$ rpki-client -vvf rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft File: 8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft (raw, json) Hash identifier: LWd0rDBS4ZJv9bI9IBr+AHvzlLPFf2Js8ccHwHBDchY= Subject key identifier: 00:65:EC:B4:9F:06:CA:3B:92:5E:17:55:C6:B4:4A:77:E0:CF:09:58 Authority key identifier: F2:59:B8:AC:9C:F4:3B:D7:C5:94:54:E5:C8:3E:CF:48:F9:FB:87:17 Certificate issuer: /CN=A91329C1/serialNumber=F259B8AC9CF43BD7C59454E5C83ECF48F9FB8717 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft Manifest number: 0298 Signing time: Sun 15 Jun 2025 01:16:13 +0000 Manifest this update: Sun 15 Jun 2025 01:16:12 +0000 Manifest next update: Sun 22 Jun 2025 01:16:12 +0000 Files and hashes: 1: 8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl (hash: xln8jNqoGfcQ7J2zSm4WrN7qwONPjdobv1fTcLU6APM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91329C1, serialNumber=F259B8AC9CF43BD7C59454E5C83ECF48F9FB8717 Validity Not Before: Jun 15 01:16:12 2025 GMT Not After : Jun 22 01:16:12 2025 GMT Subject: CN=684e1edd-eaff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:f7:6f:74:ba:0b:f0:1f:4d:98:e3:6e:a2: e3:f6:f5:57:07:1d:1b:dc:5a:65:34:9f:37:68:59: f8:ee:82:f0:f3:0b:41:86:4a:65:3b:89:e8:4a:40: 96:94:d1:39:a5:41:f0:10:a0:ba:64:0a:7f:8e:75: 03:67:e2:91:22:83:d1:04:d3:27:87:36:10:9b:ef: 00:56:88:39:05:74:ea:48:2b:86:53:f0:8e:69:35: 2b:51:2b:56:3d:cc:26:9e:50:77:be:a9:84:d8:a7: 74:a6:15:9a:2e:37:d6:10:3c:44:17:34:2a:b4:b4: 8d:2c:6a:5c:1e:54:5c:b0:78:8c:17:1e:08:33:9b: d9:e9:67:7f:4d:26:40:65:53:ea:7d:ca:a1:23:ae: 8d:72:16:65:42:c0:42:32:ae:b8:27:c3:ca:93:ab: 9b:2a:4e:5a:6c:d1:ca:dd:e6:7f:92:96:7b:aa:ec: 27:a1:c6:ae:62:fe:96:e8:b6:dc:bd:91:cc:06:f0: e1:e4:c7:c9:08:d8:87:e8:d3:63:9c:b6:2f:14:f7: f5:ac:91:48:20:a8:d8:c2:f1:c3:11:16:64:92:a6: bf:17:2f:16:7a:a3:92:6a:c7:3c:b0:90:ee:20:f0: 8c:74:9f:0d:47:25:3f:6c:34:27:5d:e5:03:2c:41: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:65:EC:B4:9F:06:CA:3B:92:5E:17:55:C6:B4:4A:77:E0:CF:09:58 X509v3 Authority Key Identifier: keyid:F2:59:B8:AC:9C:F4:3B:D7:C5:94:54:E5:C8:3E:CF:48:F9:FB:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e6:88:ed:37:03:84:72:f2:f4:18:0c:0d:29:9a:75:cd:7f: 7e:55:98:18:a3:8b:6e:ec:57:5d:be:05:67:60:da:5e:68:fe: 