$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: IfAaxYE10OOXSLXqi6iiCK+U00yUk+2Yw0AJuxLi21I= Subject key identifier: C8:0D:9D:F8:1C:96:C2:21:3C:98:03:01:82:94:5C:E0:C3:40:D8:9E Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 04A1 Signing time: Thu 03 Jul 2025 00:16:08 +0000 Manifest this update: Thu 03 Jul 2025 00:16:08 +0000 Manifest next update: Thu 10 Jul 2025 00:16:08 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: d3yCona+zvqx019wKaGhbwScsg8hjX1UYzQPwPuSg4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Jul 3 00:16:08 2025 GMT Not After : Jul 10 00:16:08 2025 GMT Subject: CN=6865cbc8-0c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:3c:fc:a9:12:05:23:91:c9:7c:3f:10:d0: 5c:7d:91:91:f1:85:49:96:ab:2b:c1:d0:f0:57:a9: 61:4a:10:94:05:97:38:62:13:bc:b2:d8:75:c3:51: 4b:14:4e:cf:0b:58:e2:a7:c9:c7:9c:eb:bb:c1:7d: 33:e7:d1:40:86:61:27:d7:69:5e:44:f6:99:05:68: e8:53:9e:96:79:63:11:19:ab:9a:0c:21:7b:3b:f0: 87:d6:16:54:9e:d1:62:f8:07:d5:f1:38:1b:c3:38: 89:8c:26:60:18:8b:53:1c:e2:3d:33:77:12:65:ef: 2b:ef:f9:9d:74:b6:61:d1:46:70:c4:aa:a2:e1:cc: 34:49:55:ee:1b:a8:b5:e7:11:23:31:7e:59:ca:23: cd:ee:df:a7:c5:0d:8d:4e:3a:a4:25:af:bb:78:55: fa:34:f1:b6:8c:38:05:97:45:30:45:d0:b5:f1:4c: 1e:fa:4b:28:f0:4f:28:ce:a3:98:af:b1:c2:dd:06: 29:48:99:ad:80:83:9e:a2:cb:8c:8b:2f:23:4b:e5: af:6d:ad:5f:b5:72:d4:1e:df:6a:da:4a:52:10:f9: 33:a7:23:a6:5c:ab:97:bb:9a:0a:69:b9:6b:d4:3b: 60:2b:09:a5:98:ae:74:29:6e:65:43:67:81:e6:f0: bb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0D:9D:F8:1C:96:C2:21:3C:98:03:01:82:94:5C:E0:C3:40:D8:9E X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:23:bd:a2:64:05:57:4e:91:3c:52:f7:de:30:df:7b:14:a6: af:8d:e5:e1:a3:e0:8a:0a:72:63:43:e3:b4:ff:aa:04:ae:a4: f6:48:0a:e7:78:10:77:e7:d4:84:46:84:39:e5:24:2f:5f:58: e2:3c:75:72:11:ec:fc:34:4c:f3:b2:8b:0c:78:80:42:b7:3c: fb:4a:88:14:8a:13:54:b3:e0:90:a3:ee:5a:e8:9f:2a:80:99: 83:61:9f:d8:27:26:dc:9f:6c:bb:6d:1a:d0:18:ac:c2:02:f8: 8d:d8:22:c9:9d:37:8a:e8:2c:07:7e:72:47:77:83:c1:19:b1: 57:3a:14:4a:f9:f1:1d:d3:d3:f7:57:79:f6:42:af:15:42:0a: 39:3f:63:96:22:0e:60:7f:92:3a:d0:70:0d:25:9d:ce:2e:12: c8:50:27:b0:01:19:7a:77:4b:23:52:31:5a:70:d8:b0:19:92: c0:99:e6:a7:3f:d2:d7:15:82:96:f9:45:9f:ac:32:48:ed:49: 21:c5:42:f2:bb:94:2b:33:72:5a:d5:a1:0d:b5:8b:ac:fb:c8: 28:6e:49:3c:1c:63:87:b6:c7:1e:5f:67:8b:d7:3f:5d:b7:a5: 2a:02:51:f0:57:1d:7d:c1:9d:88:3b:dc:1a:fc:3b:00:ec:bf: 00:ae:bd:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUwNzAzMDAxNjA4WhcNMjUwNzEwMDAxNjA4WjAYMRYwFAYD VQQDEw02ODY1Y2JjOC0wYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/48/KkSBSORyXw/ENBcfZGR8YVJlqsrwdDwV6lhShCUBZc4YhO8sth1w1FL FE7PC1jip8nHnOu7wX0z59FAhmEn12leRPaZBWjoU56WeWMRGauaDCF7O/CH1hZU ntFi+AfV8TgbwziJjCZgGItTHOI9M3cSZe8r7/mddLZh0UZwxKqi4cw0SVXuG6i1 5xEjMX5ZyiPN7t+nxQ2NTjqkJa+7eFX6NPG2jDgFl0UwRdC18Uwe+kso8E8ozqOY r7HC3QYpSJmtgIOeosuMiy8jS+Wvba1ftXLUHt9q2kpSEPkzpyOmXKuXu5oKablr 1DtgKwmlmK50KW5lQ2eB5vC78QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgNnfgc lsIhPJgDAYKUXODDQNieMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhI72iZAVXTpE8UvfeMN97FKavjeXho+CKCnJjQ+O0/6oErqT2SArn eBB359SERoQ55SQvX1jiPHVyEez8NEzzsosMeIBCtzz7SogUihNUs+CQo+5a6J8q gJmDYZ/YJybcn2y7bRrQGKzCAviN2CLJnTeK6CwHfnJHd4PBGbFXOhRK+fEd09P3 V3n2Qq8VQgo5P2OWIg5gf5I60HANJZ3OLhLIUCewARl6d0sjUjFacNiwGZLAmean P9LXFYKW+UWfrDJI7UkhxULyu5QrM3Ja1aENtYus+8gobkk8HGOHtsceX2eL1z9d t6UqAlHwVx19wZ2IO9wa/DsA7L8Arr2+ -----END CERTIFICATE-----Generated at Thu Jul 3 18:01:11 2025 by rpki-client