsc0OizfxaM4pKhb00W4UoNcvL4ihcEltX5tE Wkb5Gr+3qG5Y36Bke5KA99N4BfiLX9iQV8JgeQY5lUSH+nHGLvPZrJen69HVEh7j OOeOerU126veQOWoJUx9aGechs/udMR5UsmbWuvac4G2qXGiMTcGl3wCQst0RO+9 piHpT0cou8CbdHaeUxE4AEMyRebT18+bXos/SsZCuqjeWG0hZKIq2rn7GTH/YIep mo4aCjQoHcAudQ8Oqm8EU5ndSQY5oXHa0WwJN3HVBWHvalYSibquzVLTSlUlIA40 B03AU8YAfuJZg50B5cQ1APitzaBf7fKY -----END CERTIFICATE-----Generated at Wed Jul 2 19:19:34 2025 by rpki-client