$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json) Hash identifier: fauoGhbV7T6eMLlKjp6YdUmWkTQP257aN1p9jtKkeLU= Subject key identifier: 88:D1:4D:56:36:A3:0C:85:D4:C1:6A:AF:3C:EA:91:07:9D:08:21:72 Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft Manifest number: 15 Signing time: Sun 29 Jun 2025 07:00:27 +0000 Manifest this update: Sun 29 Jun 2025 07:00:26 +0000 Manifest next update: Sun 06 Jul 2025 07:00:26 +0000 Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: k2OjyPdt5FQYp/ZSnLkB/lYzFyNpHqDF7XrvwULHoc4=) 2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: uo101jV5D+ClspePQe5MSA2kQIWF4csGlLsFWkLTXVc=) 3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: 8dvGtU4/STS35lWSdlUQSQ3IYG+2zjb7Ya5wIRb/kvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Validity Not Before: Jun 29 07:00:26 2025 GMT Not After : Jul 6 07:00:26 2025 GMT Subject: CN=6860e48a-1551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7a:e8:93:8e:25:a6:c8:4e:70:25:e2:c1:97: ae:5f:bb:b0:ac:ba:1c:f5:fb:31:29:fa:ad:3d:3d: 36:c7:8d:f1:41:cf:78:fb:e0:e1:6c:77:05:eb:3e: 78:d8:79:48:33:4e:c2:6e:02:dc:9c:85:a7:c5:01: 49:1e:3a:77:03:54:8e:b7:3f:08:0e:62:a0:75:d0: 7f:66:a8:b0:8c:a5:0a:90:c0:b9:1d:93:7d:c2:e1: 07:4c:5a:4a:b0:20:76:57:1f:5b:0e:d8:53:6f:df: 7b:ba:c6:22:0a:59:04:2e:4a:b1:79:a8:38:6e:2b: 5c:28:87:b5:ac:f1:74:6c:e6:02:d2:4e:4c:e9:f6: d8:93:0d:ab:e4:04:aa:99:1e:4c:60:b0:02:a1:78: 3b:71:30:5f:be:25:88:cc:f3:a6:31:f6:72:5f:03: 67:fe:20:0d:32:6e:30:6e:6e:44:f5:ff:23:20:a8: 8d:26:bc:bd:4f:aa:ca:70:9a:ee:22:b3:32:49:58: 7b:4c:25:7f:67:27:b1:3a:2b:8f:47:0a:fe:a4:c3: e2:dd:f3:06:fd:43:f1:c1:1b:4b:6c:78:38:6a:7f: d1:68:7f:26:44:6d:05:e1:d2:f6:1d:70:c3:1a:23: 83:7d:a5:e3:8b:9d:e3:b6:ee:1d:28:40:3a:df:ef: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D1:4D:56:36:A3:0C:85:D4:C1:6A:AF:3C:EA:91:07:9D:08:21:72 X509v3 Authority Key Identifier: keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ab:da:7f:90:e1:0e:e1:3c:8d:c8:9e:75:62:74:08:b4:84: cc:9b:cf:3c:97:d9:eb:4d:40:d0:6d:cf:75:ff:fd:e2:4a:d7: a2:f3:3c:ac:30:a3:0a:51:61:d8:74:38:ff:c9:4f:9c:31:1b: de:02:f8:c3:08:78:a6:24:c9:d3:40:c8:56:0a:57:87:d2:2a: 2e:78:ac:bc:fe:db:bd:d4:d0:b2:be:ae:73:b9:97:64:ae:fb: 85:fc:0b:c6:3d:ae:f2:d7:3c:88:1f:c6:60:56:56:94:a4:67: c9:b6:1f:8d:da:10:80:b8:34:a6:bf:e0:be:96:bf:7b:40:77: 7c:40:b2:22:c3:83:ff:01:12:7d:d5:da:ae:56:8a:06:33:10: e5:ce:c6:ac:5d:d4:07:80:5e:5d:bb:95:ab:bf:6d:3d:f6:f4: f5:17:fc:c5:63:19:27:81:eb:b7:f1:78:eb:75:06:15:81:b5: b6:f0:cb:e4:2d:ce:f9:e1:58:fc:35:3c:7c:48:f7:53:e6:9f: 0e:e8:fd:89:20:f2:a7:a6:7a:21:cc:6f:0a:1e:ed:6e:38:00: d4:23:f3:4b:a4:60:92:a7:e8:6d:b2:e8:f7:f9:1f:80:d6:48: f4:96:90:1b:62:b0:dd:49:10:84:27:c7:cd:bb:a5:1a:e4:2f: e0:95:c0:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDkxNjExMC8GA1UEBRMoNkZDMjJEMzBGMzE5Q0Q2NURCNUUzRjZGRkM1RDE0MUNE MDE2Njg4MjAeFw0yNTA2MjkwNzAwMjZaFw0yNTA3MDYwNzAwMjZaMBgxFjAUBgNV BAMTDTY4NjBlNDhhLTE1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbeuiTjiWmyE5wJeLBl65fu7Csuhz1+zEp+q09PTbHjfFBz3j74OFsdwXrPnjY eUgzTsJuAtychafFAUkeOncDVI63PwgOYqB10H9mqLCMpQqQwLkdk33C4QdMWkqw IHZXH1sO2FNv33u6xiIKWQQuSrF5qDhuK1woh7Ws8XRs5gLSTkzp9tiTDavkBKqZ HkxgsAKheDtxMF++JYjM86Yx9nJfA2f+IA0ybjBubkT1/yMgqI0mvL1Pqspwmu4i szJJWHtMJX9nJ7E6K49HCv6kw+Ld8wb9Q/HBG0tseDhqf9FofyZEbQXh0vYdcMMa I4N9peOLneO27h0oQDrf7yWpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiNFNVjaj DIXUwWqvPOqRB50IIXIwHwYDVR0jBBgwFoAUb8ItMPMZzWXbXj9v/F0UHNAWaIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwOTE2LzA0MEI4N0JBMzY0 QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldYYlhqOXZfRjBVSE5BV2FJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjhJdE1QTVp6V1hiWGo5dl9GMFVITkFXYUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw OTE2LzA0MEI4N0JBMzY0QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldY YlhqOXZfRjBVSE5BV2FJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKCr2n+Q4Q7hPI3InnVidAi0hMybzzyX2etNQNBtz3X//eJK16LzPKww owpRYdh0OP/JT5wxG94C+MMIeKYkydNAyFYKV4fSKi54rLz+273U0LK+rnO5l2Su +4X8C8Y9rvLXPIgfxmBWVpSkZ8m2H43aEIC4NKa/4L6Wv3tAd3xAsiLDg/8BEn3V 2q5WigYzEOXOxqxd1AeAXl27lau/bT329PUX/MVjGSeB67fxeOt1BhWBtbbwy+Qt zvnhWPw1PHxI91Pmnw7o/Ykg8qemeiHMbwoe7W44ANQj80ukYJKn6G2y6Pf5H4DW SPSWkBtisN1JEIQnx827pRrkL+CVwFQ= -----END CERTIFICATE-----Generated at Mon Jun 30 17:16:24 2025 by rpki-client