$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: iXsmSPdpAN8v8NDdcKZEwKV2MV0uoiB4SXmvbNMNXPA= Subject key identifier: 9F:1A:B7:72:92:7D:9F:27:87:0D:1B:6E:F1:14:EA:BF:91:41:B7:1D Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: E5 Signing time: Tue 17 Jun 2025 04:28:28 +0000 Manifest this update: Tue 17 Jun 2025 04:28:28 +0000 Manifest next update: Tue 24 Jun 2025 04:28:28 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: QB9tU7Nz4f5CTmNdXwaNTYW6DQ+dk3o+vblFAiHgyKw=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: oDkekcVc24g24l9w3pqtjUZRiCpSkPIIazs9r2Z2ZIs=) 3: 628C9174B6E011EF87D3F60CC4F9AE02.roa (hash: 66xBTvofN0kw93P5VictZxaCnVByR33mxLgf2xLdWgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC, serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Jun 17 04:28:28 2025 GMT Not After : Jun 24 04:28:28 2025 GMT Subject: CN=6850eeec-f2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:05:eb:b8:d2:d9:cf:2c:a0:9a:89:35:f9: de:68:9f:e9:05:b4:a0:e9:19:47:82:e4:29:15:4a: 1d:9b:17:14:91:67:18:a0:11:da:ee:76:16:f7:95: cb:6d:95:ae:f8:3d:e4:49:f3:dd:37:99:c9:e4:2b: 28:3b:57:98:c2:ec:4c:c4:8c:bd:f5:7e:77:16:7b: 65:b4:88:24:65:46:1a:6d:8b:42:5e:e1:48:a2:f2: b9:1c:b3:bc:8b:3c:3f:47:4c:6e:39:48:c5:ae:ed: 71:76:77:23:9b:fd:ba:6b:70:36:2e:e9:eb:bf:51: 08:04:4b:ba:50:50:15:6b:97:e7:34:67:d3:ef:d5: ce:3c:40:c5:37:7d:2a:48:d3:2a:3d:d2:bf:99:b4: e0:e6:0d:0b:0d:50:d6:d4:db:09:ea:0a:a0:8c:b3: e8:dc:ec:a6:9b:05:19:2e:41:82:c2:7f:da:4a:93: 23:11:c8:64:af:7b:48:24:1b:41:05:d8:c2:19:aa: 7b:27:73:4a:68:b0:d8:41:1d:43:9f:63:ef:6a:2c: 45:e6:ac:a0:29:71:48:17:59:a5:21:91:f0:f4:12: 14:af:ca:41:e0:ee:f6:27:25:fb:cc:84:14:65:31: 0b:52:84:01:bf:52:64:53:25:5b:f9:3d:c5:d5:1e: 3a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1A:B7:72:92:7D:9F:27:87:0D:1B:6E:F1:14:EA:BF:91:41:B7:1D X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ff:5f:1a:63:1d:b6:2b:a2:32:2e:84:81:9c:60:bc:3f:52: b6:c7:ed:06:e7:ea:cc:5a:64:10:70:64:80:48:1c:a4:b5:86: 3e:ae:d6:c7:a5:e7:13:f9:a1:e3:f4:a5:d4:1f:b5:e6:c3:0f: 5b:5e:8f:b3:45:22:c1:4a:b7:4c:07:38:65:3a:99:18:fb:16: 1e:27:71:13:49:56:94:ca:16:d7:8f:23:2b:c9:3f:84:c5:e3: 17:bf:a0:0d:52:60:93:ec:62:51:7f:f6:e8:d0:a5:69:de:b1: 00:03:55:0f:b2:3b:07:89:11:76:0d:9a:4e:04:62:29:5b:1f: fc:0c:c6:16:b0:2c:6c:15:e7:c9:67:6c:77:3b:55:3c:5d:1c: 9e:46:90:f9:f2:91:18:c8:02:3a:69:36:4b:b7:08:72:23:97: 18:bc:78:46:d6:e3:14:b2:99:bb:92:a6:1a:df:c7:7b:5e:1f: b7:ad:99:c6:e5:f7:a7:ab:ba:ac:f5:7d:4c:bb:73:74:9b:1d: d2:0d:af:ff:e1:17:cc:25:cd:6f:cd:f4:31:8d:d2:b4:fe:e0: 06:75:53:c7:35:f8:22:52:7f:a8:e9:1f:d7:0d:02:d1:d0:57: 84:b4:96:3c:33:bf:3e:a5:02:f9:23:94:87:6d:5f:82:fc:64: 06:79:b7:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg0QUMxMTAvBgNVBAUTKEZCQzU1QjJDMEJFMEFCMjM0NzQ4RkJDMzYxNTQ3RjY0 QkZBNzUxOTcwHhcNMjUwNjE3MDQyODI4WhcNMjUwNjI0MDQyODI4WjAYMRYwFAYD VQQDEw02ODUwZWVlYy1mMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwoF67jS2c8soJqJNfneaJ/pBbSg6RlHguQpFUodmxcUkWcYoBHa7nYW95XL bZWu+D3kSfPdN5nJ5CsoO1eYwuxMxIy99X53FntltIgkZUYabYtCXuFIovK5HLO8 izw/R0xuOUjFru1xdncjm/26a3A2Lunrv1EIBEu6UFAVa5fnNGfT79XOPEDFN30q SNMqPdK/mbTg5g0LDVDW1NsJ6gqgjLPo3OymmwUZLkGCwn/aSpMjEchkr3tIJBtB BdjCGap7J3NKaLDYQR1Dn2PvaixF5qygKXFIF1mlIZHw9BIUr8pB4O72JyX7zIQU ZTELUoQBv1JkUyVb+T3F1R469QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8at3KS fZ8nhw0bbvEU6r+RQbcdMB8GA1UdIwQYMBaAFPvFWywL4KsjR0j7w2FUf2S/p1GX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODRBQy82RDAyNkNFQ0Y1 QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5TkhTUHZEWVZSX1pMLW5V WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODRBQy82RDAyNkNFQ0Y1QTExMUVFOThEQkNEMTFDNEY5QUUwMi8tOFZiTEF2Z3F5 TkhTUHZEWVZSX1pMLW5VWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA/18aYx22K6IyLoSBnGC8P1K2x+0G5+rMWmQQcGSASByktYY+rtbH pecT+aHj9KXUH7Xmww9bXo+zRSLBSrdMBzhlOpkY+xYeJ3ETSVaUyhbXjyMryT+E xeMXv6ANUmCT7GJRf/bo0KVp3rEAA1UPsjsHiRF2DZpOBGIpWx/8DMYWsCxsFefJ Z2x3O1U8XRyeRpD58pEYyAI6aTZLtwhyI5cYvHhG1uMUspm7kqYa38d7Xh+3rZnG 5fenq7qs9X1Mu3N0mx3SDa//4RfMJc1vzfQxjdK0/uAGdVPHNfgiUn+o6R/XDQLR 0FeEtJY8M78+pQL5I5SHbV+C/GQGebep -----END CERTIFICATE-----Generated at Wed Jun 18 05:13:48 2025 by rpki-client