$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: A0LQVbOsfU5+EjaT1nLrPAGZMEIw7Gob6+2ovygL1ao= Subject key identifier: D2:27:E8:5B:2B:D3:F8:FB:4C:F4:CD:98:FD:B0:79:AD:02:C1:4E:AA Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 0819 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 0813 Signing time: Wed 18 Jun 2025 20:41:59 +0000 Manifest this update: Wed 18 Jun 2025 20:41:59 +0000 Manifest next update: Wed 25 Jun 2025 20:41:59 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: Z9cF1XR4XQLs0yenrSarkUQQrtImTauZlpSs3wBh/G8=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: BSpXz+Luvr8+353VTfwHRvV86BxwUFFmKEnBxGibaBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2073 (0x819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: Jun 18 20:41:59 2025 GMT Not After : Jun 25 20:41:59 2025 GMT Subject: CN=68532497-abf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:c3:8f:b7:a0:57:bd:9b:48:10:f8:3a:dd: 0c:cf:06:1f:8c:0f:08:a4:de:c6:19:8d:a9:a3:37: 2f:49:ea:c8:df:8e:d8:20:16:fd:3a:4f:c2:9c:8f: 08:80:4a:64:ab:b8:d2:fd:85:e6:c5:29:04:df:86: 85:19:64:fe:a2:92:6f:82:6d:0f:26:aa:7d:da:ea: d2:66:8b:8a:e6:36:70:4d:66:ea:6c:c2:0b:88:50: 52:64:07:bb:5d:c9:be:45:df:b5:54:8f:db:a8:16: 61:41:27:a3:ab:aa:ea:4b:53:1d:97:79:67:82:b3: db:ae:8c:22:08:cf:56:24:a7:9d:b1:b7:dd:a7:bd: a6:9d:db:9b:68:2f:56:9e:be:ef:a2:39:8b:9f:69: 7f:cf:b2:6e:70:59:22:d0:4f:80:d9:3b:39:3f:cb: fa:3f:ca:3e:94:f8:86:bb:23:b9:76:a6:4e:34:72: e0:8d:1e:37:d5:46:15:ec:a5:b7:6a:c9:e1:db:0f: e8:9b:f1:ef:4e:71:16:d6:0b:ae:3b:35:7c:69:2a: fc:f0:38:f5:4a:4d:3e:97:2d:06:13:52:28:a1:2c: 14:9d:0a:31:4e:2f:40:1a:72:8c:24:a3:f0:d9:16: c6:8d:d2:5e:01:53:09:4b:0d:6d:fd:ef:c4:42:70: e3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:27:E8:5B:2B:D3:F8:FB:4C:F4:CD:98:FD:B0:79:AD:02:C1:4E:AA X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:47:8e:7a:0e:e5:d9:62:03:a3:a0:56:97:ab:5f:71:a9:da: a5:10:33:28:79:fb:e0:b8:b4:7e:f8:35:5e:c6:88:aa:82:84: f6:02:1c:0c:11:de:2e:4c:cc:e7:4c:0b:61:1d:67:ac:d0:75: 98:10:49:f4:b4:a3:3c:06:b4:26:6d:bc:10:fd:43:18:b0:4e: db:b5:6d:9a:fc:68:f5:87:8c:4a:3a:86:49:e8:5d:56:ac:71: dd:d1:ac:b4:fe:0c:bf:12:fd:16:60:80:08:aa:ba:0a:19:68: ed:23:f7:39:55:1d:a4:23:71:b6:a8:a4:eb:4b:61:7f:98:c4: 39:32:d6:99:db:09:ab:0a:b2:82:79:7c:78:81:4c:13:a2:31: 46:b6:02:27:60:aa:b4:74:ea:73:03:51:1f:87:e0:b4:03:4f: 1f:91:20:4a:e3:cc:c6:0e:55:fb:90:43:a8:62:18:ed:bb:53: 49:7f:27:5e:7e:dc:12:db:1a:0f:98:58:d6:9d:4b:13:e1:e7: 0a:c6:fd:03:17:fc:13:ad:a1:6f:8a:76:73:5f:92:07:3a:68: 47:36:74:a6:6e:4e:f3:5a:aa:f6:24:79:5f:b9:6d:b6:2e:fa: f6:ff:27:26:45:60:b5:1b:7a:34:be:30:19:c6:5a:c1:11:0c: 94:38:31:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjUwNjE4MjA0MTU5WhcNMjUwNjI1MjA0MTU5WjAYMRYwFAYD VQQDEw02ODUzMjQ5Ny1hYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvazDj7egV72bSBD4Ot0MzwYfjA8IpN7GGY2pozcvSerI347YIBb9Ok/CnI8I gEpkq7jS/YXmxSkE34aFGWT+opJvgm0PJqp92urSZouK5jZwTWbqbMILiFBSZAe7 Xcm+Rd+1VI/bqBZhQSejq6rqS1Mdl3lngrPbrowiCM9WJKedsbfdp72mndubaC9W nr7vojmLn2l/z7JucFki0E+A2Ts5P8v6P8o+lPiGuyO5dqZONHLgjR431UYV7KW3 asnh2w/om/HvTnEW1guuOzV8aSr88Dj1Sk0+ly0GE1IooSwUnQoxTi9AGnKMJKPw 2RbGjdJeAVMJSw1t/e/EQnDj+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIn6Fsr 0/j7TPTNmP2wea0CwU6qMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCR456DuXZYgOjoFaXq19xqdqlEDMoefvguLR++DVexoiqgoT2AhwM Ed4uTMznTAthHWes0HWYEEn0tKM8BrQmbbwQ/UMYsE7btW2a/Gj1h4xKOoZJ6F1W rHHd0ay0/gy/Ev0WYIAIqroKGWjtI/c5VR2kI3G2qKTrS2F/mMQ5MtaZ2wmrCrKC eXx4gUwTojFGtgInYKq0dOpzA1Efh+C0A08fkSBK48zGDlX7kEOoYhjtu1NJfyde ftwS2xoPmFjWnUsT4ecKxv0DF/wTraFvinZzX5IHOmhHNnSmbk7zWqr2JHlfuW22 Lvr2/ycmRWC1G3o0vjAZxlrBEQyUODGj -----END CERTIFICATE-----Generated at Fri Jun 20 20:12:25 2025 by rpki-client