$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: UkR21YoXjcQ0z3Sf7PCa5BIxwQw1zJUKlEvwze8iqcE= Subject key identifier: 72:57:B3:95:2E:69:23:65:B6:A5:ED:AF:97:DC:98:60:A4:BB:13:43 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 0204 Signing time: Thu 03 Jul 2025 02:29:18 +0000 Manifest this update: Thu 03 Jul 2025 02:29:17 +0000 Manifest next update: Thu 10 Jul 2025 02:29:17 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: Irc7PNVpoJzA9kINisnFYg9oGawi39VB18eJy4NCv0w=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: GEtYiWLknMjIUtasCLz3xO+Z9HJ/gkoudL4BFK8Uyb8=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: JJtIODUU0vxeCd16MdkVxGe00rno7Fl7ALBMI2DvnXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Jul 3 02:29:17 2025 GMT Not After : Jul 10 02:29:17 2025 GMT Subject: CN=6865eafd-d26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:58:f9:61:7a:59:a9:f2:94:a7:53:7e:f3: ed:44:a7:29:34:72:35:62:4d:35:30:b8:36:7d:7c: c3:ed:ef:e3:82:91:fe:fb:f5:a3:f4:62:bc:74:f1: a1:de:5a:f5:75:bc:50:05:cc:01:8c:d1:e9:0e:49: d0:65:17:80:a7:96:f1:12:d2:63:c8:36:e2:8d:2b: ed:b3:bd:13:78:c7:86:8e:81:20:ba:e1:0a:c5:1e: 6b:b0:28:8e:f5:bd:60:6a:ae:30:87:f8:b1:b2:01: e7:c7:73:ab:f6:c5:9a:55:77:5a:8e:d6:4f:24:da: fc:ed:d6:dd:61:49:05:96:3c:89:83:6b:0a:f7:44: 2c:76:ee:e0:0c:b6:74:8f:0f:a3:8f:13:51:d9:fc: 38:00:e0:82:8a:87:40:cf:41:1e:c0:79:96:7f:aa: 3c:b5:9f:a7:ab:c5:47:44:c6:b4:bd:cd:34:d9:5c: 2d:87:08:ec:59:fe:4c:2c:e8:b7:77:e5:a4:f5:b1: ec:7f:93:a0:4a:13:cc:3c:33:ba:d1:b1:9a:e3:c0: 63:08:57:6a:6b:4c:ad:ec:37:85:a2:89:8d:c5:04: d5:a0:99:3d:4f:c8:fd:61:06:31:98:85:dc:9b:90: 31:90:c8:46:82:17:fd:00:42:ae:07:1e:bc:96:bf: d2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:57:B3:95:2E:69:23:65:B6:A5:ED:AF:97:DC:98:60:A4:BB:13:43 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:77:c8:8f:fe:a8:3a:85:c9:7a:de:42:ed:74:21:33:6f:7a: 51:b2:53:0b:fd:90:4b:f7:59:18:cf:9b:06:0c:63:b1:b2:2a: ca:09:84:04:c5:d3:12:fe:3a:71:6b:1c:fe:af:37:4b:cb:c2: 4d:d2:9d:95:57:52:49:bc:c9:92:8d:d7:22:94:5f:1f:cc:e6: a9:95:bb:75:fa:da:5a:26:9d:2d:ad:55:88:d5:cc:64:b2:e3: a0:fb:6f:41:e3:ea:f1:ed:3c:0b:da:a3:54:57:6e:03:d3:b2: 84:35:d0:40:3d:53:7d:6c:38:dd:fa:62:99:ed:e6:02:0d:6b: 17:91:5b:f6:e7:f6:ab:67:d5:11:9a:b3:0c:44:ed:41:b9:b7: 18:e6:29:00:ff:6a:65:85:ad:ac:b3:6f:0e:3c:24:66:26:4e: 0e:67:c1:a2:e7:d2:a9:5b:fc:1f:2a:41:0c:5c:a0:a9:77:ff: a9:32:3e:49:cd:3c:95:5c:22:de:02:6e:db:3a:ce:5b:79:2f: 13:f9:fb:81:53:eb:85:aa:ba:c3:52:26:a1:9f:a3:a2:2f:0e: cb:94:b7:7d:75:ab:56:16:c0:55:14:c8:54:e8:c6:9b:66:33: b3:2d:eb:79:03:0c:9a:9e:37:dc:8c:9f:46:65:d6:56:da:a4: c7:d2:e6:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjUwNzAzMDIyOTE3WhcNMjUwNzEwMDIyOTE3WjAYMRYwFAYD VQQDEw02ODY1ZWFmZC1kMjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvldY+WF6WanylKdTfvPtRKcpNHI1Yk01MLg2fXzD7e/jgpH++/Wj9GK8dPGh 3lr1dbxQBcwBjNHpDknQZReAp5bxEtJjyDbijSvts70TeMeGjoEguuEKxR5rsCiO 9b1gaq4wh/ixsgHnx3Or9sWaVXdajtZPJNr87dbdYUkFljyJg2sK90Qsdu7gDLZ0 jw+jjxNR2fw4AOCCiodAz0EewHmWf6o8tZ+nq8VHRMa0vc002VwthwjsWf5MLOi3 d+Wk9bHsf5OgShPMPDO60bGa48BjCFdqa0yt7DeFoomNxQTVoJk9T8j9YQYxmIXc m5AxkMhGghf9AEKuBx68lr/SMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJXs5Uu aSNltqXtr5fcmGCkuxNDMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgd8iP/qg6hcl63kLtdCEzb3pRslML/ZBL91kYz5sGDGOxsirKCYQE xdMS/jpxaxz+rzdLy8JN0p2VV1JJvMmSjdcilF8fzOaplbt1+tpaJp0trVWI1cxk suOg+29B4+rx7TwL2qNUV24D07KENdBAPVN9bDjd+mKZ7eYCDWsXkVv25/arZ9UR mrMMRO1BubcY5ikA/2plha2ss28OPCRmJk4OZ8Gi59KpW/wfKkEMXKCpd/+pMj5J zTyVXCLeAm7bOs5beS8T+fuBU+uFqrrDUiahn6OiLw7LlLd9datWFsBVFMhU6Mab ZjOzLet5AwyanjfcjJ9GZdZW2qTH0uba -----END CERTIFICATE-----Generated at Thu Jul 3 04:30:52 2025 by rpki-client