$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft File: K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json) Hash identifier: NBKOUNj3pg2Xvfq9RvEl+w68UK85Qjdto7CsmhXTRfI= Subject key identifier: 05:82:75:8B:71:9D:EA:DF:57:D9:57:A1:BB:34:8A:FB:91:CF:DD:5F Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft Manifest number: 015F Signing time: Thu 03 Jul 2025 04:06:16 +0000 Manifest this update: Thu 03 Jul 2025 04:06:15 +0000 Manifest next update: Thu 10 Jul 2025 04:06:15 +0000 Files and hashes: 1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: NX+HRmKpH8bpDFG3HtmO0JN5odiKlWF1pi4HTayA4gg=) 2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: bUZufHm2YUJjKX7UE+iKB/iI+xqEJZ46mEmd8NCr+x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Validity Not Before: Jul 3 04:06:15 2025 GMT Not After : Jul 10 04:06:15 2025 GMT Subject: CN=686601b7-2002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:70:fb:67:f2:ad:b3:3a:d9:87:6f:54:9c: 79:fe:18:08:7d:f6:ce:90:a1:94:3a:5e:e1:aa:ab: bd:54:f4:85:cb:87:4b:3c:4e:31:d1:4f:66:35:b4: 1e:cd:ea:c0:95:9b:b7:29:8b:0e:09:09:0f:23:68: 0f:e5:1d:a8:22:56:44:82:6e:72:0f:16:ef:a0:a5: f3:de:37:d5:f4:7b:8c:26:d0:55:93:4f:46:88:9f: 44:52:46:d3:77:7d:6d:36:bb:8d:c8:65:4b:c2:d1: 79:06:00:32:50:ef:75:38:ae:ce:89:29:7f:f0:c8: 34:5c:a8:81:f6:16:8a:7f:bb:d9:4f:4d:86:fb:e5: 01:21:e6:00:94:69:67:fe:a8:64:6e:ef:5e:da:b9: 6c:49:21:f2:e7:ad:9b:49:4f:9f:2b:a5:65:75:ca: 13:74:de:6d:e6:11:c5:3f:21:56:2c:26:69:e5:25: 3d:a1:68:5d:0c:d3:b8:45:dc:27:2a:08:f3:47:8b: ad:9d:37:bd:6e:e0:43:96:2a:f5:de:e2:13:db:19: 58:df:df:24:dc:39:2a:7f:35:78:52:4b:e4:81:16: 95:98:00:2c:8d:dc:50:70:2a:79:ef:d1:37:8c:e5: e3:d7:83:98:98:eb:54:5d:ba:e7:18:95:ec:ea:34: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:82:75:8B:71:9D:EA:DF:57:D9:57:A1:BB:34:8A:FB:91:CF:DD:5F X509v3 Authority Key Identifier: keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:27:f0:de:b8:f9:27:cc:21:84:c1:c7:ba:7a:cd:35:dc:66: f6:51:49:1c:bc:d0:f7:44:fb:ff:af:84:66:2c:19:c9:b5:01: 60:ce:f1:6d:df:9c:3a:69:e9:ff:24:5b:90:f6:6d:1b:a2:96: df:e8:e8:55:3b:46:90:94:8d:79:bc:47:a7:4c:a5:84:f0:71: a7:9a:62:59:e4:6c:40:9e:f5:b8:0b:e4:1f:ca:df:c3:48:62: 2b:ba:97:c7:dc:93:ee:96:c8:47:be:e6:ae:b4:ca:58:85:4b: 4c:b6:c0:82:88:fe:48:4b:4d:6e:c4:f2:22:ef:bb:23:db:59: ea:35:4e:fd:14:70:2d:fa:ab:29:f4:a6:18:76:3b:01:a1:ed: ab:c7:62:14:63:a3:2f:12:b4:44:1b:8b:ac:a8:26:26:3c:46: 95:24:dc:b6:5f:7c:46:d1:c9:6b:9a:19:fb:e6:c3:a3:e6:91: 09:52:56:3d:b1:cb:4a:30:81:cd:d1:f3:b4:f4:6c:a8:59:8c: d4:24:da:fb:8f:47:3c:1e:4a:22:84:ea:54:3b:82:2b:b6:f8: 72:30:e9:27:27:34:a4:85:5e:37:62:b2:a3:6b:14:2e:27:e0: 79:26:c5:80:d2:0a:a4:b6:0f:97:85:1b:e6:67:fe:55:24:ef: 25:ac:30:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUyNUExMTAvBgNVBAUTKDJCQ0ExMkQ0NkQ0NjExRUQ2RUYxODg2RjM2NDQ2OERG M0QwMkVERTUwHhcNMjUwNzAzMDQwNjE1WhcNMjUwNzEwMDQwNjE1WjAYMRYwFAYD VQQDEw02ODY2MDFiNy0yMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cJw+2fyrbM62YdvVJx5/hgIffbOkKGUOl7hqqu9VPSFy4dLPE4x0U9mNbQe zerAlZu3KYsOCQkPI2gP5R2oIlZEgm5yDxbvoKXz3jfV9HuMJtBVk09GiJ9EUkbT d31tNruNyGVLwtF5BgAyUO91OK7OiSl/8Mg0XKiB9haKf7vZT02G++UBIeYAlGln /qhkbu9e2rlsSSHy562bSU+fK6VldcoTdN5t5hHFPyFWLCZp5SU9oWhdDNO4Rdwn KgjzR4utnTe9buBDlir13uIT2xlY398k3DkqfzV4UkvkgRaVmAAsjdxQcCp579E3 jOXj14OYmOtUXbrnGJXs6jTU2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWCdYtx nerfV9lXobs0ivuRz91fMB8GA1UdIwQYMBaAFCvKEtRtRhHtbvGIbzZEaN89Au3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTI1QS8yQzk2RjUwODQw OTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0VlMXU4WWh2TmtSbzN6MEM3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4b1MxRzFHRWUxdThZaHZOa1JvM3owQzdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTI1QS8yQzk2RjUwODQwOTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0Vl MXU4WWh2TmtSbzN6MEM3ZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNJ/DeuPknzCGEwce6es013Gb2UUkcvND3RPv/r4RmLBnJtQFgzvFt 35w6aen/JFuQ9m0bopbf6OhVO0aQlI15vEenTKWE8HGnmmJZ5GxAnvW4C+Qfyt/D SGIrupfH3JPulshHvuautMpYhUtMtsCCiP5IS01uxPIi77sj21nqNU79FHAt+qsp 9KYYdjsBoe2rx2IUY6MvErREG4usqCYmPEaVJNy2X3xG0clrmhn75sOj5pEJUlY9 sctKMIHN0fO09GyoWYzUJNr7j0c8HkoihOpUO4IrtvhyMOknJzSkhV43YrKjaxQu J+B5JsWA0gqktg+XhRvmZ/5VJO8lrDCc -----END CERTIFICATE-----Generated at Thu Jul 3 15:06:28 2025 by rpki-client