$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: 9EKreJlia2VCxRs4svPxI8wgI3f7kzTKZ70dw90qZpc= Subject key identifier: 4C:DC:E5:4D:D8:28:61:09:C8:AE:95:AA:67:CB:16:B5:F5:51:84:BD Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 05B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 05A0 Signing time: Sun 20 Jul 2025 23:25:06 +0000 Manifest this update: Sun 20 Jul 2025 23:25:06 +0000 Manifest next update: Sun 27 Jul 2025 23:25:06 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: OE6kG+ffMzEQe7vnidDw1tZiY+6m/8XvKjO/NMUzeig=) 2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: KgAjUYIuzjhpkZFNtYWs181NTAA2NQcYLWH/gU6nAAg=) 3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: lBw/oXqYii+CxdFQl9gOeByngEJHo8e2NzPJY0PJwPA=) 4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: q2RN3xLXUOsYwfNjHGYHuCEJyjXQ1ifjwY5JK1sjpVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Jul 20 23:25:06 2025 GMT Not After : Jul 27 23:25:06 2025 GMT Subject: CN=687d7ad2-a543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:5c:39:c7:f4:2c:06:4c:c6:ae:05:c9:31: b6:ed:38:ae:08:15:66:ea:04:91:37:9e:8a:9f:a3: 70:b3:80:b5:36:6a:3b:d1:0b:33:fa:18:67:50:49: 20:bf:74:90:e8:1b:1c:00:a5:3b:88:51:6b:34:c3: 25:14:ca:b9:08:f3:bd:b4:69:0e:22:87:01:83:ce: af:3c:cb:26:10:ba:e2:4d:68:41:09:e7:5f:41:6f: b6:fd:e8:f3:20:48:dc:f0:71:3a:52:47:ee:f0:a7: 94:be:8f:6d:6e:56:d9:20:8f:2f:57:03:a8:18:6b: 0b:8e:c6:fc:25:70:e3:29:e5:37:56:d8:6a:3e:90: 9e:29:c4:86:89:61:41:d3:47:03:39:8e:49:6d:b3: cb:b8:60:71:36:50:08:3e:3d:a9:da:11:fc:9b:06: 3b:be:3d:92:1e:0c:d7:ff:0f:a2:d4:19:c4:f2:03: b6:12:56:fc:a0:9c:76:9e:9a:47:75:16:18:11:8c: 6b:84:b2:c3:89:2a:23:66:2d:1c:1c:9a:6e:4b:75: c6:b2:30:88:51:13:56:c9:d1:f2:a9:68:27:3d:78: a8:b0:1a:b6:2d:e4:93:ea:4f:23:b5:b0:47:28:d4: a4:5b:98:8b:f7:b8:c8:32:85:aa:0f:fb:32:22:44: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DC:E5:4D:D8:28:61:09:C8:AE:95:AA:67:CB:16:B5:F5:51:84:BD X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a5:97:99:2d:aa:59:6a:25:85:a3:1e:29:b0:86:a6:9d:d1: 02:c9:14:48:74:da:d3:82:0a:d1:40:73:98:b8:53:97:63:0c: 5c:30:f6:68:20:94:db:80:3d:1d:61:24:a2:bf:0f:04:b4:fe: ec:44:46:e6:8f:72:74:88:e8:09:03:76:4c:6a:34:6b:16:f0: bf:ca:aa:26:33:d7:aa:bc:f7:9d:23:c3:b2:4c:2a:2c:a4:4b: 67:2c:6c:95:70:6e:82:80:39:ec:51:62:3d:21:5e:9c:f7:4f: 16:57:49:65:b1:73:eb:73:17:26:0d:68:39:a3:f4:27:d9:30: f7:7b:5a:ef:a7:ec:b5:d9:08:e1:6c:2a:2b:03:f2:90:cb:1f: a3:1a:4c:c1:b2:68:b4:02:37:94:15:24:ca:c9:bc:7e:4b:5e: b3:b1:e5:e0:73:ff:67:59:56:03:91:aa:50:a0:57:fe:80:c6: 86:74:cc:37:31:97:2e:a3:cd:40:cb:b7:15:45:d5:6e:83:dd: 9c:98:26:94:ca:d6:59:ac:be:6f:bc:c6:1c:0b:74:32:ea:fc: 7a:3c:9a:44:d7:10:f6:e8:eb:4e:7c:21:bb:96:31:fd:6c:26: 5b:39:95:d1:d4:7a:49:68:7a:b4:b6:f1:82:f9:46:74:f9:8c: 91:6c:89:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjUwNzIwMjMyNTA2WhcNMjUwNzI3MjMyNTA2WjAYMRYwFAYD VQQDEw02ODdkN2FkMi1hNTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaRcOcf0LAZMxq4FyTG27TiuCBVm6gSRN56Kn6Nws4C1Nmo70Qsz+hhnUEkg v3SQ6BscAKU7iFFrNMMlFMq5CPO9tGkOIocBg86vPMsmELriTWhBCedfQW+2/ejz IEjc8HE6Ukfu8KeUvo9tblbZII8vVwOoGGsLjsb8JXDjKeU3VthqPpCeKcSGiWFB 00cDOY5JbbPLuGBxNlAIPj2p2hH8mwY7vj2SHgzX/w+i1BnE8gO2Elb8oJx2nppH dRYYEYxrhLLDiSojZi0cHJpuS3XGsjCIURNWydHyqWgnPXiosBq2LeST6k8jtbBH KNSkW5iL97jIMoWqD/syIkSb3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzc5U3Y KGEJyK6VqmfLFrX1UYS9MB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQpZeZLapZaiWFox4psIamndECyRRIdNrTggrRQHOYuFOXYwxcMPZo IJTbgD0dYSSivw8EtP7sREbmj3J0iOgJA3ZMajRrFvC/yqomM9eqvPedI8OyTCos pEtnLGyVcG6CgDnsUWI9IV6c908WV0llsXPrcxcmDWg5o/Qn2TD3e1rvp+y12Qjh bCorA/KQyx+jGkzBsmi0AjeUFSTKybx+S16zseXgc/9nWVYDkapQoFf+gMaGdMw3 MZcuo81Ay7cVRdVug92cmCaUytZZrL5vvMYcC3Qy6vx6PJpE1xD26OtOfCG7ljH9 bCZbOZXR1HpJaHq0tvGC+UZ0+YyRbIku -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:56 2025 by rpki-client