$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft File: 8ZLUrYbOEPyWgn_JNIDz-9716mE.mft (raw, json) Hash identifier: WrAHlBkBF2QI9dW3k5gY+lN1c8q2laJxNzPLXziicqQ= Subject key identifier: 46:82:AB:C4:9F:71:87:A8:2B:CA:7A:F7:F3:19:0E:F0:B5:69:1B:32 Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft Manifest number: 04A4 Signing time: Thu 03 Jul 2025 00:19:00 +0000 Manifest this update: Thu 03 Jul 2025 00:19:00 +0000 Manifest next update: Thu 10 Jul 2025 00:19:00 +0000 Files and hashes: 1: 8ZLUrYbOEPyWgn_JNIDz-9716mE.crl (hash: GA5k7y4FBNHwaAVqZvmqFL+K4qsJ6nf3lDbvewx9lYQ=) 2: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (hash: N7zAF6qotCb0ywjS2VK9+Nbg9CvfxH2mHM6x46+8gNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: Jul 3 00:19:00 2025 GMT Not After : Jul 10 00:19:00 2025 GMT Subject: CN=6865cc74-61de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:e5:43:74:0b:1c:a4:92:19:de:44:15:4a: 52:0d:eb:7e:bd:ac:2d:b4:e0:fd:e2:6f:d4:9d:6a: de:20:e8:d9:28:cb:d5:e9:e5:91:58:dd:b4:a4:39: df:97:33:19:2a:74:92:18:55:b9:85:62:9e:fe:5a: 1d:87:5e:a4:f2:7e:30:0d:51:49:c3:0f:28:95:89: 2c:10:69:7c:e7:e9:eb:8d:5c:4f:f6:74:69:4c:4f: 54:9d:84:19:2f:04:80:7a:32:89:af:bc:8a:fa:44: 31:f4:d5:27:22:8f:7f:8f:1e:dd:31:38:5a:cd:76: a0:4c:f4:05:ec:7e:37:de:9e:d3:fe:86:7b:0c:c5: 4d:ed:a9:1b:45:0f:47:fa:91:03:75:94:45:4b:0e: e7:85:2f:52:cf:c1:18:1c:89:a8:b1:a4:8c:c8:52: 99:3e:94:11:f1:b6:f8:ec:f7:a7:94:1d:45:c3:97: 9d:b8:c1:34:fd:b7:98:05:bd:b0:b8:07:17:70:f3: 6f:fc:26:c3:22:22:89:2a:3d:2f:44:dd:e5:de:04: 63:c5:53:ec:ae:4f:13:b0:e6:46:fd:a2:e4:1e:3b: 0f:2f:22:52:79:9a:61:5f:7a:60:97:68:63:21:87: 86:15:9b:20:13:e2:d4:0f:76:f0:c6:50:06:b6:a2: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:82:AB:C4:9F:71:87:A8:2B:CA:7A:F7:F3:19:0E:F0:B5:69:1B:32 X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:47:a4:bb:53:cc:e3:e6:a2:f2:b0:b7:7f:90:cc:c8:f3:34: 75:42:40:cf:52:1f:8b:6f:4f:28:da:bc:e7:b4:f9:d8:9b:12: 7a:ac:0f:79:4d:b1:f9:e6:9e:f4:2b:27:62:a8:eb:62:76:70: 18:d3:18:9c:b5:f3:6e:39:eb:91:d0:36:9e:39:7b:aa:e7:c5: d4:3b:a4:89:2b:44:54:1d:8b:80:4b:b5:4e:d1:e8:7e:7a:3d: e1:87:12:be:64:96:4b:fd:94:f1:e7:ab:51:a5:73:f5:49:f4: a5:46:9c:32:8d:66:92:f0:b3:cd:66:23:ef:66:4f:11:7f:27: 24:7d:b7:f2:5b:20:84:82:d9:1b:7e:78:12:ee:43:0c:7e:22: 18:01:14:54:63:ab:ea:14:cc:d2:c1:86:f1:61:d9:2a:25:1e: 37:4a:8c:7f:49:f6:97:f7:54:a0:77:4e:79:01:be:e3:23:e4: c9:6a:89:d1:4b:29:7d:9d:b4:d8:0d:7f:3d:72:3c:d2:b2:e7: cb:98:5c:24:d6:40:3f:e3:ee:87:b2:8e:28:27:e0:d1:bd:7e: 86:f1:56:5e:6c:3a:d3:15:34:9c:5c:32:d6:90:84:7c:be:f7: a7:b6:46:f3:00:41:5c:1a:47:ae:6e:6a:48:70:1b:6a:f6:15: 53:b2:d6:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjUwNzAzMDAxOTAwWhcNMjUwNzEwMDAxOTAwWjAYMRYwFAYD VQQDEw02ODY1Y2M3NC02MWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVDlQ3QLHKSSGd5EFUpSDet+vawttOD94m/UnWreIOjZKMvV6eWRWN20pDnf lzMZKnSSGFW5hWKe/lodh16k8n4wDVFJww8olYksEGl85+nrjVxP9nRpTE9UnYQZ LwSAejKJr7yK+kQx9NUnIo9/jx7dMThazXagTPQF7H433p7T/oZ7DMVN7akbRQ9H +pEDdZRFSw7nhS9Sz8EYHImosaSMyFKZPpQR8bb47PenlB1Fw5eduME0/beYBb2w uAcXcPNv/CbDIiKJKj0vRN3l3gRjxVPsrk8TsOZG/aLkHjsPLyJSeZphX3pgl2hj IYeGFZsgE+LUD3bwxlAGtqLEOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaCq8Sf cYeoK8p69/MZDvC1aRsyMB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzhFOC9CODlFQjY5MDNFMUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQ eVdnbl9KTklEei05NzE2bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVR6S7U8zj5qLysLd/kMzI8zR1QkDPUh+Lb08o2rzntPnYmxJ6rA95 TbH55p70KydiqOtidnAY0xictfNuOeuR0DaeOXuq58XUO6SJK0RUHYuAS7VO0eh+ ej3hhxK+ZJZL/ZTx56tRpXP1SfSlRpwyjWaS8LPNZiPvZk8RfyckfbfyWyCEgtkb fngS7kMMfiIYARRUY6vqFMzSwYbxYdkqJR43Sox/SfaX91Sgd055Ab7jI+TJaonR Syl9nbTYDX89cjzSsufLmFwk1kA/4+6Hso4oJ+DRvX6G8VZebDrTFTScXDLWkIR8 vventkbzAEFcGkeubmpIcBtq9hVTstZv -----END CERTIFICATE-----Generated at Thu Jul 3 17:42:43 2025 by rpki-client