$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json) Hash identifier: 24/TXyBt4Z4AvntO3y/LlqY6Foiq/PN8bw12eMt4T/Q= Subject key identifier: D7:57:44:73:35:14:C8:61:B3:FC:EA:7B:D5:8D:B5:DD:30:05:FF:F8 Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft Manifest number: 0E Signing time: Sun 15 Jun 2025 07:09:21 +0000 Manifest this update: Sun 15 Jun 2025 07:09:21 +0000 Manifest next update: Sun 22 Jun 2025 07:09:21 +0000 Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: BlmPmFEjQ4vGir06pSffqUv//IfTg2/Jgd37qVa6deM=) 2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: uo101jV5D+ClspePQe5MSA2kQIWF4csGlLsFWkLTXVc=) 3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: 8dvGtU4/STS35lWSdlUQSQ3IYG+2zjb7Ya5wIRb/kvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Validity Not Before: Jun 15 07:09:21 2025 GMT Not After : Jun 22 07:09:21 2025 GMT Subject: CN=684e71a1-9cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:b3:59:7e:5c:5a:bc:7f:d8:79:57:c4:7a: 42:47:41:9c:4e:db:f9:16:36:13:77:bd:b8:00:f8: 7e:56:c5:b9:9e:3d:cb:a9:c4:d6:1a:1f:ce:7e:47: 12:94:b1:79:76:38:59:25:4d:04:cc:de:76:4d:26: a8:63:c0:65:0c:11:e7:b5:e2:4c:88:4c:de:fb:f6: 47:de:2c:ec:89:ed:cd:82:0d:e3:a5:d6:be:4a:cf: 19:a8:7a:50:45:6c:50:8b:fe:09:9c:0e:93:82:9c: 1d:63:a9:24:08:a1:d0:0f:fb:3e:5f:6a:55:bb:e6: 50:a9:9d:e1:64:d3:52:f0:57:bf:9f:84:6a:0e:3f: 49:d2:6b:f2:14:d4:5a:25:63:cd:45:b6:d5:9b:33: a9:60:7d:29:33:20:12:69:d1:a8:69:84:21:98:a5: 90:9a:b1:13:11:67:0e:8e:b6:6a:12:8c:8d:58:d1: d3:d7:05:94:6d:25:be:ba:97:b3:e3:f9:3f:5f:ed: 41:54:0e:40:f6:01:f0:7b:f3:d2:6c:b8:03:0f:35: d0:4b:85:bd:64:fc:57:fe:92:c6:68:ca:fd:43:13: 12:b5:c8:0d:d3:25:3d:e9:a6:31:4e:87:2d:20:6e: 51:31:06:ca:b7:b2:de:85:b2:18:e7:ce:f9:f6:10: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:57:44:73:35:14:C8:61:B3:FC:EA:7B:D5:8D:B5:DD:30:05:FF:F8 X509v3 Authority Key Identifier: keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:1b:0f:61:02:57:6b:33:c7:07:f0:60:d9:1a:db:59:be:55: 48:32:31:8b:51:0a:b3:84:ad:ec:50:3e:e7:d3:9e:a5:94:4a: b1:e3:35:0b:58:6e:66:94:0b:3d:25:00:ff:43:b1:ee:ef:ed: 9b:5d:30:15:91:d3:5f:78:0d:4f:78:d2:a7:cc:3c:54:a6:de: ab:ee:8b:c8:83:2c:81:f0:88:66:eb:fe:b2:28:1a:dc:74:44: 71:c1:05:f0:32:c7:ce:ca:9f:f5:29:40:a9:a6:40:e8:3a:36: a8:ed:a4:4c:8e:7d:1b:4f:26:41:41:92:9a:58:09:31:01:5b: bd:d3:7a:39:33:49:7d:98:4f:96:ac:e6:0a:f5:fe:28:38:c0: 28:99:12:0a:ba:fd:70:3f:62:10:5c:23:1b:d1:2e:10:b6:86: 7b:94:61:0a:39:d0:ef:fa:38:46:52:56:f2:67:4f:fe:06:7d: d0:e4:49:7f:d1:17:c5:62:89:3a:52:0a:08:2c:f3:68:a4:6b: b4:cf:74:d0:8e:8e:33:cd:34:2e:09:68:20:9c:cb:a9:eb:53: 6b:79:fb:85:8c:0e:62:95:b6:62:d0:b8:87:ba:3e:31:0b:84: 89:3e:8c:ce:b9:c8:4d:66:55:c6:2c:88:54:e3:0d:3c:f2:4c: d2:d1:84:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDkxNjExMC8GA1UEBRMoNkZDMjJEMzBGMzE5Q0Q2NURCNUUzRjZGRkM1RDE0MUNE MDE2Njg4MjAeFw0yNTA2MTUwNzA5MjFaFw0yNTA2MjIwNzA5MjFaMBgxFjAUBgNV BAMTDTY4NGU3MWExLTljZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7g7NZflxavH/YeVfEekJHQZxO2/kWNhN3vbgA+H5WxbmePcupxNYaH85+RxKU sXl2OFklTQTM3nZNJqhjwGUMEee14kyITN779kfeLOyJ7c2CDeOl1r5KzxmoelBF bFCL/gmcDpOCnB1jqSQIodAP+z5falW75lCpneFk01LwV7+fhGoOP0nSa/IU1Fol Y81FttWbM6lgfSkzIBJp0ahphCGYpZCasRMRZw6OtmoSjI1Y0dPXBZRtJb66l7Pj +T9f7UFUDkD2AfB789JsuAMPNdBLhb1k/Ff+ksZoyv1DExK1yA3TJT3ppjFOhy0g blExBsq3st6Fshjnzvn2EBANAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU11dEczUU yGGz/Op71Y213TAF//gwHwYDVR0jBBgwFoAUb8ItMPMZzWXbXj9v/F0UHNAWaIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwOTE2LzA0MEI4N0JBMzY0 QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldYYlhqOXZfRjBVSE5BV2FJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjhJdE1QTVp6V1hiWGo5dl9GMFVITkFXYUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw OTE2LzA0MEI4N0JBMzY0QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldY YlhqOXZfRjBVSE5BV2FJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIQbD2ECV2szxwfwYNka21m+VUgyMYtRCrOErexQPufTnqWUSrHjNQtY bmaUCz0lAP9Dse7v7ZtdMBWR0194DU940qfMPFSm3qvui8iDLIHwiGbr/rIoGtx0 RHHBBfAyx87Kn/UpQKmmQOg6NqjtpEyOfRtPJkFBkppYCTEBW73TejkzSX2YT5as 5gr1/ig4wCiZEgq6/XA/YhBcIxvRLhC2hnuUYQo50O/6OEZSVvJnT/4GfdDkSX/R F8ViiTpSCggs82ika7TPdNCOjjPNNC4JaCCcy6nrU2t5+4WMDmKVtmLQuIe6PjEL hIk+jM65yE1mVcYsiFTjDTzyTNLRhAw= -----END CERTIFICATE-----Generated at Sun Jun 15 20:51:43 2025 by rpki-client