$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: +uLlA3paCPjNiZQONjQxPr3pgvoLJ7Z53PNEBh/KcRM= Subject key identifier: DA:DE:68:7F:67:A2:DE:08:91:E6:BD:15:77:23:20:15:8C:F8:2F:D7 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 014E Signing time: Mon 21 Jul 2025 04:17:08 +0000 Manifest this update: Mon 21 Jul 2025 04:17:07 +0000 Manifest next update: Mon 28 Jul 2025 04:17:07 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: yBWSe/d/SsHUt/Rgv9OpsMOVdjTihmweEvGt34avabY=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: UDY5XZZpboPOe4PuKIjoZcv8Z+maPhsL8V3N8OWNJu4=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: QxDb9utS5i/B8urK72tRRFJFcT0cVUwBUSamNqzNfT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Jul 21 04:17:07 2025 GMT Not After : Jul 28 04:17:07 2025 GMT Subject: CN=687dbf44-8ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:d6:42:18:e5:0a:74:79:7d:04:d7:a8:79: 66:9f:fa:40:dc:ec:98:24:c7:5a:1d:f3:84:33:99: c7:b5:5a:5e:3f:07:fe:f8:d4:fa:09:80:e4:07:43: 7f:82:ed:ee:df:ce:e9:2b:c8:71:e4:08:f7:5e:de: 81:25:d8:20:09:05:b8:0b:6e:43:bc:58:b5:b5:87: 6e:e8:85:5b:b7:6c:2b:31:7d:fa:d0:37:91:64:43: b6:da:14:0e:64:1e:55:59:51:8c:f2:fc:17:df:29: 2a:73:a6:09:ae:d9:a2:21:82:ea:6c:ff:40:eb:60: ae:0c:9b:6f:3d:60:4a:05:63:12:ec:21:0a:a3:80: 36:aa:64:5f:e7:58:32:4e:17:a5:a5:b5:68:e5:79: 9a:04:f0:f0:6b:ee:2a:28:ac:90:e8:64:32:6e:56: 77:27:55:a7:3b:32:4a:aa:f1:e6:c4:e8:46:4b:ba: 8f:f0:d5:d7:9a:b5:09:1f:1f:b6:ff:fc:1b:0d:95: ee:42:4a:fb:72:5a:f3:8e:e1:8f:6c:e9:20:63:b8: 6c:7b:2f:b2:32:e6:36:78:1b:9a:6b:bf:04:8f:71: 24:dc:78:42:22:ca:1f:9e:49:2b:1c:38:2a:a1:c0: d4:52:35:92:22:8d:bd:b7:9e:b1:9b:4f:b8:fe:37: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DE:68:7F:67:A2:DE:08:91:E6:BD:15:77:23:20:15:8C:F8:2F:D7 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:84:78:fe:e6:5a:99:6d:82:52:23:09:7c:ea:86:30:a6:0e: dc:1c:63:d0:37:39:55:dd:9c:ef:db:a7:16:3a:3b:26:d3:b7: a7:e2:93:13:46:08:7e:d5:5c:e8:10:60:f0:aa:f4:51:1f:de: f9:2f:27:a0:13:5b:1a:e2:d7:6e:a8:fe:d8:8c:37:3d:8e:16: bb:ff:02:2b:ec:4b:ba:de:c5:d5:32:76:25:33:97:58:9e:0c: f2:a3:37:58:c3:a5:78:7f:d2:8d:c5:b8:14:6e:3c:ec:c0:bb: 54:6b:46:bb:f9:27:a0:70:29:0d:4d:63:b8:d2:bb:44:1c:30: 6c:99:3a:76:9a:d0:ba:8a:b4:88:68:b6:32:71:1d:b5:a7:eb: 55:48:c0:c2:b4:a2:ca:50:f7:13:e2:b7:ba:1f:5b:e3:5a:bb: b4:d9:8d:d8:db:41:1c:04:ad:33:b3:bc:7e:29:2f:26:01:25: 81:8a:b2:29:b9:0b:5d:5a:30:15:e2:fa:2f:1f:20:28:79:f6: 3b:35:49:b9:dc:40:ae:ed:85:ca:bb:14:07:9f:34:a5:12:f9: b6:e9:16:3a:12:74:e1:94:08:e1:74:ac:3f:59:33:92:dd:a2: 7d:a0:7e:3c:61:43:2f:ac:b8:34:cb:8b:99:cd:f6:6b:5d:59: ad:57:46:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjUwNzIxMDQxNzA3WhcNMjUwNzI4MDQxNzA3WjAYMRYwFAYD VQQDEw02ODdkYmY0NC04ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl3WQhjlCnR5fQTXqHlmn/pA3OyYJMdaHfOEM5nHtVpePwf++NT6CYDkB0N/ gu3u387pK8hx5Aj3Xt6BJdggCQW4C25DvFi1tYdu6IVbt2wrMX360DeRZEO22hQO ZB5VWVGM8vwX3ykqc6YJrtmiIYLqbP9A62CuDJtvPWBKBWMS7CEKo4A2qmRf51gy ThelpbVo5XmaBPDwa+4qKKyQ6GQyblZ3J1WnOzJKqvHmxOhGS7qP8NXXmrUJHx+2 //wbDZXuQkr7clrzjuGPbOkgY7hsey+yMuY2eBuaa78Ej3Ek3HhCIsofnkkrHDgq ocDUUjWSIo29t56xm0+4/jcnPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNreaH9n ot4Ikea9FXcjIBWM+C/XMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAthHj+5lqZbYJSIwl86oYwpg7cHGPQNzlV3Zzv26cWOjsm07en4pMT Rgh+1VzoEGDwqvRRH975LyegE1sa4tduqP7YjDc9jha7/wIr7Eu63sXVMnYlM5dY ngzyozdYw6V4f9KNxbgUbjzswLtUa0a7+SegcCkNTWO40rtEHDBsmTp2mtC6irSI aLYycR21p+tVSMDCtKLKUPcT4re6H1vjWru02Y3Y20EcBK0zs7x+KS8mASWBirIp uQtdWjAV4vovHyAoefY7NUm53ECu7YXKuxQHnzSlEvm26RY6EnThlAjhdKw/WTOS 3aJ9oH48YUMvrLg0y4uZzfZrXVmtV0Yj -----END CERTIFICATE-----Generated at Mon Jul 21 05:51:07 2025 by rpki-client