$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: RGCDL6siPSiVxuVroeLbSO6fDLXCXVovb8esbCP6GDY= Subject key identifier: 73:E9:42:54:6A:79:4F:7A:88:8C:A3:EA:30:A7:C3:A8:87:63:BB:B2 Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 0774 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0C63 Signing time: Sat 14 Jun 2025 21:18:17 +0000 Manifest this update: Sat 14 Jun 2025 21:18:16 +0000 Manifest next update: Sat 21 Jun 2025 21:18:16 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: 3UeFb4JWm6aCtDqvPCpToRYrQExsSaf1unU+Es8HhP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1908 (0x774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Jun 14 21:18:16 2025 GMT Not After : Jun 21 21:18:16 2025 GMT Subject: CN=684de719-6157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:67:48:8e:95:5d:5c:9d:57:ff:76:f2:1f: 11:f0:ce:d3:f5:4c:bb:d6:d6:41:b8:b4:29:11:e3: 81:ee:7b:b8:ea:f9:79:35:1a:3f:dd:ca:4b:26:38: 05:a6:c7:26:8c:b6:58:83:ab:1f:60:f7:27:00:81: 62:3a:17:28:a8:28:4c:39:5a:14:40:28:49:17:7f: f3:3e:f0:e6:14:93:39:6b:88:e8:e6:83:40:c0:43: fa:10:b2:c8:1b:66:f6:9f:f1:1e:bf:e1:d3:a1:3b: 6f:53:a5:a3:ed:95:c3:8c:a8:14:34:ab:e9:9b:1f: 05:63:5f:13:94:88:4f:0d:0e:ef:67:57:41:87:f7: 37:ac:d2:f4:c0:24:e6:74:b9:21:40:a8:a9:e8:96: 69:1b:06:a6:9b:ab:5b:9e:b7:b5:95:08:9d:b3:c3: be:2b:00:f1:34:4a:c8:6a:e5:11:4b:c4:81:b7:2f: 1c:a0:3f:a4:28:2b:b3:94:00:43:8b:b2:77:75:9b: 2e:be:88:14:5e:f6:ab:e9:0f:64:25:0d:c7:f1:c6: 84:92:04:65:1d:8d:b6:42:81:a9:ea:ec:af:2c:b5: 7a:8a:2c:7c:38:f5:55:b8:17:f0:32:22:eb:3d:98: a2:9b:f0:40:14:2d:e4:75:a9:3b:49:d1:58:49:ca: 43:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E9:42:54:6A:79:4F:7A:88:8C:A3:EA:30:A7:C3:A8:87:63:BB:B2 X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:fc:bd:48:a7:1e:f3:59:2c:f1:48:0b:65:76:47:0c:a7:f7: 3e:c4:f6:75:63:35:26:9e:bc:6d:84:b8:12:02:a1:c5:55:d2: 56:27:f4:6b:21:7e:86:f5:b8:7d:5a:c1:4b:c9:63:31:6e:62: 8d:aa:23:81:1d:a6:1b:f3:a1:2c:6f:b2:bc:12:a5:42:47:77: 89:e2:4c:7b:6d:4e:ec:a9:19:68:75:18:37:55:95:ea:3c:a9: 44:dd:37:dd:57:06:f1:be:f9:dd:58:a4:55:92:d2:fb:3f:43: f4:21:9c:c4:ce:47:05:47:7f:97:62:7a:f4:44:ce:3c:ff:fd: 85:e8:b2:86:70:26:a9:52:a2:75:d6:5e:fc:41:c6:28:c0:fd: 3f:f3:bd:ad:07:54:c5:75:ab:ff:db:89:ce:02:4e:b4:27:3a: 2d:31:ef:f1:fb:23:26:e5:fa:0c:77:dc:ec:db:16:07:35:0a: 90:ad:13:7f:de:7c:9a:ef:8d:48:1b:85:09:be:41:4c:d4:88: 15:bc:e5:3a:55:84:2b:93:c2:c1:2d:12:77:10:1f:f2:73:76: 27:04:da:39:3c:34:f5:d1:3e:4d:26:af:fd:05:8f:66:7f:30: 56:8e:03:68:40:86:fc:db:06:78:a7:8d:ce:a1:4d:f6:6b:9a: bd:a8:c4:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUwNjE0MjExODE2WhcNMjUwNjIxMjExODE2WjAYMRYwFAYD VQQDEw02ODRkZTcxOS02MTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArolnSI6VXVydV/928h8R8M7T9Uy71tZBuLQpEeOB7nu46vl5NRo/3cpLJjgF pscmjLZYg6sfYPcnAIFiOhcoqChMOVoUQChJF3/zPvDmFJM5a4jo5oNAwEP6ELLI G2b2n/Eev+HToTtvU6Wj7ZXDjKgUNKvpmx8FY18TlIhPDQ7vZ1dBh/c3rNL0wCTm dLkhQKip6JZpGwamm6tbnre1lQids8O+KwDxNErIauURS8SBty8coD+kKCuzlABD i7J3dZsuvogUXvar6Q9kJQ3H8caEkgRlHY22QoGp6uyvLLV6iix8OPVVuBfwMiLr PZiim/BAFC3kdak7SdFYScpDlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPpQlRq eU96iIyj6jCnw6iHY7uyMB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU/L1Ipx7zWSzxSAtldkcMp/c+xPZ1YzUmnrxthLgSAqHFVdJWJ/Rr IX6G9bh9WsFLyWMxbmKNqiOBHaYb86Esb7K8EqVCR3eJ4kx7bU7sqRlodRg3VZXq PKlE3TfdVwbxvvndWKRVktL7P0P0IZzEzkcFR3+XYnr0RM48//2F6LKGcCapUqJ1 1l78QcYowP0/872tB1TFdav/24nOAk60JzotMe/x+yMm5foMd9zs2xYHNQqQrRN/ 3nya741IG4UJvkFM1IgVvOU6VYQrk8LBLRJ3EB/yc3YnBNo5PDT10T5NJq/9BY9m fzBWjgNoQIb82wZ4p43OoU32a5q9qMTv -----END CERTIFICATE-----Generated at Sun Jun 15 05:21:57 2025 by rpki-client