$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json) Hash identifier: SWHylVAiLdArm6Us8opGQqlxdwakn1LnUdJ3UjYIpgI= Subject key identifier: A7:83:D3:7A:8D:90:78:69:C6:06:A0:76:06:EF:33:3D:5C:B9:5A:7A Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft Manifest number: 012B Signing time: Mon 21 Jul 2025 04:44:05 +0000 Manifest this update: Mon 21 Jul 2025 04:44:05 +0000 Manifest next update: Mon 28 Jul 2025 04:44:05 +0000 Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: zpBcn8BA1PGADBpgly45tvUFcC+Nwvn5TGztR3pQol0=) 2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: fBtaOlMCOFGQQtGdBagxQGnrYFNg/qX3d4dMpzhuZnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: Jul 21 04:44:05 2025 GMT Not After : Jul 28 04:44:05 2025 GMT Subject: CN=687dc595-a5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:d8:4b:3e:e0:df:07:fa:b7:57:79:f2:15: 1c:c6:5c:64:ed:ae:89:c8:07:bf:aa:d1:03:39:f2: 71:b6:45:d4:01:3e:53:65:b4:50:0d:a4:af:27:11: d7:1c:a0:4c:ef:97:6a:ff:4b:06:c3:cd:e0:e9:6b: ad:1b:6d:02:df:d1:c2:0f:fc:2a:e1:f1:ea:32:3b: 1c:39:97:5e:de:3c:a1:5f:35:8b:61:aa:ea:07:8a: 47:cd:5b:e7:19:dd:96:f7:e7:8b:91:1d:e9:c4:43: f3:5d:1f:6c:f5:e3:81:44:3e:2e:1b:02:be:57:97: a4:2c:79:d2:e9:86:64:ca:09:b4:67:89:88:69:ac: ae:60:ad:4f:55:f9:84:80:0e:8b:95:ab:80:f1:9e: c2:a7:8f:26:8f:64:7a:cc:ae:d3:db:7c:b5:ae:1b: 8f:81:d8:ec:a2:8f:98:24:1b:21:ff:38:56:14:8e: 68:17:64:87:ed:7d:0b:93:be:ac:eb:16:33:8a:ba: 2d:ca:02:99:02:d6:ab:ec:a3:ad:c9:3c:40:38:68: 59:ca:64:c0:de:d4:56:4d:bd:fa:34:c8:6f:36:94: 8b:eb:12:e6:37:f3:f2:f3:1a:1c:c8:88:65:af:0e: e8:0c:91:63:9e:57:7a:64:cd:04:c5:75:a8:71:65: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:83:D3:7A:8D:90:78:69:C6:06:A0:76:06:EF:33:3D:5C:B9:5A:7A X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:27:fe:dd:28:d1:3a:c7:58:8b:ee:f9:bf:ae:25:db:a6:3a: d5:62:cf:1d:ea:f1:fb:4c:92:8b:c6:28:34:42:ce:99:1a:ab: e9:43:43:10:75:17:a2:ca:79:ac:51:4e:87:33:c6:9a:0c:6f: 4f:c8:ab:39:62:dd:35:89:0a:b2:18:e2:fb:41:68:78:55:57: 31:b1:85:9b:13:57:b9:8b:6a:3c:2b:68:cb:7a:df:81:31:f3: 1a:57:08:62:6c:5f:c8:9e:4f:63:83:d9:da:e4:c5:3f:c5:82: 4a:41:05:b6:ad:28:32:00:0c:8d:ed:99:71:a8:f9:48:7d:36: ac:f8:de:5a:5c:96:63:9c:e0:cc:e9:04:11:0e:fa:8e:ab:f9: a1:af:d3:09:ce:ba:db:c5:2a:62:54:1d:1a:e9:ca:2e:56:77: 5e:bb:e6:6e:33:ee:88:0e:b3:52:7c:a5:1a:39:04:82:ea:f4: e2:48:ce:74:2f:fb:53:fe:09:83:a6:78:15:32:d1:2c:84:b4: 3e:6a:be:77:89:e0:32:7a:a7:96:2a:94:c5:21:a0:0b:f4:9d: 83:5b:e7:c0:40:2c:f7:e8:76:4b:86:4d:c6:3e:1b:31:b9:d3: 1b:c7:1c:d4:e2:f9:de:b0:2c:20:e0:be:ec:14:c6:09:0a:0b: d1:92:79:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAzNzIxMTAvBgNVBAUTKEYyOUIyM0VBNEUxMTRDREM5Q0E2RDM3RjVFRjc5RUY0 QzM1QzcyODIwHhcNMjUwNzIxMDQ0NDA1WhcNMjUwNzI4MDQ0NDA1WjAYMRYwFAYD VQQDEw02ODdkYzU5NS1hNWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodjYSz7g3wf6t1d58hUcxlxk7a6JyAe/qtEDOfJxtkXUAT5TZbRQDaSvJxHX HKBM75dq/0sGw83g6WutG20C39HCD/wq4fHqMjscOZde3jyhXzWLYarqB4pHzVvn Gd2W9+eLkR3pxEPzXR9s9eOBRD4uGwK+V5ekLHnS6YZkygm0Z4mIaayuYK1PVfmE gA6LlauA8Z7Cp48mj2R6zK7T23y1rhuPgdjsoo+YJBsh/zhWFI5oF2SH7X0Lk76s 6xYzirotygKZAtar7KOtyTxAOGhZymTA3tRWTb36NMhvNpSL6xLmN/Py8xocyIhl rw7oDJFjnld6ZM0ExXWocWWOawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeD03qN kHhpxgagdgbvMz1cuVp6MB8GA1UdIwQYMBaAFPKbI+pOEUzcnKbTf173nvTDXHKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDM3Mi8yMEE1NEZDODlE ODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlROeWNwdE5fWHZlZTlNTmNj b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2NvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDM3Mi8yMEE1NEZDODlEODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlRO eWNwdE5fWHZlZTlNTmNjb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgJ/7dKNE6x1iL7vm/riXbpjrVYs8d6vH7TJKLxig0Qs6ZGqvpQ0MQ dReiynmsUU6HM8aaDG9PyKs5Yt01iQqyGOL7QWh4VVcxsYWbE1e5i2o8K2jLet+B MfMaVwhibF/Ink9jg9na5MU/xYJKQQW2rSgyAAyN7ZlxqPlIfTas+N5aXJZjnODM 6QQRDvqOq/mhr9MJzrrbxSpiVB0a6couVndeu+ZuM+6IDrNSfKUaOQSC6vTiSM50 L/tT/gmDpngVMtEshLQ+ar53ieAyeqeWKpTFIaAL9J2DW+fAQCz36HZLhk3GPhsx udMbxxzU4vnesCwg4L7sFMYJCgvRknmO -----END CERTIFICATE-----Generated at Mon Jul 21 06:16:40 2025 by rpki-client