$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json) Hash identifier: Q6iCmyfMPymnJEvy4L3BckEY4EuXctZdqmElDuynPgA= Subject key identifier: 98:16:83:CF:76:A9:46:FE:90:44:81:5D:7D:FC:B5:06:30:53:6D:2A Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Certificate serial: 0B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft Manifest number: 0B07 Signing time: Wed 02 Jul 2025 19:33:08 +0000 Manifest this update: Wed 02 Jul 2025 19:33:08 +0000 Manifest next update: Wed 09 Jul 2025 19:33:08 +0000 Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: +J6ER5MuOj51bNh/wXbo3694ABT3kr+peLqrGKCIBug=) 2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: d1emA2UMoO8VznsV+Ait8FlVXTOyXdepIAgXYTBBJeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2830 (0xb0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Validity Not Before: Jul 2 19:33:08 2025 GMT Not After : Jul 9 19:33:08 2025 GMT Subject: CN=68658974-6928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:e1:a6:18:6c:01:fd:87:ba:b1:c8:49:11: 40:d9:dc:18:91:42:eb:f6:66:a2:aa:87:02:44:2e: 96:60:3c:ed:32:2f:9e:c0:87:b8:0b:27:27:60:71: 61:97:48:55:10:e2:ab:c4:a2:01:1d:68:e4:22:d3: ff:7d:65:ff:84:38:fe:20:dc:fd:95:8d:fe:ff:9e: c2:0b:f4:5a:32:3c:ca:2d:73:d2:ec:08:a7:c3:35: cd:b2:8b:16:b6:ae:14:3b:1b:f4:35:74:be:51:25: 1f:30:53:d9:a4:3f:3f:68:09:e1:f5:1d:d8:ab:0f: 87:0b:fe:d9:a4:8e:69:97:ec:06:6e:80:e5:51:11: 09:86:ef:90:3f:38:5a:00:6e:2b:62:90:45:96:4b: db:0f:12:a2:91:13:3d:38:b7:0e:46:5f:f7:ad:5a: 7a:59:b9:b4:e5:57:36:c0:25:00:90:b4:c2:d2:d7: 54:9b:45:25:58:e3:e1:53:35:ed:b6:42:49:cf:86: 86:63:3a:00:65:4a:f5:26:53:d5:3a:b5:8f:bc:bb: 9c:1a:57:d4:aa:83:e6:ab:8e:0d:26:f7:9c:a9:19: 73:5a:88:34:25:4a:fe:06:68:75:f9:4b:e1:97:1a: 19:43:ce:ad:d7:94:6e:c6:aa:74:de:11:da:64:ff: f2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:16:83:CF:76:A9:46:FE:90:44:81:5D:7D:FC:B5:06:30:53:6D:2A X509v3 Authority Key Identifier: keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f0:99:03:67:b8:c2:4c:08:e3:d5:dd:bb:09:50:f9:ed:06:5b: 12:6d:13:d5:76:08:3e:b1:8b:45:eb:df:cb:d4:28:15:4f:ae: cb:8d:f9:44:ef:b3:db:50:2f:23:f6:33:3f:2c:04:e8:45:7a: 88:ea:1c:16:82:4f:43:1c:68:0f:63:0e:45:12:5f:9d:b4:9b: bb:3f:b8:eb:16:5d:a8:75:9f:58:1d:f8:1d:ce:b9:a2:62:82: b2:4c:87:76:6b:1c:8e:95:c4:0c:49:c5:97:8b:e1:ef:1d:c1: 15:34:4d:94:25:9a:0a:c6:fa:a9:88:ef:57:00:06:75:3e:f6: 3e:d5:86:8d:62:24:3d:06:fb:de:0c:2e:44:50:1a:87:0e:e3: 3a:73:f0:48:0e:d9:e3:7d:1a:1c:87:3e:86:9a:fb:18:9b:ac: 26:c6:ef:81:b4:d0:0d:eb:bc:8c:c4:a1:0c:a5:eb:a2:61:8d: 07:a3:0e:9c:9b:40:fe:8d:f4:74:1c:a4:ef:cc:36:37:61:79: 0b:84:9c:49:b1:94:81:1e:46:19:ed:c2:ee:73:65:ef:bd:38: c3:6b:cd:12:3f:0c:3b:fa:86:24:7c:ed:3e:f1:7e:24:11:30: a5:05:27:e8:a6:e4:36:b0:47:70:d5:23:7e:81:00:6d:c5:1d: 6f:5c:af:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw RjcyODdDOUEwHhcNMjUwNzAyMTkzMzA4WhcNMjUwNzA5MTkzMzA4WjAYMRYwFAYD VQQDEw02ODY1ODk3NC02OTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPThphhsAf2HurHISRFA2dwYkULr9maiqocCRC6WYDztMi+ewIe4CycnYHFh l0hVEOKrxKIBHWjkItP/fWX/hDj+INz9lY3+/57CC/RaMjzKLXPS7AinwzXNsosW tq4UOxv0NXS+USUfMFPZpD8/aAnh9R3Yqw+HC/7ZpI5pl+wGboDlUREJhu+QPzha AG4rYpBFlkvbDxKikRM9OLcORl/3rVp6Wbm05Vc2wCUAkLTC0tdUm0UlWOPhUzXt tkJJz4aGYzoAZUr1JlPVOrWPvLucGlfUqoPmq44NJvecqRlzWog0JUr+Bmh1+Uvh lxoZQ86t15Ruxqp03hHaZP/yoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgWg892 qUb+kESBXX38tQYwU20qMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1 QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH LXEzSkl6aUxtR1lQY29mSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDwmQNnuMJMCOPV3bsJUPntBlsSbRPVdgg+sYtF69/L1CgVT67LjflE 77PbUC8j9jM/LAToRXqI6hwWgk9DHGgPYw5FEl+dtJu7P7jrFl2odZ9YHfgdzrmi YoKyTId2axyOlcQMScWXi+HvHcEVNE2UJZoKxvqpiO9XAAZ1PvY+1YaNYiQ9Bvve DC5EUBqHDuM6c/BIDtnjfRochz6GmvsYm6wmxu+BtNAN67yMxKEMpeuiYY0How6c m0D+jfR0HKTvzDY3YXkLhJxJsZSBHkYZ7cLuc2XvvTjDa80SPww7+oYkfO0+8X4k ETClBSfopuQ2sEdw1SN+gQBtxR1vXK8o -----END CERTIFICATE-----Generated at Thu Jul 3 06:08:56 2025 by rpki-client