$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: Ynb8CnkZ6OIGHyjbjfrATPJa5i30nztxLfJKuJbL7ew= Subject key identifier: 97:A7:87:2E:2F:61:12:25:82:A1:8D:D4:73:C0:E4:98:C6:A6:09:6D Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: 6C Signing time: Sun 15 Jun 2025 06:01:18 +0000 Manifest this update: Sun 15 Jun 2025 06:01:18 +0000 Manifest next update: Sun 22 Jun 2025 06:01:18 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: ib3x0djdQkdCcDf3svtLlnfGiGFGvKa4LOcNwf8rnPA=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Jun 15 06:01:18 2025 GMT Not After : Jun 22 06:01:18 2025 GMT Subject: CN=684e61ae-dd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d7:25:d2:bc:20:49:fc:98:07:39:1e:c8:27: 0a:cf:a8:4d:f9:0c:c5:44:01:b9:72:18:d9:1f:dc: fe:7c:c3:b3:72:46:8d:79:33:3b:8e:6d:3d:67:55: a9:31:e2:a5:ee:8a:aa:6e:83:f4:18:89:b8:b3:d4: 2d:23:5d:33:7f:49:18:46:e3:73:d3:c9:b4:fa:d5: e5:9b:97:98:32:4e:85:8d:21:9f:cd:13:8c:e8:b2: 1c:cb:9c:a9:61:27:8c:f7:ca:62:65:91:5d:3a:fd: 5d:ab:3d:90:f0:a6:56:50:3f:0f:b1:73:81:f5:49: f8:c6:22:79:c7:97:d3:fb:a4:78:1f:8a:65:5a:35: 8c:18:2d:83:08:f8:81:4c:47:5a:e3:34:80:91:c7: 39:bb:7f:c2:8f:27:4b:ac:9c:56:f1:19:12:11:a9: 7c:ed:8a:74:3d:fe:31:70:7a:7b:21:1d:50:e6:41: 51:60:1a:ab:ff:ce:39:79:63:e8:d5:f0:65:9f:f1: 0a:ec:3a:98:a5:fb:8c:90:a0:a7:3d:e1:ed:a3:3c: b0:39:ca:f6:17:73:18:46:db:41:c3:f4:4f:3c:91: b4:76:af:42:1c:d5:74:25:8a:d9:db:3e:55:ef:3b: ee:22:2f:13:77:c9:f6:f7:b1:5b:68:58:73:4e:ee: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A7:87:2E:2F:61:12:25:82:A1:8D:D4:73:C0:E4:98:C6:A6:09:6D X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a5:8b:e1:76:2e:2f:53:58:2c:7f:d6:bd:8d:b8:0b:15:c5: ed:20:cc:c5:f0:3c:d7:89:fe:bc:ee:87:fb:3b:68:4a:a1:75: cd:35:6c:ad:40:41:0b:8b:3a:e3:82:3c:7a:de:c5:7f:0a:a6: f0:d1:87:3d:f2:14:4b:d0:af:c6:5e:5c:82:8a:e4:90:22:21: 03:8f:d7:8e:94:9d:01:76:4a:b8:ab:00:86:1e:31:58:66:51: 00:cf:29:40:57:ba:57:2b:dd:28:df:25:db:29:c7:09:13:33: 67:3b:8d:d4:a3:37:0c:b0:2b:3b:49:69:3a:04:d4:cd:40:80: 12:cf:9b:33:16:f9:98:c7:a6:e4:5b:1b:d5:28:76:c5:76:1b: a3:8c:11:37:1c:ce:3e:75:de:80:f4:26:5f:c7:23:2b:74:d5: 2b:24:6c:cc:35:26:08:1b:1d:05:86:88:ca:25:6d:18:3f:0a: 71:25:6b:27:dd:39:35:5d:6f:a0:fb:e4:40:f0:fb:b5:e5:6c: c7:ca:25:b5:fc:db:48:ee:9f:df:58:ba:d5:2e:4f:af:60:94: c8:18:84:0a:cf:37:b6:fe:39:c9:ff:f7:d0:df:e9:12:c8:a1: b2:5b:37:e5:93:61:86:72:c4:3d:df:ee:44:86:37:45:04:c6: 7b:3b:55:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoRjA0OTI5RUY3NDNDNTRDMDhCNDVFMTlDRkM1MUJGMkFB NTU5REFBMTAeFw0yNTA2MTUwNjAxMThaFw0yNTA2MjIwNjAxMThaMBgxFjAUBgNV BAMTDTY4NGU2MWFlLWRkNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg1yXSvCBJ/JgHOR7IJwrPqE35DMVEAblyGNkf3P58w7NyRo15MzuObT1nVakx 4qXuiqpug/QYibiz1C0jXTN/SRhG43PTybT61eWbl5gyToWNIZ/NE4zoshzLnKlh J4z3ymJlkV06/V2rPZDwplZQPw+xc4H1SfjGInnHl9P7pHgfimVaNYwYLYMI+IFM R1rjNICRxzm7f8KPJ0usnFbxGRIRqXztinQ9/jFwenshHVDmQVFgGqv/zjl5Y+jV 8GWf8QrsOpil+4yQoKc94e2jPLA5yvYXcxhG20HD9E88kbR2r0Ic1XQlitnbPlXv O+4iLxN3yfb3sVtoWHNO7li3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl6eHLi9h EiWCoY3Uc8DkmMamCW0wHwYDVR0jBBgwFoAU8Ekp73Q8VMCLReGc/FG/KqVZ2qEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzhDMjE0OTc0QTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEVrcDczUThWTUNMUmVHY19GR19LcVZaMnFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NjVGLzhDMjE0OTc0QTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1D TFJlR2NfRkdfS3FWWjJxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOli+F2Li9TWCx/1r2NuAsVxe0gzMXwPNeJ/rzuh/s7aEqhdc01bK1A QQuLOuOCPHrexX8KpvDRhz3yFEvQr8ZeXIKK5JAiIQOP146UnQF2SrirAIYeMVhm UQDPKUBXulcr3SjfJdspxwkTM2c7jdSjNwywKztJaToE1M1AgBLPmzMW+ZjHpuRb G9UodsV2G6OMETcczj513oD0Jl/HIyt01SskbMw1JggbHQWGiMolbRg/CnElayfd OTVdb6D75EDw+7XlbMfKJbX820jun99YutUuT69glMgYhArPN7b+Ocn/99Df6RLI obJbN+WTYYZyxD3f7kSGN0UExns7Vb0= -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:17 2025 by rpki-client