$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft File: 8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json) Hash identifier: Lm6YDFJGYwwoE/yX8xtVVSCrPRMj6g1wZKZLwwLy7k4= Subject key identifier: D6:A9:EF:90:B6:3A:33:98:BD:2B:02:59:F4:59:70:95:8F:6E:55:AE Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Certificate serial: 06B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft Manifest number: 06AB Signing time: Wed 02 Jul 2025 22:26:57 +0000 Manifest this update: Wed 02 Jul 2025 22:26:57 +0000 Manifest next update: Wed 09 Jul 2025 22:26:57 +0000 Files and hashes: 1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: arAS2jL2P0EqfugitbjZ+bHSNgbquS5LdlQsAsFZgsk=) 2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: 52JrCnBm7L06RLcpZu8B4A+YSslnAZRmYTLK9Jex7Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1713 (0x6b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Validity Not Before: Jul 2 22:26:57 2025 GMT Not After : Jul 9 22:26:57 2025 GMT Subject: CN=6865b231-3231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:18:07:71:2b:72:25:00:76:1a:d3:64:6b:13: d7:08:9d:96:20:c6:fb:b0:c1:89:fe:60:c4:12:1a: 9f:20:1f:0a:2d:b8:e8:8f:7d:f3:d9:73:5a:88:22: 4d:90:71:75:53:5f:84:8e:56:74:8e:8b:81:68:52: 62:33:3a:48:2d:7b:4c:43:0b:98:d9:e1:84:5b:aa: 87:6d:2a:91:e6:18:fd:1f:e2:a5:3d:0f:9e:5d:81: 49:fe:5c:85:d5:3c:b9:bb:59:f3:75:d7:54:13:fe: 67:d7:8d:34:42:b7:f1:5c:6c:f4:50:c4:b5:eb:ae: 8d:0f:6c:e9:57:26:f7:e6:20:e3:95:5c:af:c9:14: 62:fa:25:db:7a:e5:4e:73:81:56:c8:40:ef:97:07: ef:d3:8c:85:fc:e5:34:2a:fd:e1:9c:57:ea:51:dd: 8d:a2:c9:24:5c:46:c6:d7:33:84:e4:64:0a:dd:bf: ec:27:b6:61:1f:07:f4:1b:7a:fd:2d:68:10:8e:2d: 0e:70:fb:c5:9e:59:f8:05:73:aa:a6:5b:a8:d5:7f: a7:51:89:5e:67:36:3b:5e:2f:f5:66:bf:cc:2c:1d: 58:62:cb:27:a3:35:97:32:8f:03:0e:27:79:ae:52: 1e:84:fa:2b:9d:09:a5:12:ac:9f:45:ae:6d:e3:00: 65:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A9:EF:90:B6:3A:33:98:BD:2B:02:59:F4:59:70:95:8F:6E:55:AE X509v3 Authority Key Identifier: keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:db:6f:f2:91:76:b6:56:8e:29:09:f7:56:6c:64:f7:43:e1: 7e:e7:38:aa:50:47:5f:f7:fe:ef:ec:3c:e4:ce:cb:b7:5f:5c: f6:04:25:e8:60:64:72:f0:cd:40:1b:42:67:e1:35:16:2e:a7: a4:6e:cb:2d:cf:88:14:a7:2b:68:6b:fe:52:e6:d2:10:ab:94: d6:72:85:dd:87:1e:8b:eb:2f:d5:d1:a8:92:8c:97:31:1d:4b: 94:7e:e8:1b:d3:e3:a5:4f:c6:cb:ed:5c:29:53:d5:a3:48:fa: d1:de:c2:54:2d:8c:da:4a:a4:16:98:f0:ce:9f:c0:79:82:58: a2:42:78:cf:d2:19:3f:6f:8f:1a:ff:54:c5:15:08:5b:24:b0: ec:c4:e9:11:c7:7b:dd:7d:fa:c9:2d:61:3b:9a:7b:72:62:e5: 03:ef:9d:f9:8e:fd:4e:9a:d4:d2:69:2b:5d:b4:98:dc:06:12: 12:95:e7:96:8e:2a:1b:93:12:85:0b:9c:63:66:76:5a:56:3c: d1:0d:4d:16:20:1b:c5:f0:13:be:00:39:5e:7f:38:5b:2a:51: e8:ac:9f:56:82:14:b2:ce:0a:90:f1:d1:1b:fb:19:fb:99:04: cd:cb:72:16:3a:e1:14:47:1b:1e:21:94:16:b5:06:6c:cc:be: 66:d7:07:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MDUxMTAvBgNVBAUTKEYwNDY5MEJCMDNFMEQzOTYyQjQ4MDhFNEQwNkNCMjZB MzQ5MEU1MTYwHhcNMjUwNzAyMjIyNjU3WhcNMjUwNzA5MjIyNjU3WjAYMRYwFAYD VQQDEw02ODY1YjIzMS0zMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hgHcStyJQB2GtNkaxPXCJ2WIMb7sMGJ/mDEEhqfIB8KLbjoj33z2XNaiCJN kHF1U1+EjlZ0jouBaFJiMzpILXtMQwuY2eGEW6qHbSqR5hj9H+KlPQ+eXYFJ/lyF 1Ty5u1nzdddUE/5n1400QrfxXGz0UMS1666ND2zpVyb35iDjlVyvyRRi+iXbeuVO c4FWyEDvlwfv04yF/OU0Kv3hnFfqUd2NoskkXEbG1zOE5GQK3b/sJ7ZhHwf0G3r9 LWgQji0OcPvFnln4BXOqpluo1X+nUYleZzY7Xi/1Zr/MLB1YYssnozWXMo8DDid5 rlIehPornQmlEqyfRa5t4wBlNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNap75C2 OjOYvSsCWfRZcJWPblWuMB8GA1UdIwQYMBaAFPBGkLsD4NOWK0gI5NBssmo0kOUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYwNS83MjUwQ0E0NDZD MzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1WXJTQWprMEd5eWFqU1E1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFYVF1d1BnMDVZclNBamswR3l5YWpTUTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYwNS83MjUwQ0E0NDZDMzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1 WXJTQWprMEd5eWFqU1E1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe22/ykXa2Vo4pCfdWbGT3Q+F+5ziqUEdf9/7v7Dzkzsu3X1z2BCXo YGRy8M1AG0Jn4TUWLqekbsstz4gUpytoa/5S5tIQq5TWcoXdhx6L6y/V0aiSjJcx HUuUfugb0+OlT8bL7VwpU9WjSPrR3sJULYzaSqQWmPDOn8B5gliiQnjP0hk/b48a /1TFFQhbJLDsxOkRx3vdffrJLWE7mntyYuUD7535jv1OmtTSaStdtJjcBhISleeW jiobkxKFC5xjZnZaVjzRDU0WIBvF8BO+ADlefzhbKlHorJ9WghSyzgqQ8dEb+xn7 mQTNy3IWOuEURxseIZQWtQZszL5m1wdS -----END CERTIFICATE-----Generated at Thu Jul 3 08:58:31 2025 by rpki-client