$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: 5uUYsX8RRl55KwjT1A6ya+A+XT+aw8b5oNYP0qTLt8Q= Subject key identifier: E1:A5:F0:95:1B:2F:BF:4F:FB:3B:EF:6D:FC:BB:5F:CC:5E:57:9B:B7 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 016F Signing time: Tue 01 Jul 2025 04:40:07 +0000 Manifest this update: Tue 01 Jul 2025 04:40:06 +0000 Manifest next update: Tue 08 Jul 2025 04:40:06 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: HhlvFcsjwhGIeJzwtuuaPGqGNGM8alaGxIiLylcE7Fs=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: JUSU1VmCrt2YGTrN+Q0jV8oiBs7Aumf+6ve9iuHLrvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Jul 1 04:40:06 2025 GMT Not After : Jul 8 04:40:06 2025 GMT Subject: CN=686366a7-3f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:72:23:d2:19:d7:64:72:9e:f6:46:0a:a8:69: 11:7b:80:cc:38:38:77:5b:2e:66:29:1c:00:ff:6b: 86:97:e9:a4:46:02:37:1e:87:ac:bc:18:c3:7a:a4: fd:a4:98:e5:64:f7:d3:91:59:21:d8:54:f2:c7:e3: 06:99:82:9b:69:36:de:07:3e:10:3e:6d:d8:7e:98: 3f:c8:06:d7:cd:8c:f0:6a:43:1d:b4:a9:98:4a:59: ee:25:42:4d:f0:13:8a:dc:08:39:0f:05:6c:12:dd: e0:ad:8a:cf:44:c5:e7:d8:59:f3:40:eb:9d:6e:f4: cc:b1:83:28:7f:de:fc:a6:7c:8e:72:40:19:79:5c: f4:52:75:26:a6:3c:a2:e8:c9:9e:82:fe:25:62:31: de:bf:e7:41:58:22:7a:40:48:94:ed:9a:26:a9:f9: e1:97:ce:70:75:5b:cf:26:4e:ed:c9:0d:08:03:1d: c5:47:dd:b0:16:4b:c9:91:a2:6e:a8:e6:ae:8e:3a: e6:ad:45:8a:87:b2:c9:f5:ce:4e:70:2c:fa:00:04: bf:58:5c:3d:b8:d1:33:19:f7:20:ab:80:61:58:42: cc:09:3e:8d:31:67:d7:ae:0b:89:3e:41:04:d1:ad: 3f:84:95:7a:ae:a8:9e:30:15:68:65:cb:50:c2:32: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A5:F0:95:1B:2F:BF:4F:FB:3B:EF:6D:FC:BB:5F:CC:5E:57:9B:B7 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:54:8e:64:75:07:69:c5:63:df:de:65:95:03:77:d3:45:aa: 2c:ab:6a:df:66:cd:74:72:54:27:35:89:11:d4:97:66:c6:46: ca:76:c7:ec:6a:b5:40:07:53:4a:e2:61:d9:76:b4:d8:5b:cf: a4:e7:17:c2:45:7d:5d:65:1e:04:35:38:c6:e8:ff:c3:9a:76: 5f:36:4d:0b:40:0e:85:66:00:4a:26:aa:5a:cb:cc:94:ba:e3: 8f:8e:d4:ca:1c:b8:62:15:89:fa:3f:2c:e6:68:13:d2:80:cb: e1:21:db:b0:c4:3b:12:d3:ba:54:33:06:3a:aa:d8:db:0c:f8: b6:07:03:b1:ff:70:f1:b5:21:55:8b:51:af:29:5e:37:88:96: c8:ab:42:46:56:b8:e2:43:a5:58:90:5e:bf:1c:12:de:80:b1: b3:b2:03:61:58:fd:4a:23:fa:cc:e9:c0:f8:53:23:27:35:44: ca:0b:bd:4f:ba:d7:8f:9e:2a:93:e5:fa:57:d3:03:6f:52:3f: c4:f6:3b:f9:57:81:9d:41:86:f8:eb:86:a2:b8:7b:d2:09:a9: 27:2b:16:57:9d:c1:15:2e:fe:62:c5:b1:24:87:5d:cf:61:f6: 6c:35:e1:b3:7b:98:43:33:2a:79:46:4b:0b:39:ff:68:75:59: aa:0b:09:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwNzAxMDQ0MDA2WhcNMjUwNzA4MDQ0MDA2WjAYMRYwFAYD VQQDEw02ODYzNjZhNy0zZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nIj0hnXZHKe9kYKqGkRe4DMODh3Wy5mKRwA/2uGl+mkRgI3HoesvBjDeqT9 pJjlZPfTkVkh2FTyx+MGmYKbaTbeBz4QPm3Yfpg/yAbXzYzwakMdtKmYSlnuJUJN 8BOK3Ag5DwVsEt3grYrPRMXn2FnzQOudbvTMsYMof978pnyOckAZeVz0UnUmpjyi 6Mmegv4lYjHev+dBWCJ6QEiU7Zomqfnhl85wdVvPJk7tyQ0IAx3FR92wFkvJkaJu qOaujjrmrUWKh7LJ9c5OcCz6AAS/WFw9uNEzGfcgq4BhWELMCT6NMWfXrguJPkEE 0a0/hJV6rqieMBVoZctQwjJjaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGl8JUb L79P+zvvbfy7X8xeV5u3MB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBVI5kdQdpxWPf3mWVA3fTRaosq2rfZs10clQnNYkR1JdmxkbKdsfs arVAB1NK4mHZdrTYW8+k5xfCRX1dZR4ENTjG6P/DmnZfNk0LQA6FZgBKJqpay8yU uuOPjtTKHLhiFYn6PyzmaBPSgMvhIduwxDsS07pUMwY6qtjbDPi2BwOx/3DxtSFV i1GvKV43iJbIq0JGVrjiQ6VYkF6/HBLegLGzsgNhWP1KI/rM6cD4UyMnNUTKC71P utePniqT5fpX0wNvUj/E9jv5V4GdQYb464aiuHvSCaknKxZXncEVLv5ixbEkh13P YfZsNeGze5hDMyp5RksLOf9odVmqCwm1 -----END CERTIFICATE-----Generated at Thu Jul 3 00:48:59 2025 by rpki-client