$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json) Hash identifier: bVyPqk7NpGH0Ft0bo1Zqp9KQb7Io2j4G7SNGqLJDUUI= Subject key identifier: F5:C7:F6:32:24:AA:C0:1F:92:FF:4F:8F:B6:EE:1A:E3:D8:6F:B9:46 Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft Manifest number: 079C Signing time: Wed 02 Jul 2025 21:42:49 +0000 Manifest this update: Wed 02 Jul 2025 21:42:48 +0000 Manifest next update: Wed 09 Jul 2025 21:42:48 +0000 Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: GFa+RlkY02xf1nUWMOmGuItLCEZHcykJtk+kkZEpZnU=) 2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: kI+JZUIi+oZUN6mABAAqK5EpoqRmpcP+XjoaGqbVys8=) 3: 407DD9CED09211EE843A0F22C4F9AE02.roa (hash: DYjETZSzXLPZu6k/scGKmt/lU3UqCl+3wtEbXL9L8Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Validity Not Before: Jul 2 21:42:48 2025 GMT Not After : Jul 9 21:42:48 2025 GMT Subject: CN=6865a7d9-7435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:88:d8:f7:bf:ac:66:f2:a8:ae:c6:b7:41:0d: 2c:37:4d:56:84:61:65:52:ca:dd:2c:2d:fc:47:e6: ab:1a:d4:8f:bf:3e:97:71:4e:b1:55:9e:48:aa:2b: 0b:bf:17:e9:ae:b8:d4:a6:f5:5c:42:60:75:a4:6d: 71:95:06:01:ec:bf:46:a2:da:45:a5:7d:9f:ed:5f: 68:31:3b:f6:9f:74:eb:a6:e4:27:11:71:54:b6:9e: 2f:28:38:3a:8c:eb:58:c0:28:27:ad:93:0c:21:01: 95:b8:91:16:4a:b3:89:aa:34:55:aa:d2:eb:b5:8b: 04:03:69:43:c6:d1:b5:18:c4:d8:1a:0a:9d:23:42: 8b:f5:e8:9c:bc:50:c7:a8:02:8c:01:20:fe:3a:da: ae:67:0a:ec:15:87:6e:a4:2b:e9:ec:e2:d4:88:0f: d4:01:67:29:36:34:52:13:b5:84:0e:78:52:9f:0e: e8:59:08:b0:c3:c5:05:16:60:93:1d:88:2c:1e:dc: e4:d1:cf:67:0c:38:59:d0:11:8c:3f:e2:37:59:ca: bf:ec:23:3e:0d:6f:40:94:f3:cf:fb:67:a8:75:3f: 26:a9:b7:4c:9c:65:88:84:ed:8f:b9:a3:ee:df:de: 13:da:de:08:cb:53:ad:28:e1:fc:ff:dc:51:45:1a: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C7:F6:32:24:AA:C0:1F:92:FF:4F:8F:B6:EE:1A:E3:D8:6F:B9:46 X509v3 Authority Key Identifier: keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:37:be:09:c4:99:9e:54:ac:1c:a4:a3:18:71:ff:1c:1c:8e: aa:e3:05:c2:c5:05:d7:e0:c7:67:ea:1f:a2:b0:1b:fd:5d:f3: d6:57:40:26:02:d9:94:ca:c1:d3:3a:80:7b:cd:90:d4:8c:38: a3:83:60:03:97:4c:45:a4:e0:fb:28:ad:df:c4:b9:2d:ee:0e: c4:19:f8:65:f5:b4:fd:4d:35:89:a1:d8:65:83:7f:5e:d6:35: 8b:75:f6:0c:06:36:09:54:f9:ff:a6:af:a3:fa:49:8b:41:da: bc:17:0e:ec:6a:fd:cb:30:6f:4c:e0:a2:6a:60:26:58:ba:bf: 32:b1:70:73:32:34:cd:3c:67:c2:42:af:93:49:39:19:d0:2f: 1e:f7:42:56:56:25:47:9d:6a:31:79:7f:10:b1:8d:9d:b7:20: 40:df:dd:70:b0:82:7e:0e:b4:ac:8d:b7:47:1e:05:53:05:0e: 06:36:46:f1:00:7d:e7:4d:0d:9f:e7:7f:0c:af:b6:b6:e7:9d: f4:2c:d9:93:1d:b9:38:e6:16:fb:5c:9c:d9:60:89:8b:31:f8: f6:00:af:5a:f5:01:bc:41:f6:19:4d:94:6a:cb:b5:d7:c6:6b: ae:1f:5a:06:7b:5a:65:da:86:06:9e:87:b1:63:e7:de:b4:23: f3:c6:69:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND NUE3Mzk0OEUwHhcNMjUwNzAyMjE0MjQ4WhcNMjUwNzA5MjE0MjQ4WjAYMRYwFAYD VQQDEw02ODY1YTdkOS03NDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YjY97+sZvKorsa3QQ0sN01WhGFlUsrdLC38R+arGtSPvz6XcU6xVZ5IqisL vxfprrjUpvVcQmB1pG1xlQYB7L9GotpFpX2f7V9oMTv2n3TrpuQnEXFUtp4vKDg6 jOtYwCgnrZMMIQGVuJEWSrOJqjRVqtLrtYsEA2lDxtG1GMTYGgqdI0KL9eicvFDH qAKMASD+OtquZwrsFYdupCvp7OLUiA/UAWcpNjRSE7WEDnhSnw7oWQiww8UFFmCT HYgsHtzk0c9nDDhZ0BGMP+I3Wcq/7CM+DW9AlPPP+2eodT8mqbdMnGWIhO2PuaPu 394T2t4Iy1OtKOH8/9xRRRqVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXH9jIk qsAfkv9Pj7buGuPYb7lGMB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1 MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REJFOC85RDM2MzE3ODE1MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0w Q0tEUmlPQzMwQXpGcHpsSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADN74JxJmeVKwcpKMYcf8cHI6q4wXCxQXX4Mdn6h+isBv9XfPWV0Am AtmUysHTOoB7zZDUjDijg2ADl0xFpOD7KK3fxLkt7g7EGfhl9bT9TTWJodhlg39e 1jWLdfYMBjYJVPn/pq+j+kmLQdq8Fw7sav3LMG9M4KJqYCZYur8ysXBzMjTNPGfC Qq+TSTkZ0C8e90JWViVHnWoxeX8QsY2dtyBA391wsIJ+DrSsjbdHHgVTBQ4GNkbx AH3nTQ2f538Mr7a25530LNmTHbk45hb7XJzZYImLMfj2AK9a9QG8QfYZTZRqy7XX xmuuH1oGe1pl2oYGnoexY+fetCPzxmn6 -----END CERTIFICATE-----Generated at Thu Jul 3 00:51:32 2025 by rpki-client