$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft File: 83GJVwUMS84UpOw46qzunHQkTE8.mft (raw, json) Hash identifier: nPkpOGW7Iu9DJPXBvDMbw2Nv/nDB3PhZlZXHQGB4/xc= Subject key identifier: DB:AB:1B:3B:40:CB:CE:AF:5B:93:19:46:E1:A7:F2:FA:F9:CA:3D:7A Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F Certificate issuer: /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft Manifest number: 13 Signing time: Thu 03 Jul 2025 08:19:08 +0000 Manifest this update: Thu 03 Jul 2025 08:19:08 +0000 Manifest next update: Thu 10 Jul 2025 08:19:08 +0000 Files and hashes: 1: 83GJVwUMS84UpOw46qzunHQkTE8.crl (hash: uME4H9grI6BgiW06uGBixN/kMsxsEpORaWBjUHoX00c=) 2: F34C44FC3F7511F0A963EE11C4F9AE02.roa (hash: 0lT1AyOiOXe+BKO1a/7QwW0Ghznoxt7Inz7Ksh5dWQc=) 3: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (hash: sM8LsbsoEf9GFMasQUHdxFdj0W4Z3+oN5Sb3It4tBgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F Validity Not Before: Jul 3 08:19:08 2025 GMT Not After : Jul 10 08:19:08 2025 GMT Subject: CN=68663cfc-5ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:21:e8:c8:c6:45:59:50:18:1b:4a:b0:ab: 6a:ae:aa:63:84:85:bb:ae:9e:f3:58:fd:1b:99:ac: 82:11:27:56:13:c5:a3:49:9b:55:0f:60:42:e1:64: d8:52:cf:ff:5e:76:1e:a2:bb:2c:93:4f:5d:42:8c: 4c:8a:39:03:33:07:9b:90:4a:81:28:55:9a:b5:78: ee:c1:08:5d:08:39:a9:d3:a3:a0:70:b2:c0:6a:0d: 32:9b:a2:91:3e:6a:f4:3e:26:eb:a7:b8:d3:79:23: b4:a1:ba:bf:20:da:37:64:1f:db:f2:5f:9c:e2:95: 53:b3:1f:5f:56:45:3d:57:3e:ce:2c:59:bc:a3:79: f3:41:2a:11:ea:f0:3b:be:61:1e:d4:17:ed:d0:4d: c4:ef:d2:11:d4:61:20:05:63:58:3d:7c:72:b8:ff: 67:85:90:8a:83:09:be:6a:61:f3:ae:50:af:50:a1: be:eb:39:91:2d:50:1b:cb:4e:ac:2e:1f:9c:ff:c2: c4:eb:23:d2:ec:3c:0c:17:cf:8b:dc:7d:3e:8d:49: 8a:89:df:ab:6a:7d:e9:ef:41:ee:96:f1:44:7b:a9: e1:36:33:1f:72:02:8e:7a:36:2c:76:03:7e:52:dd: 4f:ba:a2:a9:20:9a:7b:de:90:2f:35:cf:a6:83:93: e5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AB:1B:3B:40:CB:CE:AF:5B:93:19:46:E1:A7:F2:FA:F9:CA:3D:7A X509v3 Authority Key Identifier: keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:4f:57:df:6b:00:74:db:7f:66:84:5f:dc:f6:df:7b:8a:57: cd:d1:f3:33:bc:32:b0:d1:de:01:4b:55:9b:74:ed:29:0d:8d: 9f:77:f8:dc:52:d0:8c:f8:a9:84:86:23:b4:ad:35:cd:8e:a2: b6:7d:88:6a:4d:b3:7d:4a:98:02:6c:14:45:9c:4f:15:9c:f3: e7:9d:f7:47:31:85:f8:5f:26:8e:b8:bd:3b:ed:aa:30:3f:b1: 82:37:25:97:f9:0b:1e:b1:f9:4d:34:76:8d:8a:fc:1f:08:4d: 2a:a5:f2:b1:94:75:54:34:14:8b:97:71:cf:91:ac:dd:24:89: 4e:82:10:47:85:bb:6e:f5:ac:92:51:a5:c5:7c:9a:fe:36:ff: 9e:00:98:1e:1a:79:d0:d3:43:0a:f8:fb:c0:5f:ea:80:7d:f6: 8e:88:ab:5b:82:2a:85:83:97:a6:55:51:7f:52:50:4d:f3:c1: 30:c9:ce:be:cf:c3:ed:29:99:af:57:3b:95:23:b0:af:02:25: 85:36:7a:6d:f8:34:55:06:80:57:1c:6a:93:7e:e6:9d:87:49: 30:58:4f:d9:96:e6:8b:78:08:63:42:2e:b6:92:96:63:74:8d: 79:11:92:48:20:e5:21:0d:79:ca:2f:ad:29:0e:4c:ad:83:53: f1:54:ea:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjZFODExMC8GA1UEBRMoRjM3MTg5NTcwNTBDNEJDRTE0QTRFQzM4RUFBQ0VFOUM3 NDI0NEM0RjAeFw0yNTA3MDMwODE5MDhaFw0yNTA3MTAwODE5MDhaMBgxFjAUBgNV BAMTDTY4NjYzY2ZjLTVmZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzhiHoyMZFWVAYG0qwq2quqmOEhbuunvNY/RuZrIIRJ1YTxaNJm1UPYELhZNhS z/9edh6iuyyTT11CjEyKOQMzB5uQSoEoVZq1eO7BCF0IOanTo6BwssBqDTKbopE+ avQ+JuunuNN5I7Shur8g2jdkH9vyX5zilVOzH19WRT1XPs4sWbyjefNBKhHq8Du+ YR7UF+3QTcTv0hHUYSAFY1g9fHK4/2eFkIqDCb5qYfOuUK9Qob7rOZEtUBvLTqwu H5z/wsTrI9LsPAwXz4vcfT6NSYqJ36tqfenvQe6W8UR7qeE2Mx9yAo56Nix2A35S 3U+6oqkgmnvekC81z6aDk+X/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU26sbO0DL zq9bkxlG4afy+vnKPXowHwYDVR0jBBgwFoAU83GJVwUMS84UpOw46qzunHQkTE8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNkU4LzhENUFBMTdBM0Y3 NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0VXBPdzQ2cXp1bkhRa1RF OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODNHSlZ3VU1TODRVcE93NDZxenVuSFFrVEU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NkU4LzhENUFBMTdBM0Y3NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0 VXBPdzQ2cXp1bkhRa1RFOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANxPV99rAHTbf2aEX9z233uKV83R8zO8MrDR3gFLVZt07SkNjZ93+NxS 0Iz4qYSGI7StNc2OorZ9iGpNs31KmAJsFEWcTxWc8+ed90cxhfhfJo64vTvtqjA/ sYI3JZf5Cx6x+U00do2K/B8ITSql8rGUdVQ0FIuXcc+RrN0kiU6CEEeFu271rJJR pcV8mv42/54AmB4aedDTQwr4+8Bf6oB99o6Iq1uCKoWDl6ZVUX9SUE3zwTDJzr7P w+0pma9XO5UjsK8CJYU2em34NFUGgFccapN+5p2HSTBYT9mW5ot4CGNCLraSlmN0 jXkRkkgg5SENecovrSkOTK2DU/FU6hw= -----END CERTIFICATE-----Generated at Fri Jul 4 23:22:11 2025 by rpki-client