$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: v2VZ3qptBxkUURfBdneGy5nDBufii4rAMIyo+9VAZQo= Subject key identifier: AD:B0:30:B7:F7:FC:78:2B:B0:F2:8D:FB:0E:07:94:D8:F4:A5:6C:61 Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0C5F Signing time: Fri 04 Jul 2025 18:42:22 +0000 Manifest this update: Fri 04 Jul 2025 18:42:21 +0000 Manifest next update: Fri 11 Jul 2025 18:42:21 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: 6arTVtYUqgQU3qlKC85RyGmPaZQhMql6mQeSDC3/Vrc=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3176 (0xc68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Jul 4 18:42:21 2025 GMT Not After : Jul 11 18:42:21 2025 GMT Subject: CN=6868208d-9321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:da:41:fd:f9:1b:10:2e:6e:11:db:bf:f9:4d: 96:d2:df:52:ec:46:76:61:61:70:21:b3:f9:4c:54: 0c:a0:d5:01:ed:d2:03:f9:13:4b:f7:57:6b:5a:28: 7e:a3:29:24:12:9f:cc:7d:39:d4:1c:81:25:cf:9e: db:fb:09:d5:7b:37:3a:ae:0c:47:77:65:ac:38:07: e6:82:69:70:e5:de:23:c8:45:2c:b0:a4:60:00:2c: aa:33:c4:34:1f:8d:d0:3b:39:73:d2:52:83:11:7b: e4:f1:96:02:09:12:15:bb:8e:e0:7f:c0:61:c2:d6: c5:3b:e7:59:1f:f0:3a:1a:87:fb:73:63:e0:ed:42: 53:7a:f9:26:e4:9d:25:0b:ed:fd:95:79:34:e8:53: b0:d1:5d:03:14:6d:55:8b:5b:15:1e:38:17:86:94: 7f:ce:23:a3:57:b0:0b:84:cb:c0:ea:9f:1f:50:da: 5d:ab:8d:64:f4:05:32:8b:c8:43:a0:f6:0e:81:9e: a5:85:ec:9a:45:9b:ec:af:df:bb:23:dd:c1:68:04: 6b:fe:88:f6:55:d3:a1:c7:06:3b:be:e1:da:3d:22: 59:b3:0b:1f:63:a6:63:a6:7e:74:81:b0:34:0e:d6: fc:e5:be:88:46:2c:45:4c:55:8b:9e:87:73:54:7c: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B0:30:B7:F7:FC:78:2B:B0:F2:8D:FB:0E:07:94:D8:F4:A5:6C:61 X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9c:0e:78:d2:3c:ca:3f:d0:d9:ac:fb:e7:0d:c4:75:27:7d: 77:db:99:41:20:92:98:43:96:55:6e:57:aa:4c:d6:b3:8f:c7: d5:cb:2f:a8:c4:e2:be:f5:1e:b1:b0:94:c3:c7:a3:f3:a4:6b: a0:7e:cb:8b:02:bc:7d:65:b6:fb:66:b8:c8:74:30:0d:2a:c7: 86:03:3b:b8:e1:ee:43:54:e9:6e:49:6b:51:b0:ac:ee:14:8a: f5:bf:c5:76:d5:a4:77:75:4e:72:f1:af:a5:87:3e:9b:02:e6: f3:60:b2:58:f0:a9:b3:80:3f:b9:2d:f1:49:7a:c1:44:c6:bf: c4:85:2a:97:91:76:79:52:f9:80:73:40:4d:0e:ab:95:86:3e: 65:19:4c:72:18:b8:42:ca:67:10:b3:72:70:f4:9b:5a:38:95: 36:ab:ed:a9:a9:ba:08:06:57:e5:bd:20:f7:29:e9:ab:91:ed: e1:33:4e:10:14:fd:28:26:cc:b0:b5:76:23:fb:0f:66:ac:bd: 5c:88:6f:31:35:88:16:a2:b2:c7:f4:98:4f:39:8f:8d:67:af: 08:2c:9c:15:d0:fa:a8:c7:30:ca:92:17:93:c6:17:0f:99:aa: 34:0b:ad:fa:7c:6e:7e:31:7a:74:53:1a:dc:9f:3c:5d:f4:6d: 55:84:45:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjUwNzA0MTg0MjIxWhcNMjUwNzExMTg0MjIxWjAYMRYwFAYD VQQDEw02ODY4MjA4ZC05MzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dpB/fkbEC5uEdu/+U2W0t9S7EZ2YWFwIbP5TFQMoNUB7dID+RNL91drWih+ oykkEp/MfTnUHIElz57b+wnVezc6rgxHd2WsOAfmgmlw5d4jyEUssKRgACyqM8Q0 H43QOzlz0lKDEXvk8ZYCCRIVu47gf8BhwtbFO+dZH/A6Gof7c2Pg7UJTevkm5J0l C+39lXk06FOw0V0DFG1Vi1sVHjgXhpR/ziOjV7ALhMvA6p8fUNpdq41k9AUyi8hD oPYOgZ6lheyaRZvsr9+7I93BaARr/oj2VdOhxwY7vuHaPSJZswsfY6Zjpn50gbA0 Dtb85b6IRixFTFWLnodzVHyYpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2wMLf3 /HgrsPKN+w4HlNj0pWxhMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7nA540jzKP9DZrPvnDcR1J31325lBIJKYQ5ZVbleqTNazj8fVyy+o xOK+9R6xsJTDx6PzpGugfsuLArx9Zbb7ZrjIdDANKseGAzu44e5DVOluSWtRsKzu FIr1v8V21aR3dU5y8a+lhz6bAubzYLJY8KmzgD+5LfFJesFExr/EhSqXkXZ5UvmA c0BNDquVhj5lGUxyGLhCymcQs3Jw9JtaOJU2q+2pqboIBlflvSD3Kemrke3hM04Q FP0oJsywtXYj+w9mrL1ciG8xNYgWorLH9JhPOY+NZ68ILJwV0PqoxzDKkheTxhcP mao0C636fG5+MXp0Uxrcnzxd9G1VhEWF -----END CERTIFICATE-----Generated at Sat Jul 5 11:25:48 2025 by rpki-client