$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: 25m8wJoTktaY1kIc8MsShxycRpbmhiZlCoypavVDObw= Subject key identifier: 10:12:0D:0F:DD:D5:52:0E:A0:9F:30:1F:91:DD:91:98:DE:FB:20:BF Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 217A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 2171 Signing time: Sat 14 Jun 2025 15:52:59 +0000 Manifest this update: Sat 14 Jun 2025 15:52:59 +0000 Manifest next update: Sat 21 Jun 2025 15:52:59 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: /svV1B5fYenhCh9E3HS/azUR/5VP/OWSnhUfFCuV0Cg=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: Kqxe3AlQssfHaUaGQ94xh+g433EOzW+NAhxS/kOyvHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8570 (0x217a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD, serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Jun 14 15:52:59 2025 GMT Not After : Jun 21 15:52:59 2025 GMT Subject: CN=684d9adb-1f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:0b:b0:27:a4:48:93:2c:95:6f:a0:08:03: 2f:c8:d8:d6:dc:0e:1a:61:57:75:a2:49:3b:87:83: 1f:66:b5:0d:64:53:66:d4:c2:fe:37:a5:90:f0:c8: fb:a6:83:38:b8:10:fa:c0:07:c6:aa:d0:05:7d:28: 48:4c:b0:87:52:f9:e9:06:03:cf:6b:32:56:03:7d: 0c:a4:d3:7f:8a:5f:ce:0a:0b:63:06:61:c8:85:30: 56:4c:92:0b:a1:7b:cc:59:a8:65:71:2d:10:44:7e: ba:47:8f:2a:a7:4e:c5:27:0d:50:7d:e3:b5:c8:10: 5f:e0:8a:2b:de:ce:bc:96:40:2b:1a:c5:2a:3b:81: d4:e7:55:e7:f6:7f:5a:6d:f9:2b:96:87:59:a2:ab: 50:e4:e9:22:6e:28:d8:68:c7:df:1d:dc:7e:78:d3: 15:60:1e:de:13:35:3f:26:55:a1:3c:17:f7:7b:9a: 03:14:14:94:8a:8e:b2:11:c8:3d:d9:19:61:ad:d8: 22:5d:9f:4e:2f:37:f2:2d:65:cb:d2:06:1d:85:16: 13:07:ee:10:8d:72:70:c9:23:68:20:b8:a1:83:72: 86:cb:d1:a1:01:a8:af:d2:f8:29:d2:99:1c:85:5e: e1:d7:4e:72:32:e6:c1:7a:5c:ce:ad:70:73:4a:d9: 89:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:12:0D:0F:DD:D5:52:0E:A0:9F:30:1F:91:DD:91:98:DE:FB:20:BF X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:4d:4a:d8:61:97:27:d2:fa:ad:d4:f5:3e:63:41:a0:cc:86: 8a:63:1a:c0:d4:73:72:f1:65:5f:67:55:62:6b:84:0e:f0:ad: c5:ee:ac:12:12:dd:d7:1e:2d:b8:dd:7c:3b:93:cb:28:7c:c5: 3b:1b:b4:9a:85:c9:1a:64:0e:1d:c4:3e:94:d7:e2:db:a8:9a: eb:6c:51:53:b0:c7:58:aa:0d:35:48:6d:15:44:8d:7e:cc:c4: 49:49:21:a6:e2:51:ad:18:f5:92:74:c3:bd:91:77:75:9b:96: 95:71:1d:75:b9:79:f0:8f:bd:f8:26:da:82:b6:22:33:7f:52: 35:9c:38:bd:2c:18:cf:fb:fb:06:20:f0:73:f4:26:48:f3:3c: 7b:51:8c:9b:13:20:20:bb:2b:aa:33:df:b4:26:a1:5f:3e:40: 09:3a:7f:3a:60:7e:3a:48:7c:d7:c3:fb:89:0a:51:2e:e6:7f: 19:16:20:6b:1b:e5:e0:ee:1d:f8:ed:3a:3f:00:cc:c5:8a:d8: 88:1b:c3:40:4c:80:7a:0c:9e:a3:ee:41:39:b4:11:83:2a:90: c3:15:99:02:86:f4:08:1a:ce:5b:97:64:79:51:7a:50:27:c0: 08:85:1a:5e:4a:5b:2a:93:bc:2b:1d:d6:91:95:00:76:77:76: 95:1d:9d:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjUwNjE0MTU1MjU5WhcNMjUwNjIxMTU1MjU5WjAYMRYwFAYD VQQDEw02ODRkOWFkYi0xZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZULsCekSJMslW+gCAMvyNjW3A4aYVd1okk7h4MfZrUNZFNm1ML+N6WQ8Mj7 poM4uBD6wAfGqtAFfShITLCHUvnpBgPPazJWA30MpNN/il/OCgtjBmHIhTBWTJIL oXvMWahlcS0QRH66R48qp07FJw1QfeO1yBBf4Ior3s68lkArGsUqO4HU51Xn9n9a bfkrlodZoqtQ5OkibijYaMffHdx+eNMVYB7eEzU/JlWhPBf3e5oDFBSUio6yEcg9 2RlhrdgiXZ9OLzfyLWXL0gYdhRYTB+4QjXJwySNoILihg3KGy9GhAaiv0vgp0pkc hV7h105yMubBelzOrXBzStmJkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBASDQ/d 1VIOoJ8wH5HdkZje+yC/MB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDoTUrYYZcn0vqt1PU+Y0GgzIaKYxrA1HNy8WVfZ1Via4QO8K3F7qwS Et3XHi243Xw7k8sofMU7G7SahckaZA4dxD6U1+LbqJrrbFFTsMdYqg01SG0VRI1+ zMRJSSGm4lGtGPWSdMO9kXd1m5aVcR11uXnwj734JtqCtiIzf1I1nDi9LBjP+/sG IPBz9CZI8zx7UYybEyAguyuqM9+0JqFfPkAJOn86YH46SHzXw/uJClEu5n8ZFiBr G+Xg7h347To/AMzFitiIG8NATIB6DJ6j7kE5tBGDKpDDFZkChvQIGs5bl2R5UXpQ J8AIhRpeSlsqk7wrHdaRlQB2d3aVHZ34 -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:04 2025 by rpki-client