$ rpki-client -vvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft File: 8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json) Hash identifier: 6tI79hemAWro/w592HdVswz3AEL2vblYsuUE14JHGJk= Subject key identifier: 08:CF:33:1F:D9:F9:4F:9B:9B:44:18:DB:59:C5:C6:76:CD:6F:13:3D Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00 Certificate issuer: /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600 Certificate serial: 074E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft Manifest number: 0748 Signing time: Thu 12 Jun 2025 21:22:07 +0000 Manifest this update: Thu 12 Jun 2025 21:22:07 +0000 Manifest next update: Thu 19 Jun 2025 21:22:07 +0000 Files and hashes: 1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: 2KMH1prildLO3ShxZIbMyuOXaK5xGjGfRqPfiLPlnr4=) 2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: g3w/XsJqAxVEVlKlr0cv2aQ+w+aC0v9T6kWu2Ywl2js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D750, serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600 Validity Not Before: Jun 12 21:22:07 2025 GMT Not After : Jun 19 21:22:07 2025 GMT Subject: CN=684b44ff-efc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:08:58:d6:55:6f:4e:a0:6a:20:73:1c:7e:f6: d2:cc:d8:57:66:83:a5:ba:10:65:a6:2d:f3:19:10: ce:6b:16:5c:9d:a6:99:3b:7d:22:67:e4:ee:85:33: 7b:a9:f2:52:f8:ac:d5:0a:a8:e5:99:40:12:4f:81: e5:f6:14:2b:e8:3c:97:43:78:8d:07:a0:4a:24:99: 62:7e:cc:6b:43:11:27:32:f1:5c:db:fc:47:6f:1b: 4a:39:56:a7:57:54:0d:ed:f4:40:fd:51:dd:f6:12: db:a2:f1:1f:8a:03:23:d9:e3:c1:f0:a0:b7:4a:9c: da:2e:af:ad:9b:da:83:24:81:68:de:61:46:f6:ea: fa:a0:e5:e4:94:10:81:f7:0b:ab:f0:66:3b:96:31: 15:52:2d:f7:26:53:99:ca:86:f4:68:f7:59:16:48: 8a:91:52:54:29:48:29:7e:40:f8:ea:d6:7e:4e:db: 3e:32:a3:36:46:98:56:a1:9f:5e:84:7e:fa:e4:fc: fa:71:0b:c9:ea:8f:9f:24:ef:3b:e5:0b:42:00:94: 61:f8:30:95:da:5f:78:9c:76:79:bf:a3:39:d8:3f: 1f:f3:94:7f:80:b4:84:c7:76:e4:ae:dc:4a:45:f3: c7:b0:e6:b2:2d:df:0f:20:c8:7d:5c:00:d4:f1:92: aa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CF:33:1F:D9:F9:4F:9B:9B:44:18:DB:59:C5:C6:76:CD:6F:13:3D X509v3 Authority Key Identifier: keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:52:b4:a2:3c:e1:66:1c:e5:19:fd:aa:31:2d:6d:b9:75:3f: 81:ec:ba:a8:7e:1b:12:e7:d7:10:68:27:66:8b:10:eb:4b:11: c2:67:3a:f0:81:0d:37:57:64:46:1c:40:00:85:56:16:c4:f5: f2:01:d0:88:81:51:9e:ed:0d:23:19:ff:45:13:29:a2:1b:8c: 57:3d:eb:98:02:54:33:b1:0e:99:85:bd:d6:84:df:36:96:a5: e0:d8:e2:2e:d2:60:ee:81:30:8b:25:4c:49:3b:55:83:00:de: c4:56:a6:6a:43:37:8a:9b:7f:e6:d1:47:1c:27:fc:95:bc:c8: 70:08:c9:33:6b:1a:f3:9a:61:65:a2:64:d8:cd:51:b6:d3:d4: 13:cc:f3:68:63:fc:ac:01:28:11:94:85:46:ab:e9:c1:20:c3: 81:cf:66:8c:9f:17:84:93:8c:60:e2:e9:bf:0a:54:94:95:76: 7e:7b:a3:de:c7:df:08:12:08:f1:04:56:12:72:0c:30:24:73: 9d:9f:bf:b4:8f:94:a3:29:e5:68:04:71:24:3f:14:af:bf:d4: 33:ed:b9:aa:7d:1b:19:80:88:b5:69:c5:2d:fb:f7:f0:83:8f: 48:13:10:bb:b1:3c:aa:69:1f:1b:85:5e:85:b4:2a:fb:de:3a: 3b:f7:9f:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ3NTAxMTAvBgNVBAUTKEYxODlDREYwRkI5RjlDNjkxMjkxQTE0NjY4MTlEMTND NEU4Qzk2MDAwHhcNMjUwNjEyMjEyMjA3WhcNMjUwNjE5MjEyMjA3WjAYMRYwFAYD VQQDEw02ODRiNDRmZi1lZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ghY1lVvTqBqIHMcfvbSzNhXZoOluhBlpi3zGRDOaxZcnaaZO30iZ+TuhTN7 qfJS+KzVCqjlmUAST4Hl9hQr6DyXQ3iNB6BKJJlifsxrQxEnMvFc2/xHbxtKOVan V1QN7fRA/VHd9hLbovEfigMj2ePB8KC3SpzaLq+tm9qDJIFo3mFG9ur6oOXklBCB 9wur8GY7ljEVUi33JlOZyob0aPdZFkiKkVJUKUgpfkD46tZ+Tts+MqM2RphWoZ9e hH765Pz6cQvJ6o+fJO875QtCAJRh+DCV2l94nHZ5v6M52D8f85R/gLSEx3bkrtxK RfPHsOayLd8PIMh9XADU8ZKqbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjPMx/Z +U+bm0QY21nFxnbNbxM9MB8GA1UdIwQYMBaAFPGJzfD7n5xpEpGhRmgZ0TxOjJYA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDc1MC8wRkE3QzZCNjJB MTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5Ha1NrYUZHYUJuUlBFNk1s Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZbk44UHVmbkdrU2thRkdhQm5SUEU2TWxnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDc1MC8wRkE3QzZCNjJBMTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5H a1NrYUZHYUJuUlBFNk1sZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRUrSiPOFmHOUZ/aoxLW25dT+B7LqofhsS59cQaCdmixDrSxHCZzrw gQ03V2RGHEAAhVYWxPXyAdCIgVGe7Q0jGf9FEymiG4xXPeuYAlQzsQ6Zhb3WhN82 lqXg2OIu0mDugTCLJUxJO1WDAN7EVqZqQzeKm3/m0UccJ/yVvMhwCMkzaxrzmmFl omTYzVG209QTzPNoY/ysASgRlIVGq+nBIMOBz2aMnxeEk4xg4um/ClSUlXZ+e6Pe x98IEgjxBFYScgwwJHOdn7+0j5SjKeVoBHEkPxSvv9Qz7bmqfRsZgIi1acUt+/fw g49IExC7sTyqaR8bhV6FtCr73jo795/6 -----END CERTIFICATE-----Generated at Fri Jun 13 15:39:00 2025 by rpki-client