$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft File: _M8p58OjX6g2yQkOaCx4DQI56VU.mft (raw, json) Hash identifier: e3yShPEhlMwDrnApxTq+2yDx0pK8jUn1RFSnu7GMQYY= Subject key identifier: B3:93:ED:53:5F:87:72:1E:F9:A7:83:4B:63:E5:2C:7F:47:9B:F3:D1 Authority key identifier: FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 Certificate issuer: /CN=A91C0243/serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Certificate serial: 078F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft Manifest number: 078E Signing time: Sat 14 Jun 2025 21:06:56 +0000 Manifest this update: Sat 14 Jun 2025 21:06:55 +0000 Manifest next update: Sat 21 Jun 2025 21:06:55 +0000 Files and hashes: 1: _M8p58OjX6g2yQkOaCx4DQI56VU.crl (hash: 3X49/SoiaxSIY1NQXTGefs+97pUCNC+hK4MF8QleKKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1935 (0x78f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0243, serialNumber=FCCF29E7C3A35FA836C9090E682C780D0239E955 Validity Not Before: Jun 14 21:06:55 2025 GMT Not After : Jun 21 21:06:55 2025 GMT Subject: CN=684de470-ef23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d7:71:37:35:fe:3e:5f:8d:e0:6a:88:69:80: 24:7a:15:1f:5e:62:e3:47:b3:e0:c5:7e:bc:9c:49: ff:c5:e2:3c:98:1a:28:eb:2e:48:23:fb:16:40:34: cc:3f:4e:62:e2:79:af:6e:6f:90:67:ad:6e:48:99: b1:c7:66:78:0d:38:be:ed:82:6e:31:ae:7f:e8:86: 5c:90:5a:a2:4c:ef:06:60:b6:ec:7f:df:f1:e4:b5: 71:eb:d6:e5:52:8f:8e:59:a2:c4:7e:29:7b:08:ee: ec:dc:19:c2:0c:e2:61:c3:2c:87:3c:48:06:2c:b0: 04:3f:3c:63:19:22:ce:b3:67:1a:9c:63:87:b2:ba: b8:26:6b:be:aa:86:cc:74:f2:04:9a:37:f7:38:32: 69:3b:b1:1b:e6:ca:09:1c:33:1c:cf:10:eb:b2:a9: 4e:6d:47:bc:e6:eb:e1:8a:8b:4e:84:67:38:72:69: 07:94:01:c1:38:1b:d5:ce:dd:8e:75:e9:21:aa:89: fb:5e:ad:ac:24:cb:8c:45:6f:0e:a3:61:65:24:b9: bd:c8:37:79:aa:35:c5:53:9b:2d:96:28:a2:73:23: f1:2f:82:31:4b:a3:1a:6f:d9:80:fa:f2:01:9d:8d: c1:cf:97:33:f4:c7:f5:92:c3:81:11:aa:56:8f:bc: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:93:ED:53:5F:87:72:1E:F9:A7:83:4B:63:E5:2C:7F:47:9B:F3:D1 X509v3 Authority Key Identifier: keyid:FC:CF:29:E7:C3:A3:5F:A8:36:C9:09:0E:68:2C:78:0D:02:39:E9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_M8p58OjX6g2yQkOaCx4DQI56VU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0243/0166FF640D1C11EBB82F3531C4F9AE02/_M8p58OjX6g2yQkOaCx4DQI56VU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:bb:a4:c8:71:4a:5e:7a:97:d1:92:f3:f3:02:61:bc:34:0e: 