$ rpki-client -vvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft File: 8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json) Hash identifier: 3Mh01yU5jxHxmMALgZ1L74KDub8ttF7BhEc4UYEeeUo= Subject key identifier: 22:D2:FD:F9:6B:D7:4D:33:D8:BC:00:36:11:3D:BF:0D:C5:2B:02:3D Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00 Certificate issuer: /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600 Certificate serial: 0752 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft Manifest number: 074C Signing time: Fri 20 Jun 2025 21:30:31 +0000 Manifest this update: Fri 20 Jun 2025 21:30:30 +0000 Manifest next update: Fri 27 Jun 2025 21:30:30 +0000 Files and hashes: 1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: SbHY9BbNKEIiVBtSDFkMYlXPB1DBSo3Qr0EA3oLGp9A=) 2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: g3w/XsJqAxVEVlKlr0cv2aQ+w+aC0v9T6kWu2Ywl2js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 21:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1874 (0x752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D750, serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600 Validity Not Before: Jun 20 21:30:30 2025 GMT Not After : Jun 27 21:30:30 2025 GMT Subject: CN=6855d2f7-ecbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:9d:71:69:05:85:38:4b:9f:83:e4:d7:32: 44:9f:23:4b:a4:ea:42:c2:da:84:2d:12:0a:df:de: 31:53:17:2b:e5:5c:71:fb:99:63:fd:a6:06:5e:e4: 97:b8:6f:ca:6e:f3:b3:ff:d6:1d:8b:05:a1:2d:9b: 1d:f4:d3:25:f8:7a:23:c2:6a:e3:7d:94:1a:e1:55: 73:22:73:0a:10:18:40:9a:f6:b5:77:a7:60:4a:b7: 30:a1:e1:64:65:6a:0f:32:41:c2:40:4a:d2:f3:4c: dd:b0:41:9a:7b:52:97:4c:18:52:8d:21:a4:ef:e1: b9:1e:de:19:f2:87:43:c5:2f:01:6a:f3:6e:15:1a: db:2d:80:39:03:68:97:8f:bf:e8:b8:cf:8b:0d:75: 37:6b:64:3f:ab:ea:d8:54:c1:ef:bd:09:a2:fa:ee: 18:f7:fa:d7:0d:1f:4a:1d:0d:a7:83:e9:4f:98:62: fc:f7:19:62:00:60:99:f3:c2:74:fc:ee:bb:71:08: d4:86:4b:8e:e0:45:fa:26:99:b7:fd:27:41:ed:6c: f2:b9:47:d7:8a:aa:99:8e:d4:a0:bc:7a:cf:cb:f4: b6:29:49:7a:69:69:ac:7b:64:df:4b:59:d8:85:8b: d0:c0:69:d6:11:ca:7e:21:fa:17:77:15:c9:0e:f5: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:FD:F9:6B:D7:4D:33:D8:BC:00:36:11:3D:BF:0D:C5:2B:02:3D X509v3 Authority Key Identifier: keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:70:76:d0:9b:70:ac:3e:6c:1b:39:20:1e:50:2e:08:fe:27: 85:49:6a:16:f3:db:f5:43:d4:71:88:79:12:7c:77:80:e2:df: 8a:c7:fd:0b:e7:10:56:df:ed:76:8f:de:11:a2:ad:17:66:f5: 5c:43:c4:74:5b:54:3d:9b:1b:f5:9a:f9:d2:3a:53:e3:b2:67: 03:98:22:14:4a:24:e5:13:5a:15:34:61:2e:35:b2:ea:b7:07: 54:0e:a1:e6:37:5c:6f:17:94:cb:59:a7:dc:4a:cd:1d:6e:f9: 90:5d:1c:4a:aa:53:61:74:36:9d:38:eb:ab:12:18:bf:5b:c0: 8f:e7:0b:f2:17:b7:55:2e:c6:51:a2:7b:37:ea:30:1a:78:3b: 95:51:07:bd:c2:8f:3d:53:de:e6:90:1f:3d:a0:12:98:de:f7: 77:ea:1c:ca:9e:a0:47:47:81:82:1f:71:f6:46:ad:48:35:ab: 64:30:19:3a:cc:44:96:60:85:af:d6:6b:31:74:d0:3d:18:8d: b3:58:6d:e7:f1:d7:41:78:68:83:b0:cc:db:13:84:c1:fa:c2: 4c:32:e6:2c:47:d2:7a:ed:ed:67:23:62:36:43:b0:aa:26:f6: 67:b5:0d:0a:d2:71:d8:fa:5e:a5:86:41:ca:0a:56:4d:4d:af: 17:7f:55:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ3NTAxMTAvBgNVBAUTKEYxODlDREYwRkI5RjlDNjkxMjkxQTE0NjY4MTlEMTND NEU4Qzk2MDAwHhcNMjUwNjIwMjEzMDMwWhcNMjUwNjI3MjEzMDMwWjAYMRYwFAYD VQQDEw02ODU1ZDJmNy1lY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwySdcWkFhThLn4Pk1zJEnyNLpOpCwtqELRIK394xUxcr5Vxx+5lj/aYGXuSX uG/KbvOz/9YdiwWhLZsd9NMl+HojwmrjfZQa4VVzInMKEBhAmva1d6dgSrcwoeFk ZWoPMkHCQErS80zdsEGae1KXTBhSjSGk7+G5Ht4Z8odDxS8BavNuFRrbLYA5A2iX j7/ouM+LDXU3a2Q/q+rYVMHvvQmi+u4Y9/rXDR9KHQ2ng+lPmGL89xliAGCZ88J0 /O67cQjUhkuO4EX6Jpm3/SdB7WzyuUfXiqqZjtSgvHrPy/S2KUl6aWmse2TfS1nY hYvQwGnWEcp+IfoXdxXJDvUwYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLS/flr 100z2LwANhE9vw3FKwI9MB8GA1UdIwQYMBaAFPGJzfD7n5xpEpGhRmgZ0TxOjJYA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDc1MC8wRkE3QzZCNjJB MTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5Ha1NrYUZHYUJuUlBFNk1s Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZbk44UHVmbkdrU2thRkdhQm5SUEU2TWxnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDc1MC8wRkE3QzZCNjJBMTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5H a1NrYUZHYUJuUlBFNk1sZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9cHbQm3CsPmwbOSAeUC4I/ieFSWoW89v1Q9RxiHkSfHeA4t+Kx/0L 5xBW3+12j94Roq0XZvVcQ8R0W1Q9mxv1mvnSOlPjsmcDmCIUSiTlE1oVNGEuNbLq twdUDqHmN1xvF5TLWafcSs0dbvmQXRxKqlNhdDadOOurEhi/W8CP5wvyF7dVLsZR ons36jAaeDuVUQe9wo89U97mkB89oBKY3vd36hzKnqBHR4GCH3H2Rq1INatkMBk6 zESWYIWv1msxdNA9GI2zWG3n8ddBeGiDsMzbE4TB+sJMMuYsR9J67e1nI2I2Q7Cq JvZntQ0K0nHY+l6lhkHKClZNTa8Xf1U8 -----END CERTIFICATE-----Generated at Sun Jun 22 08:59:42 2025 by rpki-client