$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft File: 8XiofFRzBDe6WfqpzhhP-HkP5PE.mft (raw, json) Hash identifier: Lj91gxh3lD4tyrEsJTMOz5Gw9FxgN5qeRLDyHzX4Koo= Subject key identifier: 43:0B:13:F5:30:14:0F:FE:6F:EE:0D:2A:68:D8:2A:20:04:2C:26:5C Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1 Certificate issuer: /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1 Certificate serial: 04E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft Manifest number: 04E1 Signing time: Tue 01 Jul 2025 00:15:44 +0000 Manifest this update: Tue 01 Jul 2025 00:15:44 +0000 Manifest next update: Tue 08 Jul 2025 00:15:44 +0000 Files and hashes: 1: 8XiofFRzBDe6WfqpzhhP-HkP5PE.crl (hash: AJtbZOcYkaThfHXp0uFgrPrhoffCW03s0zD8sSEXn5Y=) 2: CB89040A73EA11EC8A823312C4F9AE02.roa (hash: 6pWGQwdhpFKj5uyRVvtM8M7iiAHBMFerXsGqI0l0KTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1254 (0x4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1 Validity Not Before: Jul 1 00:15:44 2025 GMT Not After : Jul 8 00:15:44 2025 GMT Subject: CN=686328b0-6074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:71:43:15:08:a8:ef:09:b0:91:1b:4a:9f:45: 61:99:b2:5a:e7:ec:99:7d:72:68:c1:28:00:de:f9: 8a:b4:1f:12:c7:69:25:07:e8:25:05:dd:4e:7e:bb: 28:1b:2f:c3:cf:73:5d:83:4e:7e:21:61:b7:e0:c5: 85:55:b7:a0:87:fa:e1:60:9a:90:cf:4e:7b:42:fa: 23:b6:86:e9:2f:79:08:fe:d6:19:4b:3e:6d:88:90: d7:96:2e:34:4b:8a:06:60:76:1f:81:4c:35:81:6f: 1d:06:0f:87:4c:a3:a6:71:a2:bd:e9:4c:c1:a9:86: 7c:23:7e:28:6f:f5:c1:cb:23:27:d1:1c:c3:ce:4a: d3:ee:de:a9:ea:27:7c:5d:f6:ed:16:74:d2:29:24: 74:94:cb:c6:6f:94:0c:14:07:3c:9e:4d:59:4c:18: fb:a4:47:d9:21:44:79:25:9d:a0:68:a3:12:d7:91: e6:cc:e5:a2:36:27:64:d7:b7:b6:6e:26:66:85:ea: 58:b6:d5:b3:a6:e8:4b:bc:9a:1c:cc:11:e3:a3:84: 35:18:8d:c6:76:24:4b:a9:ac:db:1e:7e:dd:65:47: 10:73:da:14:df:a9:6c:ba:9b:a6:85:44:14:f8:87: 79:ef:30:de:d0:a8:2f:42:e2:6c:03:10:aa:ab:de: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:13:F5:30:14:0F:FE:6F:EE:0D:2A:68:D8:2A:20:04:2C:26:5C X509v3 Authority Key Identifier: keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c8:5a:ce:e5:d9:76:f5:cf:5f:d5:d4:bd:d4:5e:7b:7e:8d: 52:ad:3f:08:dd:18:95:5f:d9:b3:28:eb:2a:23:7a:67:3e:c5: 3b:af:75:18:5c:38:21:65:72:32:f0:84:68:be:f1:98:85:f0: 8e:7c:c8:d5:ce:84:6b:1d:80:89:63:a7:aa:92:34:ca:f0:44: 34:f9:43:76:4a:29:28:27:0d:22:2c:c5:8c:b9:51:8c:92:1a: 6b:b2:24:60:e4:d0:43:67:9f:ca:80:8c:58:6e:b4:45:3e:97: 89:ad:cc:e1:2a:c8:ef:79:de:79:92:e1:a2:b6:76:73:c2:db: 29:65:3a:63:bd:63:69:5e:07:36:fd:71:ea:78:32:e3:cf:c4: 6f:82:e6:ea:40:f9:07:83:0e:3d:34:67:0c:2d:08:88:5c:76: 54:94:fa:81:8e:d4:d4:49:6b:3b:1e:74:84:95:67:76:47:d2: 20:fa:2f:6b:aa:9d:19:7c:89:1d:16:42:cf:3d:36:82:76:78: 59:b6:b0:18:18:c8:ec:52:cd:bf:e3:8b:40:d1:2a:56:86:4a: b7:0c:0f:23:57:65:fc:23:83:56:1a:5f:0d:e3:c8:36:23:d9: d1:b3:f7:c1:e0:a5:3d:36:5f:dd:cb:f9:7e:d9:8d:3c:be:52: ca:19:70:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3OTIxMTAvBgNVBAUTKEYxNzhBODdDNTQ3MzA0MzdCQTU5RkFBOUNFMTg0RkY4 NzkwRkU0RjEwHhcNMjUwNzAxMDAxNTQ0WhcNMjUwNzA4MDAxNTQ0WjAYMRYwFAYD VQQDEw02ODYzMjhiMC02MDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXFDFQio7wmwkRtKn0VhmbJa5+yZfXJowSgA3vmKtB8Sx2klB+glBd1Ofrso Gy/Dz3Ndg05+IWG34MWFVbegh/rhYJqQz057QvojtobpL3kI/tYZSz5tiJDXli40 S4oGYHYfgUw1gW8dBg+HTKOmcaK96UzBqYZ8I34ob/XByyMn0RzDzkrT7t6p6id8 XfbtFnTSKSR0lMvGb5QMFAc8nk1ZTBj7pEfZIUR5JZ2gaKMS15HmzOWiNidk17e2 biZmhepYttWzpuhLvJoczBHjo4Q1GI3GdiRLqazbHn7dZUcQc9oU36lsupumhUQU +Id57zDe0KgvQuJsAxCqq95ZMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMLE/Uw FA/+b+4NKmjYKiAELCZcMB8GA1UdIwQYMBaAFPF4qHxUcwQ3uln6qc4YT/h5D+Tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjc5Mi9EQkYxQzc3MjIx RUQxMUVDQkU5QzlBMUNDNEY5QUUwMi84WGlvZkZSekJEZTZXZnFwemhoUC1Ia1A1 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYaW9mRlJ6QkRlNldmcXB6aGhQLUhrUDVQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njc5Mi9EQkYxQzc3MjIxRUQxMUVDQkU5QzlBMUNDNEY5QUUwMi84WGlvZkZSekJE ZTZXZnFwemhoUC1Ia1A1UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkyFrO5dl29c9f1dS91F57fo1SrT8I3RiVX9mzKOsqI3pnPsU7r3UY XDghZXIy8IRovvGYhfCOfMjVzoRrHYCJY6eqkjTK8EQ0+UN2SikoJw0iLMWMuVGM khprsiRg5NBDZ5/KgIxYbrRFPpeJrczhKsjved55kuGitnZzwtspZTpjvWNpXgc2 /XHqeDLjz8RvgubqQPkHgw49NGcMLQiIXHZUlPqBjtTUSWs7HnSElWd2R9Ig+i9r qp0ZfIkdFkLPPTaCdnhZtrAYGMjsUs2/44tA0SpWhkq3DA8jV2X8I4NWGl8N48g2 I9nRs/fB4KU9Nl/dy/l+2Y08vlLKGXC5 -----END CERTIFICATE-----Generated at Wed Jul 2 04:40:01 2025 by rpki-client