$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft File: r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json) Hash identifier: Q9jx1g8SfKY5i+mpAYByZ3q5H0b8/rXWmiekxMbF7vA= Subject key identifier: B6:76:80:C8:13:15:0C:9A:65:19:B1:93:5A:B0:BE:13:2D:B3:02:13 Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 Certificate issuer: /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Certificate serial: 0804 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft Manifest number: 07F7 Signing time: Sat 14 Jun 2025 20:45:28 +0000 Manifest this update: Sat 14 Jun 2025 20:45:28 +0000 Manifest next update: Sat 21 Jun 2025 20:45:28 +0000 Files and hashes: 1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: Skacs0/0S/RDhfdlKY/hUz06uRsGGoaPPtnw5brcycc=) 2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: QE3nW2mNMr96ecxL+2Sa0cUHeFInEqjbi3IjJoVbX1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2052 (0x804) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BD9, serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Validity Not Before: Jun 14 20:45:28 2025 GMT Not After : Jun 21 20:45:28 2025 GMT Subject: CN=684ddf68-acbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:47:b3:d9:46:12:bf:1a:ea:77:bd:d9:4e: 03:8f:e0:fe:23:3e:0c:82:17:58:e1:92:b1:83:3f: fb:f7:9a:40:9b:21:aa:af:6a:d1:e8:b7:78:4c:28: a7:aa:21:71:57:90:88:88:17:b5:ba:fb:5c:f9:99: 8a:01:e9:3f:ac:ac:ec:d6:ee:51:20:5e:59:6f:c1: 7c:ad:f0:45:33:0c:99:b7:3e:1c:57:f5:c8:43:58: f2:9c:07:c2:e0:d9:02:db:90:30:b1:c2:02:35:c1: ff:3a:e4:19:f5:f6:bc:f6:1a:5d:0e:9d:17:80:9b: 42:3e:97:d5:85:d6:22:de:95:ef:3b:60:75:e8:64: e1:ff:09:8d:59:0d:2d:72:ca:a1:c2:9b:1b:69:c6: f2:41:c8:e0:57:3c:24:80:e4:77:8a:a1:27:31:d5: fd:d0:26:33:19:3d:52:43:ed:8b:07:b8:33:2d:3a: b6:48:89:16:b8:6d:4d:8c:e2:5c:0f:19:44:21:40: 8d:2b:ec:b1:44:f6:53:9d:df:eb:e7:ef:00:ba:15: 99:00:c2:0e:a2:f1:52:d7:2f:30:61:1b:f7:07:6d: f1:89:c4:d1:50:d1:ca:cf:25:4d:dc:7c:60:1e:2d: ac:4d:ce:8d:b6:f6:8a:f1:cd:6f:74:23:b9:d7:5e: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:76:80:C8:13:15:0C:9A:65:19:B1:93:5A:B0:BE:13:2D:B3:02:13 X509v3 Authority Key Identifier: keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a7:70:b6:c8:2e:ef:2b:15:a2:ea:43:68:9b:b9:4c:88:fb: 23:67:78:f7:b9:4e:b3:5f:ed:e5:02:d7:d7:87:e7:ec:70:a3: 64:15:d4:a0:df:ca:0c:a4:83:92:1f:41:1b:29:a9:04:60:42: 98:14:6e:ef:0d:81:1e:9d:d6:73:04:aa:69:64:cd:69:79:72: 65:d8:26:79:16:2a:38:31:61:99:a8:ce:8d:f1:42:d5:86:01: f0:99:50:92:f2:e1:b8:40:62:93:d0:a1:2a:c1:c3:41:22:e2: 17:fc:05:a1:45:e2:8a:81:bb:1a:1b:2f:70:f5:6e:d6:ce:a7: d2:0c:98:7e:f1:7e:35:e4:eb:8c:95:dc:57:e1:1c:72:c7:88: c7:da:f8:30:15:0f:f2:df:c5:60:27:e5:23:dc:9e:7d:93:19: e9:12:72:48:3a:6b:71:91:fa:20:92:2c:80:97:66:40:28:4f: 08:09:e9:92:74:57:bc:d4:e6:03:de:f9:75:f6:2e:f4:ce:ba: c9:d2:1d:76:e3:b7:0f:fe:25:6b:05:d2:3f:40:0e:a4:7a:49: 42:cf:9b:44:46:0e:0f:3e:84:34:ac:11:25:ae:69:c8:92:49: ec:9e:72:ef:5d:61:3f:0e:9c:c4:aa:18:fb:f5:8c:80:7d:84: 03:bd:9c:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCRDkxMTAvBgNVBAUTKEFGQ0QxMkYzNDA5ODc4Q0Q0QUI0NDVDNDQ1NTQ0QUU4 REE4NTFBODQwHhcNMjUwNjE0MjA0NTI4WhcNMjUwNjIxMjA0NTI4WjAYMRYwFAYD VQQDEw02ODRkZGY2OC1hY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrJHs9lGEr8a6ne92U4Dj+D+Iz4MghdY4ZKxgz/795pAmyGqr2rR6Ld4TCin qiFxV5CIiBe1uvtc+ZmKAek/rKzs1u5RIF5Zb8F8rfBFMwyZtz4cV/XIQ1jynAfC 4NkC25AwscICNcH/OuQZ9fa89hpdDp0XgJtCPpfVhdYi3pXvO2B16GTh/wmNWQ0t csqhwpsbacbyQcjgVzwkgOR3iqEnMdX90CYzGT1SQ+2LB7gzLTq2SIkWuG1NjOJc DxlEIUCNK+yxRPZTnd/r5+8AuhWZAMIOovFS1y8wYRv3B23xicTRUNHKzyVN3Hxg Hi2sTc6NtvaK8c1vdCO5114krwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZ2gMgT FQyaZRmxk1qwvhMtswITMB8GA1UdIwQYMBaAFK/NEvNAmHjNSrRFxEVUSujahRqE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJEOS8wNDgxRjc4NkVD MTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVNMUt0RVhFUlZSSzZOcUZH b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4MFM4MENZZU0xS3RFWEVSVlJLNk5xRkdvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJEOS8wNDgxRjc4NkVDMTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVN MUt0RVhFUlZSSzZOcUZHb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjp3C2yC7vKxWi6kNom7lMiPsjZ3j3uU6zX+3lAtfXh+fscKNkFdSg 38oMpIOSH0EbKakEYEKYFG7vDYEendZzBKppZM1peXJl2CZ5Fio4MWGZqM6N8ULV hgHwmVCS8uG4QGKT0KEqwcNBIuIX/AWhReKKgbsaGy9w9W7WzqfSDJh+8X415OuM ldxX4Rxyx4jH2vgwFQ/y38VgJ+Uj3J59kxnpEnJIOmtxkfogkiyAl2ZAKE8ICemS dFe81OYD3vl19i70zrrJ0h1247cP/iVrBdI/QA6keklCz5tERg4PPoQ0rBElrmnI kknsnnLvXWE/DpzEqhj79YyAfYQDvZwF -----END CERTIFICATE-----Generated at Sun Jun 15 09:56:30 2025 by rpki-client