$ rpki-client -vvf rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft File: 8n_4duRl5zyaUv04SNvXZb-yNdQ.mft (raw, json) Hash identifier: kbkhUQBSFQ3w0f2MiySZ+dZm80zxRoWmVciku8qb4mo= Subject key identifier: B1:02:DE:C1:67:70:12:F9:C8:B5:23:F4:F2:4C:0A:49:57:60:4E:1F Authority key identifier: F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 Certificate issuer: /CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Certificate serial: 0D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft Manifest number: 0D57 Signing time: Wed 18 Jun 2025 17:55:24 +0000 Manifest this update: Wed 18 Jun 2025 17:55:24 +0000 Manifest next update: Wed 25 Jun 2025 17:55:24 +0000 Files and hashes: 1: 8n_4duRl5zyaUv04SNvXZb-yNdQ.crl (hash: x4PpSFmvwuB4b1t+o1IEZ7Px9t8xh8s1bLjpijdZ7KI=) 2: 3833FD20D09711E987F73A60C4F9AE02.roa (hash: IUQ+m8jWqnf3vf6hcCuC0VogjthEOWb1ceqBAZq2VPM=) 3: 8A00E9284FB111EDBE702516C4F9AE02.roa (hash: s8FViwNwbQunitwqHzsjUNkNGV0Mlz+MOgwlD5JB+Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175FF, serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Validity Not Before: Jun 18 17:55:24 2025 GMT Not After : Jun 25 17:55:24 2025 GMT Subject: CN=6852fd8c-03cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:60:d2:eb:47:cc:8f:07:5c:ac:ad:00:be:8e: c4:0a:7b:69:f5:9c:b5:5b:23:8e:ce:af:59:23:05: d2:24:56:71:38:d2:a6:a1:e5:3e:47:94:7e:f5:e1: ed:c4:43:db:8a:a0:d9:0f:85:f3:bb:01:bd:9b:cd: fd:d1:08:2d:68:0d:0a:aa:72:e7:a1:5e:d2:71:3a: 55:0a:ec:41:d0:67:be:ab:39:67:44:1b:c0:7a:d7: 6a:82:d6:21:6a:4b:6e:2d:06:da:53:bf:4d:6f:df: 73:22:11:02:61:77:e6:66:f4:a9:59:7a:f5:d0:5f: cd:0c:78:6e:fd:6c:5d:fa:aa:67:b8:66:9e:f4:cb: 9b:5a:e6:1a:ef:d0:f0:b7:1e:75:7c:fb:cd:29:79: 96:92:d4:0b:e8:ea:94:b1:3a:10:eb:9e:cc:b4:1c: d3:9e:a5:6a:b1:4b:8f:8e:71:ab:97:32:cc:40:2a: d7:06:16:c9:b9:c9:df:80:0b:80:bb:6d:19:02:58: 29:5d:56:8b:b3:6d:9a:4e:4b:d6:dd:a3:a5:10:c4: 83:60:0b:f4:c8:48:8b:72:0b:b0:25:0a:71:fa:db: 71:be:54:9d:ee:3e:bb:b3:d1:90:c7:17:00:db:e8: 55:93:33:62:32:51:4f:76:e8:67:70:45:05:44:d6: 74:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:02:DE:C1:67:70:12:F9:C8:B5:23:F4:F2:4C:0A:49:57:60:4E:1F X509v3 Authority Key Identifier: keyid:F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ac:ff:97:1b:44:de:46:ef:c2:fb:3a:2f:17:c3:eb:b0:88: 73:2b:cb:57:18:75:31:79:a1:4e:02:28:4f:28:ad:04:55:ea: ee:15:b3:67:5a:af:cb:59:d6:7f:f5:6d:2e:08:1c:e5:12:24: 1a:96:81:6c:f4:2f:40:bb:6b:d0:f9:a9:05:54:03:ed:e5:cf: ee:52:9d:69:f6:39:a3:ac:a3:03:e2:3a:15:1d:15:9c:ac:4f: 2b:1e:39:1b:15:f9:10:9e:66:b6:b9:18:7e:bf:39:50:7f:fb: 46:51:3b:18:6f:38:5f:f9:91:c7:70:76:89:84:78:bd:89:7e: 97:c9:be:1c:ee:74:8d:99:12:9b:4b:e0:6c:1e:e9:e3:0c:e6: 77:f3:99:9e:83:40:63:6c:e4:1d:b1:b4:94:0d:50:38:47:c5: 2d:9a:5a:e7:ea:4c:f7:f8:3e:81:bc:6b:76:1b:63:d3:3a:98: 05:ad:ee:07:2c:ba:a9:8d:56:e1:8e:af:2f:6c:f4:85:e6:8d: 68:f1:ea:6a:a6:09:5f:42:1d:53:ad:00:f1:8a:be:b4:be:b7: 98:d4:81:73:72:29:11:82:f8:21:7d:a8:ca:51:c3:84:36:db: f5:c2:2f:81:05:21:07:40:7a:ac:1a:31:9e:63:44:a8:55:c7: f1:a3:fb:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RkYxMTAvBgNVBAUTKEYyN0ZGODc2RTQ2NUU3M0M5QTUyRkQzODQ4REJENzY1 QkZCMjM1RDQwHhcNMjUwNjE4MTc1NTI0WhcNMjUwNjI1MTc1NTI0WjAYMRYwFAYD VQQDEw02ODUyZmQ4Yy0wM2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlGDS60fMjwdcrK0Avo7ECntp9Zy1WyOOzq9ZIwXSJFZxONKmoeU+R5R+9eHt xEPbiqDZD4XzuwG9m8390QgtaA0KqnLnoV7ScTpVCuxB0Ge+qzlnRBvAetdqgtYh aktuLQbaU79Nb99zIhECYXfmZvSpWXr10F/NDHhu/Wxd+qpnuGae9MubWuYa79Dw tx51fPvNKXmWktQL6OqUsToQ657MtBzTnqVqsUuPjnGrlzLMQCrXBhbJucnfgAuA u20ZAlgpXVaLs22aTkvW3aOlEMSDYAv0yEiLcguwJQpx+ttxvlSd7j67s9GQxxcA 2+hVkzNiMlFPduhncEUFRNZ0iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEC3sFn cBL5yLUj9PJMCklXYE4fMB8GA1UdIwQYMBaAFPJ/+HbkZec8mlL9OEjb12W/sjXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGRi9FMTc2RDY3QUQw OTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6eWFVdjA0U052WFpiLXlO ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuXzRkdVJsNXp5YVV2MDRTTnZYWmIteU5kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGRi9FMTc2RDY3QUQwOTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6 eWFVdjA0U052WFpiLXlOZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnrP+XG0TeRu/C+zovF8PrsIhzK8tXGHUxeaFOAihPKK0EVeruFbNn Wq/LWdZ/9W0uCBzlEiQaloFs9C9Au2vQ+akFVAPt5c/uUp1p9jmjrKMD4joVHRWc rE8rHjkbFfkQnma2uRh+vzlQf/tGUTsYbzhf+ZHHcHaJhHi9iX6Xyb4c7nSNmRKb S+BsHunjDOZ385meg0BjbOQdsbSUDVA4R8Utmlrn6kz3+D6BvGt2G2PTOpgFre4H LLqpjVbhjq8vbPSF5o1o8epqpglfQh1TrQDxir60vreY1IFzcikRgvghfajKUcOE Ntv1wi+BBSEHQHqsGjGeY0SoVcfxo/tj -----END CERTIFICATE-----Generated at Thu Jun 19 09:54:36 2025 by rpki-client