$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft File: 8fFj2FT-czviVA83o0T_alpayfY.mft (raw, json) Hash identifier: c+TB8WAqSbnh0IlBrNdKS/iZB95uVYmUoer4YMSggpM= Subject key identifier: 10:5F:50:3B:2C:11:1F:28:C0:9F:A0:1C:53:47:47:09:DF:1C:8D:76 Authority key identifier: F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6 Certificate issuer: /CN=A91F9CD7/serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft Manifest number: 0128 Signing time: Fri 13 Jun 2025 03:36:40 +0000 Manifest this update: Fri 13 Jun 2025 03:36:39 +0000 Manifest next update: Fri 20 Jun 2025 03:36:39 +0000 Files and hashes: 1: 8fFj2FT-czviVA83o0T_alpayfY.crl (hash: qR5FqaHInQt3c5dn5+UJeDMeNG40ypCmNHhYudfD370=) 2: E84C2B9083D711EE871C4048C4F9AE02.roa (hash: rmSlyhnDPvPSFvbFMmRCs9JHSxTZmt3FdyC7wK+xTxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9CD7, serialNumber=F1F163D854FE733BE2540F37A344FF6A5A5AC9F6 Validity Not Before: Jun 13 03:36:39 2025 GMT Not After : Jun 20 03:36:39 2025 GMT Subject: CN=684b9cc7-7969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1c:89:03:27:05:15:f8:9a:29:6e:34:7e:a5: e2:7d:c6:5e:29:73:94:b5:13:15:66:a9:f3:ec:9a: 05:b9:61:f2:2a:57:2d:bc:e1:1d:4c:56:a7:32:79: 42:a0:bd:f6:3d:fe:cd:ee:04:85:a8:81:0c:83:0f: eb:5a:11:76:38:71:5a:f9:43:cc:cd:f4:aa:d0:d9: f9:6d:92:e6:19:9b:8f:92:c2:a8:60:39:63:6c:ce: 54:7e:ff:52:28:4f:b7:b1:f8:4c:27:61:75:d7:7e: a5:a3:f6:0f:65:83:b8:f4:b1:84:9a:df:a9:23:d7: b0:31:0c:e1:05:81:4a:85:9f:98:69:bf:a2:1c:e9: 8e:87:15:11:28:61:f6:e4:e5:88:20:0a:c4:cf:25: c3:1c:26:02:24:aa:55:51:ac:9d:99:47:08:02:d7: e2:71:6d:3e:ac:43:a6:74:ce:fc:27:aa:ec:1a:45: ea:70:66:41:a5:91:34:f9:8c:ef:42:fb:ca:4c:00: 35:e1:64:a7:c6:c9:5a:35:fb:c8:8f:a3:3a:c2:a3: b7:5a:7b:1e:04:7c:5f:c4:d2:d3:ef:7f:de:5a:9e: 84:da:c1:60:94:6f:c9:b3:ee:76:c7:95:d2:02:aa: ee:c4:74:ab:64:bb:39:2c:9a:12:15:1d:77:0b:48: 30:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5F:50:3B:2C:11:1F:28:C0:9F:A0:1C:53:47:47:09:DF:1C:8D:76 X509v3 Authority Key Identifier: keyid:F1:F1:63:D8:54:FE:73:3B:E2:54:0F:37:A3:44:FF:6A:5A:5A:C9:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8fFj2FT-czviVA83o0T_alpayfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9CD7/ABEB876083D511EE988DB744C4F9AE02/8fFj2FT-czviVA83o0T_alpayfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:87:f9:c7:c5:8d:52:16:68:fb:b1:0d:3f:ab:ac:11:64:35: 