$ rpki-client -vvf rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft File: 83Gv20AqO1w1Haymss4PSk0ag4A.mft (raw, json) Hash identifier: rcIGls4DWHCj+e5CcOTkxUen/O0WvA+CNsgW1Tr3JvY= Subject key identifier: 24:68:1D:4E:86:2F:19:C9:0E:67:F6:A6:F7:E0:DA:BF:AA:1F:BA:AD Authority key identifier: F3:71:AF:DB:40:2A:3B:5C:35:1D:AC:A6:B2:CE:0F:4A:4D:1A:83:80 Certificate issuer: /CN=A915FCB7/serialNumber=F371AFDB402A3B5C351DACA6B2CE0F4A4D1A8380 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft Manifest number: 85 Signing time: Tue 01 Jul 2025 07:21:19 +0000 Manifest this update: Tue 01 Jul 2025 07:21:18 +0000 Manifest next update: Tue 08 Jul 2025 07:21:18 +0000 Files and hashes: 1: 83Gv20AqO1w1Haymss4PSk0ag4A.crl (hash: 12JNHdf5lX9Ikahp5lJnvLXO1lVIvFMg3Hsv44oNZa4=) 2: 500ACD668F7311EF9A3C6933C4F9AE02.roa (hash: VIgdVzi8gWFo+DLBgza5aP4IxE2OBvQtkB1gTHVVzIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.crl rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FCB7, serialNumber=F371AFDB402A3B5C351DACA6B2CE0F4A4D1A8380 Validity Not Before: Jul 1 07:21:18 2025 GMT Not After : Jul 8 07:21:18 2025 GMT Subject: CN=68638c6e-d763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c0:3e:9d:b3:d6:a0:98:e1:22:ea:32:bf:a8: 8d:90:4e:fb:6a:fd:bb:49:d5:df:c3:45:34:a2:c2: 32:31:8d:9a:21:fa:a2:98:cb:a5:6f:de:09:37:ad: 80:9a:82:f2:56:8a:f2:e2:34:01:96:1d:79:f2:d8: 30:27:bd:8e:f1:6b:30:f7:c3:a2:a3:50:76:09:cf: f4:3d:13:c8:71:30:78:41:77:d5:e9:06:25:be:5e: 63:13:b4:11:ed:4a:99:77:22:8a:c9:8a:1c:1d:fd: 3f:e4:c5:70:e2:b5:63:b3:f3:de:25:df:8c:2a:5c: cf:76:4b:3e:26:ef:22:94:03:eb:7a:7b:22:d4:6b: 4d:42:61:92:cf:83:8a:2d:af:12:eb:b5:59:a7:69: ae:44:f6:80:1d:41:72:18:ed:98:9e:9e:8d:30:26: c0:04:95:52:4f:83:56:81:ad:9f:b5:f0:a3:ce:fd: 9b:38:8d:68:52:f2:7d:4f:50:da:41:25:f3:25:77: ae:ee:ce:e9:64:84:63:8c:73:6c:24:46:a0:ea:c9: 4a:a2:36:31:52:66:b8:8e:9a:89:d4:73:30:e3:a7: d9:25:e7:d6:48:b3:92:bf:0b:32:20:90:f2:ac:1e: 2b:9c:fa:5b:ff:5e:e3:c6:5f:9b:d3:2c:ef:48:24: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:68:1D:4E:86:2F:19:C9:0E:67:F6:A6:F7:E0:DA:BF:AA:1F:BA:AD X509v3 Authority Key Identifier: keyid:F3:71:AF:DB:40:2A:3B:5C:35:1D:AC:A6:B2:CE:0F:4A:4D:1A:83:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:64:66:c0:f9:fc:77:d3:64:88:1a:3b:ce:f3:de:4b:7f:1e: