$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: H4SJRm2/k19bWKExuKoQW+WcC1SJ3vv428xzdF5Civk= Subject key identifier: AE:88:0A:9F:4E:97:25:D0:F5:6E:52:D6:46:FA:EC:D8:6D:B5:7B:AA Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0C75 Signing time: Mon 30 Jun 2025 21:49:11 +0000 Manifest this update: Mon 30 Jun 2025 21:49:11 +0000 Manifest next update: Mon 07 Jul 2025 21:49:11 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: DAxy+vLkT95Caj+I+AwG0U/tyi+vBFBkuRW3EolcGvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Jun 30 21:49:11 2025 GMT Not After : Jul 7 21:49:11 2025 GMT Subject: CN=68630657-36c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:01:e4:bf:81:6c:4b:62:56:ab:13:70:97: ba:ff:d1:8b:4a:a7:58:83:69:e9:11:1e:ba:cb:f7: 37:8d:52:81:56:a2:8f:a8:9c:96:36:91:19:9a:8a: e1:8b:d8:fb:7b:fc:93:a5:80:5e:23:c6:84:f0:fd: 12:81:fe:89:3e:62:8d:53:51:14:fe:5c:55:ac:9d: 11:b1:5a:e2:3a:f2:be:b6:26:84:f9:0e:88:13:8c: 47:44:37:a3:46:4f:ca:16:46:0d:8b:7d:89:ad:47: e3:e6:59:25:d4:87:95:94:3a:39:15:f7:4d:7d:b9: 4c:a0:7d:cd:50:a3:a0:d9:4e:21:23:38:56:27:d1: d3:c1:30:11:d1:e1:c8:7f:6e:82:0c:ad:f0:5c:e5: a2:93:49:50:63:7b:89:2b:9a:b8:01:f5:2f:da:69: 75:87:25:09:e1:63:89:99:de:e9:b1:70:6d:1e:92: 55:9a:7f:e0:82:ef:99:67:c8:c0:d1:1b:41:21:4a: 58:c7:c7:e3:a2:61:da:eb:94:ce:cd:b6:f5:b6:d5: a7:54:11:54:0c:35:25:8c:39:78:e3:f3:ee:54:db: 08:00:0f:74:cc:43:31:ff:5a:5e:b4:d5:bf:a1:55: f8:17:dd:99:46:e5:4d:cc:24:bf:0a:39:56:70:a3: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:88:0A:9F:4E:97:25:D0:F5:6E:52:D6:46:FA:EC:D8:6D:B5:7B:AA X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:2d:77:24:03:52:02:13:4d:48:d1:49:2d:99:a0:f2:8a:bb: d0:6f:eb:3e:e7:16:b1:b4:d8:03:da:dd:64:33:06:d2:90:f2: 61:0e:29:db:ac:e2:90:2b:e0:db:9f:b9:a0:6c:4d:5f:b7:4f: da:ae:5b:8b:43:2e:25:e6:5a:54:16:83:bf:08:ba:7f:75:1a: f0:4e:ed:b3:c2:b1:90:d0:ca:2d:08:05:de:31:c1:a6:80:71: 41:70:c9:c6:2d:af:01:e0:88:2b:41:e6:8c:5e:4e:ac:87:c4: eb:e3:cd:74:7c:66:2f:51:69:32:1e:d3:bb:69:70:aa:7b:b3: 9e:ce:87:c0:5a:9b:58:da:a9:87:ac:c3:7d:75:b9:27:8c:6c: 34:06:27:af:89:e5:96:8b:3b:94:cb:34:16:af:49:34:9c:82: 65:d2:c3:72:f3:2e:00:39:ad:7a:2c:73:f8:cc:f8:fc:e6:36: c4:27:d1:68:cf:93:b6:da:e7:b4:47:06:6b:6b:15:7f:af:cd: 74:2d:67:cd:af:15:c6:48:a8:1c:2d:bc:fe:ca:d2:24:17:5b: 24:64:bf:f5:15:4c:22:fe:04:4e:24:9d:b2:29:3e:2f:78:06: 4d:c6:65:1d:6c:07:b5:6f:67:1e:2d:f2:41:66:f4:c3:6e:71: f0:26:c5:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUwNjMwMjE0OTExWhcNMjUwNzA3MjE0OTExWjAYMRYwFAYD VQQDEw02ODYzMDY1Ny0zNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKcB5L+BbEtiVqsTcJe6/9GLSqdYg2npER66y/c3jVKBVqKPqJyWNpEZmorh i9j7e/yTpYBeI8aE8P0Sgf6JPmKNU1EU/lxVrJ0RsVriOvK+tiaE+Q6IE4xHRDej Rk/KFkYNi32JrUfj5lkl1IeVlDo5FfdNfblMoH3NUKOg2U4hIzhWJ9HTwTAR0eHI f26CDK3wXOWik0lQY3uJK5q4AfUv2ml1hyUJ4WOJmd7psXBtHpJVmn/ggu+ZZ8jA 0RtBIUpYx8fjomHa65TOzbb1ttWnVBFUDDUljDl44/PuVNsIAA90zEMx/1petNW/ oVX4F92ZRuVNzCS/CjlWcKNWSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6ICp9O lyXQ9W5S1kb67NhttXuqMB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJLXckA1ICE01I0UktmaDyirvQb+s+5xaxtNgD2t1kMwbSkPJhDinb rOKQK+Dbn7mgbE1ft0/arluLQy4l5lpUFoO/CLp/dRrwTu2zwrGQ0MotCAXeMcGm gHFBcMnGLa8B4IgrQeaMXk6sh8Tr4810fGYvUWkyHtO7aXCqe7OezofAWptY2qmH rMN9dbknjGw0BievieWWizuUyzQWr0k0nIJl0sNy8y4AOa16LHP4zPj85jbEJ9Fo z5O22ue0RwZraxV/r810LWfNrxXGSKgcLbz+ytIkF1skZL/1FUwi/gROJJ2yKT4v eAZNxmUdbAe1b2ceLfJBZvTDbnHwJsUL -----END CERTIFICATE-----Generated at Tue Jul 1 08:39:18 2025 by rpki-client