$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json) Hash identifier: x6HSyuooIHgoLtC/vPIBkhH4zn/MSan07y7oL6Y21bQ= Subject key identifier: C2:6F:6D:43:CD:F1:AA:E6:F3:24:9C:87:EF:9A:62:7B:C4:90:C2:F2 Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft Manifest number: 0122 Signing time: Thu 03 Jul 2025 04:55:30 +0000 Manifest this update: Thu 03 Jul 2025 04:55:29 +0000 Manifest next update: Thu 10 Jul 2025 04:55:29 +0000 Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: 2NtQVeW3pHWoXCat7lcGYsL0zW27H0PY4+2kfV4aEUI=) 2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: fBtaOlMCOFGQQtGdBagxQGnrYFNg/qX3d4dMpzhuZnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: Jul 3 04:55:29 2025 GMT Not After : Jul 10 04:55:29 2025 GMT Subject: CN=68660d42-fa1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:a9:3e:0f:fd:81:cf:10:c2:e1:8e:82:05: 0f:41:4e:3b:a0:15:d0:dd:fb:45:4e:cf:eb:49:cf: 44:da:d4:49:5a:22:76:6e:bd:7c:39:2f:8d:30:90: ba:8e:a7:03:9f:e9:77:89:6a:38:8c:79:68:fe:bb: 5c:c7:ea:d5:23:a5:15:1b:1a:01:04:4e:22:6b:7e: 10:c4:37:01:30:cf:0d:b7:8d:ab:03:ac:38:94:f4: b5:78:c9:9c:3a:cf:82:ec:14:16:8d:7a:c7:e7:30: 5b:b3:a1:2e:52:e0:4a:bc:25:8e:7b:49:05:7f:81: 24:8f:94:8f:4e:d1:38:2d:15:b0:9b:f9:28:e2:7d: c2:35:aa:29:b0:3f:fe:ae:0d:0b:d1:7f:42:bf:05: 81:d8:ee:d1:40:6b:21:c9:d0:94:6e:5b:2a:9d:d4: c6:c5:54:29:a9:b4:de:4e:2e:55:bc:ac:ca:a3:f6: b2:5c:85:69:0f:a6:48:ae:1e:c4:77:54:3c:b5:a2: 59:99:01:ad:01:ae:e7:61:67:0e:8b:0b:6c:60:00: d4:01:fd:5f:d9:a0:d8:8f:ba:97:e9:00:4d:3a:e9: ba:29:d9:ee:2b:ca:47:68:a2:ca:3b:ae:ec:ff:c7: f7:eb:91:0b:5b:f4:0b:cd:40:13:56:87:90:f7:f1: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6F:6D:43:CD:F1:AA:E6:F3:24:9C:87:EF:9A:62:7B:C4:90:C2:F2 X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ea:4b:49:00:81:0f:0d:fc:7c:13:1c:8d:81:1b:1b:fa:ff: 94:79:45:69:bd:da:59:92:43:01:b8:3e:66:e0:94:99:8b:fd: 73:7d:76:f5:6e:fb:98:29:ee:52:ed:12:a1:e4:e7:c7:40:8d: 6c:43:0f:48:0e:7f:ef:43:09:d4:43:40:55:46:2f:e4:a5:72: 98:48:12:da:ab:83:93:04:07:4e:8f:a3:1c:22:98:12:59:a9: 77:4e:ad:b5:41:26:b4:3f:35:89:a0:86:2a:b5:ac:0e:75:28: 73:c9:0c:0f:bc:c0:a6:69:25:4e:24:af:97:d6:19:14:74:31: 39:37:47:31:08:58:86:45:27:03:4f:de:ca:c0:1d:11:ed:7f: a1:2d:73:48:bb:ac:34:fd:4e:18:9c:d6:fa:3a:0e:b6:52:e3: 2c:97:fc:71:7c:fe:9b:82:e1:64:b5:a7:92:54:e5:3f:c3:0f: 15:01:74:b2:15:fe:92:51:91:5a:f2:ae:ca:a7:b4:68:5b:0b: 9e:b4:51:d1:0f:c4:a8:77:c5:02:3d:a3:9d:96:a6:12:78:e9: eb:e2:79:64:9e:5f:12:be:e9:d0:21:ea:eb:1c:25:37:8b:f2: 20:55:b7:8b:3f:ea:e0:47:a8:66:ac:c2:73:02:47:68:13:c6: 6e:99:9b:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAzNzIxMTAvBgNVBAUTKEYyOUIyM0VBNEUxMTRDREM5Q0E2RDM3RjVFRjc5RUY0 QzM1QzcyODIwHhcNMjUwNzAzMDQ1NTI5WhcNMjUwNzEwMDQ1NTI5WjAYMRYwFAYD VQQDEw02ODY2MGQ0Mi1mYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArb+pPg/9gc8QwuGOggUPQU47oBXQ3ftFTs/rSc9E2tRJWiJ2br18OS+NMJC6 jqcDn+l3iWo4jHlo/rtcx+rVI6UVGxoBBE4ia34QxDcBMM8Nt42rA6w4lPS1eMmc Os+C7BQWjXrH5zBbs6EuUuBKvCWOe0kFf4Ekj5SPTtE4LRWwm/ko4n3CNaopsD/+ rg0L0X9CvwWB2O7RQGshydCUblsqndTGxVQpqbTeTi5VvKzKo/ayXIVpD6ZIrh7E d1Q8taJZmQGtAa7nYWcOiwtsYADUAf1f2aDYj7qX6QBNOum6KdnuK8pHaKLKO67s /8f365ELW/QLzUATVoeQ9/GnBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJvbUPN 8arm8ySch++aYnvEkMLyMB8GA1UdIwQYMBaAFPKbI+pOEUzcnKbTf173nvTDXHKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDM3Mi8yMEE1NEZDODlE ODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlROeWNwdE5fWHZlZTlNTmNj b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2NvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDM3Mi8yMEE1NEZDODlEODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlRO eWNwdE5fWHZlZTlNTmNjb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD6ktJAIEPDfx8ExyNgRsb+v+UeUVpvdpZkkMBuD5m4JSZi/1zfXb1 bvuYKe5S7RKh5OfHQI1sQw9IDn/vQwnUQ0BVRi/kpXKYSBLaq4OTBAdOj6McIpgS Wal3Tq21QSa0PzWJoIYqtawOdShzyQwPvMCmaSVOJK+X1hkUdDE5N0cxCFiGRScD T97KwB0R7X+hLXNIu6w0/U4YnNb6Og62UuMsl/xxfP6bguFktaeSVOU/ww8VAXSy Ff6SUZFa8q7Kp7RoWwuetFHRD8Sod8UCPaOdlqYSeOnr4nlknl8SvunQIerrHCU3 i/IgVbeLP+rgR6hmrMJzAkdoE8ZumZuA -----END CERTIFICATE-----Generated at Fri Jul 4 02:21:30 2025 by rpki-client