$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: bEG4lKabPELvUAD7nohFB5/HBObQD3KT7VWgFZAMqnA= Subject key identifier: 8F:5B:B1:D8:39:87:CF:10:9F:12:65:DE:F0:E1:F1:FB:F7:88:57:4C Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: 7A Signing time: Thu 03 Jul 2025 07:03:06 +0000 Manifest this update: Thu 03 Jul 2025 07:03:06 +0000 Manifest next update: Thu 10 Jul 2025 07:03:06 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: +fz9iNXMThMIIzlfwl5Ir8A49z+76IVWL0iB9vgPUE4=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Jul 3 07:03:06 2025 GMT Not After : Jul 10 07:03:06 2025 GMT Subject: CN=68662b2a-8474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:da:df:ce:2c:76:12:18:d1:03:54:53:f8: 84:13:65:1c:17:79:6f:80:97:0c:d1:c2:92:aa:cd: 13:73:f8:33:e2:14:f5:bb:94:29:99:a6:16:03:b2: b2:99:72:2e:76:cf:32:dc:76:56:11:25:ff:ec:39: f8:3a:83:4e:cb:5b:d2:81:6c:10:1e:4d:46:c4:88: 62:d0:6f:da:fc:c3:77:9b:e6:bd:6c:b8:ff:aa:65: c4:16:e0:6e:c6:6f:dc:69:93:f7:40:d5:c5:c4:22: a5:74:f6:1f:e5:83:b4:89:22:e5:4f:33:f0:d0:a3: 22:dc:74:3b:bd:b7:d2:67:3d:85:29:ed:d9:a0:15: 47:be:96:5f:98:09:a0:02:2f:92:90:13:98:48:e5: 60:90:db:a9:c5:04:f6:58:09:18:68:38:06:48:6c: 56:be:93:03:69:6d:de:0b:2b:3b:f9:cf:46:d0:a4: d2:5a:bc:61:6d:a8:f4:c3:4e:7f:f4:a4:48:f8:b5: c9:72:73:a3:79:0e:93:62:0d:96:9f:5b:bd:8e:ac: 63:9b:71:5b:9b:b1:3c:97:dd:93:11:17:40:f9:78: b6:68:5e:77:63:b6:a5:be:61:65:ef:be:59:b8:09: 1e:2d:5a:58:08:17:da:79:e3:79:87:7b:49:07:06: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5B:B1:D8:39:87:CF:10:9F:12:65:DE:F0:E1:F1:FB:F7:88:57:4C X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:bb:f6:54:63:dc:7f:e8:d4:98:5f:c2:54:df:1d:ee:ed:86: 7f:aa:da:42:e9:26:b8:a8:aa:49:f0:3c:25:81:f9:aa:cc:ef: 03:1b:7a:82:a4:80:28:78:74:8f:6a:ab:97:84:8a:40:0c:8d: ee:f8:6a:df:92:d5:4a:fa:5c:7d:8c:8d:fd:45:a8:15:7b:a6: a3:5e:17:e0:25:07:77:8a:d1:3c:c1:99:42:df:53:fc:bc:f4: 39:56:54:e6:4b:4f:f3:fc:a4:7b:00:0b:aa:88:55:8a:d8:ca: 45:5e:58:c4:84:2b:5e:7e:31:96:84:50:de:6e:2b:06:fe:be: 34:98:e4:c4:e7:ad:13:37:9f:b4:bc:34:97:c8:5f:9d:f7:7a: 39:11:93:9b:cc:5e:a5:45:39:c2:7c:71:0b:4b:d3:0b:47:d4: c7:21:3e:b3:4c:8c:e2:f3:df:30:c9:c7:5b:d2:0e:51:63:80: 9f:02:5c:4c:17:00:f4:74:44:bc:14:71:ea:33:be:12:e4:07: 81:dd:f1:fa:71:f5:9a:57:9c:c6:54:75:9a:d4:0b:16:0c:b4: c9:06:67:d1:03:c0:5f:7a:26:f4:2a:76:88:53:97:de:a7:c8: 4f:50:17:22:fa:c8:ac:f7:b6:6e:a2:ee:c4:8b:cf:cf:f4:01: 87:5d:ab:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoRjE1RDExNzkwQjBFNzUzNTc0MDY2MTFEQzU3MDU4RjY5 REM1NzhBMDAeFw0yNTA3MDMwNzAzMDZaFw0yNTA3MTAwNzAzMDZaMBgxFjAUBgNV BAMTDTY4NjYyYjJhLTg0NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+5trfzix2EhjRA1RT+IQTZRwXeW+AlwzRwpKqzRNz+DPiFPW7lCmZphYDsrKZ ci52zzLcdlYRJf/sOfg6g07LW9KBbBAeTUbEiGLQb9r8w3eb5r1suP+qZcQW4G7G b9xpk/dA1cXEIqV09h/lg7SJIuVPM/DQoyLcdDu9t9JnPYUp7dmgFUe+ll+YCaAC L5KQE5hI5WCQ26nFBPZYCRhoOAZIbFa+kwNpbd4LKzv5z0bQpNJavGFtqPTDTn/0 pEj4tclyc6N5DpNiDZafW72OrGObcVubsTyX3ZMRF0D5eLZoXndjtqW+YWXvvlm4 CR4tWlgIF9p543mHe0kHBpIPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj1ux2DmH zxCfEmXe8OHx+/eIV0wwHwYDVR0jBBgwFoAU8V0ReQsOdTV0BmEdxXBY9p3FeKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFYwUmVRc09kVFYwQm1FZHhYQlk5cDNGZUtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUJDL0NCODgyRTdFQTcwNzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRW MEJtRWR4WEJZOXAzRmVLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADO79lRj3H/o1JhfwlTfHe7thn+q2kLpJrioqknwPCWB+arM7wMbeoKk gCh4dI9qq5eEikAMje74at+S1Ur6XH2Mjf1FqBV7pqNeF+AlB3eK0TzBmULfU/y8 9DlWVOZLT/P8pHsAC6qIVYrYykVeWMSEK15+MZaEUN5uKwb+vjSY5MTnrRM3n7S8 NJfIX533ejkRk5vMXqVFOcJ8cQtL0wtH1MchPrNMjOLz3zDJx1vSDlFjgJ8CXEwX APR0RLwUceozvhLkB4Hd8fpx9ZpXnMZUdZrUCxYMtMkGZ9EDwF96JvQqdohTl96n yE9QFyL6yKz3tm6i7sSLz8/0AYddq2g= -----END CERTIFICATE-----Generated at Fri Jul 4 00:07:43 2025 by rpki-client