$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: CTHtCOLFKRu2yPYnK8+6jnvaPC1AJGgfUVpohlsBCyA= Subject key identifier: BE:9A:6A:40:B6:09:AE:48:94:29:4C:DF:F2:2C:81:42:32:EC:E5:CB Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0C74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0C61 Signing time: Wed 02 Jul 2025 18:36:07 +0000 Manifest this update: Wed 02 Jul 2025 18:36:06 +0000 Manifest next update: Wed 09 Jul 2025 18:36:06 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: khxpNTY82gtiTqkPYhT3jiSY0zq194DCU2l8593fwt0=) 2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: hMRVZDPhI9uQhHlcLsQL6+B9hhuCOLqR+jjUlDn3sAQ=) 3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: s3U0q40HWyXJCTwtjWa8KKHr421/tnOx6JMPLRqROA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Jul 2 18:36:06 2025 GMT Not After : Jul 9 18:36:06 2025 GMT Subject: CN=68657c16-473b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:11:a3:fe:ff:c5:13:14:99:5a:66:05:ee:3b: fc:7a:b7:3d:72:01:2a:12:c5:ff:ac:1d:ae:b5:a6: a4:1a:4c:7d:eb:70:57:8d:50:80:b6:9a:ac:8e:5c: 45:92:37:b7:22:38:e5:22:6a:d1:d4:a0:cc:6c:41: 8e:d2:d1:aa:d6:a7:92:46:1d:c4:90:d0:5b:e6:11: f7:c5:58:e8:57:e4:c0:3e:ea:c3:10:e0:92:d0:9a: 3c:29:92:65:4f:43:5d:8d:0e:16:21:15:bd:65:b9: c5:51:36:40:36:a0:34:fe:2f:2a:7d:cc:e4:1b:25: 42:df:82:d3:b7:b8:04:e6:64:6b:45:99:eb:88:8a: 54:5b:b6:7f:d4:fa:7e:3e:da:22:89:4b:6f:c7:e3: db:c2:ac:80:11:c7:7e:f6:4a:56:f8:5e:ce:c2:30: 6b:3c:12:eb:8e:87:5b:3f:7e:5c:89:23:a7:e9:8d: af:b8:a4:ab:77:96:52:ba:a8:c2:95:af:3b:09:67: 85:ff:1c:75:5b:2b:db:08:43:64:06:70:3f:ac:7f: 0b:43:79:63:b3:42:6d:32:44:c0:db:22:40:54:fe: 80:38:bd:1d:f4:6b:95:7e:30:88:df:24:b1:89:eb: 01:b1:ba:a4:79:4c:44:a7:f0:cf:0d:9b:64:50:3a: e2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9A:6A:40:B6:09:AE:48:94:29:4C:DF:F2:2C:81:42:32:EC:E5:CB X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e5:ca:3d:f0:3e:21:c4:26:a0:2e:f3:87:d6:3c:ad:b1:ca: 92:96:4a:9a:e2:b5:6c:f5:27:b7:1e:44:1b:de:ea:66:53:6a: 4d:63:16:61:31:78:37:03:07:61:ec:6b:f3:43:92:58:29:e1: 09:92:b8:21:46:c7:6e:08:5f:66:57:4b:68:d0:8c:cc:e5:d7: 13:ef:df:15:40:13:32:92:62:c2:4f:36:ff:45:84:5e:8f:32: ae:74:6a:d5:79:1b:46:a2:f0:6d:01:3c:2d:e6:30:14:aa:8b: dc:2e:83:05:d2:16:fa:30:17:e2:79:d0:b2:3c:8c:e1:52:da: 0b:5b:37:f3:c6:7e:ad:98:5d:40:b3:59:fb:84:22:7c:17:78: 5e:83:bd:95:45:84:02:1b:99:61:51:2e:f2:f5:aa:49:58:90: 21:f2:7c:da:27:46:e0:d7:ef:2c:e2:f8:b2:fb:5a:5f:f4:54: 75:12:91:15:6d:f4:f7:83:19:5f:b0:bb:5e:ec:17:aa:ac:b5: 2b:56:a1:01:ff:37:bb:61:82:ea:ff:d8:52:c1:85:1a:a6:40: ee:25:d9:5f:62:f8:8e:71:57:96:9c:6a:26:17:a0:0f:a0:5a: 35:cf:3f:25:f3:13:0c:f0:93:f4:dc:60:e2:c5:8f:5d:88:eb: b2:91:21:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjUwNzAyMTgzNjA2WhcNMjUwNzA5MTgzNjA2WjAYMRYwFAYD VQQDEw02ODY1N2MxNi00NzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BGj/v/FExSZWmYF7jv8erc9cgEqEsX/rB2utaakGkx963BXjVCAtpqsjlxF kje3IjjlImrR1KDMbEGO0tGq1qeSRh3EkNBb5hH3xVjoV+TAPurDEOCS0Jo8KZJl T0NdjQ4WIRW9ZbnFUTZANqA0/i8qfczkGyVC34LTt7gE5mRrRZnriIpUW7Z/1Pp+ PtoiiUtvx+PbwqyAEcd+9kpW+F7OwjBrPBLrjodbP35ciSOn6Y2vuKSrd5ZSuqjC la87CWeF/xx1WyvbCENkBnA/rH8LQ3ljs0JtMkTA2yJAVP6AOL0d9GuVfjCI3ySx iesBsbqkeUxEp/DPDZtkUDriDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6aakC2 Ca5IlClM3/IsgUIy7OXLMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc5co98D4hxCagLvOH1jytscqSlkqa4rVs9Se3HkQb3upmU2pNYxZh MXg3Awdh7GvzQ5JYKeEJkrghRsduCF9mV0to0IzM5dcT798VQBMykmLCTzb/RYRe jzKudGrVeRtGovBtATwt5jAUqovcLoMF0hb6MBfiedCyPIzhUtoLWzfzxn6tmF1A s1n7hCJ8F3heg72VRYQCG5lhUS7y9apJWJAh8nzaJ0bg1+8s4viy+1pf9FR1EpEV bfT3gxlfsLte7BeqrLUrVqEB/ze7YYLq/9hSwYUapkDuJdlfYviOcVeWnGomF6AP oFo1zz8l8xMM8JP03GDixY9diOuykSGR -----END CERTIFICATE-----Generated at Thu Jul 3 23:30:02 2025 by rpki-client