00:8e:39:76:3e:33:45:c6:13:4f:d4:e3:e9:ba:bd:8d:22:38: f9:d8:7f:c0:7e:d1:fd:7e:6f:67:ec:06:fe:69:07:8c:11:d0: 20:22:99:48:e5:e2:01:4b:f0:6a:d8:ab:7b:5e:76:78:c9:da: 08:d7:b3:34:a5:79:ba:de:61:53:49:3a:6e:30:d4:87:81:34: 8b:16:0b:c0:eb:80:39:34:d1:c8:2d:9b:63:2f:20:f0:25:94: d1:ce:58:50:e9:59:37:65:29:74:7b:bf:40:0f:83:60:41:91: 3a:0c:00:88:c6:84:bd:32:25:6d:c0:1d:b3:8a:fa:e2:3d:88: 63:b7:bb:b8:60:a4:12:a6:49:7c:6c:06:6b:ce:55:60:ad:d8: 14:d7:b6:d2:e2:02:b1:b6:e4:d0:c9:a0:6a:ce:9e:83:31:b9: da:19:8e:51:ce:8e:34:bf:77:4a:33:02:1e:32:ef:fc:df:0e: 2d:3b:7c:61:53:d2:f3:60:b7:4b:ac:38:81:69:76:d5:85:7b: 46:78:65:f5:b0:e2:ca:fe:28:42:0c:11:13:84:a4:75:9b:21: 6e:b7:c7:37:41:26:81:a7:62:d2:0a:11:6b:d5:08:0a:df:64: c3:15:f7:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAyNDMxMTAvBgNVBAUTKEZDQ0YyOUU3QzNBMzVGQTgzNkM5MDkwRTY4MkM3ODBE MDIzOUU5NTUwHhcNMjUwNjE0MjEwNjU1WhcNMjUwNjIxMjEwNjU1WjAYMRYwFAYD VQQDEw02ODRkZTQ3MC1lZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ddxNzX+Pl+N4GqIaYAkehUfXmLjR7PgxX68nEn/xeI8mBoo6y5II/sWQDTM P05i4nmvbm+QZ61uSJmxx2Z4DTi+7YJuMa5/6IZckFqiTO8GYLbsf9/x5LVx69bl Uo+OWaLEfil7CO7s3BnCDOJhwyyHPEgGLLAEPzxjGSLOs2canGOHsrq4Jmu+qobM dPIEmjf3ODJpO7Eb5soJHDMczxDrsqlObUe85uvhiotOhGc4cmkHlAHBOBvVzt2O dekhqon7Xq2sJMuMRW8Oo2FlJLm9yDd5qjXFU5stliiicyPxL4IxS6Mab9mA+vIB nY3Bz5cz9Mf1ksOBEapWj7wFnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOT7VNf h3Ie+aeDS2PlLH9Hm/PRMB8GA1UdIwQYMBaAFPzPKefDo1+oNskJDmgseA0COelV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDI0My8wMTY2RkY2NDBE MUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2ZzJ5UWtPYUN4NERRSTU2 VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NOHA1OE9qWDZnMnlRa09hQ3g0RFFJNTZWVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDI0My8wMTY2RkY2NDBEMUMxMUVCQjgyRjM1MzFDNEY5QUUwMi9fTThwNThPalg2 ZzJ5UWtPYUN4NERRSTU2VlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEu6TIcUpeepfRkvPzAmG8NA4Ajjl2PjNFxhNP1OPpur2NIjj52H/A ftH9fm9n7Ab+aQeMEdAgIplI5eIBS/Bq2Kt7XnZ4ydoI17M0pXm63mFTSTpuMNSH gTSLFgvA64A5NNHILZtjLyDwJZTRzlhQ6Vk3ZSl0e79AD4NgQZE6DACIxoS9MiVt wB2zivriPYhjt7u4YKQSpkl8bAZrzlVgrdgU17bS4gKxtuTQyaBqzp6DMbnaGY5R zo40v3dKMwIeMu/83w4tO3xhU9LzYLdLrDiBaXbVhXtGeGX1sOLK/ihCDBEThKR1 myFut8c3QSaBp2LSChFr1QgK32TDFfeS -----END CERTIFICATE-----Generated at Sun Jun 15 08:40:43 2025 by rpki-client