$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json) Hash identifier: lhpnjtXfrB622bb/v4q7W/12Mq7gFP/0hP5F/OEqXdg= Subject key identifier: C2:5A:7F:0B:81:46:76:92:45:DD:48:F2:44:09:FC:B8:C9:F6:D9:79 Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft Manifest number: 0192 Signing time: Thu 03 Jul 2025 03:30:24 +0000 Manifest this update: Thu 03 Jul 2025 03:30:23 +0000 Manifest next update: Thu 10 Jul 2025 03:30:23 +0000 Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: IWN7D9lf77BRGdlyZNjgbr1aiEWT5sXGHELxc+Qa6vg=) 2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: tnhVbAfny5ry4j6HJiWID5oWjAmaD653liAgf81aO1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: Jul 3 03:30:23 2025 GMT Not After : Jul 10 03:30:23 2025 GMT Subject: CN=6865f950-fe02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:69:6e:29:c4:65:47:e5:d7:33:e2:65:85:29: 90:f4:c6:4f:a6:8c:31:5a:95:78:db:05:b2:a5:5a: fd:03:d6:d3:e0:58:2b:1e:c8:5a:e3:8c:36:b6:59: 15:96:dc:a1:d5:01:b4:5e:73:95:d0:5b:42:fb:e2: e6:96:22:ce:46:90:f9:a5:a3:2f:c7:17:69:7d:20: 75:69:21:e6:4b:ec:62:1a:14:34:f2:d0:b2:07:3e: db:7d:b6:1c:46:2b:0d:3a:9b:ff:6a:d6:5e:71:97: 04:d4:6d:5d:98:ab:2b:ba:14:c6:90:6f:10:ab:73: 63:ce:a8:91:d0:90:8a:99:55:2a:1f:ed:45:a5:e6: bf:2a:61:71:e1:5b:11:24:80:a4:f7:c6:cd:c9:06: c3:8c:50:c0:1b:23:85:95:dd:16:7f:f2:35:ab:1d: 38:28:9b:7b:63:37:94:c0:7a:5c:d1:50:2a:b2:e6: 34:97:fa:0a:b3:6b:54:52:6e:42:54:15:93:98:d2: 67:9b:b8:2d:1d:34:4f:0d:64:31:ff:fa:d5:1d:41: 81:70:ca:81:34:f0:79:5c:f0:43:95:aa:58:b9:da: 15:30:f1:60:a3:3c:98:18:a4:6b:f0:9b:db:0a:dd: ab:67:1c:4f:74:54:9d:74:07:f4:cc:80:ee:8e:6f: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5A:7F:0B:81:46:76:92:45:DD:48:F2:44:09:FC:B8:C9:F6:D9:79 X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:52:c4:39:76:60:41:17:3d:67:ad:7c:4f:16:69:81:3b:bb: e5:b2:6d:8d:de:27:75:ab:ea:af:74:87:46:67:67:87:0a:c1: 8c:8b:eb:33:59:ec:22:c1:3a:dd:70:79:39:ce:08:a7:c4:bd: 3a:4f:46:7f:d0:f6:c9:1b:e7:b4:c8:e6:0b:d4:47:24:52:36: 9b:06:db:d7:f5:ba:b7:ff:08:d6:97:7b:66:d9:ef:a3:3d:10: 35:0d:73:44:f6:e8:ee:c1:3e:a1:b2:64:fa:54:ef:0b:1a:80: 42:be:62:7b:8a:90:ff:91:1f:66:49:aa:ac:92:0a:22:47:86: b3:66:bc:8d:d5:7c:b9:e9:07:f9:e7:6b:49:a7:70:f6:61:a3: 12:33:0c:da:1d:c5:fa:42:db:d8:6c:04:e2:2d:5c:c9:1e:29: 65:0c:76:36:ab:32:8d:91:f1:ea:a4:55:90:cc:9d:ae:17:f5: 0b:a4:22:98:63:1e:8f:fd:68:31:1d:60:94:ad:93:b7:eb:f4: 46:69:4d:0e:68:7a:51:52:62:df:b5:4b:ca:51:93:66:73:4d: 1d:81:df:56:23:e0:df:64:8b:0a:c2:f5:f0:9c:88:43:a4:d8: 17:68:1d:4a:89:9f:33:fc:81:b8:da:19:a8:49:91:35:a7:c0: 5e:e1:eb:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjUwNzAzMDMzMDIzWhcNMjUwNzEwMDMzMDIzWjAYMRYwFAYD VQQDEw02ODY1Zjk1MC1mZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WluKcRlR+XXM+JlhSmQ9MZPpowxWpV42wWypVr9A9bT4FgrHsha44w2tlkV ltyh1QG0XnOV0FtC++LmliLORpD5paMvxxdpfSB1aSHmS+xiGhQ08tCyBz7bfbYc RisNOpv/atZecZcE1G1dmKsruhTGkG8Qq3NjzqiR0JCKmVUqH+1Fpea/KmFx4VsR JICk98bNyQbDjFDAGyOFld0Wf/I1qx04KJt7YzeUwHpc0VAqsuY0l/oKs2tUUm5C VBWTmNJnm7gtHTRPDWQx//rVHUGBcMqBNPB5XPBDlapYudoVMPFgozyYGKRr8Jvb Ct2rZxxPdFSddAf0zIDujm99HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJafwuB RnaSRd1I8kQJ/LjJ9tl5MB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz R19sMzR4RnZXQjlSRk5BMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACUsQ5dmBBFz1nrXxPFmmBO7vlsm2N3id1q+qvdIdGZ2eHCsGMi+sz WewiwTrdcHk5zginxL06T0Z/0PbJG+e0yOYL1EckUjabBtvX9bq3/wjWl3tm2e+j PRA1DXNE9ujuwT6hsmT6VO8LGoBCvmJ7ipD/kR9mSaqskgoiR4azZryN1Xy56Qf5 52tJp3D2YaMSMwzaHcX6QtvYbATiLVzJHillDHY2qzKNkfHqpFWQzJ2uF/ULpCKY Yx6P/WgxHWCUrZO36/RGaU0OaHpRUmLftUvKUZNmc00dgd9WI+DfZIsKwvXwnIhD pNgXaB1KiZ8z/IG42hmoSZE1p8Be4etb -----END CERTIFICATE-----Generated at Thu Jul 3 14:43:47 2025 by rpki-client