$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft File: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft (raw, json) Hash identifier: 7ETw5BE4LoIDKashScxv0bOFRv/oNTQzgi8l8zkwYXQ= Subject key identifier: 72:26:F1:25:07:AF:B2:5C:AD:65:B2:20:43:6C:B6:BC:0E:A3:17:92 Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B Certificate issuer: /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Certificate serial: 0560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft Manifest number: 0554 Signing time: Sun 20 Jul 2025 23:37:15 +0000 Manifest this update: Sun 20 Jul 2025 23:37:15 +0000 Manifest next update: Sun 27 Jul 2025 23:37:15 +0000 Files and hashes: 1: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl (hash: b95IH6613JZFKTXNBb2533ZQqv2rQGqq/Otc8MCLpSE=) 2: F18DB130603911EF930C0567C4F9AE02.roa (hash: bMyNaPmBlCzUdt5NHJjdyDhr0LajMy+L36w7sDnDjCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1376 (0x560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056, serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Validity Not Before: Jul 20 23:37:15 2025 GMT Not After : Jul 27 23:37:15 2025 GMT Subject: CN=687d7dab-0d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:12:8f:b0:ac:99:54:7b:47:7d:2a:67:25: 85:5a:ad:f2:85:77:c4:55:e2:cd:69:0c:1d:9e:b8: 94:1a:e9:55:3c:9f:4b:97:55:09:7c:ce:f3:d2:10: c7:56:3c:b9:08:c9:3c:d0:3f:d9:ca:47:67:4c:a5: ba:5a:7a:d8:a4:20:e9:37:e7:04:25:a6:c9:58:aa: 2e:c5:66:5c:d1:87:9a:d8:a8:26:53:79:0a:19:ad: 75:32:43:16:4f:91:ec:65:8f:81:d7:bc:f0:6e:87: cc:35:7b:04:86:20:f7:a5:f4:ce:3a:59:f3:6a:f4: f7:c0:f2:03:19:ff:32:e7:8c:0f:d9:2f:87:75:98: fb:0e:19:19:36:9b:f5:a0:48:e7:a5:08:c2:1f:b8: fe:0a:e5:04:66:cb:2c:be:24:24:cb:4f:91:5e:e8: 2c:c8:75:14:0d:34:37:c2:2e:9e:48:9e:33:0f:fa: cd:b7:f0:79:5d:ce:e2:b5:bc:ae:f0:ef:fe:71:01: e2:15:d8:16:2b:1f:b6:60:28:da:e2:c8:d2:ac:7e: bb:e6:d6:fd:b9:69:06:2b:f9:1f:2c:d5:89:cf:c2: 5a:57:e1:0e:92:82:26:61:5c:6b:50:5c:2c:38:41: 16:41:ad:1f:69:52:3f:bc:03:fb:3e:aa:dd:4b:52: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:26:F1:25:07:AF:B2:5C:AD:65:B2:20:43:6C:B6:BC:0E:A3:17:92 X509v3 Authority Key Identifier: keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:36:a1:87:2b:71:44:50:f1:07:c5:d6:2d:31:b3:f3:c5:27: 82:02:19:83:fe:90:b8:f2:1b:70:55:68:f6:c1:e1:a0:0b:9f: 75:5f:22:4e:b6:9f:6b:74:36:19:20:90:56:8b:fd:1a:e9:df: 9f:cf:9a:7b:56:6e:47:07:13:fb:2a:40:7a:3b:22:5f:cc:e1: 73:5c:ee:56:7d:5c:d0:d1:d4:91:10:ad:f2:a5:88:db:21:ae: 3c:22:f3:31:87:cf:e7:b4:fb:c6:12:4f:12:b4:0f:2a:f2:aa: ac:63:11:1f:8b:d8:bb:19:08:5e:55:8c:ad:c9:e9:61:4f:8a: 9a:c7:c6:ca:5c:92:65:70:71:19:81:c8:35:21:d2:02:f5:ac: 3c:07:af:b2:69:c1:4f:8b:16:4a:f5:86:df:c8:15:cd:ec:93: af:32:86:55:13:7d:68:4c:33:cc:ef:45:be:41:be:10:61:04: b1:c0:13:ee:a0:07:06:15:eb:12:a9:41:f6:cd:f1:ec:1e:11: 66:0b:e0:ee:e9:72:cd:34:27:62:d7:b5:13:8f:98:77:15:86: ad:33:27:f2:a9:3e:51:11:db:8e:ba:ae:66:7f:f8:72:71:90: 14:34:33:54:67:4b:ba:fd:f1:77:b5:49:5b:d9:2a:af:35:81: 1e:04:34:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDhCQzAxQ0VBNDREM0VEODhGNDE1MzE3MkI3OTI0NTY3 MTVDNTI2MEIwHhcNMjUwNzIwMjMzNzE1WhcNMjUwNzI3MjMzNzE1WjAYMRYwFAYD VQQDEw02ODdkN2RhYi0wZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonQSj7CsmVR7R30qZyWFWq3yhXfEVeLNaQwdnriUGulVPJ9Ll1UJfM7z0hDH Vjy5CMk80D/ZykdnTKW6WnrYpCDpN+cEJabJWKouxWZc0Yea2KgmU3kKGa11MkMW T5HsZY+B17zwbofMNXsEhiD3pfTOOlnzavT3wPIDGf8y54wP2S+HdZj7DhkZNpv1 oEjnpQjCH7j+CuUEZsssviQky0+RXugsyHUUDTQ3wi6eSJ4zD/rNt/B5Xc7itbyu 8O/+cQHiFdgWKx+2YCja4sjSrH675tb9uWkGK/kfLNWJz8JaV+EOkoImYVxrUFws OEEWQa0faVI/vAP7PqrdS1LGzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIm8SUH r7JcrWWyIENstrwOoxeSMB8GA1UdIwQYMBaAFIvAHOpE0+2I9BUxcreSRWcVxSYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni9GQjU5MzQ0RUZC MUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZajBGVEZ5dDVKRlp4WEZK Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k4QWM2a1RUN1lqMEZURnl0NUpGWnhYRkpncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni9GQjU5MzQ0RUZCMUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZ ajBGVEZ5dDVKRlp4WEZKZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnNqGHK3FEUPEHxdYtMbPzxSeCAhmD/pC48htwVWj2weGgC591XyJO tp9rdDYZIJBWi/0a6d+fz5p7Vm5HBxP7KkB6OyJfzOFzXO5WfVzQ0dSREK3ypYjb Ia48IvMxh8/ntPvGEk8StA8q8qqsYxEfi9i7GQheVYytyelhT4qax8bKXJJlcHEZ gcg1IdIC9aw8B6+yacFPixZK9YbfyBXN7JOvMoZVE31oTDPM70W+Qb4QYQSxwBPu oAcGFesSqUH2zfHsHhFmC+Du6XLNNCdi17UTj5h3FYatMyfyqT5REduOuq5mf/hy cZAUNDNUZ0u6/fF3tUlb2SqvNYEeBDSF -----END CERTIFICATE-----Generated at Mon Jul 21 13:24:04 2025 by rpki-client