$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: VF2oi/s4NvzYmbqcwh+0gZYVBsX15kfvHEW6o7BaJko= Subject key identifier: 82:2B:5E:2B:63:3A:23:E2:65:C6:A1:7A:54:2B:E7:D7:1E:AD:6A:82 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 0872 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 086D Signing time: Thu 12 Jun 2025 20:24:14 +0000 Manifest this update: Thu 12 Jun 2025 20:24:14 +0000 Manifest next update: Thu 19 Jun 2025 20:24:14 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: 0koqe2wNov6QncwrVXl/Oh/XyI3+6x30E+ink3tou2A=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: cbktrrt4RsOUs9FstYccY602a8M1M48rOaYFq7f84Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2162 (0x872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Jun 12 20:24:14 2025 GMT Not After : Jun 19 20:24:14 2025 GMT Subject: CN=684b376e-bc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:3f:56:0e:d2:8a:25:51:87:95:bc:8e:25: 6d:60:74:4b:c5:4f:9e:f4:c3:db:49:8d:19:35:be: 87:20:5e:a5:de:b3:9f:62:2e:1b:18:e7:fe:bf:73: cf:ec:89:64:b2:98:5e:73:e5:6e:04:1c:81:7b:fb: 64:21:37:84:fa:1f:ad:6e:b2:81:8c:81:24:53:ba: 56:12:7a:6b:15:a0:7b:7a:d3:16:07:13:3e:f4:02: 38:14:f8:b7:94:09:9f:01:c0:bb:3e:6d:7b:02:ec: d2:95:0c:f2:7d:fe:76:2a:62:b9:66:58:ac:b4:8e: eb:5b:e1:ae:a5:15:f3:31:bb:52:1c:25:f7:f8:d5: 47:97:01:f8:5c:d5:48:b2:cb:81:bd:d1:2b:a2:f5: b4:ed:7d:a9:48:b5:03:ee:f8:f4:62:f0:5d:2d:8c: d0:7e:be:1f:de:70:e9:c4:8f:a4:f3:c6:09:f4:69: 74:15:93:9b:22:b0:35:7c:b8:18:e6:0a:5e:89:38: 69:c9:cb:ed:b7:cb:4a:ca:d2:61:c7:b2:15:be:9f: fa:77:9a:85:43:f1:de:f5:fc:52:07:50:48:8a:3f: 24:6e:2c:4a:7a:51:07:0b:9e:66:4f:12:49:fe:75: 28:39:3f:66:8e:ce:84:de:57:ee:2b:83:d0:1b:2d: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2B:5E:2B:63:3A:23:E2:65:C6:A1:7A:54:2B:E7:D7:1E:AD:6A:82 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:73:1f:6e:15:27:63:c4:40:b0:b4:15:c9:f7:12:ee:5f:41: cd:66:a2:58:b8:6b:f2:33:6c:87:21:9f:06:a5:69:1e:2a:7b: 07:ab:28:62:b7:88:ce:df:4e:94:19:8d:9f:ad:cd:0f:ec:91: 96:c6:af:49:cc:24:48:72:dc:f1:81:b9:b2:44:54:e2:f2:44: d0:f9:ac:8e:66:8e:0b:21:b6:8b:41:cc:af:38:1f:72:94:e2: 8e:e1:79:9f:11:c3:61:6b:f5:29:75:0f:e5:6b:f1:d0:0f:43: 4f:21:1c:69:c5:4d:e5:44:c7:05:e8:25:b7:ad:2b:e8:54:2a: 07:a4:6c:4b:d3:94:4d:d3:f3:8f:69:9d:dd:04:f8:60:da:d8: 8e:fb:0c:81:46:25:5d:33:33:7f:85:c6:17:af:36:30:e9:bd: 7f:40:65:5e:b5:20:3d:40:9d:4d:5c:47:0f:59:ca:dc:c2:bc: 98:45:02:5d:cf:09:96:a3:e0:0a:40:7f:87:47:61:fa:77:bd: be:6a:04:ff:e0:2b:10:96:58:38:2b:3c:c1:57:5d:27:da:8a: 14:0b:0b:1f:0b:c1:89:55:32:c7:32:28:d2:bf:5e:65:15:92: 18:b0:fe:9a:fb:40:5d:b9:f2:32:d1:af:e6:a6:e5:6b:1e:d4: 1e:e6:52:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUwNjEyMjAyNDE0WhcNMjUwNjE5MjAyNDE0WjAYMRYwFAYD VQQDEw02ODRiMzc2ZS1iYzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzk/Vg7SiiVRh5W8jiVtYHRLxU+e9MPbSY0ZNb6HIF6l3rOfYi4bGOf+v3PP 7Ilksphec+VuBByBe/tkITeE+h+tbrKBjIEkU7pWEnprFaB7etMWBxM+9AI4FPi3 lAmfAcC7Pm17AuzSlQzyff52KmK5ZlistI7rW+GupRXzMbtSHCX3+NVHlwH4XNVI ssuBvdErovW07X2pSLUD7vj0YvBdLYzQfr4f3nDpxI+k88YJ9Gl0FZObIrA1fLgY 5gpeiThpycvtt8tKytJhx7IVvp/6d5qFQ/He9fxSB1BIij8kbixKelEHC55mTxJJ /nUoOT9mjs6E3lfuK4PQGy3FMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIrXitj OiPiZcahelQr59cerWqCMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATcx9uFSdjxECwtBXJ9xLuX0HNZqJYuGvyM2yHIZ8GpWkeKnsHqyhi t4jO306UGY2frc0P7JGWxq9JzCRIctzxgbmyRFTi8kTQ+ayOZo4LIbaLQcyvOB9y lOKO4XmfEcNha/UpdQ/la/HQD0NPIRxpxU3lRMcF6CW3rSvoVCoHpGxL05RN0/OP aZ3dBPhg2tiO+wyBRiVdMzN/hcYXrzYw6b1/QGVetSA9QJ1NXEcPWcrcwryYRQJd zwmWo+AKQH+HR2H6d72+agT/4CsQllg4KzzBV10n2ooUCwsfC8GJVTLHMijSv15l FZIYsP6a+0BdufIy0a/mpuVrHtQe5lLG -----END CERTIFICATE-----Generated at Sat Jun 14 18:34:42 2025 by rpki-client