e3:7f:55:65:8e:b8:25:ef:c2:32:76:85:63:da:06:7b:3f:42: 13:a4:0e:9f:64:7b:08:aa:5f:0d:30:bb:fe:dd:cd:95:d5:85: 48:6a:9d:49:ed:37:67:b0:68:a8:be:1c:05:f6:0f:b0:ce:d1: a0:8a:e9:d0:9f:f7:41:cd:e3:48:e9:14:f2:98:ec:b8:d4:67: 40:3d:eb:bb:4d:a3:50:2f:d6:c2:d2:df:18:9e:b2:33:03:aa: 6e:38:ff:87:d0:e2:1e:f1:fb:01:a1:d1:bc:d9:26:81:7f:53: 49:a4:f4:0d:e7:9a:89:11:e9:cf:86:0b:e8:4d:7f:9b:05:f4: 2b:bf:eb:78:bc:db:70:f7:d7:16:6b:cf:a5:38:b2:69:a4:26: 37:61:31:08:80:ed:54:9d:45:0f:86:0a:47:db:9d:5f:4a:1a: 9c:eb:83:65:38:8a:4d:6c:f6:a5:60:3f:67:8d:77:eb:0e:cc: e8:79:33:73:6c:58:43:24:53:96:af:b3:5e:99:96:df:16:38: 9a:10:fb:d0:cd:48:be:6b:f9:73:b6:b1:3b:5f:0e:28:62:de: a8:fc:58:34:3c:fc:34:19:34:86:f3:0a:0c:e1:d0:34:0d:2b: bd:48:eb:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZDQjcxMTAvBgNVBAUTKEYzNzFBRkRCNDAyQTNCNUMzNTFEQUNBNkIyQ0UwRjRB NEQxQTgzODAwHhcNMjUwNzAxMDcyMTE4WhcNMjUwNzA4MDcyMTE4WjAYMRYwFAYD VQQDEw02ODYzOGM2ZS1kNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6MA+nbPWoJjhIuoyv6iNkE77av27SdXfw0U0osIyMY2aIfqimMulb94JN62A moLyVory4jQBlh158tgwJ72O8Wsw98Oio1B2Cc/0PRPIcTB4QXfV6QYlvl5jE7QR 7UqZdyKKyYocHf0/5MVw4rVjs/PeJd+MKlzPdks+Ju8ilAPrensi1GtNQmGSz4OK La8S67VZp2muRPaAHUFyGO2Ynp6NMCbABJVST4NWga2ftfCjzv2bOI1oUvJ9T1Da QSXzJXeu7s7pZIRjjHNsJEag6slKojYxUma4jpqJ1HMw46fZJefWSLOSvwsyIJDy rB4rnPpb/17jxl+b0yzvSCSMowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRoHU6G LxnJDmf2pvfg2r+qH7qtMB8GA1UdIwQYMBaAFPNxr9tAKjtcNR2sprLOD0pNGoOA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkNCNy82RjRCMzIxNjhG NzIxMUVGQjc1QjEwMzBDNEY5QUUwMi84M0d2MjBBcU8xdzFIYXltc3M0UFNrMGFn NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzR3YyMEFxTzF3MUhheW1zczRQU2swYWc0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkNCNy82RjRCMzIxNjhGNzIxMUVGQjc1QjEwMzBDNEY5QUUwMi84M0d2MjBBcU8x dzFIYXltc3M0UFNrMGFnNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAZGbA+fx302SIGjvO895Lfx7jf1Vljrgl78IydoVj2gZ7P0ITpA6f ZHsIql8NMLv+3c2V1YVIap1J7TdnsGiovhwF9g+wztGgiunQn/dBzeNI6RTymOy4 1GdAPeu7TaNQL9bC0t8YnrIzA6puOP+H0OIe8fsBodG82SaBf1NJpPQN55qJEenP hgvoTX+bBfQrv+t4vNtw99cWa8+lOLJppCY3YTEIgO1UnUUPhgpH251fShqc64Nl OIpNbPalYD9njXfrDszoeTNzbFhDJFOWr7NemZbfFjiaEPvQzUi+a/lztrE7Xw4o Yt6o/Fg0PPw0GTSG8woM4dA0DSu9SOse -----END CERTIFICATE-----Generated at Wed Jul 2 23:31:24 2025 by rpki-client