$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: gxtS9sdPtpIWQJQvzA3J7/d+Funtbul7TSORDkrngR8= Subject key identifier: 60:9D:95:C9:AB:C4:1A:45:EB:8D:0D:A5:8D:CF:D9:DB:30:97:22:AF Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 0A15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 0A0F Signing time: Sat 28 Jun 2025 19:30:55 +0000 Manifest this update: Sat 28 Jun 2025 19:30:55 +0000 Manifest next update: Sat 05 Jul 2025 19:30:55 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: 7/6kBkZPgxJVa9QTbKyRuzYN+W86zY24CeGXx1XqD+4=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2581 (0xa15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: Jun 28 19:30:55 2025 GMT Not After : Jul 5 19:30:55 2025 GMT Subject: CN=686042ef-66bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:0b:3d:8b:9c:01:17:e9:53:1a:79:52:8b: b2:fc:8b:ff:d8:79:1f:fe:4f:f0:93:6b:c3:32:9b: 1f:84:61:76:5f:d4:5a:59:5a:6d:f6:4c:6a:05:9f: b0:3f:77:f0:e4:eb:3a:e7:9a:d6:69:ec:e2:5f:1d: d9:7d:9f:04:f7:8b:4a:e3:18:a7:52:ee:27:b5:a6: 6c:37:48:cc:9d:8b:ff:6b:77:d5:56:63:09:38:58: 72:c9:ad:67:fd:65:f0:c8:89:fc:72:6c:f3:28:15: 7c:8b:30:47:fb:4d:d2:f5:b9:b0:e1:7b:93:6c:98: b0:cc:6d:9c:31:ed:72:42:48:bb:70:83:b8:b5:70: f8:41:38:60:94:a5:ca:74:b0:e3:80:33:f1:fd:fc: 28:c2:40:28:85:67:a1:e2:fc:4e:41:a6:77:2e:ad: e4:c0:aa:5b:3a:fa:6f:81:86:e0:b9:56:0d:de:63: d2:ab:ab:29:c2:45:b8:bf:6f:a4:14:22:f4:0c:b0: d4:06:5b:a5:77:0e:98:ab:11:52:4f:76:3e:0a:d8: e3:4b:f0:2d:a6:70:1a:8b:a9:32:7f:12:23:57:83: 59:50:a1:8a:90:b8:3c:55:a4:73:e5:14:ea:7f:a9: 52:f3:cd:94:21:88:40:be:eb:a0:e7:29:f9:a7:3f: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:9D:95:C9:AB:C4:1A:45:EB:8D:0D:A5:8D:CF:D9:DB:30:97:22:AF X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:45:9c:92:5a:13:ab:78:fe:80:64:2a:76:06:8e:ae:55:10: 91:9c:16:fd:1b:d1:d6:67:ce:39:ac:92:b7:0e:98:d9:51:32: 55:93:bf:e2:ad:a9:41:3d:ac:d1:9a:64:94:f3:45:15:9d:6e: 3e:f6:2d:b6:fb:f1:66:0a:80:c7:d1:51:a7:79:82:71:d0:08: 23:80:37:03:fb:6c:ea:ca:d7:de:1f:e2:b9:d7:26:67:23:86: da:ae:93:4b:31:ea:c0:f8:26:78:79:b4:6a:76:a6:70:36:f5: a1:ec:c3:12:1c:55:41:17:0b:b6:0f:52:5f:ff:02:c8:53:26: 38:b7:84:43:81:6a:ed:b3:54:c0:48:46:e0:66:ae:fb:9e:85: 1f:f1:07:c6:e4:79:91:b4:1d:d8:db:02:bc:68:ff:7e:a7:b2: b2:8c:a1:af:69:99:97:98:4c:42:71:39:01:c7:c3:b6:6d:55: 53:ce:0c:3d:ad:33:cb:d2:f0:61:48:47:31:30:c8:03:5d:2b: 18:ec:6b:9e:cc:4c:e8:cd:62:83:65:f8:2a:32:70:51:61:0c: 5d:f5:50:14:f0:c2:d0:4d:85:41:d2:fe:c0:5a:22:56:bf:76: 01:45:16:0e:89:8b:63:81:52:c1:75:f2:9f:a0:ae:43:6c:db: b3:0a:36:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjUwNjI4MTkzMDU1WhcNMjUwNzA1MTkzMDU1WjAYMRYwFAYD VQQDEw02ODYwNDJlZi02NmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQULPYucARfpUxp5Uouy/Iv/2Hkf/k/wk2vDMpsfhGF2X9RaWVpt9kxqBZ+w P3fw5Os655rWaeziXx3ZfZ8E94tK4xinUu4ntaZsN0jMnYv/a3fVVmMJOFhyya1n /WXwyIn8cmzzKBV8izBH+03S9bmw4XuTbJiwzG2cMe1yQki7cIO4tXD4QThglKXK dLDjgDPx/fwowkAohWeh4vxOQaZ3Lq3kwKpbOvpvgYbguVYN3mPSq6spwkW4v2+k FCL0DLDUBluldw6YqxFST3Y+CtjjS/AtpnAai6kyfxIjV4NZUKGKkLg8VaRz5RTq f6lS882UIYhAvuug5yn5pz8FIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCdlcmr xBpF640NpY3P2dswlyKvMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrRZySWhOreP6AZCp2Bo6uVRCRnBb9G9HWZ845rJK3DpjZUTJVk7/i ralBPazRmmSU80UVnW4+9i22+/FmCoDH0VGneYJx0AgjgDcD+2zqytfeH+K51yZn I4barpNLMerA+CZ4ebRqdqZwNvWh7MMSHFVBFwu2D1Jf/wLIUyY4t4RDgWrts1TA SEbgZq77noUf8QfG5HmRtB3Y2wK8aP9+p7KyjKGvaZmXmExCcTkBx8O2bVVTzgw9 rTPL0vBhSEcxMMgDXSsY7GuezEzozWKDZfgqMnBRYQxd9VAU8MLQTYVB0v7AWiJW v3YBRRYOiYtjgVLBdfKfoK5DbNuzCjbM -----END CERTIFICATE-----Generated at Sun Jun 29 20:26:44 2025 by rpki-client