$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json) Hash identifier: sUKGldluCCxYOcdJRy/m0f4Zr4ID9N/MsW4ipxsfqs4= Subject key identifier: C7:AD:BB:59:F5:EA:81:18:0F:39:40:32:37:DD:E6:24:9F:4A:E4:0A Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft Manifest number: 0AFD Signing time: Thu 12 Jun 2025 19:08:29 +0000 Manifest this update: Thu 12 Jun 2025 19:08:29 +0000 Manifest next update: Thu 19 Jun 2025 19:08:29 +0000 Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: PL5IuODgLkcB0WbZ4S4+A4fU0BNHGZ7Mc69Op7k4ZP8=) 2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: d1emA2UMoO8VznsV+Ait8FlVXTOyXdepIAgXYTBBJeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Validity Not Before: Jun 12 19:08:29 2025 GMT Not After : Jun 19 19:08:29 2025 GMT Subject: CN=684b25ad-a68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2f:c2:4f:f9:c2:e3:2a:f2:fa:6e:83:9e:5a: db:ea:7b:b3:11:86:a1:07:d8:21:3c:ce:1a:4c:aa: d6:de:d5:58:06:98:32:aa:dc:68:0a:01:20:57:71: fc:0a:f7:ec:06:b0:8b:50:ce:5a:39:09:fb:ec:fd: 03:e6:97:30:78:f4:d0:49:d4:a7:18:db:14:0e:2a: 2e:ab:47:59:21:5a:93:f2:e5:47:95:d7:d4:96:1e: cc:77:45:40:aa:2e:76:3c:42:7e:8c:10:56:ee:be: 59:a3:20:24:0f:ed:25:e8:60:4c:c3:74:4c:b2:2b: 08:c5:f4:33:87:5e:59:41:f1:7b:1f:de:6e:88:1a: 73:b2:36:dd:6d:8b:6f:1b:61:e3:58:71:64:6f:0d: 39:63:6d:1d:4d:d8:51:6d:c2:ab:bf:90:b1:40:5e: 48:65:bd:5f:84:05:37:ac:a5:68:ed:d5:a4:82:f5: a4:cc:bf:de:ec:fc:b0:03:84:2d:6f:4a:9f:53:db: 4b:d7:5f:02:96:70:a2:49:f6:02:f0:60:d0:32:be: 8e:40:26:3e:2d:a1:5a:26:25:8d:d2:a6:cc:21:07: 7d:fc:0a:8d:17:49:30:74:20:bc:f9:32:cd:ff:fe: f6:c5:be:38:e9:40:cb:ce:c8:49:3d:70:c8:a6:da: e0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AD:BB:59:F5:EA:81:18:0F:39:40:32:37:DD:E6:24:9F:4A:E4:0A X509v3 Authority Key Identifier: keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:da:f9:4b:1d:c8:90:f4:42:c4:d6:35:f4:eb:2e:13:86:01: b4:ed:82:88:9e:cf:98:53:74:69:d0:1d:1c:c4:31:c5:18:b5: e1:00:3f:cd:d2:8e:86:96:35:1a:5e:8b:6e:43:e6:70:98:ed: ad:af:31:1b:ba:63:bc:26:c2:72:fa:07:04:bd:5e:0c:af:fa: 18:53:48:75:89:0b:fa:b3:74:fc:22:61:9d:2e:c1:88:c8:ee: ba:87:cf:d5:e0:70:62:df:e6:76:2b:bf:af:34:80:d5:28:4d: 5e:f4:64:4a:d9:75:53:46:cd:1e:81:1d:9d:81:4d:50:0a:a2: d7:4f:1b:7d:32:7e:35:8b:e3:64:d5:be:53:07:2a:66:2e:ae: 53:e5:60:9f:d0:21:8f:d0:1f:63:e3:3e:5c:5c:6c:ff:eb:a9: 5e:61:6d:82:38:49:3d:d0:18:95:cb:11:42:92:d0:59:10:41: 2f:a1:23:61:c4:a9:1b:ee:53:fa:1b:f4:3c:fb:17:b5:34:5b: e5:4e:10:10:fe:fa:94:dd:04:6b:96:10:ba:1c:57:5b:e9:27: 41:a5:85:43:7d:0f:02:58:33:1d:bf:c9:fa:96:e6:67:f8:08: 3a:63:ab:c9:81:96:e9:08:3c:fb:08:b3:87:20:67:51:2d:ec: d7:16:50:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw RjcyODdDOUEwHhcNMjUwNjEyMTkwODI5WhcNMjUwNjE5MTkwODI5WjAYMRYwFAYD VQQDEw02ODRiMjVhZC1hNjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y/CT/nC4yry+m6Dnlrb6nuzEYahB9ghPM4aTKrW3tVYBpgyqtxoCgEgV3H8 CvfsBrCLUM5aOQn77P0D5pcwePTQSdSnGNsUDiouq0dZIVqT8uVHldfUlh7Md0VA qi52PEJ+jBBW7r5ZoyAkD+0l6GBMw3RMsisIxfQzh15ZQfF7H95uiBpzsjbdbYtv G2HjWHFkbw05Y20dTdhRbcKrv5CxQF5IZb1fhAU3rKVo7dWkgvWkzL/e7PywA4Qt b0qfU9tL118ClnCiSfYC8GDQMr6OQCY+LaFaJiWN0qbMIQd9/AqNF0kwdCC8+TLN //72xb446UDLzshJPXDIptrgzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMetu1n1 6oEYDzlAMjfd5iSfSuQKMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1 QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH LXEzSkl6aUxtR1lQY29mSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq2vlLHciQ9ELE1jX06y4ThgG07YKIns+YU3Rp0B0cxDHFGLXhAD/N 0o6GljUaXotuQ+ZwmO2trzEbumO8JsJy+gcEvV4Mr/oYU0h1iQv6s3T8ImGdLsGI yO66h8/V4HBi3+Z2K7+vNIDVKE1e9GRK2XVTRs0egR2dgU1QCqLXTxt9Mn41i+Nk 1b5TBypmLq5T5WCf0CGP0B9j4z5cXGz/66leYW2COEk90BiVyxFCktBZEEEvoSNh xKkb7lP6G/Q8+xe1NFvlThAQ/vqU3QRrlhC6HFdb6SdBpYVDfQ8CWDMdv8n6luZn +Ag6Y6vJgZbpCDz7CLOHIGdRLezXFlBg -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:27 2025 by rpki-client