02:57:37:6d:8e:b4:5f:a0:8c:1e:21:ad:77:ae:89:cb:ff:85: 3d:c0:d6:67:ef:cd:c8:a3:c2:35:0a:06:b2:25:59:01:ee:41: ea:9d:5b:ad:d8:bd:c9:ee:82:94:2f:20:6b:3f:37:1c:3d:f7: ad:8d:1b:76:50:e9:d2:d3:17:cd:7a:a6:75:33:b2:cb:d2:97: 1b:63:6d:0b:a1:ce:52:fa:d7:65:4f:9a:49:9d:7a:e4:13:fb: 1b:e2:30:4e:9d:3b:46:b1:66:94:1e:21:45:c5:ac:da:9b:3a: 74:c8:64:89:9a:51:37:d4:9b:e3:ba:98:f6:27:be:9c:5e:a4: b7:e0:f6:95:ee:e5:38:3f:8a:4c:96:95:46:04:9b:87:d4:df: 23:6a:b9:03:09:18:8b:83:4b:f8:0a:cc:2d:cf:67:87:2b:da: 60:c7:2e:26:25:b2:77:61:8d:8a:c3:df:70:df:39:5f:60:eb: 12:45:3f:84:4d:9a:a3:b9:03:58:4f:82:a9:1a:91:98:d1:7e: fa:c4:82:27:1b:b5:3d:ef:a0:21:23:3c:93:7d:51:98:ba:6e: 75:51:5e:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5QzExMTAvBgNVBAUTKEYyNTlCOEFDOUNGNDNCRDdDNTk0NTRFNUM4M0VDRjQ4 RjlGQjg3MTcwHhcNMjUwNjE1MDExNjEyWhcNMjUwNjIyMDExNjEyWjAYMRYwFAYD VQQDEw02ODRlMWVkZC1lYWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDP3b3S6C/AfTZjjbqLj9vVXBx0b3FplNJ83aFn47oLw8wtBhkplO4noSkCW lNE5pUHwEKC6ZAp/jnUDZ+KRIoPRBNMnhzYQm+8AVog5BXTqSCuGU/COaTUrUStW PcwmnlB3vqmE2Kd0phWaLjfWEDxEFzQqtLSNLGpcHlRcsHiMFx4IM5vZ6Wd/TSZA ZVPqfcqhI66NchZlQsBCMq64J8PKk6ubKk5abNHK3eZ/kpZ7quwnocauYv6W6Lbc vZHMBvDh5MfJCNiH6NNjnLYvFPf1rJFIIKjYwvHDERZkkqa/Fy8WeqOSasc8sJDu IPCMdJ8NRyU/bDQnXeUDLEHeZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABl7LSf Bso7kl4XVca0SnfgzwlYMB8GA1UdIwQYMBaAFPJZuKyc9DvXxZRU5cg+z0j5+4cX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjlDMS80NDIzNkYwNDA1 QkQxMUVEQTAwQTVGM0RDNEY5QUUwMi84bG00ckp6ME85ZkZsRlRseUQ3UFNQbjdo eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhsbTRySnowTzlmRmxGVGx5RDdQU1BuN2h4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjlDMS80NDIzNkYwNDA1QkQxMUVEQTAwQTVGM0RDNEY5QUUwMi84bG00ckp6ME85 ZkZsRlRseUQ3UFNQbjdoeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR5ojtNwOEcvL0GAwNKZp1zX9+VZgYo4tu7FddvgVnYNpeaP4CVzdt jrRfoIweIa13ronL/4U9wNZn783Io8I1CgayJVkB7kHqnVut2L3J7oKULyBrPzcc PfetjRt2UOnS0xfNeqZ1M7LL0pcbY20Loc5S+tdlT5pJnXrkE/sb4jBOnTtGsWaU HiFFxazamzp0yGSJmlE31Jvjupj2J76cXqS34PaV7uU4P4pMlpVGBJuH1N8jarkD CRiLg0v4Cswtz2eHK9pgxy4mJbJ3YY2Kw99w3zlfYOsSRT+ETZqjuQNYT4KpGpGY 0X76xIInG7U976AhIzyTfVGYum51UV60 -----END CERTIFICATE-----Generated at Sun Jun 15 09:52:33 2025 by rpki-client