$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: kfqgAQVjDtug4XrGdJRNWfGHym6ZwXi2fSnjRY8w4Aw= Subject key identifier: EE:03:C3:12:7B:80:0E:87:D8:D2:7A:97:10:0B:20:16:44:F0:8B:A1 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: B8 Signing time: Thu 03 Jul 2025 06:08:08 +0000 Manifest this update: Thu 03 Jul 2025 06:08:07 +0000 Manifest next update: Thu 10 Jul 2025 06:08:07 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: 1ekkZKjC7b8idJfhsglTN+vCALbY7bJlba6CFylWTno=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: Jb/5el+254tvWTwmxgE5e2fworHZ6IC6eYTkaaOmWbo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 5j1mJUsKsqLJqbWxCLNYcCoMJnOjUallWOckNeSTW7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Jul 3 06:08:07 2025 GMT Not After : Jul 10 06:08:07 2025 GMT Subject: CN=68661e48-4e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:c6:01:c1:10:81:75:76:43:89:c8:bf:a1: a0:19:21:41:30:9e:fa:2e:64:d6:e3:43:91:ef:a4: 36:55:4e:b1:40:16:07:9a:e5:75:eb:99:11:99:63: 5d:f9:f4:87:3f:8b:9a:c4:aa:be:1d:e1:35:96:4b: 68:6f:2f:52:3f:5b:9d:80:cb:3c:19:bb:7b:8e:f8: 4c:a0:4b:14:12:c4:21:b2:a1:da:ea:76:51:c8:b7: fb:7f:a6:bf:a5:68:3b:28:6b:15:b4:cd:a2:9e:4c: 1a:c5:03:64:4a:b6:90:2f:97:6e:83:eb:e7:24:82: 70:60:1f:83:47:2c:28:49:48:36:e7:fb:4c:e5:c1: d2:aa:ea:ad:e8:db:30:f0:a4:f7:8a:93:cb:1f:01: 82:40:e5:93:b9:bb:db:c2:43:4d:87:27:6c:c7:3d: 31:d6:2c:57:bf:71:26:7c:00:43:2f:b0:0e:05:18: 42:05:13:f3:a2:39:92:3a:33:a8:2e:a8:eb:9b:f0: 8d:7d:35:2b:72:5c:0a:bb:f0:3f:ee:97:a1:1c:99: 6a:3a:ca:98:78:64:b4:6d:7d:e8:2f:3c:bf:f3:3d: 0a:1d:1d:60:0b:09:42:f0:ae:f7:6c:8e:03:3a:bf: 09:c5:7e:77:cc:c3:b8:c3:cb:03:79:aa:fa:33:e4: c8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:03:C3:12:7B:80:0E:87:D8:D2:7A:97:10:0B:20:16:44:F0:8B:A1 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:5a:11:69:c5:c5:ee:95:38:04:f2:5d:fe:11:ca:81:97:51: 52:9a:fc:6b:35:8d:f7:24:b4:4f:60:da:8e:71:f3:6f:fa:40: 9a:f2:a2:44:84:5c:84:f9:55:69:39:5d:49:44:7f:67:6d:24: e1:4f:fe:ac:08:49:d3:b6:9f:a8:b0:3d:a5:af:57:52:6e:ce: 0d:3e:31:fe:d9:32:54:f2:5e:67:11:26:79:30:87:8c:62:c0: bf:34:ab:07:a6:eb:c8:2e:ca:03:fb:df:9c:ad:ed:27:a8:5e: 45:38:f4:a5:f3:67:a4:01:5d:ab:01:c6:83:b1:7e:76:e3:21: 67:85:b6:e7:3d:fb:b2:e9:cb:18:45:5d:ab:f1:c1:b8:13:c6: d8:41:4b:60:4c:fb:80:26:07:9d:4f:d6:d2:31:75:05:83:0e: 42:e5:d2:38:3f:c6:5e:82:70:38:6b:6b:29:f3:8b:50:68:6b: d6:26:88:d3:21:be:da:aa:92:b9:ca:2b:74:11:0d:a2:b5:42: 65:a6:af:7d:9d:b5:94:9e:b2:48:5d:8f:d6:14:64:92:6b:0e: 7d:84:a9:cf:e4:47:09:46:0b:31:3a:87:e6:58:65:fb:a3:a0: fe:7b:d8:a7:0a:b7:7f:e7:11:f5:6f:c0:dd:6a:ad:99:76:9c: aa:0f:1d:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUwNzAzMDYwODA3WhcNMjUwNzEwMDYwODA3WjAYMRYwFAYD VQQDEw02ODY2MWU0OC00ZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM7GAcEQgXV2Q4nIv6GgGSFBMJ76LmTW40OR76Q2VU6xQBYHmuV165kRmWNd +fSHP4uaxKq+HeE1lktoby9SP1udgMs8Gbt7jvhMoEsUEsQhsqHa6nZRyLf7f6a/ pWg7KGsVtM2inkwaxQNkSraQL5dug+vnJIJwYB+DRywoSUg25/tM5cHSquqt6Nsw 8KT3ipPLHwGCQOWTubvbwkNNhydsxz0x1ixXv3EmfABDL7AOBRhCBRPzojmSOjOo Lqjrm/CNfTUrclwKu/A/7pehHJlqOsqYeGS0bX3oLzy/8z0KHR1gCwlC8K73bI4D Or8JxX53zMO4w8sDear6M+TIeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4DwxJ7 gA6H2NJ6lxALIBZE8IuhMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Qy81QkM2M0VGNDQwNjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4 RFI2dzRUbTU1SlRyOXNaQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkWhFpxcXulTgE8l3+EcqBl1FSmvxrNY33JLRPYNqOcfNv+kCa8qJE hFyE+VVpOV1JRH9nbSThT/6sCEnTtp+osD2lr1dSbs4NPjH+2TJU8l5nESZ5MIeM YsC/NKsHpuvILsoD+9+cre0nqF5FOPSl82ekAV2rAcaDsX524yFnhbbnPfuy6csY RV2r8cG4E8bYQUtgTPuAJgedT9bSMXUFgw5C5dI4P8ZegnA4a2sp84tQaGvWJojT Ib7aqpK5yit0EQ2itUJlpq99nbWUnrJIXY/WFGSSaw59hKnP5EcJRgsxOofmWGX7 o6D+e9inCrd/5xH1b8Ddaq2ZdpyqDx1f -----END CERTIFICATE-----Generated at Fri Jul 4 14:21:55 2025 by rpki-client