$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: ku44n5NqttuIeZBjmSJobwQr4gnfhvToECZOeNrUmn8= Subject key identifier: 4C:D3:7D:DA:5E:0C:E5:1F:F5:3F:D0:6E:31:59:B7:DE:53:7D:AC:2F Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 0A07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 0A01 Signing time: Sat 31 May 2025 19:56:27 +0000 Manifest this update: Sat 31 May 2025 19:56:27 +0000 Manifest next update: Sat 07 Jun 2025 19:56:27 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: C6sNI59I7w+4QDObyqmNiverFyO+XN6a64fir9f7m4w=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2567 (0xa07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: May 31 19:56:27 2025 GMT Not After : Jun 7 19:56:27 2025 GMT Subject: CN=683b5eeb-c366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7f:f2:b5:11:7a:4e:61:46:19:64:05:f4:e1: 0d:90:f7:05:54:2c:a8:e8:3d:c3:f7:52:47:dd:5f: 03:39:29:23:a1:e3:35:f3:4c:c6:53:4e:ce:98:6e: e3:9f:41:56:b1:88:18:70:7a:e7:80:93:35:41:b3: 30:b7:7c:7b:f8:c0:c3:4d:29:5a:9a:53:1c:a4:b4: 6a:1e:a6:e4:b8:f9:0c:7e:87:00:ae:e3:b4:06:d3: 59:cd:22:2b:7f:9e:4e:cf:2c:03:78:b7:7e:47:99: c8:18:f5:3b:b6:f3:85:44:f0:1b:89:08:28:ef:e0: ff:92:6d:e2:d0:00:99:21:c4:d2:2d:97:03:ca:81: 3d:77:5d:6d:70:17:18:c6:82:20:4c:de:49:8f:24: b5:61:db:0a:d3:d4:08:07:c8:22:4b:81:2c:c5:fa: 1c:c8:17:f9:e4:0a:8c:73:47:37:37:aa:aa:ce:8a: 6d:0e:af:8d:32:d9:01:28:00:c7:77:ed:b2:1a:d0: 34:9d:f5:34:ce:a1:f2:81:59:34:57:09:a8:5e:df: 63:9c:a9:52:f5:25:5c:23:e1:52:06:64:ee:c5:f0: 55:14:74:6e:d4:17:0a:a1:9b:31:cb:ed:2d:c3:9f: d5:d2:f7:c6:67:d1:2e:1f:f5:50:f9:78:dd:02:fb: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D3:7D:DA:5E:0C:E5:1F:F5:3F:D0:6E:31:59:B7:DE:53:7D:AC:2F X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fb:64:42:a7:0e:36:b2:e1:e6:a5:05:9e:da:17:b1:85:3b: af:e8:4a:a8:26:30:39:05:89:39:5d:5a:8b:e5:04:d6:76:28: 36:86:11:45:6f:80:b8:5c:c2:9d:24:1c:4d:e7:fb:1d:4f:47: 72:03:47:08:db:8a:82:ea:d3:c2:07:c0:99:bb:4c:21:ec:3c: a7:8f:91:17:cb:a8:03:72:70:e2:b4:d3:fd:ed:55:14:c9:b6: 5a:2f:f5:a3:b8:1f:52:37:a0:70:f4:44:67:36:69:b1:ed:01: 65:30:31:e2:9c:93:01:01:14:bb:c8:02:54:d1:65:2c:b1:68: 40:d9:44:8e:f6:72:26:63:56:89:25:aa:dc:3a:11:25:6e:82: 42:ed:b3:f7:b4:c0:32:5f:94:3d:37:4e:90:31:10:ba:28:0f: d3:be:3f:2c:fa:55:58:19:de:19:5c:39:60:7b:46:7b:80:46: 9c:2a:99:1d:09:47:b0:79:38:be:84:6f:e8:c3:1b:83:57:ec: 49:32:fe:2b:5a:9e:52:34:22:ad:eb:f2:20:d1:16:c0:9b:50: 9e:ed:4a:6e:11:8e:a6:3d:ee:6c:ea:90:1f:72:ac:48:c3:c2: 95:d2:f0:59:7b:63:57:be:8f:8b:f8:c8:c3:a3:de:6d:07:da: 0a:27:48:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjUwNTMxMTk1NjI3WhcNMjUwNjA3MTk1NjI3WjAYMRYwFAYD VQQDEw02ODNiNWVlYi1jMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3/ytRF6TmFGGWQF9OENkPcFVCyo6D3D91JH3V8DOSkjoeM180zGU07OmG7j n0FWsYgYcHrngJM1QbMwt3x7+MDDTSlamlMcpLRqHqbkuPkMfocAruO0BtNZzSIr f55OzywDeLd+R5nIGPU7tvOFRPAbiQgo7+D/km3i0ACZIcTSLZcDyoE9d11tcBcY xoIgTN5JjyS1YdsK09QIB8giS4EsxfocyBf55AqMc0c3N6qqzoptDq+NMtkBKADH d+2yGtA0nfU0zqHygVk0VwmoXt9jnKlS9SVcI+FSBmTuxfBVFHRu1BcKoZsxy+0t w5/V0vfGZ9EuH/VQ+XjdAvvi6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzTfdpe DOUf9T/QbjFZt95TfawvMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf+2RCpw42suHmpQWe2hexhTuv6EqoJjA5BYk5XVqL5QTWdig2hhFF b4C4XMKdJBxN5/sdT0dyA0cI24qC6tPCB8CZu0wh7Dynj5EXy6gDcnDitNP97VUU ybZaL/WjuB9SN6Bw9ERnNmmx7QFlMDHinJMBARS7yAJU0WUssWhA2USO9nImY1aJ JarcOhElboJC7bP3tMAyX5Q9N06QMRC6KA/Tvj8s+lVYGd4ZXDlge0Z7gEacKpkd CUeweTi+hG/owxuDV+xJMv4rWp5SNCKt6/Ig0RbAm1Ce7UpuEY6mPe5s6pAfcqxI w8KV0vBZe2NXvo+L+MjDo95tB9oKJ0hF -----END CERTIFICATE-----Generated at Mon Jun 2 06:26:57 2025 by rpki-client