$ rpki-client -vvf rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft File: R8cEZQRKLhQBRUf6ebt6VP42674.mft (raw, json) Hash identifier: 6kb1AvU0MUCfiZ73Bp0VYDnaqubZFbUqGkbHGT0aJao= Subject key identifier: 0F:07:20:0D:3A:FC:54:7C:D3:97:9D:C3:60:28:D8:58:CA:96:12:21 Authority key identifier: 47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE Certificate issuer: /CN=A919B80A/serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE Certificate serial: 069B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft Manifest number: 0696 Signing time: Fri 30 May 2025 22:25:56 +0000 Manifest this update: Fri 30 May 2025 22:25:56 +0000 Manifest next update: Fri 06 Jun 2025 22:25:56 +0000 Files and hashes: 1: R8cEZQRKLhQBRUf6ebt6VP42674.crl (hash: yps1Vo+8Vv/EdhFOsUAGIyNrYUGmhKUSZjGKol7qRnc=) 2: 858F093E6D6C11EBA3CFBD21C4F9AE02.roa (hash: bRtjBGYS/QbRw/iqaVSzb9XF2vNOvi7n10101duqilA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.crl rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1691 (0x69b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B80A, serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE Validity Not Before: May 30 22:25:56 2025 GMT Not After : Jun 6 22:25:56 2025 GMT Subject: CN=683a3074-a7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:28:6b:84:1b:30:3a:6f:33:e5:3e:61:94:fe: 1b:95:e7:2b:85:eb:c5:0e:1b:20:d9:9a:a3:91:b4: 84:1d:f8:70:1e:0a:66:5e:0f:f3:71:f7:a6:4e:60: e9:eb:2a:4d:1d:28:45:59:40:cb:ec:22:bc:bc:7b: dc:c4:c2:f7:5a:b3:4a:26:28:5b:ea:3e:4a:d3:a3: e6:34:6a:e0:d8:b4:bb:f3:82:e1:c2:90:25:b3:59: ba:09:26:21:ea:09:56:6f:ed:6b:99:69:c4:47:ae: 7d:a9:e9:83:34:1a:a0:11:af:37:a8:df:2b:37:31: e1:4d:be:48:75:86:bc:c0:81:8a:71:35:41:f5:73: 7b:7d:f3:26:a9:50:a4:33:e6:38:a5:3e:8f:29:f1: 9a:2d:95:5c:c8:85:a0:80:c6:ee:26:8d:6b:9a:0b: b7:93:0d:d2:aa:b7:24:1b:25:ec:71:68:9d:9a:91: 76:be:13:35:85:62:ee:81:46:3e:7f:f6:86:a4:60: 06:4f:f8:92:94:02:9c:02:98:22:17:83:3f:9e:68: 99:67:79:86:92:65:36:a7:4b:99:99:b2:a7:a4:6d: 5d:31:08:fc:a4:06:8d:54:60:59:47:f4:0b:04:c1: 6f:06:69:21:a4:d5:c2:00:1e:42:b8:ef:3f:70:4b: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:07:20:0D:3A:FC:54:7C:D3:97:9D:C3:60:28:D8:58:CA:96:12:21 X509v3 Authority Key Identifier: keyid:47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:4d:f8:74:cf:8c:3d:df:34:6f:04:c9:67:40:34:96:1a:38: c0:7c:89:58:7f:d6:39:f4:82:53:1f:39:96:e3:1a:6f:d2:12: e1:0e:00:f6:e2:96:8f:fe:84:e0:b6:e8:b6:ef:c7:25:62:eb: 44:72:1e:d1:d1:73:97:7d:e8:a0:b2:d6:85:47:13:5c:42:af: e5:ea:fd:99:ed:9b:f2:37:be:8d:4f:ff:93:d3:42:90:e0:32: 67:d0:3c:23:31:98:7e:71:48:c4:59:58:e3:35:13:9d:a4:22: 2b:5b:dd:f2:6f:aa:02:ac:09:8f:d9:f0:82:0c:fc:fe:b6:8b: 1f:33:74:b7:2e:16:98:f0:bc:42:46:9a:c8:0b:67:09:59:71: 5b:cd:c0:ab:ec:c1:a6:48:cc:f0:1c:03:c9:6e:40:0c:29:82: 9c:22:72:f5:d7:85:a8:57:90:bc:d3:52:c0:20:a3:a5:24:25: f9:1a:3f:21:4a:a8:37:cd:03:40:15:b8:71:8a:87:4d:1c:1c: a7:a1:d2:c0:89:fc:dc:b2:5d:f5:3f:3c:e6:58:e5:20:42:0e: 14:66:17:e8:36:ac:ef:13:79:89:5d:12:06:8a:f1:ef:17:a8: de:ca:a5:91:26:ec:be:34:c0:4d:f0:80:59:26:04:61:6a:e6: 06:f9:ab:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI4MEExMTAvBgNVBAUTKDQ3QzcwNDY1MDQ0QTJFMTQwMTQ1NDdGQTc5QkI3QTU0 RkUzNkVCQkUwHhcNMjUwNTMwMjIyNTU2WhcNMjUwNjA2MjIyNTU2WjAYMRYwFAYD VQQDEw02ODNhMzA3NC1hN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ShrhBswOm8z5T5hlP4blecrhevFDhsg2ZqjkbSEHfhwHgpmXg/zcfemTmDp 6ypNHShFWUDL7CK8vHvcxML3WrNKJihb6j5K06PmNGrg2LS784LhwpAls1m6CSYh 6glWb+1rmWnER659qemDNBqgEa83qN8rNzHhTb5IdYa8wIGKcTVB9XN7ffMmqVCk M+Y4pT6PKfGaLZVcyIWggMbuJo1rmgu3kw3SqrckGyXscWidmpF2vhM1hWLugUY+ f/aGpGAGT/iSlAKcApgiF4M/nmiZZ3mGkmU2p0uZmbKnpG1dMQj8pAaNVGBZR/QL BMFvBmkhpNXCAB5CuO8/cEtuBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8HIA06 /FR805edw2Ao2FjKlhIhMB8GA1UdIwQYMBaAFEfHBGUESi4UAUVH+nm7elT+Nuu+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgwQS9GOEU3MjI1NjZE NkExMUVCQjA0Rjg2MjBDNEY5QUUwMi9SOGNFWlFSS0xoUUJSVWY2ZWJ0NlZQNDI2 NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I4Y0VaUVJLTGhRQlJVZjZlYnQ2VlA0MjY3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjgwQS9GOEU3MjI1NjZENkExMUVCQjA0Rjg2MjBDNEY5QUUwMi9SOGNFWlFSS0xo UUJSVWY2ZWJ0NlZQNDI2NzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASTfh0z4w93zRvBMlnQDSWGjjAfIlYf9Y59IJTHzmW4xpv0hLhDgD2 4paP/oTgtui278clYutEch7R0XOXfeigstaFRxNcQq/l6v2Z7ZvyN76NT/+T00KQ 4DJn0DwjMZh+cUjEWVjjNROdpCIrW93yb6oCrAmP2fCCDPz+tosfM3S3LhaY8LxC RprIC2cJWXFbzcCr7MGmSMzwHAPJbkAMKYKcInL114WoV5C801LAIKOlJCX5Gj8h Sqg3zQNAFbhxiodNHBynodLAifzcsl31PzzmWOUgQg4UZhfoNqzvE3mJXRIGivHv F6jeyqWRJuy+NMBN8IBZJgRhauYG+aso -----END CERTIFICATE-----Generated at Sat May 31 17:42:36 2025 by rpki-client