$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft File: 8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json) Hash identifier: SV6q8tELf90YJsKygrTtaPkSvMa3m+yMdD8IwePTh9k= Subject key identifier: 52:4D:25:01:F6:60:52:DF:B1:3E:C3:4B:4F:55:4A:EA:6C:98:27:B6 Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Certificate serial: 06AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft Manifest number: 06A4 Signing time: Wed 18 Jun 2025 22:00:51 +0000 Manifest this update: Wed 18 Jun 2025 22:00:50 +0000 Manifest next update: Wed 25 Jun 2025 22:00:50 +0000 Files and hashes: 1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: 4hBAPwu/xuniDxk9ZU1quoW7U5Xohs9DSZGvVnUq1aA=) 2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: 52JrCnBm7L06RLcpZu8B4A+YSslnAZRmYTLK9Jex7Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1706 (0x6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Validity Not Before: Jun 18 22:00:50 2025 GMT Not After : Jun 25 22:00:50 2025 GMT Subject: CN=68533712-f518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:cc:2e:1b:1d:75:77:84:34:55:a2:14:3b: c7:8f:9a:14:0a:84:8e:2b:bc:91:9a:f0:ce:7a:85: 95:47:bb:9d:63:6e:dd:dc:99:bd:ab:bf:8d:55:96: 41:57:fe:bf:80:d0:fe:a4:21:65:a8:0f:db:3c:8d: 52:17:9e:36:c7:60:5a:3a:5f:c2:07:9a:6c:a4:34: 1a:49:9b:32:e9:60:2d:53:db:82:0c:57:d1:cc:d4: 54:fe:14:1b:e4:bf:f7:fd:64:71:7c:cf:ad:c6:ac: e7:9a:dd:f6:fa:4d:86:5a:5d:82:58:0d:8c:3e:dd: c2:9f:08:9c:d7:43:7b:b9:af:d7:85:b6:f6:28:7a: 11:42:ac:e0:c2:73:d5:81:f7:1f:ca:f5:6e:76:e7: 2b:25:77:b9:02:7a:92:3e:82:b6:51:3f:ec:e5:09: cb:75:86:67:2f:43:39:aa:73:b1:eb:05:6a:9c:c2: 30:27:78:4b:34:f7:96:6f:11:17:0f:26:6f:d7:9c: 7b:ef:38:73:6d:99:a8:a9:a4:05:ad:de:c0:02:65: 77:af:ee:fc:7a:b6:89:7b:0c:ea:ed:cf:1d:9d:cd: c6:16:bc:84:7c:7f:5a:65:26:f8:05:35:ca:d5:0b: 29:4c:dd:24:77:44:a2:0e:f5:74:a4:f1:6e:e6:ae: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4D:25:01:F6:60:52:DF:B1:3E:C3:4B:4F:55:4A:EA:6C:98:27:B6 X509v3 Authority Key Identifier: keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:71:ee:7a:8f:8c:ed:16:81:77:5b:2d:3a:63:e7:ec:f1:3b: c7:91:48:85:88:52:46:b4:c5:60:2d:94:ac:0c:be:7f:f0:39: 11:32:3a:3a:9c:34:c7:5a:37:e6:6a:4a:9f:51:35:dd:18:32: 58:49:5e:6a:f9:a8:11:27:cd:f1:05:4d:5a:8c:69:91:c5:bd: 08:3f:a1:21:a2:8c:9a:f0:af:87:97:a1:2e:5f:b2:18:e5:12: fc:da:0c:f7:d7:32:64:40:91:99:20:ec:a8:67:38:a2:6a:b4: 95:34:19:cd:9f:ec:ee:80:46:6f:5b:a8:71:03:4d:9e:d4:ed: 17:b7:e8:2e:80:0f:ff:e7:e4:7f:dc:80:79:e1:dd:28:a2:90: 14:f7:f2:19:2a:4c:23:51:51:cb:a5:f2:ea:84:bc:cc:9f:9f: 50:a7:08:9d:d4:d9:30:fc:dc:18:f3:99:09:2d:2b:7a:e9:4c: ae:bf:65:d3:53:63:94:4b:8a:33:50:5d:ad:81:50:43:e5:a7: 7f:d3:0a:f3:85:50:08:d6:4b:c3:86:cc:b7:13:fb:26:d7:36: 9c:03:a5:c3:b9:c4:dc:85:b0:53:5d:7c:22:e7:23:53:92:65: eb:8c:92:98:bf:8d:b4:28:93:d5:cd:4d:3c:76:46:b0:31:37: 6d:a1:bc:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MDUxMTAvBgNVBAUTKEYwNDY5MEJCMDNFMEQzOTYyQjQ4MDhFNEQwNkNCMjZB MzQ5MEU1MTYwHhcNMjUwNjE4MjIwMDUwWhcNMjUwNjI1MjIwMDUwWjAYMRYwFAYD VQQDEw02ODUzMzcxMi1mNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtHMLhsddXeENFWiFDvHj5oUCoSOK7yRmvDOeoWVR7udY27d3Jm9q7+NVZZB V/6/gND+pCFlqA/bPI1SF542x2BaOl/CB5pspDQaSZsy6WAtU9uCDFfRzNRU/hQb 5L/3/WRxfM+txqznmt32+k2GWl2CWA2MPt3Cnwic10N7ua/Xhbb2KHoRQqzgwnPV gfcfyvVuducrJXe5AnqSPoK2UT/s5QnLdYZnL0M5qnOx6wVqnMIwJ3hLNPeWbxEX DyZv15x77zhzbZmoqaQFrd7AAmV3r+78eraJewzq7c8dnc3GFryEfH9aZSb4BTXK 1QspTN0kd0SiDvV0pPFu5q760wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJNJQH2 YFLfsT7DS09VSupsmCe2MB8GA1UdIwQYMBaAFPBGkLsD4NOWK0gI5NBssmo0kOUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYwNS83MjUwQ0E0NDZD MzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1WXJTQWprMEd5eWFqU1E1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFYVF1d1BnMDVZclNBamswR3l5YWpTUTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYwNS83MjUwQ0E0NDZDMzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1 WXJTQWprMEd5eWFqU1E1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOce56j4ztFoF3Wy06Y+fs8TvHkUiFiFJGtMVgLZSsDL5/8DkRMjo6 nDTHWjfmakqfUTXdGDJYSV5q+agRJ83xBU1ajGmRxb0IP6Ehooya8K+Hl6EuX7IY 5RL82gz31zJkQJGZIOyoZziiarSVNBnNn+zugEZvW6hxA02e1O0Xt+gugA//5+R/ 3IB54d0oopAU9/IZKkwjUVHLpfLqhLzMn59Qpwid1Nkw/NwY85kJLSt66Uyuv2XT U2OUS4ozUF2tgVBD5ad/0wrzhVAI1kvDhsy3E/sm1zacA6XDucTchbBTXXwi5yNT kmXrjJKYv420KJPVzU08dkawMTdtobyh -----END CERTIFICATE-----Generated at Fri Jun 20 01:19:15 2025 by rpki-client