$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft File: 83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json) Hash identifier: FkZlXHMMOBWfyRUXzPGQ2Vbjh+EPzwQjTTbXx/2esfQ= Subject key identifier: E6:9A:53:39:95:BE:3A:45:3B:1B:DF:DB:A5:4B:86:D0:9C:BE:E1:D3 Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Certificate serial: 0993 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft Manifest number: 098B Signing time: Wed 02 Jul 2025 20:20:58 +0000 Manifest this update: Wed 02 Jul 2025 20:20:58 +0000 Manifest next update: Wed 09 Jul 2025 20:20:58 +0000 Files and hashes: 1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: zOqBfeQjxCO+L4S4Cwi2nO37T0iC/d+TE1XPMV8n918=) 2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: FDVevWofhV4OBWCY3mCV+bPsuc2xoyahcfyBo3UC3vE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2451 (0x993) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Validity Not Before: Jul 2 20:20:58 2025 GMT Not After : Jul 9 20:20:58 2025 GMT Subject: CN=686594aa-4069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:61:03:5a:85:53:8d:74:f3:dc:f2:46:77: 65:b6:76:49:d7:9f:20:f2:ce:4f:1d:df:d3:c3:9b: df:33:71:9e:3f:34:5d:3a:ab:ff:32:e8:a7:87:60: 4a:25:05:84:eb:42:a2:dd:b6:08:c2:4e:60:92:f8: 3c:ee:05:5a:24:ff:0d:27:83:a3:b8:f3:b1:f7:6a: 0d:63:60:a6:13:4b:f1:80:d8:c6:28:1a:a8:12:65: f8:3d:b8:f1:bb:11:a9:c3:df:7d:40:e4:ea:75:34: 68:c4:a1:04:1f:16:3a:e6:93:73:97:1a:53:0a:19: f1:22:fb:12:28:66:46:98:f2:42:a9:ae:04:1b:ce: 46:5d:f9:d2:fb:79:69:71:e7:34:80:4c:66:3c:ba: ab:16:5f:a8:cf:fc:d1:8b:0b:dc:85:76:d4:77:90: 43:a3:4b:91:30:f0:00:07:80:ce:12:50:b4:71:8d: 33:22:6b:ee:14:06:df:d3:96:a5:3b:6c:6e:77:e9: e0:cb:4c:45:71:3c:cc:9c:e2:f0:c6:c6:4d:e4:39: 49:9d:b9:32:74:4e:15:90:0b:42:4a:fc:54:ff:51: 4c:6e:1c:94:4e:1c:29:6e:ad:92:6c:46:0b:ee:45: ea:9f:b7:7b:17:54:74:4c:3f:a8:72:81:4c:16:f9: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9A:53:39:95:BE:3A:45:3B:1B:DF:DB:A5:4B:86:D0:9C:BE:E1:D3 X509v3 Authority Key Identifier: keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0c:29:b9:07:75:58:74:02:60:87:bc:25:7c:81:d6:ce:68: d3:f5:57:67:f7:24:c4:ce:62:bd:9b:bf:5c:09:b4:8e:e8:5a: 6e:d7:0c:47:2c:38:4c:9c:f7:4f:6a:bf:a5:bb:ca:12:c8:17: ca:b7:85:27:9b:41:26:ee:f8:25:da:d1:c2:44:22:e4:c2:bb: 94:87:46:b3:ac:45:ca:55:60:f0:f0:7a:64:45:a4:b9:11:ca: 30:4b:c9:81:fa:67:67:6b:2e:7c:12:a8:95:e4:e7:cd:3a:84: 02:5c:94:f9:35:46:03:e6:fe:d9:26:0b:fc:b9:33:df:a3:61: 87:05:a1:06:d4:07:f1:5f:35:09:7b:88:c7:3f:db:fa:01:d6: 81:cb:f4:02:89:5e:78:4a:cf:c7:22:e7:05:e6:dc:31:5e:11: d3:0f:7e:ea:f8:e8:ec:b4:a3:50:47:4a:30:e6:54:2f:0d:e2: 2a:11:39:c7:2a:86:b7:7c:86:b8:94:b3:41:b7:50:2f:2c:e5: 9c:7b:6e:30:3d:79:8a:26:a2:68:d0:c6:34:5c:7f:25:97:00: 7b:56:2a:d2:15:33:24:be:0f:4e:fc:29:50:94:0c:58:bb:d8: 5e:ba:32:c6:51:10:b9:61:93:0f:6d:bf:1d:b5:75:6c:ff:82: 7e:2e:48:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThFQUQxMTAvBgNVBAUTKEYzNzYwOTBERDc5Q0Y2QTI1OUFFMkExNzAyMDM3MkU5 RTYxNjBCQjYwHhcNMjUwNzAyMjAyMDU4WhcNMjUwNzA5MjAyMDU4WjAYMRYwFAYD VQQDEw02ODY1OTRhYS00MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaxhA1qFU41089zyRndltnZJ158g8s5PHd/Tw5vfM3GePzRdOqv/Muinh2BK JQWE60Ki3bYIwk5gkvg87gVaJP8NJ4OjuPOx92oNY2CmE0vxgNjGKBqoEmX4Pbjx uxGpw999QOTqdTRoxKEEHxY65pNzlxpTChnxIvsSKGZGmPJCqa4EG85GXfnS+3lp cec0gExmPLqrFl+oz/zRiwvchXbUd5BDo0uRMPAAB4DOElC0cY0zImvuFAbf05al O2xud+ngy0xFcTzMnOLwxsZN5DlJnbkydE4VkAtCSvxU/1FMbhyUThwpbq2SbEYL 7kXqn7d7F1R0TD+ocoFMFvkcdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOaaUzmV vjpFOxvf26VLhtCcvuHTMB8GA1UdIwQYMBaAFPN2CQ3XnPaiWa4qFwIDcunmFgu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEVBRC8zQzI0REFEMjhG QUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlxSlpyaW9YQWdOeTZlWVdD N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzWUpEZGVjOXFKWnJpb1hBZ055NmVZV0M3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEVBRC8zQzI0REFEMjhGQUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlx SlpyaW9YQWdOeTZlWVdDN1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKDCm5B3VYdAJgh7wlfIHWzmjT9Vdn9yTEzmK9m79cCbSO6Fpu1wxH LDhMnPdPar+lu8oSyBfKt4Unm0Em7vgl2tHCRCLkwruUh0azrEXKVWDw8HpkRaS5 EcowS8mB+mdnay58EqiV5OfNOoQCXJT5NUYD5v7ZJgv8uTPfo2GHBaEG1AfxXzUJ e4jHP9v6AdaBy/QCiV54Ss/HIucF5twxXhHTD37q+OjstKNQR0ow5lQvDeIqETnH Koa3fIa4lLNBt1AvLOWce24wPXmKJqJo0MY0XH8llwB7VirSFTMkvg9O/ClQlAxY u9heujLGURC5YZMPbb8dtXVs/4J+Lkje -----END CERTIFICATE-----Generated at Thu Jul 3 07:08:40 2025 by rpki-client