42:f9:a6:29:93:5c:13:dc:97:02:88:94:0b:94:39:0b:37:42: b0:f1:63:2b:85:3a:67:87:02:c0:46:44:cd:bb:98:2e:99:78: 48:d7:d5:a9:1e:21:80:a1:eb:8b:95:4c:06:e9:45:a5:59:5c: 1c:19:e7:d0:59:b8:ac:a6:39:44:58:ec:ef:10:23:6e:60:4d: ad:63:05:11:df:21:28:2e:74:3c:e8:fb:c1:11:e2:6a:e7:3a: 72:8c:c9:e7:08:3e:7f:17:25:74:ad:f7:03:e8:bb:32:f2:7a: 85:3f:c2:29:5e:9c:4c:73:07:fd:c3:ef:1e:5f:89:7d:f8:2e: 7b:34:86:7b:86:9e:a6:76:52:9c:18:ed:c5:c7:fe:0d:72:94: 3b:a9:37:4b:74:8d:b3:90:6c:f4:67:14:14:aa:0b:b1:2e:3b: 29:ef:c4:c9:d2:24:45:f8:bc:a0:f5:31:05:e9:18:d7:46:e2: 01:49:03:e3:5a:d5:87:0d:89:6e:ec:c2:85:30:67:28:a6:f2: 89:84:b6:87:4c:c7:93:17:a3:6f:02:43:05:f4:38:ec:4d:d6: 41:e5:92:81:06:6d:40:ad:71:f3:a7:6e:41:ac:dd:66:c2:e4: d8:4d:25:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDRDcxMTAvBgNVBAUTKEYxRjE2M0Q4NTRGRTczM0JFMjU0MEYzN0EzNDRGRjZB NUE1QUM5RjYwHhcNMjUwNjEzMDMzNjM5WhcNMjUwNjIwMDMzNjM5WjAYMRYwFAYD VQQDEw02ODRiOWNjNy03OTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ByJAycFFfiaKW40fqXifcZeKXOUtRMVZqnz7JoFuWHyKlctvOEdTFanMnlC oL32Pf7N7gSFqIEMgw/rWhF2OHFa+UPMzfSq0Nn5bZLmGZuPksKoYDljbM5Ufv9S KE+3sfhMJ2F1136lo/YPZYO49LGEmt+pI9ewMQzhBYFKhZ+Yab+iHOmOhxURKGH2 5OWIIArEzyXDHCYCJKpVUaydmUcIAtficW0+rEOmdM78J6rsGkXqcGZBpZE0+Yzv QvvKTAA14WSnxslaNfvIj6M6wqO3WnseBHxfxNLT73/eWp6E2sFglG/Js+52x5XS AqruxHSrZLs5LJoSFR13C0gwBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBfUDss ER8owJ+gHFNHRwnfHI12MB8GA1UdIwQYMBaAFPHxY9hU/nM74lQPN6NE/2paWsn2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUNENy9BQkVCODc2MDgz RDUxMUVFOTg4REI3NDRDNEY5QUUwMi84ZkZqMkZULWN6dmlWQTgzbzBUX2FscGF5 ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmRmoyRlQtY3p2aVZBODNvMFRfYWxwYXlmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUNENy9BQkVCODc2MDgzRDUxMUVFOTg4REI3NDRDNEY5QUUwMi84ZkZqMkZULWN6 dmlWQTgzbzBUX2FscGF5ZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARh/nHxY1SFmj7sQ0/q6wRZDVC+aYpk1wT3JcCiJQLlDkLN0Kw8WMr hTpnhwLARkTNu5gumXhI19WpHiGAoeuLlUwG6UWlWVwcGefQWbispjlEWOzvECNu YE2tYwUR3yEoLnQ86PvBEeJq5zpyjMnnCD5/FyV0rfcD6Lsy8nqFP8IpXpxMcwf9 w+8eX4l9+C57NIZ7hp6mdlKcGO3Fx/4NcpQ7qTdLdI2zkGz0ZxQUqguxLjsp78TJ 0iRF+Lyg9TEF6RjXRuIBSQPjWtWHDYlu7MKFMGcopvKJhLaHTMeTF6NvAkMF9Djs TdZB5ZKBBm1ArXHzp25BrN1mwuTYTSXw -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:24 2025 by rpki-client