$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json) Hash identifier: tZbTcoUZFZNkKOB1POlLT10avuOeKRk1Tfpv+GmZrd4= Subject key identifier: 0D:5D:60:07:0F:6A:30:2E:39:F5:06:C8:31:E4:66:5A:2F:12:A4:2D Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft Manifest number: E7 Signing time: Tue 17 Jun 2025 04:25:17 +0000 Manifest this update: Tue 17 Jun 2025 04:25:17 +0000 Manifest next update: Tue 24 Jun 2025 04:25:17 +0000 Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: OCT15at/ZXVKldx9rf2UwMiKKrPsLPA0WWTWU/cgS8A=) 2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: Vp6oIV4Kwe3FgHjDClftctReHYiAIs5p4BPX7qetipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Validity Not Before: Jun 17 04:25:17 2025 GMT Not After : Jun 24 04:25:17 2025 GMT Subject: CN=6850ee2d-9011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:23:87:77:64:08:be:f1:6e:37:b1:5a:0c:7e: 01:7a:85:76:56:bb:a6:cb:f4:11:4a:34:64:ef:34: 43:a3:7e:3a:9e:06:9a:36:a3:98:fa:9c:a3:a0:2a: a0:c0:e2:e0:eb:ab:18:d5:34:51:73:6c:b5:42:36: 78:b3:07:0b:15:ce:84:9f:29:8d:14:55:5f:b7:8c: e6:0b:b5:29:90:03:2d:f7:f7:11:60:3c:6d:e8:92: 2f:32:9f:7b:a9:75:2d:99:0f:09:65:b5:65:de:b1: 04:0f:dd:f8:4b:9b:ec:2a:e1:e4:0f:5a:2b:e9:3b: 43:87:b9:3d:01:26:2a:99:98:aa:96:bd:da:ac:09: f9:6a:4b:ca:77:45:46:15:39:4f:c5:c3:92:1a:a0: e4:84:6d:b9:6e:30:2b:90:04:43:53:70:f3:fb:ec: 2e:8f:5d:91:40:55:fe:80:0b:5d:b9:c2:d9:4c:4a: 63:8f:91:7e:fc:18:e5:d8:59:32:43:58:74:db:ae: 6c:b8:44:ae:12:b7:80:12:e7:06:97:5f:e3:8a:92: 14:44:60:33:ea:d2:75:01:2e:14:7f:cc:d5:52:3c: 83:af:7f:78:ff:9e:05:86:77:19:58:71:b9:b9:c7: 6f:c7:58:7b:86:3a:de:96:38:86:59:e9:c5:04:26: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5D:60:07:0F:6A:30:2E:39:F5:06:C8:31:E4:66:5A:2F:12:A4:2D X509v3 Authority Key Identifier: keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ef:ea:5e:45:ec:89:8b:85:87:49:5f:5f:50:8d:06:ef:53: ff:84:eb:bb:ca:3b:71:5d:89:c0:41:f1:92:bb:20:3b:11:9f: 62:f8:ae:cf:d1:dd:f5:8a:38:3a:79:de:44:fe:18:24:34:24: 83:98:a9:17:c1:fe:79:84:76:48:16:02:b3:5e:fc:28:a3:d3: d2:cb:bc:69:84:22:13:4b:38:a5:c5:eb:04:65:a3:5d:50:d8: 16:02:09:47:5d:63:73:49:33:f4:2c:2c:64:c6:9e:87:59:93: 0a:fd:ce:c9:71:15:d4:6f:e9:1d:28:23:12:e7:7c:0a:9e:02: 48:ae:cf:c1:bb:f6:2d:c0:a8:ce:90:90:e0:2e:e9:a7:91:5d: b9:46:b8:81:c5:9b:9d:39:82:2e:13:3a:ab:14:37:58:44:4a: f9:d0:e9:2d:4e:07:6d:dd:fa:cc:a7:c5:55:d7:9f:1a:14:45: a0:22:6c:4a:ef:df:3a:fc:35:1f:17:ba:43:47:ac:97:45:cc: 45:64:68:24:f6:60:56:26:43:2c:74:e7:fc:16:c0:64:db:ce: f5:d5:54:da:6f:6d:f9:09:4c:aa:c0:1e:f4:1e:b2:26:1c:c4: 93:d3:1a:27:5a:cc:00:a8:8d:12:6d:06:ab:68:59:aa:d8:17: 23:b4:d7:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBM0ExMTAvBgNVBAUTKDgzRTRCQ0I3NjNCOENFRDAzNjUxOTBFNzI4MEYwQTZB MzRCMzVCNTEwHhcNMjUwNjE3MDQyNTE3WhcNMjUwNjI0MDQyNTE3WjAYMRYwFAYD VQQDEw02ODUwZWUyZC05MDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6iOHd2QIvvFuN7FaDH4BeoV2Vrumy/QRSjRk7zRDo346ngaaNqOY+pyjoCqg wOLg66sY1TRRc2y1QjZ4swcLFc6EnymNFFVft4zmC7UpkAMt9/cRYDxt6JIvMp97 qXUtmQ8JZbVl3rEED934S5vsKuHkD1or6TtDh7k9ASYqmZiqlr3arAn5akvKd0VG FTlPxcOSGqDkhG25bjArkARDU3Dz++wuj12RQFX+gAtducLZTEpjj5F+/Bjl2Fky Q1h0265suESuEreAEucGl1/jipIURGAz6tJ1AS4Uf8zVUjyDr394/54FhncZWHG5 ucdvx1h7hjreljiGWenFBCbi1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1dYAcP ajAuOfUGyDHkZlovEqQtMB8GA1UdIwQYMBaAFIPkvLdjuM7QNlGQ5ygPCmo0s1tR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEEzQS8xODE0RjM2NkVD QjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0QTJVWkRuS0E4S2FqU3pX MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctUzh0Mk80enRBMlVaRG5LQThLYWpTelcxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEEzQS8xODE0RjM2NkVDQjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0 QTJVWkRuS0E4S2FqU3pXMUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa7+peReyJi4WHSV9fUI0G71P/hOu7yjtxXYnAQfGSuyA7EZ9i+K7P 0d31ijg6ed5E/hgkNCSDmKkXwf55hHZIFgKzXvwoo9PSy7xphCITSzilxesEZaNd UNgWAglHXWNzSTP0LCxkxp6HWZMK/c7JcRXUb+kdKCMS53wKngJIrs/Bu/YtwKjO kJDgLumnkV25RriBxZudOYIuEzqrFDdYREr50OktTgdt3frMp8VV158aFEWgImxK 7986/DUfF7pDR6yXRcxFZGgk9mBWJkMsdOf8FsBk28711VTab235CUyqwB70HrIm HMST0xonWswAqI0SbQaraFmq2BcjtNeM -----END CERTIFICATE-----Generated at Tue Jun 17 20:24:46 2025 by rpki-client