$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: d+B4euw/2zxDcsJUDrAdMUkNlKstdRXcXIcavg0aOyU= Subject key identifier: D3:33:AD:00:BC:A2:AF:53:D7:B3:66:30:6E:38:5E:C5:B6:3D:15:3C Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: 74 Signing time: Sat 21 Jun 2025 05:56:29 +0000 Manifest this update: Sat 21 Jun 2025 05:56:29 +0000 Manifest next update: Sat 28 Jun 2025 05:56:29 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: Lfyh+kosP4eK7JSyZciuhOJZc2LEbbNYC0wWMlxuKNA=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Jun 21 05:56:29 2025 GMT Not After : Jun 28 05:56:29 2025 GMT Subject: CN=6856498d-302c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:a1:a0:eb:17:e1:8b:be:12:46:65:9b:d1: 3e:68:46:f3:e7:93:0f:d8:5c:62:3e:5a:9e:f5:29: e8:65:3d:88:65:58:92:44:a4:d4:a8:52:d1:f2:55: 83:ca:52:06:a1:eb:85:19:f4:5d:55:68:23:1f:71: 5d:d4:f9:dc:0d:64:87:9e:e0:36:f8:41:ff:d4:fe: a6:0c:0a:1f:de:30:7d:05:34:a1:db:9a:e3:69:d5: e7:90:a6:1a:6c:81:33:0a:93:e8:48:f8:f9:6c:d0: 57:0d:d0:17:30:81:37:09:e1:c6:77:a6:cb:47:57: 8b:12:da:ab:9c:15:bd:b9:87:7e:54:ce:f5:56:5e: aa:d8:42:2d:79:5d:05:1c:31:06:06:07:c7:21:3d: 85:d4:cf:bf:d2:6f:a1:56:19:54:53:65:a5:e4:26: d0:02:a6:29:14:52:d0:52:60:16:b2:7b:56:c2:4a: 58:cc:23:0f:1e:d4:66:e0:cb:ae:8f:72:af:69:bd: 49:22:5e:77:32:e9:66:f3:80:02:ab:05:e3:71:4b: 7f:52:7a:2d:6d:ef:56:88:88:0a:5e:e7:a5:c1:22: 10:ee:ad:69:7c:f0:b0:e1:11:09:d7:66:54:89:2c: ac:97:9c:92:9e:5b:75:10:15:2f:a4:52:5d:2a:ee: 89:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:33:AD:00:BC:A2:AF:53:D7:B3:66:30:6E:38:5E:C5:B6:3D:15:3C X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:f1:be:45:48:b1:96:bc:62:45:d4:d0:94:78:30:12:8b:47: 1d:a8:cd:e9:1f:13:81:f0:14:c9:5c:20:2e:96:20:b7:4b:9a: 40:31:c0:51:f0:19:46:e5:00:4e:06:e4:4a:e6:17:c8:b4:b2: ed:f4:82:b5:a1:7b:e8:0d:5f:62:cf:2b:8e:f7:c9:e5:2c:58: d4:22:6f:33:62:87:e2:79:06:ac:83:c6:96:bc:6a:44:05:ef: 42:2a:c6:78:ce:96:b1:3c:ac:c4:ab:8c:3c:90:1e:45:63:5c: aa:fd:e8:4a:9a:8f:fe:fb:d9:92:34:4d:69:ff:ac:54:70:23: 7a:3f:8c:8b:c4:ae:84:12:99:c5:55:1a:db:6a:98:72:fa:26: 09:a1:db:e3:bb:16:90:68:de:b0:da:63:e9:8c:e6:a7:94:d2: ca:f0:47:2d:44:fd:5b:63:38:96:99:97:11:00:d4:8a:5e:c2: 1a:a0:7c:94:81:b8:7b:b8:8c:a8:51:cb:89:0b:73:7a:b8:c9: 4e:6a:12:e1:0f:2c:6b:cf:ad:df:eb:e7:cd:d3:f4:97:95:40: 8e:3a:29:e0:ed:13:9d:43:92:78:23:e5:2c:e0:95:09:e7:ff: 43:7a:d2:77:4f:d4:aa:66:d4:45:41:b8:db:be:52:87:57:c3: 62:81:32:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoRjE1RDExNzkwQjBFNzUzNTc0MDY2MTFEQzU3MDU4RjY5 REM1NzhBMDAeFw0yNTA2MjEwNTU2MjlaFw0yNTA2MjgwNTU2MjlaMBgxFjAUBgNV BAMTDTY4NTY0OThkLTMwMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJJ6Gg6xfhi74SRmWb0T5oRvPnkw/YXGI+Wp71KehlPYhlWJJEpNSoUtHyVYPK Ugah64UZ9F1VaCMfcV3U+dwNZIee4Db4Qf/U/qYMCh/eMH0FNKHbmuNp1eeQphps gTMKk+hI+Pls0FcN0BcwgTcJ4cZ3pstHV4sS2qucFb25h35UzvVWXqrYQi15XQUc MQYGB8chPYXUz7/Sb6FWGVRTZaXkJtACpikUUtBSYBaye1bCSljMIw8e1Gbgy66P cq9pvUkiXncy6WbzgAKrBeNxS39Sei1t71aIiApe56XBIhDurWl88LDhEQnXZlSJ LKyXnJKeW3UQFS+kUl0q7oldAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0zOtALyi r1PXs2YwbjhexbY9FTwwHwYDVR0jBBgwFoAU8V0ReQsOdTV0BmEdxXBY9p3FeKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFYwUmVRc09kVFYwQm1FZHhYQlk5cDNGZUtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUJDL0NCODgyRTdFQTcwNzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRW MEJtRWR4WEJZOXAzRmVLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALzxvkVIsZa8YkXU0JR4MBKLRx2ozekfE4HwFMlcIC6WILdLmkAxwFHw GUblAE4G5ErmF8i0su30grWhe+gNX2LPK473yeUsWNQibzNih+J5BqyDxpa8akQF 70IqxnjOlrE8rMSrjDyQHkVjXKr96Eqaj/772ZI0TWn/rFRwI3o/jIvEroQSmcVV GttqmHL6Jgmh2+O7FpBo3rDaY+mM5qeU0srwRy1E/VtjOJaZlxEA1IpewhqgfJSB uHu4jKhRy4kLc3q4yU5qEuEPLGvPrd/r583T9JeVQI46KeDtE51Dkngj5SzglQnn /0N60ndP1Kpm1EVBuNu+UodXw2KBMj0= -----END CERTIFICATE-----Generated at Sat Jun 21 15:47:33 2025 by rpki-client