$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: s/h245028gzPVWCgowf3HAFCr4bBGalf0vhzu33xTHo= Subject key identifier: 07:9A:C2:51:21:EC:2C:10:28:6C:15:82:D0:28:F0:C2:5E:44:9E:51 Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: 6C Signing time: Thu 05 Jun 2025 06:23:05 +0000 Manifest this update: Thu 05 Jun 2025 06:23:05 +0000 Manifest next update: Thu 12 Jun 2025 06:23:05 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: Y7QPRQwba47tQDlhYOHdKIdA3bBjj7FBl0HL/btuyr0=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 06:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Jun 5 06:23:05 2025 GMT Not After : Jun 12 06:23:05 2025 GMT Subject: CN=684137c9-ab8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:ab:ac:b0:1e:40:79:77:15:ee:b9:27:f0: bf:03:87:8c:32:f8:67:97:67:08:7b:a7:7c:ad:b5: 18:a0:07:41:c1:52:c6:76:60:f4:5c:54:60:4f:ef: b4:ee:74:f5:ce:b9:97:c5:ec:ea:24:da:cc:ef:2a: ca:cf:e9:0c:b4:a2:1a:bd:d0:29:71:37:53:12:c2: 4b:f4:7b:d6:89:5b:b7:0e:b7:7a:09:7d:76:4f:f8: af:b5:e5:e5:da:25:06:3f:42:47:c4:56:c2:a2:13: 95:94:3e:e7:ec:3a:43:81:66:60:a4:a3:03:21:e8: 18:ad:1b:80:ac:aa:b0:63:6a:ca:b9:cf:da:a1:79: 91:d9:4e:7d:38:20:96:85:ce:44:d4:b4:0f:70:70: fe:20:e9:f1:33:f1:1f:48:fd:fb:33:9f:3d:b9:e0: 94:ee:d3:df:9d:02:bf:35:fb:53:cf:92:fc:b3:3c: b3:3d:08:cd:89:5b:16:af:35:64:46:29:35:2c:a4: bd:6c:d9:aa:24:ee:30:41:09:26:a1:ad:f6:bb:ab: 2f:7a:51:31:67:ed:dd:a1:6d:0a:31:b0:88:40:a3: df:dc:55:fe:46:07:67:94:47:f7:2f:ce:5d:0b:6e: 7b:35:4b:23:3f:9e:d4:98:8c:f2:fc:53:60:cb:18: 3c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9A:C2:51:21:EC:2C:10:28:6C:15:82:D0:28:F0:C2:5E:44:9E:51 X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4a:6b:c0:cf:56:38:bf:cb:1d:48:ea:5e:bb:b4:7f:ba:98: 47:03:13:db:e8:4a:66:87:64:cf:5f:7a:19:ab:3a:5b:58:fc: d3:c9:42:70:09:08:4b:4a:94:f3:ab:01:c7:9e:23:e0:3b:1f: 85:4d:ed:8f:29:07:6c:c5:98:f8:0a:67:a3:cd:c0:a0:c9:a5: 35:86:ac:9b:e1:27:ba:b4:76:6d:1c:12:a1:28:c9:52:2d:d0: 39:ea:e4:c4:5f:e0:25:fa:ed:d1:19:f3:60:1b:a9:fb:6d:b3: 92:6e:91:73:7d:11:86:8a:47:2a:e7:69:3d:c8:4c:f9:de:e9: 41:c1:b7:a3:12:a7:21:24:05:aa:d7:21:8e:79:63:52:ac:e3: f8:e8:e0:be:32:94:ef:86:a1:8c:a2:92:de:46:ef:78:ba:ed: b3:46:0d:7a:49:dc:87:38:f8:8c:4e:ca:9d:d2:82:25:cd:4c: ae:45:f4:f8:9b:67:58:fb:3f:76:d3:49:f3:bb:27:08:e3:30: e1:6a:76:00:2a:d1:33:fb:59:08:8f:59:86:35:91:8c:17:75: 8e:9c:0d:0a:3e:45:94:45:d3:7d:87:6d:7e:15:b3:36:b1:df: 1e:f3:17:c4:ef:9f:44:60:be:38:33:f0:66:77:d5:1a:33:7e: a1:d5:03:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoRjE1RDExNzkwQjBFNzUzNTc0MDY2MTFEQzU3MDU4RjY5 REM1NzhBMDAeFw0yNTA2MDUwNjIzMDVaFw0yNTA2MTIwNjIzMDVaMBgxFjAUBgNV BAMTDTY4NDEzN2M5LWFiOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5M6ussB5AeXcV7rkn8L8Dh4wy+GeXZwh7p3yttRigB0HBUsZ2YPRcVGBP77Tu dPXOuZfF7Ook2szvKsrP6Qy0ohq90ClxN1MSwkv0e9aJW7cOt3oJfXZP+K+15eXa JQY/QkfEVsKiE5WUPufsOkOBZmCkowMh6BitG4CsqrBjasq5z9qheZHZTn04IJaF zkTUtA9wcP4g6fEz8R9I/fsznz254JTu09+dAr81+1PPkvyzPLM9CM2JWxavNWRG KTUspL1s2aok7jBBCSahrfa7qy96UTFn7d2hbQoxsIhAo9/cVf5GB2eUR/cvzl0L bns1SyM/ntSYjPL8U2DLGDzbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB5rCUSHs LBAobBWC0Cjwwl5EnlEwHwYDVR0jBBgwFoAU8V0ReQsOdTV0BmEdxXBY9p3FeKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFYwUmVRc09kVFYwQm1FZHhYQlk5cDNGZUtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUJDL0NCODgyRTdFQTcwNzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRW MEJtRWR4WEJZOXAzRmVLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC5Ka8DPVji/yx1I6l67tH+6mEcDE9voSmaHZM9fehmrOltY/NPJQnAJ CEtKlPOrAceeI+A7H4VN7Y8pB2zFmPgKZ6PNwKDJpTWGrJvhJ7q0dm0cEqEoyVIt 0Dnq5MRf4CX67dEZ82Abqftts5JukXN9EYaKRyrnaT3ITPne6UHBt6MSpyEkBarX IY55Y1Ks4/jo4L4ylO+GoYyikt5G73i67bNGDXpJ3Ic4+IxOyp3SgiXNTK5F9Pib Z1j7P3bTSfO7JwjjMOFqdgAq0TP7WQiPWYY1kYwXdY6cDQo+RZRF032HbX4Vszax 3x7zF8Tvn0Rgvjgz8GZ31RozfqHVAyw= -----END CERTIFICATE-----Generated at Thu Jun 5 19:57:13 2025 by rpki-client