$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: K2SAB1zAVHczkUh73VGFhirddgFvnXTvdLMlrqAKwxo= Subject key identifier: DF:6A:06:21:1E:44:8A:E5:49:10:3C:F3:A8:56:31:4D:56:E7:D8:9E Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 01EE Signing time: Tue 01 Jul 2025 02:59:37 +0000 Manifest this update: Tue 01 Jul 2025 02:59:36 +0000 Manifest next update: Tue 08 Jul 2025 02:59:36 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: 7ElBW1aO5W8PJZb+4jnelBxuj10Z3kyku9hSZnpPLK0=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Jul 1 02:59:36 2025 GMT Not After : Jul 8 02:59:36 2025 GMT Subject: CN=68634f18-68ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:88:54:2f:3d:a2:68:ce:5a:38:bf:3b:02:b5: bd:c6:bd:ba:97:6d:b4:73:89:a5:08:d8:99:44:05: df:6d:1a:b3:38:3f:3b:b3:e2:64:c0:5a:e5:48:1e: c5:1b:39:19:14:fe:5d:a4:30:aa:a5:17:72:3a:59: db:5f:99:df:8b:fe:e9:4e:9a:7f:04:a5:0f:05:35: 7a:19:d7:b8:28:04:b3:1d:b6:69:6a:c8:50:41:c0: 5c:e7:24:66:f9:b8:0d:21:94:b5:52:eb:73:4b:94: 26:0a:c7:0b:49:a2:cb:6f:cd:67:f7:71:ce:73:61: c1:05:e9:17:e9:6a:ab:e0:39:12:12:8c:a5:b0:89: a8:f7:c6:47:01:fa:df:6e:39:fb:eb:86:e1:14:58: 30:57:0b:c4:e6:ee:a4:0e:bd:e9:c7:f5:55:e7:d0: 01:6c:84:36:0c:0c:97:21:e4:75:b7:c9:fb:01:cf: bd:1d:ab:58:cd:b8:95:83:c9:18:f3:c0:34:7a:2d: b9:d3:bd:d4:27:27:a2:9d:30:bf:f8:58:a4:e0:08: f8:e3:cd:2b:fa:a1:41:f6:4f:42:d6:e3:57:c2:cf: 99:b2:45:86:b2:b1:c0:a4:7f:3e:a9:67:3e:8a:70: 5b:16:0f:7c:cf:0a:ae:11:51:40:80:0e:cf:f2:38: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6A:06:21:1E:44:8A:E5:49:10:3C:F3:A8:56:31:4D:56:E7:D8:9E X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b5:92:af:70:b6:b4:33:1e:10:32:e6:31:31:0d:08:28:88: 30:84:87:d3:a2:3f:ef:72:36:9b:f5:31:3d:38:58:d8:18:10: ad:b4:14:d5:5b:cb:14:1f:72:bb:48:81:c0:f4:1a:72:5c:e1: 72:4f:28:b2:18:9d:d2:16:91:86:93:1c:7b:86:c0:c3:c1:3e: 44:70:98:80:fc:87:46:93:2a:7b:ef:02:41:67:e7:a8:c4:ff: 24:82:5e:aa:68:5e:c1:c4:c6:db:31:3e:80:25:4f:3a:a6:99: b7:0d:ee:b7:52:ff:88:de:51:e7:cf:35:ce:8d:1e:e9:44:b9: e8:d9:49:df:ff:ec:5d:09:d0:c0:7a:4e:f6:60:2c:c3:2d:c0: 18:b7:be:d1:9b:7d:4d:54:e0:0c:be:32:31:fc:29:af:5c:f3: ea:29:28:fc:8d:fb:e4:7e:b2:e0:0d:41:bf:f7:67:30:4b:84: cb:0f:35:cf:68:1b:c5:39:d3:30:97:f6:7f:33:74:00:ea:28: bf:12:5a:16:7f:a3:48:1c:43:71:ad:54:bd:8c:5d:63:31:87: 37:bc:3d:3c:52:c4:a9:4a:e6:2f:81:5a:40:ff:7e:bd:54:a6: 7a:26:4a:ac:0a:7c:7c:25:2a:c3:b0:48:25:65:62:37:2a:88: 41:73:7f:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUwNzAxMDI1OTM2WhcNMjUwNzA4MDI1OTM2WjAYMRYwFAYD VQQDEw02ODYzNGYxOC02OGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YhULz2iaM5aOL87ArW9xr26l220c4mlCNiZRAXfbRqzOD87s+JkwFrlSB7F GzkZFP5dpDCqpRdyOlnbX5nfi/7pTpp/BKUPBTV6Gde4KASzHbZpashQQcBc5yRm +bgNIZS1UutzS5QmCscLSaLLb81n93HOc2HBBekX6Wqr4DkSEoylsImo98ZHAfrf bjn764bhFFgwVwvE5u6kDr3px/VV59ABbIQ2DAyXIeR1t8n7Ac+9HatYzbiVg8kY 88A0ei25073UJyeinTC/+Fik4Aj4480r+qFB9k9C1uNXws+ZskWGsrHApH8+qWc+ inBbFg98zwquEVFAgA7P8jgSZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9qBiEe RIrlSRA886hWMU1W59ieMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7tZKvcLa0Mx4QMuYxMQ0IKIgwhIfToj/vcjab9TE9OFjYGBCttBTV W8sUH3K7SIHA9BpyXOFyTyiyGJ3SFpGGkxx7hsDDwT5EcJiA/IdGkyp77wJBZ+eo xP8kgl6qaF7BxMbbMT6AJU86ppm3De63Uv+I3lHnzzXOjR7pRLno2Unf/+xdCdDA ek72YCzDLcAYt77Rm31NVOAMvjIx/CmvXPPqKSj8jfvkfrLgDUG/92cwS4TLDzXP aBvFOdMwl/Z/M3QA6ii/EloWf6NIHENxrVS9jF1jMYc3vD08UsSpSuYvgVpA/369 VKZ6JkqsCnx8JSrDsEglZWI3KohBc3/+ -----END CERTIFICATE-----Generated at Wed Jul 2 23:19:05 2025 by rpki-client