$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft File: 8ZLUrYbOEPyWgn_JNIDz-9716mE.mft (raw, json) Hash identifier: uEZbLIqfQg8N/+W40P8F7MhxgHC31eWNuX2c2Iw07/8= Subject key identifier: 71:3C:D3:3D:D5:AC:CB:CF:3E:97:FC:E6:30:19:68:71:A8:74:2B:A1 Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft Manifest number: 04AD Signing time: Mon 21 Jul 2025 00:10:07 +0000 Manifest this update: Mon 21 Jul 2025 00:10:07 +0000 Manifest next update: Mon 28 Jul 2025 00:10:07 +0000 Files and hashes: 1: 8ZLUrYbOEPyWgn_JNIDz-9716mE.crl (hash: lbefuF43holTfkuwrqVRHrqHNpwc0KGU2a8xYZJpBA0=) 2: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (hash: N7zAF6qotCb0ywjS2VK9+Nbg9CvfxH2mHM6x46+8gNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: Jul 21 00:10:07 2025 GMT Not After : Jul 28 00:10:07 2025 GMT Subject: CN=687d855f-3ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b9:a4:aa:61:45:76:00:a2:5d:fd:c2:ea:e2: d1:14:37:a7:1d:d6:56:12:0c:5a:58:ac:b5:85:6a: ef:06:af:92:d3:1b:2d:e8:f1:37:a6:b4:14:5c:d2: 29:c3:84:7b:a5:64:d0:8f:b8:92:95:09:33:1d:09: fd:3f:3d:2c:e0:b4:51:68:d8:33:fc:d5:2a:ff:a3: 26:f6:74:d9:25:5e:bc:51:0c:7f:12:0d:f2:bf:c6: a2:af:bf:9c:e9:0a:00:23:27:45:a1:fa:51:25:68: 8c:4d:55:e6:1f:a0:e1:97:51:e6:59:0d:48:fe:95: 14:bd:9e:c4:3f:39:54:5a:e6:f9:88:6f:57:39:72: 0c:e4:6c:04:9f:56:f9:ea:1f:c6:df:3c:34:83:54: 0e:16:ec:b6:85:ba:b1:8f:52:3d:0a:de:d5:38:e1: 96:00:d7:28:ef:a3:3f:c4:5e:94:70:0b:87:55:9f: 30:8f:8b:56:89:4c:20:32:1f:94:e1:41:56:99:c5: 6f:0f:93:cc:c1:90:5c:d7:13:32:4b:4b:e0:e5:64: 6d:1f:e8:d1:f3:3e:09:c1:a7:56:83:18:23:e6:fc: 5c:27:dc:d7:bf:a8:3f:bc:39:04:74:2f:a3:95:22: 61:a9:d0:7a:7d:43:44:61:56:b8:ce:19:64:b2:f2: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3C:D3:3D:D5:AC:CB:CF:3E:97:FC:E6:30:19:68:71:A8:74:2B:A1 X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:96:dd:be:9c:dd:f9:bb:40:f8:eb:bf:a0:98:6e:b8:5e:9c: 83:1b:d7:9a:bb:d6:4c:a0:a9:88:0d:ee:6d:04:90:57:89:c9: ac:3b:ad:ed:6e:e3:c9:b2:48:a9:99:d8:e6:97:5e:fb:53:d4: d9:fc:c2:4d:84:09:79:fb:32:18:d0:3d:64:0f:43:c3:ed:dc: 97:c3:fe:1a:01:0d:2a:7f:64:1e:0a:44:73:aa:1f:ec:f4:0f: 7b:2f:33:24:31:23:ea:ce:17:a9:2a:8c:11:de:db:5f:ef:66: 51:d5:05:c3:82:28:79:7f:89:fc:95:5c:6d:35:27:a8:c8:19: 76:5b:8f:9d:5b:b1:e0:b9:5d:b2:eb:cb:85:13:66:0d:3a:3a: 9f:0f:5c:a5:81:9e:a6:77:20:2b:f4:1b:0e:d4:a2:2a:e9:b0: 74:72:40:e4:ad:22:05:40:3a:9c:52:58:df:b0:67:21:39:bd: ef:9b:bb:cf:6d:89:69:38:e8:a3:69:c6:ed:85:88:62:0c:52: 27:45:fc:9f:97:77:22:8b:c5:f3:7a:9d:a6:1c:df:01:25:10: 90:af:6e:b5:7f:28:fc:a5:85:0a:c3:1c:bc:5a:4f:7e:9a:67: e7:00:fa:b0:f7:9d:e8:b9:bb:9b:b5:4e:a0:c0:12:16:89:61: a5:fc:a5:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjUwNzIxMDAxMDA3WhcNMjUwNzI4MDAxMDA3WjAYMRYwFAYD VQQDEw02ODdkODU1Zi0zYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57mkqmFFdgCiXf3C6uLRFDenHdZWEgxaWKy1hWrvBq+S0xst6PE3prQUXNIp w4R7pWTQj7iSlQkzHQn9Pz0s4LRRaNgz/NUq/6Mm9nTZJV68UQx/Eg3yv8air7+c 6QoAIydFofpRJWiMTVXmH6Dhl1HmWQ1I/pUUvZ7EPzlUWub5iG9XOXIM5GwEn1b5 6h/G3zw0g1QOFuy2hbqxj1I9Ct7VOOGWANco76M/xF6UcAuHVZ8wj4tWiUwgMh+U 4UFWmcVvD5PMwZBc1xMyS0vg5WRtH+jR8z4JwadWgxgj5vxcJ9zXv6g/vDkEdC+j lSJhqdB6fUNEYVa4zhlksvLjZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHE80z3V rMvPPpf85jAZaHGodCuhMB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzhFOC9CODlFQjY5MDNFMUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQ eVdnbl9KTklEei05NzE2bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChlt2+nN35u0D467+gmG64XpyDG9eau9ZMoKmIDe5tBJBXicmsO63t buPJskipmdjml177U9TZ/MJNhAl5+zIY0D1kD0PD7dyXw/4aAQ0qf2QeCkRzqh/s 9A97LzMkMSPqzhepKowR3ttf72ZR1QXDgih5f4n8lVxtNSeoyBl2W4+dW7HguV2y 68uFE2YNOjqfD1ylgZ6mdyAr9BsO1KIq6bB0ckDkrSIFQDqcUljfsGchOb3vm7vP bYlpOOijacbthYhiDFInRfyfl3cii8Xzep2mHN8BJRCQr261fyj8pYUKwxy8Wk9+ mmfnAPqw953oububtU6gwBIWiWGl/KW5 -----END CERTIFICATE-----Generated at Tue Jul 22 05:14:22 2025 by rpki-client