$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: FZLvAjXijUvWavwN6R+27Y6A5cLCrALCmro4HF+Mx9g= Subject key identifier: 82:51:03:B5:13:0D:D3:73:FB:4D:99:B9:61:2B:E8:67:C4:51:3B:E1 Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0A60 Signing time: Wed 02 Jul 2025 19:53:39 +0000 Manifest this update: Wed 02 Jul 2025 19:53:38 +0000 Manifest next update: Wed 09 Jul 2025 19:53:38 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: 6Nvh9yEgc4HCpkjjsXS06LUn5xeWJq15k6Z2rjanCmE=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: bm4J9Gs8kg53MtutKeTvvvRSq0MtCTJcSE5YLit7Dts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Jul 2 19:53:38 2025 GMT Not After : Jul 9 19:53:38 2025 GMT Subject: CN=68658e42-63ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a2:b0:1b:67:3f:b1:09:8f:bd:d6:82:b0:53: e3:05:47:ba:0e:27:2c:a0:f7:92:1c:74:b9:f0:a3: 60:4d:e8:ab:38:dd:9b:d4:35:60:3c:26:0c:7b:4c: f4:c8:74:52:00:fc:60:fe:d3:5a:2b:af:66:e9:28: 5b:4a:fa:a6:97:fd:5a:26:ca:10:0e:bc:de:80:71: 9d:97:bd:08:ed:17:d4:bf:dc:4d:4c:8a:f9:38:2f: d5:36:36:a4:f5:b5:f1:22:5c:c9:5e:ba:bd:e6:1d: 7b:61:c7:a9:e0:9d:db:2b:12:94:cc:8f:50:85:16: c0:c0:0f:5d:ad:e0:df:8f:d1:bc:81:9e:ae:5a:a4: 62:8e:3a:75:3c:93:bc:07:c4:99:6d:2b:6b:cb:d1: ef:6b:d7:97:9b:42:8f:bf:43:6f:7e:5e:34:cd:c3: e7:e0:22:de:43:4d:e4:ac:9b:b6:63:93:3a:5d:9b: b9:b4:d1:c7:e1:97:db:0f:af:25:85:ae:a8:9f:34: 46:13:b8:73:75:09:bd:5a:eb:95:07:c9:be:13:f5: 39:2d:6e:96:c4:62:04:f3:51:f2:f0:7e:e6:3c:ac: 9b:82:19:ca:6b:6a:f7:df:ef:a5:2f:50:92:3f:a0: d5:20:60:19:b9:72:eb:85:b0:29:25:ea:f1:93:28: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:51:03:B5:13:0D:D3:73:FB:4D:99:B9:61:2B:E8:67:C4:51:3B:E1 X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d3:72:4c:fc:e5:7f:8e:22:94:33:fc:f5:e5:3d:5b:e3:02: 67:9c:ba:f8:36:a2:b8:b2:f6:9d:36:6a:06:bb:e4:4d:01:fd: 7d:83:79:ec:a3:64:17:c9:8d:71:93:7d:d9:5f:be:2c:9d:ec: 4c:0f:43:b5:4b:13:66:e8:d6:d6:8c:d6:0c:b6:5e:67:8b:2e: 11:f8:04:17:e1:d6:a8:f9:cf:41:1c:84:1c:c7:a0:ab:7d:2f: ae:51:1e:85:13:4b:e5:e7:aa:95:a4:ce:ff:a4:dc:8f:69:21: da:e1:41:f0:7f:52:39:a0:b6:f7:5d:ec:f1:75:2a:c4:fb:d2: 3e:f1:04:ac:93:29:17:1b:d5:0d:d3:22:5d:a0:e2:9f:d5:ff: c0:e1:5d:f3:c0:43:8a:25:da:6a:fc:2c:11:5e:03:28:43:5c: a6:95:8f:e8:9d:4f:a8:b4:34:bb:7c:21:bb:2e:bc:5a:92:4f: b5:2e:e7:a0:3b:95:8b:56:4a:4e:7f:57:02:8d:be:b2:6c:6a: c6:41:29:94:7b:b1:4f:df:8e:05:9e:68:b0:e1:ad:e1:c3:13: bf:f2:ca:1f:84:00:f4:cb:63:e8:6f:11:63:4b:1c:c1:f7:6f: 89:84:df:c4:0f:8b:98:cb:53:c0:a9:7d:8d:56:43:2c:f0:ca: 72:75:7d:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjUwNzAyMTk1MzM4WhcNMjUwNzA5MTk1MzM4WjAYMRYwFAYD VQQDEw02ODY1OGU0Mi02M2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+aKwG2c/sQmPvdaCsFPjBUe6DicsoPeSHHS58KNgTeirON2b1DVgPCYMe0z0 yHRSAPxg/tNaK69m6ShbSvqml/1aJsoQDrzegHGdl70I7RfUv9xNTIr5OC/VNjak 9bXxIlzJXrq95h17Ycep4J3bKxKUzI9QhRbAwA9dreDfj9G8gZ6uWqRijjp1PJO8 B8SZbStry9Hva9eXm0KPv0Nvfl40zcPn4CLeQ03krJu2Y5M6XZu5tNHH4ZfbD68l ha6onzRGE7hzdQm9WuuVB8m+E/U5LW6WxGIE81Hy8H7mPKybghnKa2r33++lL1CS P6DVIGAZuXLrhbApJerxkyiUAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJRA7UT DdNz+02ZuWEr6GfEUTvhMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw03JM/OV/jiKUM/z15T1b4wJnnLr4NqK4svadNmoGu+RNAf19g3ns o2QXyY1xk33ZX74snexMD0O1SxNm6NbWjNYMtl5niy4R+AQX4dao+c9BHIQcx6Cr fS+uUR6FE0vl56qVpM7/pNyPaSHa4UHwf1I5oLb3XezxdSrE+9I+8QSskykXG9UN 0yJdoOKf1f/A4V3zwEOKJdpq/CwRXgMoQ1ymlY/onU+otDS7fCG7Lrxakk+1Lueg O5WLVkpOf1cCjb6ybGrGQSmUe7FP344Fnmiw4a3hwxO/8sofhAD0y2PobxFjSxzB 92+JhN/ED4uYy1PAqX2NVkMs8MpydX20 -----END CERTIFICATE-----Generated at Fri Jul 4 05:20:44 2025 by rpki-client