$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: u7bKa5w3lEg/zzGuQLytR3VaD95WLsLWtpzQ+/dUcLk= Subject key identifier: 33:41:32:FA:6B:91:C4:A6:6E:7D:41:E2:B3:41:5B:9A:DC:DD:CE:11 Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 017C Signing time: Sun 27 Jul 2025 03:51:33 +0000 Manifest this update: Sun 27 Jul 2025 03:51:33 +0000 Manifest next update: Sun 03 Aug 2025 03:51:33 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: X7tYr7Sl23TbM0qLvCMsAnt9VBHDq3DJCTdH2gC4LrI=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: JUSU1VmCrt2YGTrN+Q0jV8oiBs7Aumf+6ve9iuHLrvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Jul 27 03:51:33 2025 GMT Not After : Aug 3 03:51:33 2025 GMT Subject: CN=6885a245-c4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:8f:5a:e8:f9:4a:ac:55:44:7f:d8:6c:7b: 47:97:75:43:d6:1a:60:37:cb:a6:e6:16:91:bc:1b: 37:36:1a:e4:7c:ed:cd:ae:27:ba:0f:2b:d9:a4:fc: c9:29:e2:93:14:2f:fc:55:09:86:47:4c:57:f2:19: e6:f9:f9:db:7c:37:48:e5:ed:db:72:a8:55:77:28: d1:b2:09:09:8e:25:4c:ef:a6:69:c9:80:fd:b2:e7: 5f:8c:01:e1:16:96:c9:90:21:1f:b8:0b:3f:4e:9c: 21:f4:26:81:95:45:ca:56:f2:d6:85:ba:2a:af:50: 3d:c1:5b:85:c4:9f:2b:c3:93:0b:3d:bf:f8:3e:cd: 38:71:86:ae:3d:f6:76:4b:24:d4:63:ea:8b:f3:46: 32:98:c3:cd:cc:f4:49:b1:f2:6b:c2:a3:0b:e8:21: ef:4a:13:b8:ab:43:75:d8:7d:46:05:aa:9a:82:81: 46:b1:a8:bd:00:bf:05:6d:05:42:72:1c:99:83:0b: fd:24:0f:6b:e2:19:92:d6:d8:cc:ff:18:06:f0:2b: 6c:06:f8:0c:83:f9:6e:d4:a0:8c:3c:be:78:98:9c: cb:73:14:25:06:e2:84:55:49:68:c6:5f:1c:4d:ca: de:ad:e3:9c:b0:36:68:31:46:f3:6b:12:dc:07:bf: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:41:32:FA:6B:91:C4:A6:6E:7D:41:E2:B3:41:5B:9A:DC:DD:CE:11 X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ff:5e:aa:6e:1e:6f:17:eb:6a:98:c6:40:06:b9:6a:e9:f0: bd:2a:64:09:0d:e2:e6:aa:5d:41:6d:60:54:5f:84:f5:03:a1: ad:81:fc:d9:e4:b9:71:1e:58:02:de:60:7f:ee:85:44:3f:59: 5c:f0:74:19:a3:fe:13:76:5b:ab:6d:2e:27:fc:16:04:04:d9: 60:35:b5:c8:fb:d4:fa:38:49:8b:b0:62:70:df:31:a9:6d:e6: b2:53:da:f6:9b:cd:d2:b4:47:fb:91:42:24:ba:4b:cc:94:9c: 1f:20:c9:75:44:40:41:b2:23:61:f6:68:b2:d0:1e:1f:5d:fb: 6a:e5:af:59:a4:4b:63:34:ed:09:e3:3e:e7:88:b5:c3:41:c8: 99:34:69:72:04:6e:3e:4c:7c:00:e6:f3:67:0d:e9:6d:cf:2c: 2b:2f:ae:30:0a:18:13:00:4b:58:5e:bf:7a:ce:82:ac:64:b9: a3:06:9c:33:bd:16:c7:b7:ed:c9:e7:14:67:1e:a0:8d:ee:e0: 94:b6:18:c5:28:f1:be:69:e2:03:f0:ac:fe:2f:c9:c8:f1:45: 26:b6:29:ef:8e:4c:e6:61:7e:5d:46:ff:a2:98:d2:04:ea:c3: 19:b1:b3:a3:23:bc:07:07:07:02:a9:b4:84:91:84:24:f0:12: 3a:c5:67:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwNzI3MDM1MTMzWhcNMjUwODAzMDM1MTMzWjAYMRYwFAYD VQQDEw02ODg1YTI0NS1jNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3yPWuj5SqxVRH/YbHtHl3VD1hpgN8um5haRvBs3NhrkfO3Nrie6DyvZpPzJ KeKTFC/8VQmGR0xX8hnm+fnbfDdI5e3bcqhVdyjRsgkJjiVM76ZpyYD9sudfjAHh FpbJkCEfuAs/Tpwh9CaBlUXKVvLWhboqr1A9wVuFxJ8rw5MLPb/4Ps04cYauPfZ2 SyTUY+qL80YymMPNzPRJsfJrwqML6CHvShO4q0N12H1GBaqagoFGsai9AL8FbQVC chyZgwv9JA9r4hmS1tjM/xgG8CtsBvgMg/lu1KCMPL54mJzLcxQlBuKEVUloxl8c TcrereOcsDZoMUbzaxLcB78pVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNBMvpr kcSmbn1B4rNBW5rc3c4RMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8/16qbh5vF+tqmMZABrlq6fC9KmQJDeLmql1BbWBUX4T1A6GtgfzZ 5LlxHlgC3mB/7oVEP1lc8HQZo/4TdlurbS4n/BYEBNlgNbXI+9T6OEmLsGJw3zGp beayU9r2m83StEf7kUIkukvMlJwfIMl1REBBsiNh9miy0B4fXftq5a9ZpEtjNO0J 4z7niLXDQciZNGlyBG4+THwA5vNnDeltzywrL64wChgTAEtYXr96zoKsZLmjBpwz vRbHt+3J5xRnHqCN7uCUthjFKPG+aeID8Kz+L8nI8UUmtinvjkzmYX5dRv+imNIE 6sMZsbOjI7wHBwcCqbSEkYQk8BI6xWdj -----END CERTIFICATE-----Generated at Sun Jul 27 05:46:15 2025 by rpki-client