$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json) Hash identifier: zcyuZiH0ZzsGbswtFSpAFkkrVHVQehDT0HMBIaU6TXc= Subject key identifier: 44:ED:A3:79:B9:2C:11:7E:4F:59:89:A3:65:BD:C5:52:02:3B:10:64 Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft Manifest number: 054B Signing time: Fri 18 Jul 2025 23:46:15 +0000 Manifest this update: Fri 18 Jul 2025 23:46:15 +0000 Manifest next update: Fri 25 Jul 2025 23:46:15 +0000 Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: MxuTM+qS5J7NebtPlRISEF4LBH/y7U9ALk+X14OH6XI=) 2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: CQpWK2+G2LnLlpiGc5AJJ6xJWy2B0MtLT56Nh25qbzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: Jul 18 23:46:15 2025 GMT Not After : Jul 25 23:46:15 2025 GMT Subject: CN=687adcc7-eb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:0f:fc:b5:04:fd:d0:09:6a:fc:ef:c4:94: 7f:4f:d6:01:bd:2e:77:37:ab:06:21:0f:02:23:47: 0a:44:b9:ea:f2:68:19:fa:bf:00:78:3d:25:b6:3f: b9:ad:c0:47:c6:94:6b:b7:ad:88:31:65:93:d9:bf: 36:cc:e2:ae:7c:07:3b:75:9d:9e:0c:39:8f:10:4d: e6:0a:45:db:90:56:bd:db:b7:18:08:cb:f6:6d:65: 8b:fb:b8:41:9d:01:20:6b:ee:ac:04:d4:9c:6d:24: 73:af:fa:6b:3e:c6:31:b7:b5:f5:41:27:0d:9b:aa: 05:83:36:88:62:8a:bd:95:6b:7a:a9:2c:bb:74:7c: 87:3d:1e:85:c9:4d:ca:0c:d8:bf:2a:ba:a2:6c:1a: 46:6a:fb:97:db:d8:e8:f1:7a:cd:a9:28:5f:25:db: 89:40:da:3b:69:03:fa:27:ef:a8:cf:03:f4:bb:e9: ef:78:03:67:ab:38:ec:27:4f:c1:ea:b2:7f:f3:fe: b1:6b:a1:36:67:af:97:4f:87:e7:23:b4:b4:17:63: 7c:c8:37:0c:45:7c:fd:1f:87:8a:45:bd:e5:94:25: aa:12:90:f2:11:fc:ba:93:ee:40:1a:cb:3d:5a:48: fa:1b:df:f4:fc:ce:74:ee:49:c8:d1:0e:fa:7f:32: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:ED:A3:79:B9:2C:11:7E:4F:59:89:A3:65:BD:C5:52:02:3B:10:64 X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:93:d5:0d:b0:44:58:56:d7:d0:49:00:3e:09:e0:7a:8b:cc: 12:98:c0:80:db:cb:36:8c:cf:01:b5:16:0c:0d:31:22:c3:e6: a3:5c:de:c6:53:6b:72:54:9b:9c:a2:bb:e9:1e:8f:88:13:ff: 71:90:c5:10:e3:52:63:e6:8f:18:a8:d2:a4:83:ce:bc:03:ae: 3d:d9:f1:e3:23:bd:ce:58:6f:12:00:97:e2:3e:a7:db:5f:38: ec:18:99:ba:06:ca:c6:90:e3:6d:89:92:ba:18:df:b0:74:08: 66:ba:60:8b:de:5a:d6:a9:20:66:fb:d0:88:eb:c7:54:40:55: 1c:d4:7e:e5:d9:95:8b:40:f4:0b:ce:c1:0c:cf:c7:58:da:ee: 17:0a:88:75:16:90:23:6b:bb:19:21:84:5a:04:84:f5:c0:54: e9:00:90:f4:da:e9:19:24:26:38:80:5c:a0:34:c4:99:41:7f: 38:65:42:2a:7a:c0:fb:59:75:bd:9b:35:9c:f1:3d:9c:ff:74: 35:a0:c9:65:ec:b3:77:7a:19:a6:2e:c0:fa:87:2b:96:4e:55: a3:fe:da:56:a0:fa:f1:bd:d9:01:28:22:12:e7:92:e2:2e:ee: 42:97:d7:7d:c1:d0:bd:cb:14:f4:20:8e:c8:e1:e1:f0:75:f7: 64:22:83:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjUwNzE4MjM0NjE1WhcNMjUwNzI1MjM0NjE1WjAYMRYwFAYD VQQDEw02ODdhZGNjNy1lYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr08P/LUE/dAJavzvxJR/T9YBvS53N6sGIQ8CI0cKRLnq8mgZ+r8AeD0ltj+5 rcBHxpRrt62IMWWT2b82zOKufAc7dZ2eDDmPEE3mCkXbkFa927cYCMv2bWWL+7hB nQEga+6sBNScbSRzr/prPsYxt7X1QScNm6oFgzaIYoq9lWt6qSy7dHyHPR6FyU3K DNi/KrqibBpGavuX29jo8XrNqShfJduJQNo7aQP6J++ozwP0u+nveANnqzjsJ0/B 6rJ/8/6xa6E2Z6+XT4fnI7S0F2N8yDcMRXz9H4eKRb3llCWqEpDyEfy6k+5AGss9 Wkj6G9/0/M507knI0Q76fzIh0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETto3m5 LBF+T1mJo2W9xVICOxBkMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX R3pPMlRlRkxBUjhwb2VKQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNk9UNsERYVtfQSQA+CeB6i8wSmMCA28s2jM8BtRYMDTEiw+ajXN7G U2tyVJucorvpHo+IE/9xkMUQ41Jj5o8YqNKkg868A6492fHjI73OWG8SAJfiPqfb XzjsGJm6BsrGkONtiZK6GN+wdAhmumCL3lrWqSBm+9CI68dUQFUc1H7l2ZWLQPQL zsEMz8dY2u4XCoh1FpAja7sZIYRaBIT1wFTpAJD02ukZJCY4gFygNMSZQX84ZUIq esD7WXW9mzWc8T2c/3Q1oMll7LN3ehmmLsD6hyuWTlWj/tpWoPrxvdkBKCIS55Li Lu5Cl9d9wdC9yxT0II7I4eHwdfdkIoOo -----END CERTIFICATE-----Generated at Sun Jul 20 06:35:11 2025 by rpki-client