$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: XidfoIQwjgYuHi9YgfxDxTH7Y3CgfoN6ohhgUeOd9tA= Subject key identifier: 4F:A3:22:7C:71:45:10:E8:42:F9:90:73:BF:0E:6B:08:07:36:6E:37 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 0167 Signing time: Thu 19 Jun 2025 03:18:36 +0000 Manifest this update: Thu 19 Jun 2025 03:18:35 +0000 Manifest next update: Thu 26 Jun 2025 03:18:35 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: 3HSZf2272bHpnv6Jc+qbRMVewPtrgLvzuv9k6L/gRLQ=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 61dFCpFb3ek9f8W7MGjus+wVQMOYkxnO6WKnJYsH5TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Jun 19 03:18:35 2025 GMT Not After : Jun 26 03:18:35 2025 GMT Subject: CN=6853818c-3317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:99:e9:af:42:31:77:af:04:72:40:d2:13:7d: 81:d9:79:b5:02:38:fa:e5:ca:24:d5:4f:68:17:4f: 7e:8e:97:d2:d5:10:01:e0:3f:c8:60:a8:27:90:30: 37:6c:af:0f:36:1a:0f:5c:8f:5a:f2:86:26:6d:9d: 6b:30:b7:cf:cb:e8:e8:65:62:be:a9:3d:c7:e5:14: 20:f3:c1:4f:3c:ac:a6:44:57:85:4d:73:2a:7a:e1: df:b0:e7:f1:15:a3:48:c5:fa:cc:13:d7:3b:3e:ad: 88:1e:08:e6:c9:1d:48:bd:b0:33:fd:7a:46:55:91: fa:cc:79:b2:c4:35:d7:74:8e:c7:1a:7d:68:8c:9d: bc:84:bb:77:00:2c:eb:c8:65:ce:d9:60:0b:4b:b0: 48:1d:0a:e2:79:07:4a:89:44:a8:6b:14:84:7c:91: ad:78:7b:3b:ac:df:d4:a5:87:0a:74:59:b5:93:14: a9:0f:d3:e9:bf:76:79:0d:1b:38:28:4c:85:22:35: c9:79:cc:20:ec:f8:39:1c:3b:31:a8:12:f3:47:c9: 1c:a6:c7:be:77:66:05:e7:4c:75:ba:22:e3:c9:4a: e8:d3:47:77:57:75:07:aa:28:9a:bc:48:f5:98:a2: 33:1a:58:ed:fb:c0:34:92:03:ed:93:e4:1a:66:be: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A3:22:7C:71:45:10:E8:42:F9:90:73:BF:0E:6B:08:07:36:6E:37 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1f:80:8b:b2:2c:28:34:dc:e9:38:8a:24:29:50:6d:05:c0: d3:34:b4:d1:d2:04:f1:66:eb:f5:0e:25:3e:58:7b:6f:31:5f: 7e:8f:65:ff:6b:77:d6:51:48:ea:a1:b4:0d:0b:ee:d8:a6:44: d9:98:e8:cd:81:03:bc:8f:42:96:7b:59:49:cf:d7:e1:ea:1d: 8e:6c:58:f2:bc:07:de:3c:63:b2:37:e1:d2:30:ae:13:ed:8d: 09:ff:c9:e4:51:15:a0:ea:50:10:42:7b:3c:cc:00:da:66:6f: 02:b9:4c:b7:97:31:f5:65:0b:5d:54:02:22:0d:62:de:84:11: d1:78:a8:04:d8:f3:e8:4c:67:c4:09:a4:4d:60:a7:3e:e2:87: a9:aa:6f:84:e2:29:ce:c8:2d:b6:84:a3:a7:40:61:da:57:99: 91:1e:51:57:48:02:58:8e:f4:b3:33:fa:f6:aa:68:c6:78:20: 2f:d0:8e:f2:3f:9c:32:72:9c:6d:89:a5:cb:be:38:fc:f4:1c: bd:72:7b:a4:de:a5:95:3f:76:76:5d:39:9e:36:93:ae:a3:cd: 47:3b:51:73:7c:c8:d1:cd:db:99:c9:b6:3b:5f:e3:e0:5c:9e: 2f:ab:46:74:0f:39:60:32:74:af:53:2b:1d:c9:65:a0:cc:b0: f6:46:12:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwNjE5MDMxODM1WhcNMjUwNjI2MDMxODM1WjAYMRYwFAYD VQQDEw02ODUzODE4Yy0zMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Jnpr0Ixd68EckDSE32B2Xm1Ajj65cok1U9oF09+jpfS1RAB4D/IYKgnkDA3 bK8PNhoPXI9a8oYmbZ1rMLfPy+joZWK+qT3H5RQg88FPPKymRFeFTXMqeuHfsOfx FaNIxfrME9c7Pq2IHgjmyR1IvbAz/XpGVZH6zHmyxDXXdI7HGn1ojJ28hLt3ACzr yGXO2WALS7BIHQrieQdKiUSoaxSEfJGteHs7rN/UpYcKdFm1kxSpD9Ppv3Z5DRs4 KEyFIjXJecwg7Pg5HDsxqBLzR8kcpse+d2YF50x1uiLjyUro00d3V3UHqiiavEj1 mKIzGljt+8A0kgPtk+QaZr4+qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+jInxx RRDoQvmQc78OawgHNm43MB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSH4CLsiwoNNzpOIokKVBtBcDTNLTR0gTxZuv1DiU+WHtvMV9+j2X/ a3fWUUjqobQNC+7YpkTZmOjNgQO8j0KWe1lJz9fh6h2ObFjyvAfePGOyN+HSMK4T 7Y0J/8nkURWg6lAQQns8zADaZm8CuUy3lzH1ZQtdVAIiDWLehBHReKgE2PPoTGfE CaRNYKc+4oepqm+E4inOyC22hKOnQGHaV5mRHlFXSAJYjvSzM/r2qmjGeCAv0I7y P5wycpxtiaXLvjj89By9cnuk3qWVP3Z2XTmeNpOuo81HO1FzfMjRzduZybY7X+Pg XJ4vq0Z0DzlgMnSvUysdyWWgzLD2RhK+ -----END CERTIFICATE-----Generated at Thu Jun 19 05:45:32 2025 by rpki-client