$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: aAfpIrRd9yh6IdDlftp2b8DeaFOBriok2IVMj7410/g= Subject key identifier: 85:5E:D7:E9:5C:6C:63:65:C7:63:0C:E6:EF:41:4F:AD:51:A7:4E:12 Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 2479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 245C Signing time: Wed 02 Jul 2025 15:54:31 +0000 Manifest this update: Wed 02 Jul 2025 15:54:31 +0000 Manifest next update: Wed 09 Jul 2025 15:54:31 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: s2XC9XzXqqIWztcGix6LDidXl7qgIB7tW7sWhPjNfoo=) 2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw=) 3: 2B20B9CCCBEA11EEB82B690CC4F9AE02.roa (hash: qMCUSfycN3syreSljiBDjfHd4Nrrtgghc+PcP9Ic2b8=) 4: 427FC74C972011EE8EEC5F75C4F9AE02.roa (hash: zwbM9BA5sCc26nRcffjasGNI6lDwB7/kpeb/vkpRPCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9337 (0x2479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Jul 2 15:54:31 2025 GMT Not After : Jul 9 15:54:31 2025 GMT Subject: CN=68655637-e16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:a8:80:bd:d4:a1:8d:48:b3:b1:05:79:f1: 6e:c2:72:fb:b9:7b:73:8a:90:58:de:41:10:fd:14: 9a:61:f9:3c:dc:17:a5:58:6e:ca:d4:ff:1c:0e:7c: 68:4f:5d:2c:55:8c:95:6f:97:4a:7e:42:14:0b:54: ad:9c:10:bb:67:75:7f:e0:36:fc:93:a7:f7:72:41: 8f:34:3d:af:5c:40:5d:b5:54:f4:af:e9:dc:88:48: 68:f3:e2:64:a7:23:2d:07:0a:e4:cc:fe:65:dd:32: b3:a7:8f:ef:f3:78:5f:21:ad:5f:07:84:65:57:24: 74:f5:42:77:d3:83:d4:e7:66:39:b0:9e:5c:f0:b3: f1:61:8c:e2:24:6c:e1:03:71:4c:43:83:b4:9c:7f: 76:66:42:99:5d:7f:91:16:47:01:33:36:33:3d:8f: 5d:aa:fc:f9:7e:2b:08:74:93:39:aa:85:29:c2:9d: a1:8e:4a:d7:6e:95:ca:38:29:a9:9c:5f:fc:01:7b: fb:1c:b3:1e:1b:df:cd:7b:f9:8a:50:cb:f9:70:db: 2a:b2:dc:f4:06:26:4a:50:43:05:8a:5d:eb:5e:d5: e1:cf:17:ac:9e:96:1f:d5:01:a5:04:15:7f:93:b5: 4a:be:94:37:df:f8:a6:d4:50:61:04:85:45:e0:58: 62:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5E:D7:E9:5C:6C:63:65:C7:63:0C:E6:EF:41:4F:AD:51:A7:4E:12 X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:ce:3d:c2:db:69:a4:9d:92:ea:82:c3:ca:cf:ad:b5:58:c9: b7:8d:ce:56:65:29:44:2d:0f:00:c7:6a:2c:03:cf:c7:e7:e3: 7f:01:88:2a:2f:82:6c:cd:6c:38:a4:da:77:bb:49:f7:76:71: 02:67:fd:a8:54:7a:b8:95:1f:04:eb:72:73:96:72:73:3c:6f: 68:b7:39:02:6c:c9:77:0f:a3:2d:78:a9:73:55:ec:9e:75:06: 0d:76:9a:3f:21:6d:aa:ab:30:8d:f9:9d:d9:94:a0:23:fa:a8: 8d:14:c1:59:99:17:4e:4e:4b:7a:ab:33:6c:26:3f:24:74:d6: 09:0d:fe:90:83:de:e3:aa:c0:02:62:85:0c:ce:d5:9e:21:71: 11:ff:6c:71:ac:38:1b:36:e4:61:91:4a:d0:07:0f:0a:c9:65: 8e:01:42:76:f0:22:4b:2a:f2:84:af:41:17:6a:7f:e5:25:cf: c7:fc:37:53:e4:24:89:0d:3d:00:05:30:3b:78:09:bd:09:f8: fc:a3:03:df:50:6e:19:1f:2c:29:76:c0:17:67:40:e2:a9:cb: be:00:1d:8c:13:3a:ae:c3:e7:92:f8:92:73:89:2b:72:8e:f5: af:43:a4:a2:31:09:7f:f9:ce:0c:c4:5b:33:e8:c9:7f:a4:56: 71:b7:bd:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjUwNzAyMTU1NDMxWhcNMjUwNzA5MTU1NDMxWjAYMRYwFAYD VQQDEw02ODY1NTYzNy1lMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1CogL3UoY1Is7EFefFuwnL7uXtzipBY3kEQ/RSaYfk83BelWG7K1P8cDnxo T10sVYyVb5dKfkIUC1StnBC7Z3V/4Db8k6f3ckGPND2vXEBdtVT0r+nciEho8+Jk pyMtBwrkzP5l3TKzp4/v83hfIa1fB4RlVyR09UJ304PU52Y5sJ5c8LPxYYziJGzh A3FMQ4O0nH92ZkKZXX+RFkcBMzYzPY9dqvz5fisIdJM5qoUpwp2hjkrXbpXKOCmp nF/8AXv7HLMeG9/Ne/mKUMv5cNsqstz0BiZKUEMFil3rXtXhzxesnpYf1QGlBBV/ k7VKvpQ33/im1FBhBIVF4FhiQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVe1+lc bGNlx2MM5u9BT61Rp04SMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCzj3C22mknZLqgsPKz621WMm3jc5WZSlELQ8Ax2osA8/H5+N/AYgq L4JszWw4pNp3u0n3dnECZ/2oVHq4lR8E63JzlnJzPG9otzkCbMl3D6MteKlzVeye dQYNdpo/IW2qqzCN+Z3ZlKAj+qiNFMFZmRdOTkt6qzNsJj8kdNYJDf6Qg97jqsAC YoUMztWeIXER/2xxrDgbNuRhkUrQBw8KyWWOAUJ28CJLKvKEr0EXan/lJc/H/DdT 5CSJDT0ABTA7eAm9Cfj8owPfUG4ZHywpdsAXZ0Diqcu+AB2MEzquw+eS+JJziSty jvWvQ6SiMQl/+c4MxFsz6Ml/pFZxt72N -----END CERTIFICATE-----Generated at Thu Jul 3 08:08:50 2025 by rpki-client