$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: 3nZEjKXgjTTDn+utgGFhOlEsjC/x/6oO9ofyvNQtPbE= Subject key identifier: F3:43:B7:A8:2C:50:9C:21:27:55:8B:AF:02:52:17:72:D9:AD:F3:96 Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: 74 Signing time: Tue 01 Jul 2025 07:34:29 +0000 Manifest this update: Tue 01 Jul 2025 07:34:28 +0000 Manifest next update: Tue 08 Jul 2025 07:34:28 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: 6awbVSfwIKKtFnk28FOq/dvh9N7polJk01Ubp1zRQdU=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Jul 1 07:34:28 2025 GMT Not After : Jul 8 07:34:28 2025 GMT Subject: CN=68638f84-b497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:2f:b2:7d:d5:df:2a:ef:e4:10:dd:74:9c: 03:a8:fb:17:a1:0f:a9:46:4c:0c:c2:b4:50:6d:9b: 15:43:e7:7a:ad:47:67:17:10:4f:81:4b:8e:38:b2: 0d:57:c7:dc:23:73:a9:3f:ca:68:a6:e8:54:3d:71: b3:58:f2:b0:3b:d9:65:7c:5d:ab:42:16:b0:c4:40: 94:c8:ad:70:f7:ae:92:c0:31:08:e0:09:f1:35:8a: 55:2f:b5:f8:70:d6:bc:c1:f8:08:a7:f5:0b:73:29: 30:51:9c:1b:5f:b9:fc:92:3a:a0:8e:00:75:58:39: f6:bd:c0:ef:36:46:1c:48:a8:b8:31:d5:31:40:47: ee:bb:33:3d:13:4d:8c:28:e7:3e:ee:c3:9b:ab:33: 39:26:ed:30:9a:50:ae:5d:28:05:b2:d4:9c:da:85: 0c:df:8e:ab:11:bf:61:b8:49:ca:af:b0:a4:11:48: 57:03:3b:2a:b9:bf:e2:d5:1a:46:ca:57:97:d8:15: 2d:77:15:11:97:d8:72:06:0e:6d:0c:bf:3b:6a:c4: d8:53:a4:51:48:6e:d9:73:d0:04:b0:3f:68:b7:94: 5e:45:34:72:4e:41:f4:49:eb:e0:43:7a:11:c7:a1: 38:7b:67:a1:18:f5:11:37:51:94:4f:e4:1c:55:9b: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:43:B7:A8:2C:50:9C:21:27:55:8B:AF:02:52:17:72:D9:AD:F3:96 X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:73:87:44:2e:1f:35:00:81:b7:b6:5d:e4:cb:d7:51:46:59: a4:11:ee:e8:dd:d8:74:96:50:68:f2:34:64:3f:10:88:f1:0f: 07:a5:0c:38:ad:dc:65:7e:28:d4:28:cf:76:e9:b1:59:e3:2d: a8:17:a7:a4:6c:68:b2:2d:4f:81:ff:af:7a:45:82:9f:bf:df: 2d:66:ac:76:aa:74:84:b5:b3:8b:d3:fa:ff:54:00:d2:bf:16: 81:b0:e3:0b:62:5b:7a:85:0e:f6:8c:1c:9c:10:f8:22:4a:7f: 36:5d:05:dc:a2:41:54:c1:9b:4d:70:88:dc:3a:00:58:be:18: d1:8d:c1:68:64:74:f6:0a:aa:7b:36:2c:d2:89:49:aa:0c:79: 80:4f:c0:19:00:0a:66:35:47:0d:d9:d9:e0:35:82:1b:2a:25: 00:ad:aa:a8:ef:a7:c5:57:cf:90:a9:79:43:26:75:d5:2b:2e: bb:26:c5:d8:f9:b0:0f:8f:19:9e:9a:4a:fe:5c:70:f4:05:c6: dd:b5:8f:c4:fd:cf:51:f8:f2:50:86:31:bc:0d:87:00:ce:57: 8a:d6:42:af:f5:46:3d:60:a2:ab:d4:8b:2a:fe:3e:6c:f6:80: 91:f2:95:fc:90:c2:88:1c:50:12:98:4c:38:d3:07:6a:d8:d4: cf:0d:83:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoRjA0OTI5RUY3NDNDNTRDMDhCNDVFMTlDRkM1MUJGMkFB NTU5REFBMTAeFw0yNTA3MDEwNzM0MjhaFw0yNTA3MDgwNzM0MjhaMBgxFjAUBgNV BAMTDTY4NjM4Zjg0LWI0OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhPS+yfdXfKu/kEN10nAOo+xehD6lGTAzCtFBtmxVD53qtR2cXEE+BS444sg1X x9wjc6k/ymim6FQ9cbNY8rA72WV8XatCFrDEQJTIrXD3rpLAMQjgCfE1ilUvtfhw 1rzB+Ain9QtzKTBRnBtfufySOqCOAHVYOfa9wO82RhxIqLgx1TFAR+67Mz0TTYwo 5z7uw5urMzkm7TCaUK5dKAWy1JzahQzfjqsRv2G4ScqvsKQRSFcDOyq5v+LVGkbK V5fYFS13FRGX2HIGDm0MvztqxNhTpFFIbtlz0ASwP2i3lF5FNHJOQfRJ6+BDehHH oTh7Z6EY9RE3UZRP5BxVmwTFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU80O3qCxQ nCEnVYuvAlIXctmt85YwHwYDVR0jBBgwFoAU8Ekp73Q8VMCLReGc/FG/KqVZ2qEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzhDMjE0OTc0QTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEVrcDczUThWTUNMUmVHY19GR19LcVZaMnFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NjVGLzhDMjE0OTc0QTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1D TFJlR2NfRkdfS3FWWjJxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALBzh0QuHzUAgbe2XeTL11FGWaQR7ujd2HSWUGjyNGQ/EIjxDwelDDit 3GV+KNQoz3bpsVnjLagXp6RsaLItT4H/r3pFgp+/3y1mrHaqdIS1s4vT+v9UANK/ FoGw4wtiW3qFDvaMHJwQ+CJKfzZdBdyiQVTBm01wiNw6AFi+GNGNwWhkdPYKqns2 LNKJSaoMeYBPwBkACmY1Rw3Z2eA1ghsqJQCtqqjvp8VXz5CpeUMmddUrLrsmxdj5 sA+PGZ6aSv5ccPQFxt21j8T9z1H48lCGMbwNhwDOV4rWQq/1Rj1goqvUiyr+Pmz2 gJHylfyQwogcUBKYTDjTB2rY1M8Ngyw= -----END CERTIFICATE-----Generated at Wed Jul 2 22:45:20 2025 by rpki-client