$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: DHMsnjOZlS2Dp+7bDVhmliGVbvLjAbYUWnEb+z0+9RI= Subject key identifier: F6:B1:16:C7:D1:F7:6F:A9:63:99:E0:9B:23:BE:7C:3F:3D:3A:FA:B7 Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 015F Signing time: Wed 11 Jun 2025 03:24:49 +0000 Manifest this update: Wed 11 Jun 2025 03:24:48 +0000 Manifest next update: Wed 18 Jun 2025 03:24:48 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: Zg2x7DQHx30F5M8o0jk7F7e6DAaoPxrwKFtHYI0G8os=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Jun 11 03:24:48 2025 GMT Not After : Jun 18 03:24:48 2025 GMT Subject: CN=6848f700-f1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f4:a7:cf:44:e5:38:12:de:f0:94:85:a9:75: 30:8d:a3:ee:a9:05:7b:0e:c9:b2:a7:20:a1:39:54: 1e:58:c8:27:4a:f9:d2:3c:8e:e9:58:7e:c0:6c:6b: 66:65:64:36:79:23:10:d7:93:4d:96:ed:25:aa:d1: 44:74:8d:84:f8:be:03:26:95:ca:df:57:ff:d1:18: 7a:05:b1:ad:2c:02:cf:e7:c9:41:d4:5f:7c:b1:2d: 41:bb:0e:2b:d0:dd:9f:16:ac:b4:ee:b1:46:ec:95: 4c:c6:66:29:8b:7d:37:d7:63:f4:02:b4:b2:be:85: bc:4c:e5:60:c9:67:07:ad:59:c1:fa:8f:77:b7:b5: c8:ee:09:36:21:4a:d2:42:3f:2e:16:74:ec:c0:aa: ad:f6:fd:40:ee:ad:2c:6b:f3:1f:39:95:ba:fe:ed: 21:95:dd:f4:80:0d:bf:dd:3a:d7:ca:9f:fb:de:b8: 3e:4a:9d:a5:01:b4:83:81:21:18:45:d5:52:fb:f8: 44:74:39:e4:c8:e3:0a:49:cb:4b:8f:6b:cf:cb:ea: 72:e6:e7:c9:27:de:1e:4f:4f:d3:44:d4:26:82:51: 56:11:2d:b7:72:10:2c:71:a1:1e:63:76:c1:97:18: b0:d4:e7:dc:f9:c9:38:a7:ef:51:2d:05:9d:b4:85: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B1:16:C7:D1:F7:6F:A9:63:99:E0:9B:23:BE:7C:3F:3D:3A:FA:B7 X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c0:ec:ce:eb:65:a1:d8:a4:ef:96:63:b3:01:8b:bc:8c:e4: d7:66:95:44:3c:01:79:f6:08:78:16:66:17:94:d0:87:32:de: af:3d:6e:0a:fe:c3:b9:79:02:d5:4b:a9:a4:58:9d:c5:9c:28: 42:87:f5:89:d7:5a:d3:37:38:05:3c:c8:47:4c:f8:26:f1:6c: d2:7b:5c:4d:ee:3e:e3:2a:27:ac:78:55:45:d9:3b:f0:be:78: de:28:53:fa:19:5c:85:82:88:69:8b:57:01:40:12:22:27:fe: d4:30:35:cc:6b:88:1d:4d:2b:47:fc:59:de:77:4e:f8:b3:be: c0:0d:f8:3b:78:b2:1a:7e:1d:85:af:12:ea:3b:9d:14:ff:11: eb:ba:61:ca:29:e2:e5:36:b0:66:ab:48:0c:83:67:d9:ba:71: 3e:7d:c2:ec:6c:7b:77:72:0a:3f:f3:f9:aa:16:be:38:04:68: 2a:7b:28:6a:20:be:48:e0:e6:b4:76:da:8e:05:0c:9d:4a:82: ab:f6:59:e0:d0:d6:83:dd:94:12:46:90:c5:5e:d5:d5:a1:06: 6a:85:62:5f:56:6a:60:f1:a4:a3:9a:6c:c1:e2:fb:eb:c6:9b: 16:15:e4:c2:69:71:5f:4b:be:b8:6a:dc:ca:d6:11:b1:1c:aa: b1:4f:d3:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUwNjExMDMyNDQ4WhcNMjUwNjE4MDMyNDQ4WjAYMRYwFAYD VQQDEw02ODQ4ZjcwMC1mMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PSnz0TlOBLe8JSFqXUwjaPuqQV7DsmypyChOVQeWMgnSvnSPI7pWH7AbGtm ZWQ2eSMQ15NNlu0lqtFEdI2E+L4DJpXK31f/0Rh6BbGtLALP58lB1F98sS1Buw4r 0N2fFqy07rFG7JVMxmYpi30312P0ArSyvoW8TOVgyWcHrVnB+o93t7XI7gk2IUrS Qj8uFnTswKqt9v1A7q0sa/MfOZW6/u0hld30gA2/3TrXyp/73rg+Sp2lAbSDgSEY RdVS+/hEdDnkyOMKSctLj2vPy+py5ufJJ94eT0/TRNQmglFWES23chAscaEeY3bB lxiw1Ofc+ck4p+9RLQWdtIW9NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaxFsfR 92+pY5ngmyO+fD89Ovq3MB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWwOzO62Wh2KTvlmOzAYu8jOTXZpVEPAF59gh4FmYXlNCHMt6vPW4K /sO5eQLVS6mkWJ3FnChCh/WJ11rTNzgFPMhHTPgm8WzSe1xN7j7jKieseFVF2Tvw vnjeKFP6GVyFgohpi1cBQBIiJ/7UMDXMa4gdTStH/Fned074s77ADfg7eLIafh2F rxLqO50U/xHrumHKKeLlNrBmq0gMg2fZunE+fcLsbHt3cgo/8/mqFr44BGgqeyhq IL5I4Oa0dtqOBQydSoKr9lng0NaD3ZQSRpDFXtXVoQZqhWJfVmpg8aSjmmzB4vvr xpsWFeTCaXFfS764atzK1hGxHKqxT9Po -----END CERTIFICATE-----Generated at Thu Jun 12 03:16:54 2025 by rpki-client