$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: hImt+RkgUpRJJgniA+OjC0uNfGxkyigBzIxu3GPLA1A= Subject key identifier: E6:0B:3F:51:EC:F4:98:DF:31:1C:9C:E2:A7:91:BB:CD:D4:90:F3:85 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 2183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 217A Signing time: Wed 02 Jul 2025 16:01:30 +0000 Manifest this update: Wed 02 Jul 2025 16:01:29 +0000 Manifest next update: Wed 09 Jul 2025 16:01:29 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: B7n+Pwf4tfYoAUQeBWC+loZD2qB2DsPLNw3e6ZyZEQ4=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: Kqxe3AlQssfHaUaGQ94xh+g433EOzW+NAhxS/kOyvHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8579 (0x2183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Jul 2 16:01:29 2025 GMT Not After : Jul 9 16:01:29 2025 GMT Subject: CN=686557d9-2df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c2:4e:be:39:2e:7f:e4:7f:34:0a:9f:b2:6f: b7:c2:ed:4e:27:da:84:c4:d5:e5:fa:87:c1:da:e3: a3:c0:e0:99:4b:18:74:85:34:bc:7f:a7:02:ff:b1: b2:0c:30:1d:56:07:b2:69:8f:4a:96:be:7a:f4:44: 15:90:bf:92:17:a4:70:d7:3f:7f:10:08:5a:43:d8: 06:5b:f6:c6:cd:e1:29:af:ec:b5:04:26:9a:43:1c: 2b:47:7b:6e:9b:e4:ae:d5:8c:b4:19:06:16:6a:87: 86:ac:0b:08:8d:f4:f2:a9:f8:f4:4b:4a:ae:37:89: ad:c6:5f:17:7a:67:90:2b:2f:34:4f:c6:09:1a:ef: 14:bd:16:0e:f9:6a:a7:b7:41:15:00:13:bd:35:55: 96:65:fb:80:69:6c:a0:00:8d:6b:55:ad:28:5f:5a: 1a:b0:67:29:5c:bc:0a:8b:6b:f8:d0:8a:42:84:2d: 92:8a:17:f2:fb:f8:d7:f1:29:da:87:12:37:ad:af: b9:2b:a1:53:d6:7e:f5:35:cf:c7:d4:c9:24:77:58: 3b:c6:d4:92:f3:a2:47:36:b1:af:e1:63:22:b2:8c: 2e:98:f9:f1:cd:7b:2d:b4:b6:33:24:31:ee:db:14: 55:eb:5a:c6:0d:4d:20:77:d2:82:fc:ee:50:e8:29: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0B:3F:51:EC:F4:98:DF:31:1C:9C:E2:A7:91:BB:CD:D4:90:F3:85 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7e:88:a9:0c:6a:4a:d4:a3:60:c0:0f:03:bf:8c:de:02:99: 76:e5:be:fa:a3:71:bc:16:3a:b1:ec:32:13:8b:a1:91:86:11: 5e:8d:48:08:c0:b4:ba:2a:c4:f3:51:df:d3:a4:59:25:82:6d: 43:0a:6b:67:c3:0b:54:0c:f2:8b:5e:4f:2d:ad:df:38:b4:e1: ba:a7:aa:f2:c2:45:cc:8c:15:01:c5:ca:91:9a:54:03:66:c2: d6:de:ab:f0:d5:4f:b1:e4:49:71:b1:30:cb:6b:9d:39:ea:4b: 79:54:fe:36:05:6b:54:e8:eb:2f:dc:18:2e:87:8d:06:f6:61: b5:8e:26:77:33:13:66:e8:9d:32:0c:ba:f7:75:5b:e9:f2:8a: 1a:45:23:88:30:c0:f8:d6:39:52:20:e4:f6:a0:6f:6b:ca:e4: c5:34:05:da:3b:9c:8b:4d:12:a6:54:98:09:36:b6:47:a9:76: 7f:43:57:c9:04:c6:39:82:c9:ad:49:2f:3b:d1:cd:bf:2f:00: a8:91:0c:19:a1:9a:47:1a:c6:2f:b5:49:9d:a1:8b:81:c3:bb: 22:e6:f7:8d:2f:b5:d4:8b:df:a0:32:49:6c:0e:e0:00:17:9f: 7d:64:24:de:78:c2:dd:dd:22:63:10:c2:f7:fc:9d:bd:80:95: f4:2a:26:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUwNzAyMTYwMTI5WhcNMjUwNzA5MTYwMTI5WjAYMRYwFAYD VQQDEw02ODY1NTdkOS0yZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9sJOvjkuf+R/NAqfsm+3wu1OJ9qExNXl+ofB2uOjwOCZSxh0hTS8f6cC/7Gy DDAdVgeyaY9Klr569EQVkL+SF6Rw1z9/EAhaQ9gGW/bGzeEpr+y1BCaaQxwrR3tu m+Su1Yy0GQYWaoeGrAsIjfTyqfj0S0quN4mtxl8XemeQKy80T8YJGu8UvRYO+Wqn t0EVABO9NVWWZfuAaWygAI1rVa0oX1oasGcpXLwKi2v40IpChC2Sihfy+/jX8Sna hxI3ra+5K6FT1n71Nc/H1Mkkd1g7xtSS86JHNrGv4WMisowumPnxzXsttLYzJDHu 2xRV61rGDU0gd9KC/O5Q6CnN2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYLP1Hs 9JjfMRyc4qeRu83UkPOFMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCafoipDGpK1KNgwA8Dv4zeApl25b76o3G8Fjqx7DITi6GRhhFejUgI wLS6KsTzUd/TpFklgm1DCmtnwwtUDPKLXk8trd84tOG6p6rywkXMjBUBxcqRmlQD ZsLW3qvw1U+x5ElxsTDLa5056kt5VP42BWtU6Osv3Bguh40G9mG1jiZ3MxNm6J0y DLr3dVvp8ooaRSOIMMD41jlSIOT2oG9ryuTFNAXaO5yLTRKmVJgJNrZHqXZ/Q1fJ BMY5gsmtSS870c2/LwCokQwZoZpHGsYvtUmdoYuBw7si5veNL7XUi9+gMklsDuAA F599ZCTeeMLd3SJjEML3/J29gJX0KiaL -----END CERTIFICATE-----Generated at Thu Jul 3 15:28:21 2025 by rpki-client