$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: 62BEIuoOS0pLGhgof8BqlIdpgUlYcA5s0VBaiA6/Yok= Subject key identifier: BD:2A:EE:C3:3D:A1:E9:4B:57:71:E7:09:1E:46:15:CF:3C:29:82:B5 Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 016A Signing time: Thu 03 Jul 2025 03:59:07 +0000 Manifest this update: Thu 03 Jul 2025 03:59:06 +0000 Manifest next update: Thu 10 Jul 2025 03:59:06 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: afKkQujo3locd+6A2pZjLUdyJFTE8oHm07GEk9bzLlQ=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Jul 3 03:59:06 2025 GMT Not After : Jul 10 03:59:06 2025 GMT Subject: CN=6866000a-5a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a4:41:de:3a:75:72:81:0b:8f:7d:b4:d2:fc: c6:10:d0:1f:35:66:d6:04:92:64:4e:09:65:fc:1d: 2c:3c:8f:31:38:95:9a:7c:5c:a2:b4:90:fd:05:b6: 9e:74:b2:74:6b:05:21:59:00:e9:57:0f:79:28:75: 4c:5e:6a:bc:58:9d:f6:c0:09:89:d6:94:5d:64:78: 61:45:00:44:ae:69:84:96:76:8d:6a:b6:78:9e:4c: 3d:ce:34:d9:f5:30:53:15:c2:39:b8:00:a8:96:a3: 11:85:f8:9b:87:a2:0c:5d:7d:95:9d:39:6a:89:f6: 98:77:87:28:08:68:5a:c6:0b:ce:bb:78:88:c7:27: bd:1f:79:8a:4b:63:a4:87:c8:4a:3f:d6:ee:f2:3c: fa:94:69:4e:79:21:83:f0:9c:32:ba:ac:ac:07:95: cf:e5:69:9f:29:0f:d2:bc:c2:f1:29:2f:ea:f9:15: e8:23:2c:db:f5:16:18:6c:1d:c6:ba:6b:ef:0f:85: 50:b4:e2:ba:04:db:df:4c:e0:5f:06:1d:3e:66:27: 94:88:8e:c8:16:93:1c:c0:56:f3:06:fd:a8:fd:8a: 58:3d:55:36:34:52:da:bb:2b:c6:5b:e9:5f:6e:ba: 80:c8:93:96:0a:60:0d:ca:66:97:83:a2:58:7b:d1: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2A:EE:C3:3D:A1:E9:4B:57:71:E7:09:1E:46:15:CF:3C:29:82:B5 X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:1f:d5:e6:e4:4d:25:3f:e9:e2:e9:35:94:ba:1d:a9:45:9d: 08:de:2c:ea:22:5f:3f:9d:22:84:a9:8a:6a:a8:68:1d:33:ff: ff:c7:bb:ef:5e:95:c7:1a:5c:31:39:38:ec:05:ae:e4:f1:62: 31:10:de:7e:8a:c2:42:9f:fc:df:89:24:1b:79:c0:da:f6:a9: af:1e:39:c2:7b:6d:20:93:e3:44:f6:84:d6:b1:01:06:d4:f7: ad:42:43:2f:d6:c3:c4:58:61:05:56:4a:9a:ba:c1:b6:59:3d: 96:52:e0:ef:c6:35:f3:87:4e:0e:ec:53:31:61:4f:d7:aa:6a: bb:29:7d:36:3c:9f:25:db:e4:8e:52:c0:22:0e:60:ca:28:5a: 7b:2a:7c:18:df:b0:d5:64:69:ed:32:d8:38:7a:ef:88:d7:8b: c5:68:35:63:dc:e1:6c:8a:10:fb:7c:be:d4:04:62:8c:10:fe: af:4d:89:ae:53:79:47:c6:ba:41:16:67:d7:67:0d:71:5b:bd: 79:3e:83:3e:11:c2:d8:f2:a8:f8:4f:85:e3:e8:d4:dc:0e:f6: aa:64:7b:b8:f4:67:6d:f7:ec:17:4d:fb:ac:61:fd:5e:e7:39: 32:7f:5e:4a:fc:87:7d:4e:a9:3e:5d:64:37:65:97:18:74:47: b0:e9:07:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUwNzAzMDM1OTA2WhcNMjUwNzEwMDM1OTA2WjAYMRYwFAYD VQQDEw02ODY2MDAwYS01YTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6RB3jp1coELj3200vzGENAfNWbWBJJkTgll/B0sPI8xOJWafFyitJD9Bbae dLJ0awUhWQDpVw95KHVMXmq8WJ32wAmJ1pRdZHhhRQBErmmElnaNarZ4nkw9zjTZ 9TBTFcI5uAColqMRhfibh6IMXX2VnTlqifaYd4coCGhaxgvOu3iIxye9H3mKS2Ok h8hKP9bu8jz6lGlOeSGD8JwyuqysB5XP5WmfKQ/SvMLxKS/q+RXoIyzb9RYYbB3G umvvD4VQtOK6BNvfTOBfBh0+ZieUiI7IFpMcwFbzBv2o/YpYPVU2NFLauyvGW+lf brqAyJOWCmANymaXg6JYe9HqWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0q7sM9 oelLV3HnCR5GFc88KYK1MB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtH9Xm5E0lP+ni6TWUuh2pRZ0I3izqIl8/nSKEqYpqqGgdM///x7vv XpXHGlwxOTjsBa7k8WIxEN5+isJCn/zfiSQbecDa9qmvHjnCe20gk+NE9oTWsQEG 1PetQkMv1sPEWGEFVkqausG2WT2WUuDvxjXzh04O7FMxYU/Xqmq7KX02PJ8l2+SO UsAiDmDKKFp7KnwY37DVZGntMtg4eu+I14vFaDVj3OFsihD7fL7UBGKMEP6vTYmu U3lHxrpBFmfXZw1xW715PoM+EcLY8qj4T4Xj6NTcDvaqZHu49Gdt9+wXTfusYf1e 5zkyf15K/Id9Tqk+XWQ3ZZcYdEew6Qef -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:02 2025 by rpki-client