$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: 3so0JmE2Z/xc1IsL0q965u2vsmIWLFmepDTjO+rYDSo= Subject key identifier: 50:67:0F:AE:07:15:9F:22:31:67:0C:5F:1B:F0:24:A4:8D:5C:08:CF Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 06 Signing time: Tue 03 Jun 2025 08:05:03 +0000 Manifest this update: Tue 03 Jun 2025 08:05:01 +0000 Manifest next update: Tue 10 Jun 2025 08:05:01 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: RtQOegDwvxKv/j3Bqac+wE8llrdYfDOeEfNJMUWgvAo=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GaxzV7+DkMGpd57xnNkPMderTpqjXPXFd/uGzJlcq9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Jun 3 08:05:01 2025 GMT Not After : Jun 10 08:05:01 2025 GMT Subject: CN=683eacae-077b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:01:bc:31:84:23:40:36:44:c3:74:c7:fe: 9a:5b:4d:80:84:c4:82:1d:c4:95:66:8f:d2:7a:9b: a1:2a:21:bc:e9:73:7f:e8:69:c8:4d:bd:da:1a:7b: 8a:dc:9d:7b:7c:a1:0a:0d:24:2c:fd:86:42:8b:7d: 01:61:29:22:f7:24:c5:39:51:ae:35:25:3d:b7:cf: 35:88:b7:2e:66:dc:f7:63:56:f3:c0:a0:e6:12:e2: dc:32:02:de:ea:df:5a:e0:b0:d2:77:42:b5:75:6f: 1f:51:03:82:59:63:1f:e9:f4:1f:d9:8d:14:70:b5: c1:0e:78:ae:36:bf:6e:93:ff:ea:40:6f:2a:1e:94: c5:e1:0c:04:19:95:d7:d7:ff:56:fc:10:17:a5:ab: c1:a7:25:09:98:95:af:ff:62:0c:4a:8b:db:ec:1f: 7d:88:55:79:e5:8d:42:fb:7c:d4:8d:9d:a4:a3:18: 79:5b:25:cc:93:62:c9:06:3a:19:4f:97:b0:f8:0d: 52:12:72:07:7d:e5:56:3f:a0:5d:05:79:68:98:3a: 12:4f:d3:48:ed:b5:73:e1:cc:2a:52:50:88:da:e6: 67:e0:1c:60:e5:68:89:8f:8d:9c:47:8a:80:67:b9: 82:7c:84:ae:bc:03:6c:1d:69:d7:81:35:26:ad:f0: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:67:0F:AE:07:15:9F:22:31:67:0C:5F:1B:F0:24:A4:8D:5C:08:CF X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:87:35:93:48:c5:6f:d5:09:ba:ca:14:55:f0:bc:92:42:22: c8:7b:2a:72:7b:9d:27:7e:9d:5d:b8:71:2e:f6:51:01:af:81: 3c:58:db:af:b2:39:62:f8:c5:60:91:5f:a1:08:03:5a:6b:0d: 90:f0:4b:e1:60:c2:29:95:d0:88:39:31:f9:4d:72:d6:28:83: f1:dd:2f:a4:1b:59:62:85:09:c4:35:4f:af:99:05:32:6f:cd: 1e:26:d2:a5:11:62:d2:3c:b9:96:13:f2:29:50:82:33:0b:32: ee:5b:d0:8c:8d:99:eb:11:61:2b:b0:bf:77:65:5c:ee:ea:ec: 64:a2:c3:7c:ab:89:a4:2b:b2:de:7f:34:c8:a5:0f:7b:b8:80: 1b:df:dd:ed:68:e3:e6:d3:a0:97:01:52:f3:5c:4c:a2:a4:d7: 55:8a:13:6b:03:0f:48:39:47:52:17:8b:95:aa:c5:fe:e4:5f: 43:b4:60:5f:12:2a:a0:fc:b3:3b:c0:e2:54:a5:6b:75:aa:0d: 12:f9:3b:1c:9f:0a:92:47:3b:d3:a7:3f:62:d9:76:5f:e8:6c: 16:88:5f:5b:08:90:1a:cf:8e:d0:a9:cd:72:eb:53:88:47:79: ef:83:79:4a:8f:e3:44:fc:25:eb:88:32:4f:96:f4:ac:31:3c: af:50:f8:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTA2MDMwODA1MDFaFw0yNTA2MTAwODA1MDFaMBgxFjAUBgNV BAMTDTY4M2VhY2FlLTA3N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO+wG8MYQjQDZEw3TH/ppbTYCExIIdxJVmj9J6m6EqIbzpc3/oachNvdoae4rc nXt8oQoNJCz9hkKLfQFhKSL3JMU5Ua41JT23zzWIty5m3PdjVvPAoOYS4twyAt7q 31rgsNJ3QrV1bx9RA4JZYx/p9B/ZjRRwtcEOeK42v26T/+pAbyoelMXhDAQZldfX /1b8EBelq8GnJQmYla//YgxKi9vsH32IVXnljUL7fNSNnaSjGHlbJcyTYskGOhlP l7D4DVIScgd95VY/oF0FeWiYOhJP00jttXPhzCpSUIja5mfgHGDlaImPjZxHioBn uYJ8hK68A2wdadeBNSat8F7LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUGcPrgcV nyIxZwxfG/AkpI1cCM8wHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADGHNZNIxW/VCbrKFFXwvJJCIsh7KnJ7nSd+nV24cS72UQGvgTxY26+y OWL4xWCRX6EIA1prDZDwS+FgwimV0Ig5MflNctYog/HdL6QbWWKFCcQ1T6+ZBTJv zR4m0qURYtI8uZYT8ilQgjMLMu5b0IyNmesRYSuwv3dlXO7q7GSiw3yriaQrst5/ NMilD3u4gBvf3e1o4+bToJcBUvNcTKKk11WKE2sDD0g5R1IXi5Wqxf7kX0O0YF8S KqD8szvA4lSla3WqDRL5OxyfCpJHO9OnP2LZdl/obBaIX1sIkBrPjtCpzXLrU4hH ee+DeUqP40T8JeuIMk+W9KwxPK9Q+Fk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:54:01 2025 by rpki-client