$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft File: r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json) Hash identifier: d9Nn3u0486BtyaanddFRhxVLd5wt/K4gh7wa1x3Xi68= Subject key identifier: 5B:F7:48:24:39:5F:C2:E8:B0:72:64:C5:2E:69:74:0E:4A:55:02:B9 Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 Certificate issuer: /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Certificate serial: 080D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft Manifest number: 0800 Signing time: Wed 02 Jul 2025 21:13:24 +0000 Manifest this update: Wed 02 Jul 2025 21:13:24 +0000 Manifest next update: Wed 09 Jul 2025 21:13:24 +0000 Files and hashes: 1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: R+86VdvCvyWuU3Mh12gtFFL8WX1Y+GQEdZvadeZDVDI=) 2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: QE3nW2mNMr96ecxL+2Sa0cUHeFInEqjbi3IjJoVbX1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2061 (0x80d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BD9, serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Validity Not Before: Jul 2 21:13:24 2025 GMT Not After : Jul 9 21:13:24 2025 GMT Subject: CN=6865a0f4-9234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:f8:56:7c:c1:6b:81:01:24:99:14:42:3a: 89:36:7f:9c:fe:fa:25:87:2f:0b:1d:07:db:19:5c: 16:58:30:2f:a7:be:81:cb:f4:73:3b:ad:c9:30:3a: 6f:48:c7:bb:aa:41:7f:78:56:2f:0a:1d:a5:70:8a: 2f:4a:da:32:59:ba:03:94:ce:d1:3f:40:ff:f4:3d: 15:55:23:d2:65:56:52:69:be:ad:a0:fa:0b:aa:9e: 35:9d:71:b3:84:91:63:15:20:16:a5:42:7b:c3:5e: d8:2b:b7:bd:54:80:67:ce:5a:84:b3:f1:0d:45:9d: 3f:2f:22:43:0e:71:0a:db:45:ee:0f:b9:e7:97:61: 75:30:97:04:e8:28:43:ce:88:c2:f1:36:3e:64:74: d6:e9:bd:89:92:cd:68:fc:7f:8c:19:d4:9a:5e:61: e1:8e:85:6b:e5:08:5e:f1:a2:07:3f:c3:a4:87:9f: 3f:20:ce:28:77:39:e5:27:d0:be:df:b5:02:32:5f: 9d:19:03:58:93:a3:12:c6:e1:79:e1:05:e8:ef:9a: 67:d6:f3:00:f7:49:1e:31:ba:c5:69:7c:b7:47:a1: a0:2d:19:5b:fa:02:02:73:31:45:40:1f:fe:a0:ba: 35:fd:7c:0e:6d:95:99:20:e7:3b:79:cb:e8:84:d7: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F7:48:24:39:5F:C2:E8:B0:72:64:C5:2E:69:74:0E:4A:55:02:B9 X509v3 Authority Key Identifier: keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:63:cb:d3:2c:81:7b:ca:94:ea:74:5f:bc:ab:d3:e0:25:e2: 68:a1:a0:20:31:55:c1:05:60:51:37:b5:6a:98:e7:8d:32:fd: a9:74:f6:08:6c:a8:d0:14:11:9e:95:37:13:72:14:9a:e4:59: 58:af:dd:16:73:d3:ee:25:d0:0f:94:e8:ca:33:59:dc:a6:4f: cb:43:eb:2b:76:37:14:95:b1:c8:27:3b:2d:ba:12:36:f8:a9: 2a:60:4f:03:21:32:09:4a:48:c7:b1:fd:33:e4:6a:e5:d8:cc: 3e:79:6c:f2:6c:21:69:b9:0a:76:f9:87:ff:e5:b0:1d:0b:85: 5d:50:f0:02:0e:9b:d5:23:a9:47:db:60:a2:83:ed:10:51:03: 8b:dc:c7:79:fc:28:f5:f3:9b:08:96:d3:95:81:3d:c2:36:b7: c9:77:6d:9f:f5:43:82:80:93:26:38:4e:45:53:7c:7f:bb:32: 39:4f:6f:f8:4a:97:49:07:10:11:f9:88:2c:3c:f7:6a:14:16: ce:d1:b2:48:9b:a0:40:c1:51:eb:64:cd:a1:27:a4:b9:b6:4f: fa:c7:7a:37:cc:3a:58:90:e9:76:3e:43:8f:cc:e3:0c:48:69: ea:eb:d3:a2:54:84:3a:bc:80:30:81:1d:d5:93:88:60:ac:98: 19:c4:51:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCRDkxMTAvBgNVBAUTKEFGQ0QxMkYzNDA5ODc4Q0Q0QUI0NDVDNDQ1NTQ0QUU4 REE4NTFBODQwHhcNMjUwNzAyMjExMzI0WhcNMjUwNzA5MjExMzI0WjAYMRYwFAYD VQQDEw02ODY1YTBmNC05MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj74VnzBa4EBJJkUQjqJNn+c/volhy8LHQfbGVwWWDAvp76By/RzO63JMDpv SMe7qkF/eFYvCh2lcIovStoyWboDlM7RP0D/9D0VVSPSZVZSab6toPoLqp41nXGz hJFjFSAWpUJ7w17YK7e9VIBnzlqEs/ENRZ0/LyJDDnEK20XuD7nnl2F1MJcE6ChD zojC8TY+ZHTW6b2Jks1o/H+MGdSaXmHhjoVr5Qhe8aIHP8Okh58/IM4odznlJ9C+ 37UCMl+dGQNYk6MSxuF54QXo75pn1vMA90keMbrFaXy3R6GgLRlb+gICczFFQB/+ oLo1/XwObZWZIOc7ecvohNdXvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv3SCQ5 X8LosHJkxS5pdA5KVQK5MB8GA1UdIwQYMBaAFK/NEvNAmHjNSrRFxEVUSujahRqE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJEOS8wNDgxRjc4NkVD MTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVNMUt0RVhFUlZSSzZOcUZH b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4MFM4MENZZU0xS3RFWEVSVlJLNk5xRkdvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJEOS8wNDgxRjc4NkVDMTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVN MUt0RVhFUlZSSzZOcUZHb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Y8vTLIF7ypTqdF+8q9PgJeJooaAgMVXBBWBRN7VqmOeNMv2pdPYI bKjQFBGelTcTchSa5FlYr90Wc9PuJdAPlOjKM1ncpk/LQ+srdjcUlbHIJzstuhI2 +KkqYE8DITIJSkjHsf0z5Grl2Mw+eWzybCFpuQp2+Yf/5bAdC4VdUPACDpvVI6lH 22Cig+0QUQOL3Md5/Cj185sIltOVgT3CNrfJd22f9UOCgJMmOE5FU3x/uzI5T2/4 SpdJBxAR+YgsPPdqFBbO0bJIm6BAwVHrZM2hJ6S5tk/6x3o3zDpYkOl2PkOPzOMM SGnq69OiVIQ6vIAwgR3Vk4hgrJgZxFFj -----END CERTIFICATE-----Generated at Thu Jul 3 01:15:18 2025 by rpki-client