$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: UTZ7qmtDYfXPWMoYWa5Y/h4PejbsXiWXhdT76wPZYqY= Subject key identifier: AE:F6:E2:4D:5E:89:1E:C5:9A:B0:93:C5:C4:D7:19:66:D0:CD:03:CE Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 04A5 Signing time: Tue 01 Jul 2025 00:27:45 +0000 Manifest this update: Tue 01 Jul 2025 00:27:44 +0000 Manifest next update: Tue 08 Jul 2025 00:27:44 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: NqqDiG7B+fhILnkNTQNXCikJw9zw5iyT26kGRU4e1mI=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: zdwLUFrK62NtcQ/mdbUvAzqM7ityQdkX7IQIHBe+tG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Jul 1 00:27:44 2025 GMT Not After : Jul 8 00:27:44 2025 GMT Subject: CN=68632b80-2c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:ca:f2:3f:97:36:f5:0b:ea:c1:4b:ef:c0: 80:0b:c2:99:9d:f9:7d:77:17:27:e7:61:83:7e:1a: 71:3e:8d:e6:95:b8:64:ba:03:e9:9f:e9:70:f1:78: 76:25:45:53:b4:fb:42:3c:a0:4c:2e:be:58:da:1c: 4f:24:88:b8:0f:26:75:bd:62:ea:e1:65:c0:f7:cc: 56:66:a5:ca:ef:97:0f:45:1f:67:05:14:6a:8e:db: 5b:75:bf:7e:f7:f9:7c:be:63:d9:80:e3:92:84:58: 0f:5d:ed:d4:9b:8e:ea:85:30:03:c8:2f:ac:6e:76: ab:be:8c:2f:80:e1:9e:65:ba:1f:34:c7:f3:91:75: 84:82:97:81:db:f1:50:b0:a7:bc:7b:37:c0:06:59: 0b:05:72:1e:bf:fb:07:54:9c:11:90:0e:08:94:3c: dd:a9:cd:02:98:9c:02:5a:f5:7d:66:47:30:3e:b5: 50:3b:fa:54:e8:f0:9f:d2:62:cf:84:56:db:25:5a: 44:47:c9:fb:78:73:ea:31:ab:30:b5:2c:e8:b1:7b: 21:e8:fb:5a:4d:12:db:c6:7e:5d:76:91:b8:23:16: c1:2a:32:57:44:6a:36:e0:d8:7e:bb:24:9c:03:87: 92:19:63:56:67:ed:ac:9f:06:dd:78:ea:a9:1e:75: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F6:E2:4D:5E:89:1E:C5:9A:B0:93:C5:C4:D7:19:66:D0:CD:03:CE X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:da:ef:d3:6e:a4:90:cf:d6:87:4a:af:53:ae:ed:da:21:3a: 93:e0:19:99:61:f6:d8:6d:2f:38:b8:59:37:81:fd:1c:d2:06: 02:07:64:b1:be:22:8d:ed:12:1b:fe:b2:97:3c:3f:cd:89:e6: 6f:5c:ee:e1:29:61:2f:a5:c9:57:aa:1c:f6:84:b3:7c:98:78: 9c:9c:4e:21:7d:af:30:22:33:c6:4e:b1:b0:a2:84:8d:69:c1: 03:01:8d:15:b5:b4:fb:fe:f6:b9:e7:b9:18:ae:2c:69:d1:22: 46:4d:10:20:6d:b8:09:f3:2f:b4:72:5c:fe:7b:0e:5a:46:f7: 45:40:0b:bf:47:57:27:36:2a:aa:63:09:56:a0:f7:9f:34:89: 3f:01:57:50:c1:a6:52:0e:29:d0:4b:8c:d8:27:8e:db:1d:d0: c0:65:59:28:9b:18:e8:a3:ca:6a:ee:6c:6a:ff:ee:4f:5f:b8: 37:5b:59:6b:0f:6e:f5:d4:18:86:a6:75:22:e5:8e:b4:74:a7: dc:e2:c8:2e:25:91:67:26:de:ce:8b:96:79:1c:88:9a:dc:24: fc:0d:03:38:40:a7:4b:0a:46:02:09:9c:68:81:cd:a0:96:43: 8d:60:1c:c0:5e:bc:90:64:2e:67:3c:f7:88:49:dc:10:3b:66: dc:bf:c4:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjUwNzAxMDAyNzQ0WhcNMjUwNzA4MDAyNzQ0WjAYMRYwFAYD VQQDEw02ODYzMmI4MC0yYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva7K8j+XNvUL6sFL78CAC8KZnfl9dxcn52GDfhpxPo3mlbhkugPpn+lw8Xh2 JUVTtPtCPKBMLr5Y2hxPJIi4DyZ1vWLq4WXA98xWZqXK75cPRR9nBRRqjttbdb9+ 9/l8vmPZgOOShFgPXe3Um47qhTADyC+sbnarvowvgOGeZbofNMfzkXWEgpeB2/FQ sKe8ezfABlkLBXIev/sHVJwRkA4IlDzdqc0CmJwCWvV9ZkcwPrVQO/pU6PCf0mLP hFbbJVpER8n7eHPqMaswtSzosXsh6PtaTRLbxn5ddpG4IxbBKjJXRGo24Nh+uySc A4eSGWNWZ+2snwbdeOqpHnVDCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK724k1e iR7FmrCTxcTXGWbQzQPOMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT2u/TbqSQz9aHSq9Tru3aITqT4BmZYfbYbS84uFk3gf0c0gYCB2Sx viKN7RIb/rKXPD/NieZvXO7hKWEvpclXqhz2hLN8mHicnE4hfa8wIjPGTrGwooSN acEDAY0VtbT7/va557kYrixp0SJGTRAgbbgJ8y+0clz+ew5aRvdFQAu/R1cnNiqq YwlWoPefNIk/AVdQwaZSDinQS4zYJ47bHdDAZVkomxjoo8pq7mxq/+5PX7g3W1lr D2711BiGpnUi5Y60dKfc4sguJZFnJt7Oi5Z5HIia3CT8DQM4QKdLCkYCCZxogc2g lkONYBzAXryQZC5nPPeISdwQO2bcv8Qz -----END CERTIFICATE-----Generated at Wed Jul 2 16:24:11 2025 by rpki-client