$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json) Hash identifier: AOXi7i0sAa3Q9bD2AvEhOc3HhAWDhBhat/cuQFjcBKw= Subject key identifier: 46:74:0B:BB:F6:85:C9:78:A2:0A:E0:0D:C2:71:8A:4E:2C:8F:D2:03 Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 0478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft Manifest number: 0474 Signing time: Sat 05 Jul 2025 00:34:44 +0000 Manifest this update: Sat 05 Jul 2025 00:34:43 +0000 Manifest next update: Sat 12 Jul 2025 00:34:43 +0000 Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: /bBSFPBr5U8WZw8PSRhve6wE/lfGjLQ5QpMt7OBAeLQ=) 2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: F010fbR+bi9xTUBl3AUBVvzkCJVPeJDxWa/Ivtr1ZK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: Jul 5 00:34:43 2025 GMT Not After : Jul 12 00:34:43 2025 GMT Subject: CN=68687323-2c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:45:be:95:59:5b:4d:a0:2e:12:fa:61:2f: 11:ee:01:4f:bc:13:7b:9f:a3:fe:8d:c4:fc:48:c6: 82:f4:e8:ac:15:4b:95:e8:7a:0c:67:05:eb:6d:b1: a8:15:32:60:42:0c:0f:62:c6:85:b7:ef:97:e4:03: 52:3d:06:92:e0:9e:78:61:f5:02:a6:1d:7f:ef:99: 49:de:65:c3:73:54:d0:7c:34:1c:85:cf:b2:a0:08: ba:48:21:ac:e8:51:a1:ad:a2:c8:41:ef:69:41:09: 46:bd:9d:8b:52:bd:c9:0e:f3:87:e1:4c:69:2f:8a: 90:13:7d:c7:b7:13:22:8b:f3:59:f9:0f:54:e0:45: 31:ef:68:28:bb:fd:f7:3b:2b:cf:0b:62:c0:57:8b: 0b:96:c5:98:dc:c3:a3:03:ff:1a:32:2a:c0:25:f1: 07:61:f5:38:49:8f:79:61:41:5c:3d:a0:52:9f:be: 0f:91:13:39:44:c8:10:00:4d:5b:b9:3e:1e:2c:12: f7:9a:dd:da:7e:9d:79:41:e7:3d:f7:08:70:6e:e5: 28:a4:62:c1:60:ad:f5:66:47:a2:0d:52:a9:b8:08: 0e:ce:62:bc:45:c9:20:dd:4d:16:2e:55:6f:f7:e3: 1d:95:31:42:9c:2e:9e:82:c8:94:30:33:29:91:ec: ec:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:74:0B:BB:F6:85:C9:78:A2:0A:E0:0D:C2:71:8A:4E:2C:8F:D2:03 X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d8:18:95:00:ee:36:60:94:4a:f4:9b:24:bc:85:d2:be:ca: 13:93:51:2e:45:26:68:aa:aa:f6:ae:f4:03:4d:02:af:b8:2b: f5:49:2f:d1:bc:0d:fd:56:d7:fd:75:f0:67:70:57:dd:62:72: a6:e0:11:2d:d7:d9:e9:78:94:73:f9:e6:3c:19:65:a5:c2:00: c5:90:bc:24:8f:16:a9:3a:b8:9c:81:d8:c0:73:c3:9b:c4:34: 63:89:60:07:9d:12:e4:c3:c5:80:a5:1b:58:3e:95:49:a5:06: ef:a1:46:eb:ee:7f:f8:68:45:58:44:04:57:99:49:05:d2:ad: 9d:b4:65:c0:f5:70:a6:d5:41:06:a7:f8:cb:94:04:1f:fc:03: 61:74:67:6d:9e:da:2c:8c:90:ba:f0:59:4f:6d:5d:27:98:c4: de:87:60:cc:65:17:e9:51:18:db:4d:12:0c:e0:5a:c6:7a:a7: c7:0d:3e:fe:50:2b:9a:33:ba:66:55:3e:9f:47:01:e1:53:7b: 6e:d8:a4:52:99:33:c2:8b:34:1d:37:59:d8:b3:ff:1a:2a:40: 92:b6:ae:54:55:bf:82:f7:ae:24:0e:8a:57:e8:3c:88:aa:6b: ff:90:41:01:64:3b:f5:83:c1:36:91:87:e2:67:f7:ac:24:4b: 5e:36:af:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjUwNzA1MDAzNDQzWhcNMjUwNzEyMDAzNDQzWjAYMRYwFAYD VQQDEw02ODY4NzMyMy0yYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw9FvpVZW02gLhL6YS8R7gFPvBN7n6P+jcT8SMaC9OisFUuV6HoMZwXrbbGo FTJgQgwPYsaFt++X5ANSPQaS4J54YfUCph1/75lJ3mXDc1TQfDQchc+yoAi6SCGs 6FGhraLIQe9pQQlGvZ2LUr3JDvOH4UxpL4qQE33HtxMii/NZ+Q9U4EUx72gou/33 OyvPC2LAV4sLlsWY3MOjA/8aMirAJfEHYfU4SY95YUFcPaBSn74PkRM5RMgQAE1b uT4eLBL3mt3afp15Qec99whwbuUopGLBYK31ZkeiDVKpuAgOzmK8Rckg3U0WLlVv 9+MdlTFCnC6egsiUMDMpkezsVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZ0C7v2 hcl4ogrgDcJxik4sj9IDMB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4 QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE2BiVAO42YJRK9JskvIXSvsoTk1EuRSZoqqr2rvQDTQKvuCv1SS/R vA39Vtf9dfBncFfdYnKm4BEt19npeJRz+eY8GWWlwgDFkLwkjxapOricgdjAc8Ob xDRjiWAHnRLkw8WApRtYPpVJpQbvoUbr7n/4aEVYRARXmUkF0q2dtGXA9XCm1UEG p/jLlAQf/ANhdGdtntosjJC68FlPbV0nmMTeh2DMZRfpURjbTRIM4FrGeqfHDT7+ UCuaM7pmVT6fRwHhU3tu2KRSmTPCizQdN1nYs/8aKkCStq5UVb+C964kDopX6DyI qmv/kEEBZDv1g8E2kYfiZ/esJEteNq/6 -----END CERTIFICATE-----Generated at Sat Jul 5 02:24:46 2025 by rpki-client