$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: ylDbK41lz2D8jnouoHZ+d3witdxpwCFyxOjs/gwYLMg= Subject key identifier: F7:78:B9:D3:09:35:6B:FA:4F:7E:85:38:C5:EF:90:07:17:21:A3:7C Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: EC Signing time: Tue 01 Jul 2025 05:56:47 +0000 Manifest this update: Tue 01 Jul 2025 05:56:46 +0000 Manifest next update: Tue 08 Jul 2025 05:56:46 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: DZDfgliuqsExLa95NOv9Im3auyHOrBCHHqybrTZ02lE=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: oDkekcVc24g24l9w3pqtjUZRiCpSkPIIazs9r2Z2ZIs=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 66xBTvofN0kw93P5VictZxaCnVByR33mxLgf2xLdWgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Jul 1 05:56:46 2025 GMT Not After : Jul 8 05:56:46 2025 GMT Subject: CN=6863789e-0939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f5:be:76:c6:df:26:75:86:6b:29:70:58:81: 33:62:f6:ea:f3:8e:8c:74:9e:30:0d:2d:5f:9d:32: 8e:23:90:4f:ea:a2:44:22:49:aa:2a:fa:06:1d:fa: 1d:51:4a:b3:e4:a6:c4:1e:5d:54:f2:1a:15:7d:55: 50:e6:66:c8:7e:14:b3:04:a1:eb:8d:b5:07:3c:ff: 98:f0:8a:5e:f5:9d:12:01:de:38:9a:ca:d6:33:3a: 6d:09:d6:ac:fe:f9:a0:c1:70:93:4a:b1:14:87:0c: af:11:80:57:af:24:6f:3a:5a:75:02:df:c0:cd:24: d7:e5:1a:03:2d:f8:06:4d:1f:18:25:cb:dc:21:8e: 68:0a:4e:41:8b:e1:1b:96:f2:96:7a:bd:bc:ae:1c: 44:a5:0b:44:fc:57:48:00:d4:1b:3f:e2:ff:d6:8e: 2d:73:3f:37:db:e8:b5:81:7f:b3:40:fe:2e:6c:d9: cb:c8:48:d1:61:c3:c0:0b:a2:7e:5c:92:12:92:c5: 43:f8:91:19:f5:05:d6:1e:53:f7:7c:e2:55:52:1b: 51:3c:96:97:bf:72:f9:ea:e2:d7:20:c7:00:33:d4: 2e:38:53:66:d2:4c:d3:a9:21:85:e0:9c:b3:cb:39: 59:3c:29:c4:bd:00:55:12:0b:fe:76:62:32:08:1f: 7c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:78:B9:D3:09:35:6B:FA:4F:7E:85:38:C5:EF:90:07:17:21:A3:7C X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:23:9e:96:f4:75:7a:83:9a:d5:0e:0c:ea:ae:cb:ea:fc:db: 9b:13:cf:4e:c8:35:8f:4b:23:89:6b:fb:1e:dd:26:f8:1b:b3: 82:00:20:62:c3:a0:2c:71:e3:a3:59:9c:4b:66:fc:31:38:f9: f3:cc:7f:4d:0d:eb:64:59:53:b3:80:3e:4a:13:00:d2:c9:3b: 27:9c:ce:7b:4a:8c:ef:be:05:92:ee:e7:d8:89:c7:ea:90:d5: d5:19:15:46:62:92:04:03:13:7e:8d:d9:80:ae:4d:b7:06:f7: 94:a0:2e:5e:c3:d6:72:88:0c:71:67:07:16:3f:cf:c9:08:fe: 3c:8a:de:2d:6f:fb:e7:f1:ed:07:d6:6d:a1:54:2b:f5:38:87: 26:71:d2:fc:b2:89:9e:44:89:e4:37:20:83:af:2e:71:79:75: 08:bd:9f:63:1b:fb:b9:16:f5:ed:c6:82:45:d5:23:c1:1b:a4: 3f:5f:00:c6:d4:2b:c3:fb:c2:5c:53:35:30:4a:9e:d2:13:b1: 6c:a2:6e:36:72:2a:b2:cb:3f:59:b5:cb:d7:5d:a6:7f:ce:2d: dd:6f:af:c2:5e:b9:f6:b2:27:98:d9:c5:54:f3:22:a4:7b:7f: 72:2d:32:58:09:ca:43:f6:e0:25:22:f4:73:17:67:ef:e7:a0: 24:6b:81:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUwNzAxMDU1NjQ2WhcNMjUwNzA4MDU1NjQ2WjAYMRYwFAYD VQQDEw02ODYzNzg5ZS0wOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/W+dsbfJnWGaylwWIEzYvbq846MdJ4wDS1fnTKOI5BP6qJEIkmqKvoGHfod UUqz5KbEHl1U8hoVfVVQ5mbIfhSzBKHrjbUHPP+Y8Ipe9Z0SAd44msrWMzptCdas /vmgwXCTSrEUhwyvEYBXryRvOlp1At/AzSTX5RoDLfgGTR8YJcvcIY5oCk5Bi+Eb lvKWer28rhxEpQtE/FdIANQbP+L/1o4tcz832+i1gX+zQP4ubNnLyEjRYcPAC6J+ XJISksVD+JEZ9QXWHlP3fOJVUhtRPJaXv3L56uLXIMcAM9QuOFNm0kzTqSGF4Jyz yzlZPCnEvQBVEgv+dmIyCB989QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPd4udMJ NWv6T36FOMXvkAcXIaN8MB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiI56W9HV6g5rVDgzqrsvq/NubE89OyDWPSyOJa/se3Sb4G7OCACBi w6AsceOjWZxLZvwxOPnzzH9NDetkWVOzgD5KEwDSyTsnnM57SozvvgWS7ufYicfq kNXVGRVGYpIEAxN+jdmArk23BveUoC5ew9ZyiAxxZwcWP8/JCP48it4tb/vn8e0H 1m2hVCv1OIcmcdL8someRInkNyCDry5xeXUIvZ9jG/u5FvXtxoJF1SPBG6Q/XwDG 1CvD+8JcUzUwSp7SE7Fsom42ciqyyz9ZtcvXXaZ/zi3db6/CXrn2sieY2cVU8yKk e39yLTJYCcpD9uAlIvRzF2fv56Aka4G5 -----END CERTIFICATE-----Generated at Wed Jul 2 16:16:42 2025 by rpki-client