$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: fYT1W1cwjCJzivB9WiW7PUC+w2kYKgw/D7DYxm1PUxc= Subject key identifier: 7C:F4:66:FE:EF:47:55:85:FF:15:88:9D:99:A9:7D:27:C5:4B:2A:B4 Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 3F Signing time: Sun 29 Jun 2025 06:33:29 +0000 Manifest this update: Sun 29 Jun 2025 06:33:29 +0000 Manifest next update: Sun 06 Jul 2025 06:33:29 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: drHbvkInCDo1D4RCyjVZJMT9osjyWozNUcaqDXyRwH4=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: Jun 29 06:33:29 2025 GMT Not After : Jul 6 06:33:29 2025 GMT Subject: CN=6860de39-d650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:7d:83:b8:d3:fd:c7:1f:59:77:b1:95:6e: 10:dc:3f:26:47:7a:50:0c:5c:ef:7b:6b:fd:15:4f: cd:08:ab:f0:b4:09:52:2f:60:b9:d8:7c:15:d2:26: eb:dc:b4:ad:22:78:4a:93:d1:54:6d:f2:12:24:96: 47:63:b4:c3:9c:8d:6e:bb:c6:18:47:eb:8f:dc:1c: 0d:bc:ea:70:ae:96:c0:4f:96:b9:2d:a2:45:b9:b7: 45:e4:42:c4:58:fe:1b:39:de:c8:d1:20:3a:59:07: 8c:97:b2:4f:3d:69:c8:78:e4:68:4f:69:68:f1:ef: 45:32:99:25:f8:f9:60:65:fa:f6:55:61:95:9b:71: 36:8b:be:aa:14:bd:9f:4b:9f:7c:00:f6:fa:71:51: d0:2b:54:6b:c1:39:2b:ee:36:68:9f:84:45:bf:81: ac:53:4b:fe:11:c8:42:8e:d9:70:ca:dd:70:68:f6: 2e:15:9c:b4:f9:79:71:d7:de:28:93:a9:98:0b:1c: 7e:03:a7:d2:e1:d3:4a:b5:78:c9:65:53:79:3d:ee: 70:25:5c:3c:13:9c:d7:ec:90:4e:6a:48:83:46:3d: af:b1:41:99:ef:b0:fa:90:3d:29:cf:65:bc:8e:46: e4:39:cf:b1:dc:81:2a:84:2c:21:7f:92:e0:64:2c: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F4:66:FE:EF:47:55:85:FF:15:88:9D:99:A9:7D:27:C5:4B:2A:B4 X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f9:26:1a:36:89:e0:57:1c:71:c9:e2:49:e6:4f:cf:33:bd: 58:f5:b8:a5:26:9f:f8:09:55:ea:a7:72:73:20:bc:68:5a:55: 28:08:0e:e1:c3:d8:17:da:25:c8:d6:c2:e2:13:6e:52:79:bd: cf:d9:4d:e3:03:c2:d6:6d:97:3b:2d:83:75:16:63:ed:38:d9: ac:2c:50:f2:fa:6e:b0:7e:90:32:cb:d7:20:39:d2:26:69:63: 32:14:f1:0d:7a:7d:47:c4:de:99:ea:51:68:dc:b3:c4:4e:b2: 48:65:90:ef:8f:71:c6:41:7b:82:80:e0:13:94:e0:63:95:9a: 42:ed:8f:05:c9:af:04:96:98:55:fe:14:c4:b8:fa:c0:1b:a8: 1f:5d:36:8c:54:a4:ea:4a:ab:56:50:aa:8b:82:0c:01:3c:21: 51:36:d3:52:95:1a:47:ad:83:4c:9c:dc:00:02:8d:6b:f1:ec: 68:90:2a:38:0e:16:f5:c8:16:fd:a6:93:a0:7b:3c:86:ee:41: 75:11:36:83:24:4d:68:08:5f:7f:ec:40:b3:24:6f:7c:b9:34: 16:a1:2b:7d:cb:49:d2:43:8d:cc:6e:e7:21:21:70:a1:69:66: d2:a9:6c:b6:3c:05:ca:8c:62:42:ed:87:eb:30:7b:e6:a6:0a: f2:9f:7e:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTA2MjkwNjMzMjlaFw0yNTA3MDYwNjMzMjlaMBgxFjAUBgNV BAMTDTY4NjBkZTM5LWQ2NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHK32DuNP9xx9Zd7GVbhDcPyZHelAMXO97a/0VT80Iq/C0CVIvYLnYfBXSJuvc tK0ieEqT0VRt8hIklkdjtMOcjW67xhhH64/cHA286nCulsBPlrktokW5t0XkQsRY /hs53sjRIDpZB4yXsk89ach45GhPaWjx70UymSX4+WBl+vZVYZWbcTaLvqoUvZ9L n3wA9vpxUdArVGvBOSvuNmifhEW/gaxTS/4RyEKO2XDK3XBo9i4VnLT5eXHX3iiT qZgLHH4Dp9Lh00q1eMllU3k97nAlXDwTnNfskE5qSINGPa+xQZnvsPqQPSnPZbyO RuQ5z7HcgSqELCF/kuBkLEA/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfPRm/u9H VYX/FYidmal9J8VLKrQwHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NzY5LzU0NTY4OENBRkIyNDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFR WHZ1S3EtSU9NNURQaXVEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACz5Jho2ieBXHHHJ4knmT88zvVj1uKUmn/gJVeqncnMgvGhaVSgIDuHD 2BfaJcjWwuITblJ5vc/ZTeMDwtZtlzstg3UWY+042awsUPL6brB+kDLL1yA50iZp YzIU8Q16fUfE3pnqUWjcs8ROskhlkO+PccZBe4KA4BOU4GOVmkLtjwXJrwSWmFX+ FMS4+sAbqB9dNoxUpOpKq1ZQqouCDAE8IVE201KVGketg0yc3AACjWvx7GiQKjgO FvXIFv2mk6B7PIbuQXURNoMkTWgIX3/sQLMkb3y5NBahK33LSdJDjcxu5yEhcKFp ZtKpbLY8BcqMYkLth+swe+amCvKffhQ= -----END CERTIFICATE-----Generated at Mon Jun 30 21:25:48 2025 by rpki-client