$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: clxjXSUbUhTg1VENb7g3S0546d+Lcw0/ubfSCcv8oKo= Subject key identifier: F2:0E:50:A8:BE:A3:7B:E5:74:59:FF:E1:57:E2:FA:47:D7:C2:C3:0A Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 06B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 06AC Signing time: Wed 02 Jul 2025 22:26:36 +0000 Manifest this update: Wed 02 Jul 2025 22:26:35 +0000 Manifest next update: Wed 09 Jul 2025 22:26:35 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: A0PPxG8JdT6fUDsr+NKqIb7uRIYEltDUoypuZHd5l2A=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: vqxIsO24S1XTFLTcdT7l0irFCtFiMiUdze/w33SKZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED, serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: Jul 2 22:26:35 2025 GMT Not After : Jul 9 22:26:35 2025 GMT Subject: CN=6865b21b-eccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:45:be:f7:5a:6c:62:b0:fd:1f:c4:ab:9c: 6e:65:02:bc:38:e2:fe:50:62:89:4e:59:a3:46:7f: 1a:57:60:9d:cb:32:a0:5a:8d:73:ff:fe:a2:96:b5: aa:c2:8b:d1:ee:2a:3b:64:cd:34:c8:47:9a:90:d1: e0:99:da:e2:51:6d:ac:75:1a:97:9a:49:6c:6a:3c: 6d:60:95:55:1f:5a:f4:36:b5:17:a2:2a:ec:96:ce: e7:fc:f3:42:fc:55:e4:9a:17:ee:3f:ab:f7:0f:0d: c6:0d:7c:a4:4e:fe:97:df:d3:70:29:89:82:13:c3: e7:b8:6d:01:fa:3f:d0:b7:e0:c5:3f:ce:65:cc:ae: 23:b8:59:ca:17:46:32:b8:6b:d9:e1:d7:d9:d3:96: 6a:50:14:04:a4:48:ad:f8:2b:eb:3f:0a:75:4f:be: d4:10:68:81:ec:6c:66:4b:00:13:9b:3f:e8:3c:aa: 4d:b4:0c:c2:63:92:1d:9f:30:26:8a:59:e2:df:9e: 1b:b4:94:39:13:d4:f5:e1:55:69:3d:24:29:e4:64: 24:92:58:47:e8:44:9f:82:33:cd:33:bd:3c:ab:74: 7c:78:5b:65:4c:9a:09:33:f6:2d:7d:d6:31:15:a2: e6:da:94:ac:cb:b2:9c:d9:87:36:2e:8a:9e:48:36: 61:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:50:A8:BE:A3:7B:E5:74:59:FF:E1:57:E2:FA:47:D7:C2:C3:0A X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:0e:a8:b7:2a:d6:37:2f:f6:fc:38:2b:b9:a7:76:bd:de:69: 1e:11:e2:38:33:9a:54:14:70:58:86:3f:52:b5:b9:e0:1e:ee: ff:48:52:19:44:24:48:44:8a:c5:78:30:c8:fb:0c:6e:b2:da: dd:68:1f:2e:c3:0a:aa:9c:49:30:9b:f0:54:4e:d9:5a:fe:56: c9:50:93:cc:df:f7:16:9c:95:4e:54:b2:0e:f7:b6:63:f1:0e: d7:c7:d7:d5:e6:ba:40:0c:ef:3c:be:73:75:f8:d2:bb:f4:ad: b2:e0:6d:01:cf:b3:5c:fc:30:81:ba:18:37:b9:6e:23:00:41: 8d:00:16:a8:2b:2b:81:d8:82:17:01:67:66:91:8b:a6:4b:5c: f2:be:fb:2a:92:5f:f5:9c:b9:11:e8:64:f9:89:96:b7:d2:89: 33:db:15:7b:c3:94:5a:63:f3:c2:f6:89:54:ab:f8:e4:d4:47: 48:ff:d6:96:71:14:6a:83:34:7f:67:fb:45:17:31:7d:bd:bc: f4:1b:94:41:74:d5:05:a9:e2:e3:a9:40:71:7a:8a:7a:41:d5: 4f:6e:24:f1:58:41:6c:bc:f5:0c:3c:fe:6a:bc:66:bd:d5:d1: 07:da:31:af:21:5a:0d:a9:9f:9e:fa:f8:67:69:0e:35:7f:f5: 9e:77:23:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjUwNzAyMjIyNjM1WhcNMjUwNzA5MjIyNjM1WjAYMRYwFAYD VQQDEw02ODY1YjIxYi1lY2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2ZFvvdabGKw/R/Eq5xuZQK8OOL+UGKJTlmjRn8aV2CdyzKgWo1z//6ilrWq wovR7io7ZM00yEeakNHgmdriUW2sdRqXmklsajxtYJVVH1r0NrUXoirsls7n/PNC /FXkmhfuP6v3Dw3GDXykTv6X39NwKYmCE8PnuG0B+j/Qt+DFP85lzK4juFnKF0Yy uGvZ4dfZ05ZqUBQEpEit+CvrPwp1T77UEGiB7GxmSwATmz/oPKpNtAzCY5IdnzAm ilni354btJQ5E9T14VVpPSQp5GQkklhH6ESfgjPNM708q3R8eFtlTJoJM/YtfdYx FaLm2pSsy7Kc2Yc2LoqeSDZhIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIOUKi+ o3vldFn/4Vfi+kfXwsMKMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXDqi3KtY3L/b8OCu5p3a93mkeEeI4M5pUFHBYhj9StbngHu7/SFIZ RCRIRIrFeDDI+wxustrdaB8uwwqqnEkwm/BUTtla/lbJUJPM3/cWnJVOVLIO97Zj 8Q7Xx9fV5rpADO88vnN1+NK79K2y4G0Bz7Nc/DCBuhg3uW4jAEGNABaoKyuB2IIX AWdmkYumS1zyvvsqkl/1nLkR6GT5iZa30okz2xV7w5RaY/PC9olUq/jk1EdI/9aW cRRqgzR/Z/tFFzF9vbz0G5RBdNUFqeLjqUBxeop6QdVPbiTxWEFsvPUMPP5qvGa9 1dEH2jGvIVoNqZ+e+vhnaQ41f/WedyOB -----END CERTIFICATE-----Generated at Fri Jul 4 14:43:52 2025 by rpki-client