$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft File: e8dWLzeFS9JjniQQ1nPld8v7MR8.mft (raw, json) Hash identifier: 2/DkNQcXkvwqc03NMRosMZTjfbo2JsZd6h+oQrxSk5Q= Subject key identifier: 3A:A1:6E:E0:93:93:C0:F7:37:7F:5D:32:85:7D:57:91:B8:A8:A8:DC Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F Certificate issuer: /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft Manifest number: 42 Signing time: Fri 13 Jun 2025 06:25:34 +0000 Manifest this update: Fri 13 Jun 2025 06:25:34 +0000 Manifest next update: Fri 20 Jun 2025 06:25:34 +0000 Files and hashes: 1: e8dWLzeFS9JjniQQ1nPld8v7MR8.crl (hash: 43UIQnILJLJqZRrAYCZxrkOXPXcqumYdPGEbkSiIbVI=) 2: C6D4BDF8ECFC11EF9447031DC4F9AE02.roa (hash: vKvGvc7f1ooIQwok9o5vzvjlKuAVRyu9TkNTlmBt1ZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Validity Not Before: Jun 13 06:25:34 2025 GMT Not After : Jun 20 06:25:34 2025 GMT Subject: CN=684bc45e-af7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:de:18:e3:1c:ad:c1:ad:56:18:c1:8c:7a: ae:ad:7e:0b:df:c0:8f:4e:23:7f:b3:12:cf:06:3a: c0:5d:82:f7:f6:43:ac:7a:07:4a:d5:05:4e:79:4f: 6a:2e:eb:a0:dc:e6:96:04:09:7f:0d:61:d8:f6:03: 94:3f:43:9c:da:54:50:53:03:13:a8:2b:9f:88:1a: 80:4d:e2:c4:db:19:21:4c:a2:58:06:f4:eb:6d:66: 93:32:ee:49:cb:82:a3:21:a4:64:ef:97:f4:69:a6: b3:f8:2a:36:29:13:92:38:61:b5:01:9c:73:57:29: c9:1f:4a:84:11:99:4e:80:96:87:11:ed:86:95:3f: f1:3f:bd:a6:49:4f:fb:c9:66:3b:4c:3b:4d:df:a8: c1:71:48:d5:33:09:f7:ba:38:d5:31:e2:b4:2a:06: 1b:af:49:9f:6d:c2:28:a7:d8:c5:47:07:ec:79:8e: 51:1e:69:ab:70:e2:63:83:9d:16:64:7d:4d:a1:67: d0:06:2b:d5:00:fe:85:fd:ba:17:55:86:98:67:4a: 18:b7:10:bd:88:87:b8:82:a8:0b:87:6c:7d:0c:1a: 92:2d:db:a8:06:50:f6:85:7e:fa:b4:12:ad:da:de: 70:7b:56:81:b8:d8:f4:b1:e2:95:e2:86:95:33:ba: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A1:6E:E0:93:93:C0:F7:37:7F:5D:32:85:7D:57:91:B8:A8:A8:DC X509v3 Authority Key Identifier: keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8f:9f:f2:2b:10:30:39:b1:65:bc:72:f9:82:48:f4:ee:fb: 14:ba:bb:7d:05:87:94:da:1f:2a:b2:ea:17:b1:97:f8:72:a5: e3:b1:df:8f:02:8d:43:ab:64:56:89:fa:e8:4c:2f:32:3d:7f: 08:ce:cb:80:f4:9f:44:dd:50:34:d8:99:76:aa:73:a6:e4:1f: 5c:9d:53:27:a7:70:44:53:6b:ea:4f:f3:a5:2d:57:e5:04:77: b6:6d:6f:10:bd:fa:a9:96:f4:76:36:da:ab:33:94:e2:4e:5d: 4c:66:6a:3b:40:0c:74:61:d4:c1:af:93:6e:19:55:dd:f8:be: fc:4c:52:ea:d8:dc:4e:13:35:52:e2:b9:1c:ab:7a:39:5b:6d: af:6b:a0:ae:fe:14:67:08:76:7a:39:79:3a:21:b4:03:67:cb: 94:a8:31:db:7e:17:4b:d9:11:b0:b8:55:33:95:24:a6:06:0c: c0:3c:85:1b:c3:4f:17:aa:79:9c:1b:7e:71:80:a9:71:ef:ba: 20:02:25:f4:ca:3b:40:18:c2:d1:ab:67:d4:30:d0:42:dd:f5: 6e:17:fd:5e:d6:28:7d:ec:7f:a4:13:16:2f:56:ca:5d:53:7c: bf:33:fb:92:7a:e7:38:12:61:99:84:3a:25:a5:14:34:18:f5: 0c:8e:33:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzZDMjExMC8GA1UEBRMoN0JDNzU2MkYzNzg1NEJEMjYzOUUyNDEwRDY3M0U1NzdD QkZCMzExRjAeFw0yNTA2MTMwNjI1MzRaFw0yNTA2MjAwNjI1MzRaMBgxFjAUBgNV BAMTDTY4NGJjNDVlLWFmN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7Yd4Y4xytwa1WGMGMeq6tfgvfwI9OI3+zEs8GOsBdgvf2Q6x6B0rVBU55T2ou 66Dc5pYECX8NYdj2A5Q/Q5zaVFBTAxOoK5+IGoBN4sTbGSFMolgG9OttZpMy7knL gqMhpGTvl/RpprP4KjYpE5I4YbUBnHNXKckfSoQRmU6AlocR7YaVP/E/vaZJT/vJ ZjtMO03fqMFxSNUzCfe6ONUx4rQqBhuvSZ9twiin2MVHB+x5jlEeaatw4mODnRZk fU2hZ9AGK9UA/oX9uhdVhphnShi3EL2Ih7iCqAuHbH0MGpIt26gGUPaFfvq0Eq3a 3nB7VoG42PSx4pXihpUzuja5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOqFu4JOT wPc3f10yhX1XkbioqNwwHwYDVR0jBBgwFoAUe8dWLzeFS9JjniQQ1nPld8v7MR8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzNkMyLzUwRkI5MDcwRUMz OTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlKam5pUVExblBsZDh2N01S OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZThkV0x6ZUZTOUpqbmlRUTFuUGxkOHY3TVI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz NkMyLzUwRkI5MDcwRUMzOTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlK am5pUVExblBsZDh2N01SOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmPn/IrEDA5sWW8cvmCSPTu+xS6u30Fh5TaHyqy6hexl/hypeOx348C jUOrZFaJ+uhMLzI9fwjOy4D0n0TdUDTYmXaqc6bkH1ydUyencERTa+pP86UtV+UE d7ZtbxC9+qmW9HY22qszlOJOXUxmajtADHRh1MGvk24ZVd34vvxMUurY3E4TNVLi uRyrejlbba9roK7+FGcIdno5eTohtANny5SoMdt+F0vZEbC4VTOVJKYGDMA8hRvD TxeqeZwbfnGAqXHvuiACJfTKO0AYwtGrZ9Qw0ELd9W4X/V7WKH3sf6QTFi9Wyl1T fL8z+5J65zgSYZmEOiWlFDQY9QyOM+o= -----END CERTIFICATE-----Generated at Sun Jun 15 08:04:33 2025 by rpki-client