$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: 5nJ7934OaHZ0IqbEx0/42YCZaRJIIjRuoq8aZknaLfg= Subject key identifier: EA:29:87:90:78:66:07:B2:B1:3D:03:92:45:97:4A:27:A7:F4:44:7F Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 0A0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 0A08 Signing time: Sat 14 Jun 2025 19:39:16 +0000 Manifest this update: Sat 14 Jun 2025 19:39:16 +0000 Manifest next update: Sat 21 Jun 2025 19:39:16 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: r6lz4x096PDdgkS1w23izUFr704k11fTYjICHQFtMnM=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2574 (0xa0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: Jun 14 19:39:16 2025 GMT Not After : Jun 21 19:39:16 2025 GMT Subject: CN=684dcfe4-350a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c0:45:0d:c3:20:23:a1:cb:35:2a:79:41:1c: d7:5f:9c:73:f2:52:cd:39:4c:ab:39:13:86:b1:f8: de:92:31:7f:ae:5c:d4:6b:e5:50:7c:19:e3:78:e9: 43:64:8e:8c:83:a4:3c:d2:2e:75:16:3e:6a:84:50: 19:b5:7d:19:4f:e7:c6:cb:e3:9e:f0:f9:97:42:58: 06:3d:c8:e5:71:b5:a2:6d:60:66:33:c1:5b:d7:e7: b5:f7:fa:d7:20:dc:6f:70:01:b2:55:33:d5:0b:77: 7e:04:db:27:6b:8f:a3:22:4a:0d:a4:11:a6:81:e5: c9:87:2a:c9:41:f2:21:6a:a2:5c:4b:cb:ba:5d:1d: 2c:de:71:42:b8:7d:92:80:35:f3:5a:1a:db:d4:25: d4:fd:29:1a:6b:01:42:29:64:98:df:4d:2a:bb:70: 0f:60:5f:36:ea:f9:28:9f:d0:b9:2b:a4:02:c0:a9: e6:41:f6:2f:71:ef:74:3c:0a:bd:8c:2b:c2:7e:c3: f5:71:0f:a1:65:fb:87:63:28:25:2f:9f:5e:31:9f: 25:b7:8b:c8:34:b1:eb:f3:66:0a:03:a8:82:fe:f4: ab:d8:31:0c:88:2d:7f:ed:b7:3a:06:49:5d:2f:77: e5:b2:e7:6d:56:6c:47:9e:28:ef:49:23:e7:c1:64: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:29:87:90:78:66:07:B2:B1:3D:03:92:45:97:4A:27:A7:F4:44:7F X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:34:12:d7:e1:63:4c:99:62:15:04:df:91:ae:e3:93:13:67: eb:32:08:43:60:a4:25:85:22:68:51:18:48:01:33:cd:85:61: eb:0c:52:db:6c:0c:df:d0:26:f0:b2:2c:76:b4:3c:43:2f:1b: 2a:6c:4f:e7:25:da:12:b8:6a:f8:b2:60:e3:63:5b:df:84:a4: cb:fb:a6:77:a5:b6:af:cf:f5:1b:35:cd:fc:1c:d9:f5:41:a7: 52:8f:dc:8a:78:23:0d:b1:bf:93:94:32:19:31:84:f6:7c:97: c1:55:91:f4:f6:7d:71:64:83:99:5e:b7:3b:24:ed:5c:a8:1a: bf:21:b4:d1:8f:76:70:86:17:48:41:ed:96:e0:77:7f:fa:37: 62:db:12:bb:50:5e:87:19:4d:69:bc:50:94:40:85:08:47:a1: e4:ec:5c:ae:b3:8e:9d:9e:7a:1c:77:57:ce:e3:c3:7f:da:ca: 25:ae:c1:bd:e6:dd:24:ce:ae:9e:ac:ad:ce:10:42:3d:71:a2: b7:26:b5:62:26:1b:05:bf:97:d0:20:70:46:89:13:36:a0:8c: 37:28:5b:bb:18:ed:ed:0c:74:79:d9:d3:bd:6c:74:fc:61:00: c6:bc:e4:2a:a7:29:2c:76:f4:1b:08:5c:67:6d:37:52:8f:67: 3a:e7:03:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjUwNjE0MTkzOTE2WhcNMjUwNjIxMTkzOTE2WjAYMRYwFAYD VQQDEw02ODRkY2ZlNC0zNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MBFDcMgI6HLNSp5QRzXX5xz8lLNOUyrOROGsfjekjF/rlzUa+VQfBnjeOlD ZI6Mg6Q80i51Fj5qhFAZtX0ZT+fGy+Oe8PmXQlgGPcjlcbWibWBmM8Fb1+e19/rX INxvcAGyVTPVC3d+BNsna4+jIkoNpBGmgeXJhyrJQfIhaqJcS8u6XR0s3nFCuH2S gDXzWhrb1CXU/SkaawFCKWSY300qu3APYF826vkon9C5K6QCwKnmQfYvce90PAq9 jCvCfsP1cQ+hZfuHYyglL59eMZ8lt4vINLHr82YKA6iC/vSr2DEMiC1/7bc6Bkld L3flsudtVmxHnijvSSPnwWRsTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoph5B4 ZgeysT0DkkWXSien9ER/MB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwNBLX4WNMmWIVBN+RruOTE2frMghDYKQlhSJoURhIATPNhWHrDFLb bAzf0Cbwsix2tDxDLxsqbE/nJdoSuGr4smDjY1vfhKTL+6Z3pbavz/UbNc38HNn1 QadSj9yKeCMNsb+TlDIZMYT2fJfBVZH09n1xZIOZXrc7JO1cqBq/IbTRj3ZwhhdI Qe2W4Hd/+jdi2xK7UF6HGU1pvFCUQIUIR6Hk7Fyus46dnnocd1fO48N/2solrsG9 5t0kzq6erK3OEEI9caK3JrViJhsFv5fQIHBGiRM2oIw3KFu7GO3tDHR52dO9bHT8 YQDGvOQqpyksdvQbCFxnbTdSj2c65wM1 -----END CERTIFICATE-----Generated at Sun Jun 15 20:48:38 2025 by rpki-client