$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: od+VIgTm9pJfMwQl6Wiw8SpBsLVZJxZggZjx1kgPBc0= Subject key identifier: 87:FD:E3:46:A0:4D:41:9E:4C:E3:92:4F:8D:94:38:57:D4:74:8C:06 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 0483 Signing time: Tue 17 Jun 2025 00:17:16 +0000 Manifest this update: Tue 17 Jun 2025 00:17:15 +0000 Manifest next update: Tue 24 Jun 2025 00:17:15 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: mSOGs6i+lA9QDaDrmlaLRD/jIg6f60utJRoxA+ah8H4=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: Jun 17 00:17:15 2025 GMT Not After : Jun 24 00:17:15 2025 GMT Subject: CN=6850b40b-1a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d0:ef:9f:84:91:26:e4:61:c1:d5:75:44:39: c7:3d:ee:f3:ef:21:5d:32:43:69:43:3f:86:f8:f9: f4:c2:3c:bc:59:1f:2b:92:64:c8:84:9d:e5:e2:eb: 99:3e:fe:1e:38:9c:5d:cf:28:67:7e:eb:16:94:8b: c0:45:60:f9:8b:c5:3b:bd:58:fe:bb:f7:74:85:07: c6:58:43:f9:20:b2:fc:2d:54:bd:6d:3e:db:3c:44: 98:34:9e:b5:1e:d8:8e:69:49:9c:3f:04:7e:b3:82: e3:de:8a:12:b5:cb:3b:c2:8b:93:26:ef:f8:cb:c1: f3:71:95:3c:13:05:12:e9:5e:b8:8e:aa:f6:29:9d: d4:f2:a8:31:4a:9a:02:bd:1d:5a:1c:f8:bd:44:c6: ef:68:16:d0:ce:6e:db:db:62:ab:f5:83:59:f5:8e: b8:c3:8a:b9:b6:e4:c0:a8:e3:28:d6:91:c0:51:32: 71:ee:d2:e0:c7:98:ff:fe:98:27:dd:1b:14:56:c8: 99:22:b5:16:e6:a1:99:f9:64:1e:4f:49:b1:46:7a: 25:93:1f:e7:c6:22:5c:b8:47:bb:7a:2b:0f:7c:6f: be:e6:de:e4:bd:7b:55:68:03:5b:37:81:34:0f:88: e9:dc:4e:51:ac:f0:39:e8:e8:90:b0:55:1c:3e:5f: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FD:E3:46:A0:4D:41:9E:4C:E3:92:4F:8D:94:38:57:D4:74:8C:06 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:fd:32:68:e9:f4:4b:99:05:21:88:63:a8:09:bd:0e:7e:9e: ab:72:2e:ae:f6:a4:0a:fb:ff:b6:c8:c1:a1:5a:c8:d6:ed:a3: 8f:08:70:4f:4b:b6:4c:81:42:8e:e6:e8:4d:e7:07:15:41:82: 9e:e7:a8:f3:94:91:e6:20:57:ad:bb:28:e6:70:05:c1:db:97: bc:83:86:f6:3a:f9:15:62:8d:ba:97:84:53:a7:b6:d6:32:03: e5:fd:0d:70:1f:3a:6c:f1:65:b0:a0:c2:e0:e0:b1:29:5f:2e: 1f:41:9a:1c:f6:97:6c:c7:f5:7f:cd:65:d8:6a:b7:cd:95:9e: 7e:20:6e:fa:57:8f:ba:5d:39:de:1a:8a:31:5e:4f:a8:e7:33: 83:cf:8e:4c:63:5e:99:e7:86:49:4e:19:c4:3a:37:cd:1a:a7: 19:47:be:79:a0:82:f9:b8:eb:63:1b:79:f5:09:09:67:a0:44: 3f:bd:9c:f7:2c:bb:c4:f7:59:1c:52:e1:c7:e1:57:70:76:55: 65:65:a7:3d:0c:07:6a:0b:a4:f8:a1:fe:77:56:a0:47:2e:80: ed:b7:b8:3e:ff:00:ca:61:bd:76:ba:27:1b:6b:01:ad:fd:7e: 72:ae:eb:e0:74:0a:7d:b4:3b:90:7b:9f:da:3a:8d:d8:7e:e0: c4:a1:55:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUwNjE3MDAxNzE1WhcNMjUwNjI0MDAxNzE1WjAYMRYwFAYD VQQDEw02ODUwYjQwYi0xYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19Dvn4SRJuRhwdV1RDnHPe7z7yFdMkNpQz+G+Pn0wjy8WR8rkmTIhJ3l4uuZ Pv4eOJxdzyhnfusWlIvARWD5i8U7vVj+u/d0hQfGWEP5ILL8LVS9bT7bPESYNJ61 HtiOaUmcPwR+s4Lj3ooStcs7wouTJu/4y8HzcZU8EwUS6V64jqr2KZ3U8qgxSpoC vR1aHPi9RMbvaBbQzm7b22Kr9YNZ9Y64w4q5tuTAqOMo1pHAUTJx7tLgx5j//pgn 3RsUVsiZIrUW5qGZ+WQeT0mxRnolkx/nxiJcuEe7eisPfG++5t7kvXtVaANbN4E0 D4jp3E5RrPA56OiQsFUcPl/imwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf940ag TUGeTOOST42UOFfUdIwGMB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhs ODhSaHNLY3JJWXZ1SWo0QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx/TJo6fRLmQUhiGOoCb0Ofp6rci6u9qQK+/+2yMGhWsjW7aOPCHBP S7ZMgUKO5uhN5wcVQYKe56jzlJHmIFetuyjmcAXB25e8g4b2OvkVYo26l4RTp7bW MgPl/Q1wHzps8WWwoMLg4LEpXy4fQZoc9pdsx/V/zWXYarfNlZ5+IG76V4+6XTne GooxXk+o5zODz45MY16Z54ZJThnEOjfNGqcZR755oIL5uOtjG3n1CQlnoEQ/vZz3 LLvE91kcUuHH4VdwdlVlZac9DAdqC6T4of53VqBHLoDtt7g+/wDKYb12uicbawGt /X5yruvgdAp9tDuQe5/aOo3YfuDEoVVp -----END CERTIFICATE-----Generated at Tue Jun 17 23:00:12 2025 by rpki-client