$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: tlOf3cgv1NdiueQ2f0I3DsXMqST6JED92V2BljxO37E= Subject key identifier: 7A:88:96:4A:9F:3D:52:9A:5A:88:99:3E:B2:35:CA:4F:0B:80:43:49 Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 076F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0C59 Signing time: Wed 04 Jun 2025 21:26:58 +0000 Manifest this update: Wed 04 Jun 2025 21:26:57 +0000 Manifest next update: Wed 11 Jun 2025 21:26:57 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: umVpHoQs0vo9lSAoqerDuKKV+YiCn06wKownJ5PnEL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1903 (0x76f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Jun 4 21:26:57 2025 GMT Not After : Jun 11 21:26:57 2025 GMT Subject: CN=6840ba22-a8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:49:2f:f2:3d:93:09:06:ff:a5:f6:4e:4c: 6e:a4:3d:97:65:75:1f:71:37:e0:14:cd:35:13:c9: 61:b5:e7:ca:d7:8d:33:71:0e:33:2f:f5:38:17:94: f6:67:8d:e5:ea:34:c8:32:7e:90:08:ae:f2:ce:22: 71:6f:e0:73:b2:60:68:20:5a:a9:68:cd:13:72:18: 77:df:99:0e:c4:1e:bd:93:a7:e5:77:7d:d1:3d:a9: 49:b7:ea:8e:50:f6:a6:a3:fe:65:23:6c:cb:9c:57: ea:30:cd:21:8c:8e:e3:c5:09:5d:8b:e4:23:6a:70: b4:b1:f3:cc:e8:91:0c:07:77:31:70:c2:fc:a7:bc: d3:19:32:c7:13:06:64:3f:46:31:3c:af:5f:e8:61: cb:ed:6c:7b:d3:9e:c8:6c:0e:3c:59:4b:ea:ab:78: 4c:3b:6c:6d:b3:35:02:7e:86:a2:ab:75:68:e0:4c: 74:d7:52:f4:fd:a4:4d:dd:d8:c0:be:12:93:7e:cb: 50:6d:32:86:21:04:65:e2:14:04:a1:1d:1f:09:2a: ab:de:a8:55:f5:1b:54:ca:7d:55:8d:e0:69:ab:69: 4f:a4:9c:dc:31:c5:40:7f:67:32:fd:d5:70:4e:7e: 27:1e:69:e1:3b:76:bb:fa:51:7e:71:cd:b8:14:4c: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:88:96:4A:9F:3D:52:9A:5A:88:99:3E:B2:35:CA:4F:0B:80:43:49 X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:b2:26:d0:80:4d:c6:00:b0:ab:49:10:e9:79:12:8e:75:48: e1:e3:a7:b7:2a:f9:6e:fc:6b:02:46:0f:49:a9:2d:35:29:70: d3:80:3d:38:46:c9:3b:32:52:01:37:4c:5a:ca:bb:7d:c9:5e: b9:77:f8:6e:2a:dc:92:fd:81:57:be:e5:3b:3e:23:23:f5:4c: 9f:59:c2:49:e9:c7:f3:2c:94:58:e8:d8:3d:47:b5:f7:67:c2: 20:e0:06:20:33:eb:59:b4:e5:df:5e:f9:23:e0:db:76:e1:f0: 42:23:d4:f7:1a:52:4e:c5:0f:58:5c:b1:f1:ca:45:11:31:85: ca:fb:fc:ed:89:a3:75:2e:7b:24:b2:15:eb:f1:38:a8:5a:eb: db:bb:6c:ea:0f:73:e4:70:fa:2e:22:1a:bc:a3:81:91:7f:05: bd:30:f1:ca:87:c7:1e:e2:89:36:b0:26:57:f6:73:4c:3f:55: 28:b1:fd:80:04:8f:be:da:df:4c:0f:66:4c:71:43:da:f7:54: 10:fe:85:52:a7:cc:a1:db:18:7e:7e:89:4a:c0:95:d9:44:a4: ae:92:f9:8f:c8:a5:dc:58:69:d4:76:ea:3a:ff:bb:90:1d:f4: fc:b0:d8:17:78:35:8e:3c:3e:e9:7d:5f:aa:c1:ca:2d:3a:5a: 3a:fc:09:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUwNjA0MjEyNjU3WhcNMjUwNjExMjEyNjU3WjAYMRYwFAYD VQQDEw02ODQwYmEyMi1hOGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZVJL/I9kwkG/6X2TkxupD2XZXUfcTfgFM01E8lhtefK140zcQ4zL/U4F5T2 Z43l6jTIMn6QCK7yziJxb+BzsmBoIFqpaM0Tchh335kOxB69k6fld33RPalJt+qO UPamo/5lI2zLnFfqMM0hjI7jxQldi+QjanC0sfPM6JEMB3cxcML8p7zTGTLHEwZk P0YxPK9f6GHL7Wx7057IbA48WUvqq3hMO2xtszUCfoaiq3Vo4Ex011L0/aRN3djA vhKTfstQbTKGIQRl4hQEoR0fCSqr3qhV9RtUyn1VjeBpq2lPpJzcMcVAf2cy/dVw Tn4nHmnhO3a7+lF+cc24FEwKuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqIlkqf PVKaWoiZPrI1yk8LgENJMB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYsibQgE3GALCrSRDpeRKOdUjh46e3Kvlu/GsCRg9JqS01KXDTgD04 Rsk7MlIBN0xayrt9yV65d/huKtyS/YFXvuU7PiMj9UyfWcJJ6cfzLJRY6Ng9R7X3 Z8Ig4AYgM+tZtOXfXvkj4Nt24fBCI9T3GlJOxQ9YXLHxykURMYXK+/ztiaN1Lnsk shXr8TioWuvbu2zqD3PkcPouIhq8o4GRfwW9MPHKh8ce4ok2sCZX9nNMP1Uosf2A BI++2t9MD2ZMcUPa91QQ/oVSp8yh2xh+folKwJXZRKSukvmPyKXcWGnUduo6/7uQ HfT8sNgXeDWOPD7pfV+qwcotOlo6/Akp -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:25 2025 by rpki-client