$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json) Hash identifier: b7LpvfyOfta59K2iuVpBdIyRa5O8a/opykaeKFJziEM= Subject key identifier: 91:05:D1:BF:72:F4:BF:AD:C9:54:F6:78:8A:F9:D4:C4:AE:90:8E:4C Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft Manifest number: 0209 Signing time: Thu 03 Jul 2025 02:26:52 +0000 Manifest this update: Thu 03 Jul 2025 02:26:52 +0000 Manifest next update: Thu 10 Jul 2025 02:26:52 +0000 Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: G30TIgdGO/pQBkMVaMrfaddENctMBC6uf8WQeNxUGkQ=) 2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: rc/VDMjkPbB4X1/rw349yGgl9pIXGG2Nvyj57rr+IWw=) 3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: 1pnwFpSmR4EBTHjCO/gvMKBX3b/KZHcHGgKDB9usLIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Validity Not Before: Jul 3 02:26:52 2025 GMT Not After : Jul 10 02:26:52 2025 GMT Subject: CN=6865ea6c-9df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d8:28:5b:51:01:83:0f:26:b0:2d:c6:10:a5: 39:a1:e2:bd:e9:16:65:11:1d:d6:49:54:32:2d:89: ee:83:3d:00:b3:7b:1a:40:0b:02:1f:f1:29:d9:8d: 4b:dc:71:23:d6:df:52:f4:b3:a6:ae:0e:db:fc:a8: 13:0f:32:2e:0b:ff:d8:4b:4f:6e:07:8a:33:c1:86: 33:ba:de:89:a1:f5:07:32:15:88:51:fc:bd:fb:9b: b5:50:0d:01:54:ac:c3:0d:1c:de:33:f9:09:3e:fe: 12:48:a9:0a:3b:fd:9f:98:a3:95:83:f5:22:b9:ee: 3f:ba:77:72:4a:c0:a5:7c:b1:0a:59:18:e7:a4:cc: 57:c0:9b:cf:7c:c5:a2:26:b7:84:e4:0a:1e:b2:76: b9:de:39:0e:a3:d5:bd:01:6d:ea:18:f6:51:56:cf: 20:ed:2f:d7:d8:10:f1:92:b2:7f:74:59:57:14:7c: f9:e0:69:f6:a5:3e:d5:81:ce:5e:01:34:2a:1d:d2: 33:08:e6:7f:4d:88:c5:12:52:48:34:96:45:ec:8a: 1a:60:cd:93:ab:ae:d8:d9:ef:6c:85:25:ec:61:74: e0:f0:30:5b:18:92:55:7e:b4:7d:42:f2:1c:7b:98: 2d:c7:bd:04:4b:9c:2f:ef:d8:c1:1c:a3:8c:5b:46: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:05:D1:BF:72:F4:BF:AD:C9:54:F6:78:8A:F9:D4:C4:AE:90:8E:4C X509v3 Authority Key Identifier: keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:05:af:d2:97:d0:7a:12:f4:56:7e:ed:1c:b8:d8:b9:65:1d: 14:52:79:29:36:27:55:0a:db:ff:9d:60:70:bd:b3:df:6d:69: 46:e5:36:4b:99:15:7c:2f:a1:6e:00:0f:62:bb:38:33:24:70: 09:3c:98:7b:c4:f4:32:46:25:ef:93:95:ff:9b:27:6a:c4:a7: 48:67:0a:24:0c:82:a0:df:c6:69:55:de:06:f9:ea:05:7e:97: c4:e7:f9:9a:9c:b4:d6:32:97:8f:75:8d:f2:e0:92:a5:2c:d6: 65:a1:4e:02:78:1d:40:af:e9:8c:b5:70:f6:20:a0:70:a6:a9: 6a:d8:b8:64:46:22:b5:37:db:5d:32:f7:00:ce:d2:e0:19:e5: 26:35:26:68:0a:45:a6:c7:b2:e0:23:dc:d7:c3:19:dc:3d:fa: fe:a3:84:af:ef:8d:e5:f8:b9:a6:83:f9:96:6a:29:b9:04:18: 29:df:01:35:a7:56:73:f9:0e:f0:5e:59:f7:80:20:1d:cd:ae: 35:5a:2d:b8:7c:09:c4:3c:39:7d:7b:14:05:00:69:5b:ba:20: 85:4e:59:ed:65:94:2b:27:27:05:1e:2c:35:7b:08:60:e4:b3: 86:4d:f6:40:15:f9:7a:ca:35:c2:b5:e4:c1:ac:b9:4b:e7:5f: f7:0e:d4:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5 QjEzNzU4MUYwHhcNMjUwNzAzMDIyNjUyWhcNMjUwNzEwMDIyNjUyWjAYMRYwFAYD VQQDEw02ODY1ZWE2Yy05ZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dgoW1EBgw8msC3GEKU5oeK96RZlER3WSVQyLYnugz0As3saQAsCH/Ep2Y1L 3HEj1t9S9LOmrg7b/KgTDzIuC//YS09uB4ozwYYzut6JofUHMhWIUfy9+5u1UA0B VKzDDRzeM/kJPv4SSKkKO/2fmKOVg/Uiue4/undySsClfLEKWRjnpMxXwJvPfMWi JreE5Aoesna53jkOo9W9AW3qGPZRVs8g7S/X2BDxkrJ/dFlXFHz54Gn2pT7Vgc5e ATQqHdIzCOZ/TYjFElJINJZF7IoaYM2Tq67Y2e9shSXsYXTg8DBbGJJVfrR9QvIc e5gtx70ES5wv79jBHKOMW0bWTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEF0b9y 9L+tyVT2eIr51MSukI5MMB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCQi85NDUxRDM3MjRBMDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hL Wl9paG0tV2hzb0tiRTNXQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwBa/Sl9B6EvRWfu0cuNi5ZR0UUnkpNidVCtv/nWBwvbPfbWlG5TZL mRV8L6FuAA9iuzgzJHAJPJh7xPQyRiXvk5X/mydqxKdIZwokDIKg38ZpVd4G+eoF fpfE5/manLTWMpePdY3y4JKlLNZloU4CeB1Ar+mMtXD2IKBwpqlq2LhkRiK1N9td MvcAztLgGeUmNSZoCkWmx7LgI9zXwxncPfr+o4Sv743l+Lmmg/mWaim5BBgp3wE1 p1Zz+Q7wXln3gCAdza41Wi24fAnEPDl9exQFAGlbuiCFTlntZZQrJycFHiw1ewhg 5LOGTfZAFfl6yjXCteTBrLlL51/3DtT3 -----END CERTIFICATE-----Generated at Thu Jul 3 08:54:59 2025 by rpki-client