$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: XDz8rR8EJHtQmyhO1Pfh//epbkHJURBlyMhO96WD+hM= Subject key identifier: BF:E1:2E:76:1D:9A:9E:90:02:AB:3F:46:A6:B6:A9:95:4D:07:8D:84 Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 06BC Signing time: Mon 30 Jun 2025 22:26:08 +0000 Manifest this update: Mon 30 Jun 2025 22:26:08 +0000 Manifest next update: Mon 07 Jul 2025 22:26:08 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: opx0KWznTEC2GGMmHer08C9ObDK5pTiIFAfnCB6GFGg=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Jun 30 22:26:08 2025 GMT Not After : Jul 7 22:26:08 2025 GMT Subject: CN=68630f00-d59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:0b:ba:b7:0f:88:e2:0e:c2:c3:e4:01:13: 3d:56:27:23:bd:1d:2b:9e:bf:89:52:5e:17:1b:07: 4e:6c:57:e2:e1:4e:c4:67:22:6a:22:53:6f:18:3f: c4:1b:cb:d7:21:20:51:79:eb:64:1d:0f:eb:51:67: f7:b5:40:b1:aa:3a:56:bf:35:21:a4:60:d9:07:0e: 35:b3:f1:6c:60:0f:db:51:67:46:80:21:ce:48:68: 10:bd:6e:8e:b8:ca:73:a5:f2:d4:48:8b:9b:03:49: 49:34:f2:0e:1e:51:c8:b7:d2:a2:23:0a:da:8f:3e: aa:aa:98:3a:0b:94:09:fa:14:d5:6e:54:2e:68:f8: 9b:c2:74:3a:10:f5:fe:23:d0:1a:aa:92:c9:70:cb: 5b:79:a3:bd:b9:47:37:e9:41:69:b8:fd:06:67:04: 53:a6:1b:e3:7f:eb:9d:ae:86:bc:2e:39:68:64:ca: 0a:59:0a:29:86:43:93:69:72:a8:1f:09:b7:c9:43: 96:39:01:11:85:e3:df:b2:fe:42:5b:b2:21:2a:8c: 0b:ab:ab:dd:ae:9b:88:49:67:20:34:1d:20:07:5d: a1:36:61:c3:16:65:3c:ee:f3:73:70:9c:71:47:b2: cd:da:7e:4d:49:27:6a:89:26:50:d1:62:a8:b2:3d: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E1:2E:76:1D:9A:9E:90:02:AB:3F:46:A6:B6:A9:95:4D:07:8D:84 X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c5:09:e6:fb:b5:43:d7:ab:67:22:3b:cc:04:7c:cb:0e:ff: 28:c2:c3:9a:c9:56:e5:77:28:fa:ed:da:d4:6c:2e:f8:5b:38: 93:c7:09:dd:71:41:93:0e:f7:ca:a8:b8:88:f6:43:14:d9:af: 0a:5d:e9:c1:ea:b9:29:c8:5c:0c:7c:a3:8b:90:16:e4:b0:f8: 51:e4:36:31:40:59:a7:d8:21:6e:cc:0c:c1:49:28:f9:ee:a8: 17:fd:67:9c:1c:42:01:30:8e:2d:87:39:0d:cb:e0:dc:a6:d5: 6a:bb:27:bd:f3:95:cb:fc:e3:6d:50:2e:6b:bf:15:9d:47:8a: 78:7b:ef:c0:87:55:99:71:12:49:26:1f:6b:61:a6:10:55:ae: 81:8e:cb:c7:ba:4f:49:a7:30:6f:bf:86:d7:37:01:75:02:18: 29:d7:ef:80:ab:e3:83:40:55:d7:6a:d6:b0:cf:07:2c:4e:9e: 13:87:19:38:94:7a:87:f2:51:12:af:96:71:10:71:0d:0c:60: 75:07:78:57:a6:35:1d:c6:a6:c9:41:0d:ac:28:cd:ed:b5:cd: 41:a7:be:7b:27:f0:0a:17:e9:19:f6:37:d8:9f:4f:27:0f:6d: ee:4b:a4:34:e0:cc:86:75:72:0b:95:0e:1f:66:14:44:02:a8: ef:da:d6:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjUwNjMwMjIyNjA4WhcNMjUwNzA3MjIyNjA4WjAYMRYwFAYD VQQDEw02ODYzMGYwMC1kNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXYLurcPiOIOwsPkARM9VicjvR0rnr+JUl4XGwdObFfi4U7EZyJqIlNvGD/E G8vXISBReetkHQ/rUWf3tUCxqjpWvzUhpGDZBw41s/FsYA/bUWdGgCHOSGgQvW6O uMpzpfLUSIubA0lJNPIOHlHIt9KiIwrajz6qqpg6C5QJ+hTVblQuaPibwnQ6EPX+ I9AaqpLJcMtbeaO9uUc36UFpuP0GZwRTphvjf+udroa8LjloZMoKWQophkOTaXKo Hwm3yUOWOQERhePfsv5CW7IhKowLq6vdrpuISWcgNB0gB12hNmHDFmU87vNzcJxx R7LN2n5NSSdqiSZQ0WKosj0yxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/hLnYd mp6QAqs/Rqa2qZVNB42EMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwxQnm+7VD16tnIjvMBHzLDv8owsOayVbldyj67drUbC74WziTxwnd cUGTDvfKqLiI9kMU2a8KXenB6rkpyFwMfKOLkBbksPhR5DYxQFmn2CFuzAzBSSj5 7qgX/WecHEIBMI4thzkNy+DcptVquye985XL/ONtUC5rvxWdR4p4e+/Ah1WZcRJJ Jh9rYaYQVa6BjsvHuk9JpzBvv4bXNwF1Ahgp1++Aq+ODQFXXatawzwcsTp4Thxk4 lHqH8lESr5ZxEHENDGB1B3hXpjUdxqbJQQ2sKM3ttc1Bp757J/AKF+kZ9jfYn08n D23uS6Q04MyGdXILlQ4fZhREAqjv2tYP -----END CERTIFICATE-----Generated at Wed Jul 2 19:47:29 2025 by rpki-client