$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json) Hash identifier: A7yDWzfhWYdFLTqoXx5tTDmHd99FfAJ5UX+NnU98CgI= Subject key identifier: 6C:96:B8:83:9C:CB:6D:42:5D:1F:37:56:F0:F7:12:04:6A:36:1F:FE Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Certificate serial: 11AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft Manifest number: 11A5 Signing time: Wed 02 Jul 2025 17:23:34 +0000 Manifest this update: Wed 02 Jul 2025 17:23:33 +0000 Manifest next update: Wed 09 Jul 2025 17:23:33 +0000 Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: d0VS2TS3itw2M7/PhKkxhV9dCrBTHbl8GQO0MziTMrc=) 2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: S4PonvpkLuqmrbtgnv8T9QMFORQi4oK8GF7Qf1Ow3ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4527 (0x11af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Validity Not Before: Jul 2 17:23:33 2025 GMT Not After : Jul 9 17:23:33 2025 GMT Subject: CN=68656b15-b13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:32:77:62:b5:b3:47:95:e0:4e:ee:c0:74:25: ae:88:a9:11:82:81:aa:82:52:57:56:82:57:a7:81: 0b:17:f1:0e:61:09:2d:5f:46:18:15:32:e1:54:d9: 18:cf:9e:47:a1:a8:2f:e6:97:cd:65:f2:91:c0:67: a1:ec:21:00:0d:60:ff:9b:3c:4b:bf:b8:e4:b9:4d: 67:06:63:83:8b:81:15:28:b6:bb:64:6e:16:0d:c6: 5a:39:81:ec:c6:d4:0d:a7:d5:4c:79:a5:1d:33:46: 08:94:2f:05:21:a4:5d:53:38:b8:6a:a6:4f:e2:28: 52:00:a4:47:1f:26:ae:2a:58:66:19:aa:00:07:08: 07:4d:74:29:1f:12:9a:12:25:14:46:14:f6:2d:bf: e4:79:e8:cf:62:23:32:68:3a:c7:f7:62:11:a2:df: fc:92:c0:7c:a3:06:9c:2e:06:00:aa:10:4a:31:41: e7:b5:aa:f7:fa:e0:3e:e3:90:5e:17:1b:7d:48:a8: 3e:c5:3d:94:1a:b7:f9:52:e0:4e:ce:b4:26:aa:e8: 0b:cc:7d:63:41:c4:bf:d5:a4:0f:58:ef:b8:f1:b9: a7:16:91:ad:75:eb:57:b6:ba:77:9f:f2:14:e3:8a: d6:99:9f:da:5a:98:a4:0b:c6:58:4d:2f:98:af:9f: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:96:B8:83:9C:CB:6D:42:5D:1F:37:56:F0:F7:12:04:6A:36:1F:FE X509v3 Authority Key Identifier: keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:55:fe:f9:bd:8f:b2:9a:42:be:7f:93:9d:14:2d:a8:ed:5f: ab:c9:31:96:1d:83:96:c2:90:f5:19:01:3d:e5:46:ae:6b:c8: ae:bc:22:5e:22:9f:c8:f3:16:b5:e4:cf:c9:7f:af:00:24:39: 23:9f:3d:50:0c:40:a2:51:10:bd:37:64:e3:c5:27:47:3c:c4: 9c:dd:2d:89:88:bc:b3:1e:5f:00:5b:0d:ad:22:77:1e:f4:f8: 77:1b:f7:95:e7:a5:93:e1:f4:f8:d1:15:a2:ae:94:6c:58:72: 8d:69:de:c9:fe:41:9c:2b:68:06:64:b0:c8:ec:7c:d4:7f:fb: 4f:46:53:86:c4:1e:30:85:93:cc:b1:80:94:4d:c9:e8:62:34: 0e:fa:44:33:18:50:e3:65:23:52:34:71:f5:fb:65:e3:7d:ce: 77:8d:28:cc:96:31:06:9d:ad:c1:62:6e:e7:37:b4:4c:0e:f9: 9a:7b:c7:d1:25:e6:33:a1:e5:24:1b:18:9a:12:bb:cd:c5:ec: e6:49:d2:8a:9c:55:a5:b0:5b:88:6b:00:91:34:69:19:22:86: 4e:97:20:d5:ff:35:ea:54:86:f6:8f:6f:d3:8f:5c:36:40:31: 96:bb:7a:02:f9:49:48:f5:90:49:4e:90:54:c7:e5:42:8a:a9: fb:24:d8:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0MzVBMkI4NTQz QkNFNDc2MDkwHhcNMjUwNzAyMTcyMzMzWhcNMjUwNzA5MTcyMzMzWjAYMRYwFAYD VQQDEw02ODY1NmIxNS1iMTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDJ3YrWzR5XgTu7AdCWuiKkRgoGqglJXVoJXp4ELF/EOYQktX0YYFTLhVNkY z55Hoagv5pfNZfKRwGeh7CEADWD/mzxLv7jkuU1nBmODi4EVKLa7ZG4WDcZaOYHs xtQNp9VMeaUdM0YIlC8FIaRdUzi4aqZP4ihSAKRHHyauKlhmGaoABwgHTXQpHxKa EiUURhT2Lb/keejPYiMyaDrH92IRot/8ksB8owacLgYAqhBKMUHntar3+uA+45Be Fxt9SKg+xT2UGrf5UuBOzrQmqugLzH1jQcS/1aQPWO+48bmnFpGtdetXtrp3n/IU 44rWmZ/aWpikC8ZYTS+Yr5+9dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyWuIOc y21CXR83VvD3EgRqNh/+MB8GA1UdIwQYMBaAFMfPlD46dk83wAPNQ1orhUO85HYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODVFOS8wODI1MzhFQ0Y5 NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6ZkFBODFEV2l1RlE3emtk Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4LVVQanAyVHpmQUE4MURXaXVGUTd6a2Rnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6 ZkFBODFEV2l1RlE3emtkZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Vf75vY+ymkK+f5OdFC2o7V+ryTGWHYOWwpD1GQE95Uaua8iuvCJe Ip/I8xa15M/Jf68AJDkjnz1QDECiURC9N2TjxSdHPMSc3S2JiLyzHl8AWw2tInce 9Ph3G/eV56WT4fT40RWirpRsWHKNad7J/kGcK2gGZLDI7HzUf/tPRlOGxB4whZPM sYCUTcnoYjQO+kQzGFDjZSNSNHH1+2Xjfc53jSjMljEGna3BYm7nN7RMDvmae8fR JeYzoeUkGxiaErvNxezmSdKKnFWlsFuIawCRNGkZIoZOlyDV/zXqVIb2j2/Tj1w2 QDGWu3oC+UlI9ZBJTpBUx+VCiqn7JNjv -----END CERTIFICATE-----Generated at Wed Jul 2 20:01:33 2025 by rpki-client