$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: GRpZubdRJytNK9rKEKzuFqZ452gBUypVnWBtno1+Qyk= Subject key identifier: E4:0C:44:9D:3E:FC:70:31:05:96:B4:87:E0:1C:D5:F8:57:33:F3:DE Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 01E8 Signing time: Thu 19 Jun 2025 02:07:08 +0000 Manifest this update: Thu 19 Jun 2025 02:07:07 +0000 Manifest next update: Thu 26 Jun 2025 02:07:07 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: 1T+4KJXjoEAqbCA3KXbFVwyjEWebG4uFYqwXmDzRiMQ=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Jun 19 02:07:07 2025 GMT Not After : Jun 26 02:07:07 2025 GMT Subject: CN=685370cc-3698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:57:b5:92:be:8e:56:8e:d2:2c:59:f1:cb: 9c:b3:c5:16:ce:66:50:de:86:ad:d0:b8:85:c5:2a: 3d:79:ef:7c:1e:66:d3:ef:5e:1d:0f:76:3d:d6:15: b5:e1:0f:0a:ae:01:b7:80:e1:53:fb:ea:a2:7b:0d: 01:8d:85:72:42:7e:54:b9:a9:d5:7a:43:dd:57:ff: 2d:b6:0c:e2:e0:ba:97:79:74:98:2f:ad:88:f0:a9: 2e:df:ab:c1:dc:49:dc:c1:ed:05:d9:fe:da:63:50: c2:ac:7a:8d:bf:ad:13:95:48:26:41:e6:f3:18:42: 4a:77:33:a6:40:cc:34:95:46:dd:5a:af:aa:c3:4d: e0:d9:fe:1b:77:d5:6a:29:76:2d:17:dd:11:36:80: ea:32:93:90:13:3b:22:13:69:a6:17:88:1a:86:13: 70:dd:fc:83:2a:dc:9d:13:1a:bb:d6:18:c0:70:ef: 15:07:a2:a0:96:93:07:85:e6:0c:e2:2b:e0:da:4e: ac:05:3d:f5:60:e6:7a:72:b6:9b:00:df:6a:2f:54: 82:c2:46:01:a0:92:bd:a4:09:5c:81:19:bb:c5:14: b9:7b:4e:4d:cd:1f:09:72:23:88:67:b1:a6:8f:83: b1:f1:09:cf:00:91:24:50:34:08:20:de:54:68:56: 99:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0C:44:9D:3E:FC:70:31:05:96:B4:87:E0:1C:D5:F8:57:33:F3:DE X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:33:a7:90:1a:0d:60:8d:74:84:d4:bf:3b:aa:33:38:ca:27: bd:7c:2e:3f:7a:2e:18:74:f8:b3:0f:b5:95:a1:23:93:d4:88: 20:dc:e9:9d:86:22:8b:3b:aa:82:41:86:b7:9b:a8:22:1e:d5: 43:00:2f:f9:4d:bb:35:ca:e7:50:2e:43:24:d7:1b:6e:ce:82: 45:db:ba:df:fd:b0:6f:1d:d2:65:90:29:d6:ed:65:74:19:1a: 1b:49:bf:91:09:b8:90:63:08:ad:d7:74:aa:53:3c:03:fc:4c: 80:d3:ad:8f:1d:06:67:3b:c8:31:79:ac:e2:0c:68:2e:63:b5: 01:10:5d:62:ec:3d:e8:b2:af:89:c0:ee:1f:80:6e:80:b6:6e: cd:04:a3:75:82:fe:7f:f7:3b:a7:0b:59:fb:b2:23:f8:09:41: 27:24:bb:b4:95:fa:69:b4:4d:08:23:df:23:8b:e3:cb:d2:82: 50:0c:5a:5b:07:e9:5e:61:b0:c5:07:62:a7:86:dc:b9:21:59: 39:fc:89:0e:fd:14:7f:e8:2b:43:e4:db:d9:50:bf:1d:70:4c: 3e:b3:5b:48:1e:b6:54:66:ba:98:21:cb:af:70:5b:ca:41:c9: c7:47:04:89:9d:ad:c3:53:98:75:0d:be:c7:b2:3c:00:ad:fb: 31:cc:6f:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUwNjE5MDIwNzA3WhcNMjUwNjI2MDIwNzA3WjAYMRYwFAYD VQQDEw02ODUzNzBjYy0zNjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBdXtZK+jlaO0ixZ8cucs8UWzmZQ3oat0LiFxSo9ee98HmbT714dD3Y91hW1 4Q8KrgG3gOFT++qiew0BjYVyQn5UuanVekPdV/8ttgzi4LqXeXSYL62I8Kku36vB 3Encwe0F2f7aY1DCrHqNv60TlUgmQebzGEJKdzOmQMw0lUbdWq+qw03g2f4bd9Vq KXYtF90RNoDqMpOQEzsiE2mmF4gahhNw3fyDKtydExq71hjAcO8VB6KglpMHheYM 4ivg2k6sBT31YOZ6crabAN9qL1SCwkYBoJK9pAlcgRm7xRS5e05NzR8JciOIZ7Gm j4Ox8QnPAJEkUDQIIN5UaFaZ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQMRJ0+ /HAxBZa0h+Ac1fhXM/PeMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoM6eQGg1gjXSE1L87qjM4yie9fC4/ei4YdPizD7WVoSOT1Igg3Omd hiKLO6qCQYa3m6giHtVDAC/5Tbs1yudQLkMk1xtuzoJF27rf/bBvHdJlkCnW7WV0 GRobSb+RCbiQYwit13SqUzwD/EyA062PHQZnO8gxeaziDGguY7UBEF1i7D3osq+J wO4fgG6Atm7NBKN1gv5/9zunC1n7siP4CUEnJLu0lfpptE0II98ji+PL0oJQDFpb B+leYbDFB2Knhty5IVk5/IkO/RR/6CtD5NvZUL8dcEw+s1tIHrZUZrqYIcuvcFvK QcnHRwSJna3DU5h1Db7HsjwArfsxzG/9 -----END CERTIFICATE-----Generated at Thu Jun 19 05:19:52 2025 by rpki-client