$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: EtB5AI01JrjA3rQn9szTRPlrMobqAGgkiTPFX+YGIgE= Subject key identifier: 9E:F2:5A:92:4F:FF:23:8A:54:B0:90:7F:5D:2A:C8:8E:07:51:0D:DC Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 0144 Signing time: Tue 01 Jul 2025 04:47:36 +0000 Manifest this update: Tue 01 Jul 2025 04:47:36 +0000 Manifest next update: Tue 08 Jul 2025 04:47:36 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: 4wAInS+zS9+kX4fTbI98jXthla+fKgveWoeMJpCl/14=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: UDY5XZZpboPOe4PuKIjoZcv8Z+maPhsL8V3N8OWNJu4=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: QxDb9utS5i/B8urK72tRRFJFcT0cVUwBUSamNqzNfT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Jul 1 04:47:36 2025 GMT Not After : Jul 8 04:47:36 2025 GMT Subject: CN=68636868-c7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:15:e9:07:7a:9d:8a:74:94:d4:a7:87:d9: 62:7c:0b:bd:97:59:4d:35:6f:40:33:d4:3c:5f:54: ca:94:c8:c5:26:d1:4f:ec:ac:d7:a0:a3:58:5b:d3: 83:21:47:5a:46:e7:41:89:94:ab:c3:62:f3:40:26: 80:17:a8:9d:fe:c4:0e:b7:d2:d9:61:5b:ca:fb:eb: 50:00:3b:4c:9d:af:5d:be:49:f3:f2:9d:75:21:cc: 69:85:ff:28:86:de:cb:79:2c:24:c2:3a:a9:fb:45: b7:6a:37:09:24:33:3d:e5:88:19:ac:76:1a:15:58: 44:e6:03:ea:c0:ab:1f:d2:7b:80:3f:fb:f4:52:66: f0:d8:24:64:f6:2d:90:5c:d1:54:f8:8e:79:56:16: 0d:f2:08:c7:d4:db:49:8e:b3:3d:dc:c2:58:c1:dc: 84:18:b4:4a:75:94:7e:ed:28:6e:b6:ef:b3:93:2c: 23:53:2d:ec:bd:3e:6c:8c:2b:f5:c9:96:5e:02:06: 90:94:f8:d6:72:02:c6:b7:07:0e:d0:64:db:b4:94: da:36:cb:0b:5f:70:ad:51:44:35:c6:aa:14:99:15: 53:20:09:b0:ad:03:00:48:2c:e4:95:3b:5b:b8:11: e0:a9:b4:8d:10:52:a1:43:04:08:f3:99:9d:de:4c: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F2:5A:92:4F:FF:23:8A:54:B0:90:7F:5D:2A:C8:8E:07:51:0D:DC X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ed:d3:22:5b:e9:ff:8f:b7:c0:2f:7c:cf:90:b7:a6:6e:97: e0:f3:4e:df:50:7f:5e:73:ac:6e:c8:8a:c5:c2:3e:4a:22:29: f1:5f:e3:b7:cc:90:b2:31:13:74:8c:90:ce:97:c9:ee:93:3d: 67:da:81:82:74:3c:f1:22:02:da:f3:fd:04:0c:ae:fe:6b:86: a0:eb:1c:c6:84:88:7a:0e:23:f7:20:cb:8a:5a:bc:98:3d:6d: fe:90:b9:3c:c9:09:2f:9d:e1:a3:29:04:86:bf:a3:3d:3f:c7: 35:64:aa:73:de:54:ad:a4:ed:ec:db:0b:ec:1d:00:85:e3:b1: 92:f3:4a:7e:40:8c:dc:7a:65:7a:24:d0:b7:06:aa:31:43:1a: 4d:a4:28:f0:24:98:c8:66:40:ad:d1:3a:1b:99:40:b0:42:8d: cd:29:f0:1f:1b:c4:ad:89:18:38:d2:83:09:ed:2f:fc:70:a9: 90:b9:91:48:21:32:58:39:3a:80:32:39:f9:de:e3:10:ac:9a: 96:02:81:02:8d:0a:b0:65:6c:4a:60:d2:85:fd:c6:43:dd:a8: 7f:2c:1b:14:93:45:90:8f:da:13:95:13:84:b8:b6:76:38:3f: b7:fa:d9:17:1d:83:ee:c5:02:a4:79:c2:e5:6b:b8:0b:40:ba: 33:ff:74:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjUwNzAxMDQ0NzM2WhcNMjUwNzA4MDQ0NzM2WjAYMRYwFAYD VQQDEw02ODYzNjg2OC1jN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFMV6Qd6nYp0lNSnh9lifAu9l1lNNW9AM9Q8X1TKlMjFJtFP7KzXoKNYW9OD IUdaRudBiZSrw2LzQCaAF6id/sQOt9LZYVvK++tQADtMna9dvknz8p11Icxphf8o ht7LeSwkwjqp+0W3ajcJJDM95YgZrHYaFVhE5gPqwKsf0nuAP/v0Umbw2CRk9i2Q XNFU+I55VhYN8gjH1NtJjrM93MJYwdyEGLRKdZR+7Shutu+zkywjUy3svT5sjCv1 yZZeAgaQlPjWcgLGtwcO0GTbtJTaNssLX3CtUUQ1xqoUmRVTIAmwrQMASCzklTtb uBHgqbSNEFKhQwQI85md3kwNdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7yWpJP /yOKVLCQf10qyI4HUQ3cMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn7dMiW+n/j7fAL3zPkLembpfg807fUH9ec6xuyIrFwj5KIinxX+O3 zJCyMRN0jJDOl8nukz1n2oGCdDzxIgLa8/0EDK7+a4ag6xzGhIh6DiP3IMuKWryY PW3+kLk8yQkvneGjKQSGv6M9P8c1ZKpz3lStpO3s2wvsHQCF47GS80p+QIzcemV6 JNC3BqoxQxpNpCjwJJjIZkCt0TobmUCwQo3NKfAfG8StiRg40oMJ7S/8cKmQuZFI ITJYOTqAMjn53uMQrJqWAoECjQqwZWxKYNKF/cZD3ah/LBsUk0WQj9oTlROEuLZ2 OD+3+tkXHYPuxQKkecLla7gLQLoz/3SK -----END CERTIFICATE-----Generated at Wed Jul 2 11:37:09 2025 by rpki-client