$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: 02Ir525kkTfgf5KAq0/5xc+3jHPUqSmCnWCiyORUOHo= Subject key identifier: E3:49:5C:04:7D:D5:5A:A8:24:33:A6:3B:0E:D4:81:2B:3D:18:67:E1 Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 011A Signing time: Sat 31 May 2025 04:25:28 +0000 Manifest this update: Sat 31 May 2025 04:25:28 +0000 Manifest next update: Sat 07 Jun 2025 04:25:27 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: xpA4ZYGbdh+PABBMXTF7c+g5Yhcdk/2p8taMXv7/dT8=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: sPbI4s6oqdRUOiNi18Y1/q6iWjlYMVf5hdTw+xVFaMo=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: AVP7CNVml5F9ogjZv8lDcpc3+J0u+jj8KPjr/y0/brc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: May 31 04:25:28 2025 GMT Not After : Jun 7 04:25:27 2025 GMT Subject: CN=683a84b8-9551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:c5:89:dd:3c:31:99:15:a5:1c:2d:0e:3f: 1d:79:e2:38:d4:55:e7:eb:19:fa:07:9f:07:09:f9: 8a:0f:e6:92:aa:6f:02:3f:ef:a4:d6:0b:10:95:1f: a4:f3:67:5c:09:38:2e:3e:5c:bd:d1:44:38:37:d6: 2f:78:ec:0e:1e:1e:48:22:9e:97:85:1b:ba:76:23: f7:ff:c0:e6:3e:38:c4:cb:27:b9:6f:14:ae:8d:5d: 6b:4d:37:96:4b:e6:b9:f9:9c:53:4c:b3:5f:49:d6: f9:70:c5:81:ac:e2:03:31:f4:d4:79:58:01:33:83: cb:6a:d8:4f:d7:2d:3f:63:b3:f6:80:a7:e0:28:ae: e2:16:07:8f:35:92:e6:36:48:76:82:be:7a:cb:b1: 89:f3:4b:ba:d8:ff:19:50:9c:93:6c:31:bb:5b:6b: 70:57:9b:d6:91:d8:24:3d:81:02:41:05:31:2a:cc: 42:d3:7c:d5:8e:36:e2:5d:76:c5:97:54:12:db:36: 55:06:c0:e0:2d:fa:62:6a:b8:91:ec:59:7a:e8:a9: 49:2c:ae:27:4b:0d:61:ff:f7:86:fe:c6:0c:e7:7a: 1a:5d:14:02:bd:68:e4:d2:be:01:8c:a3:d9:0d:87: 11:87:51:7e:75:95:3e:1b:75:ed:f6:e2:9b:e6:94: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:49:5C:04:7D:D5:5A:A8:24:33:A6:3B:0E:D4:81:2B:3D:18:67:E1 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:04:cb:c4:06:4c:1d:6b:e3:1d:a0:bb:76:7e:29:55:bf:0e: b4:a5:2d:be:d4:77:23:00:ff:2f:6e:b6:81:1b:e9:00:78:1a: 09:f2:67:3c:a7:71:f3:13:7d:a1:7c:01:cc:1d:43:93:2f:62: ce:76:23:be:c7:3d:df:f3:fa:94:42:59:af:03:09:58:e2:b2: ce:22:8c:fd:32:27:2b:cd:30:45:66:71:c0:62:85:f0:4f:9b: 24:b5:ab:22:30:38:60:d5:47:9b:55:60:40:d2:96:c8:cc:55: 02:81:89:5e:37:8c:f0:66:c7:ba:ee:3e:dc:9b:1b:1a:a2:57: 69:a3:f5:f3:42:d5:bb:52:ef:56:df:6c:6c:5b:7a:47:eb:52: 37:7d:4c:35:85:de:c2:2d:eb:a6:c6:d0:a4:3a:f3:52:36:83: 66:46:d3:cf:da:20:d0:3b:4e:09:64:e3:78:38:eb:91:c1:82: da:37:e6:fc:fd:13:fb:37:97:4c:ef:86:d0:95:9f:81:38:d5: f6:e3:64:3a:e2:91:50:fc:aa:2b:0d:4e:48:bf:51:a0:5e:ba: 9a:32:38:8f:95:16:14:a9:81:e7:0e:30:2b:c4:61:4a:3e:0a: c4:fc:dd:8d:0d:e1:75:4d:ca:88:ef:40:57:d8:c4:8e:9c:ac: 3e:ad:5a:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjUwNTMxMDQyNTI4WhcNMjUwNjA3MDQyNTI3WjAYMRYwFAYD VQQDEw02ODNhODRiOC05NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjLFid08MZkVpRwtDj8deeI41FXn6xn6B58HCfmKD+aSqm8CP++k1gsQlR+k 82dcCTguPly90UQ4N9YveOwOHh5IIp6XhRu6diP3/8DmPjjEyye5bxSujV1rTTeW S+a5+ZxTTLNfSdb5cMWBrOIDMfTUeVgBM4PLathP1y0/Y7P2gKfgKK7iFgePNZLm Nkh2gr56y7GJ80u62P8ZUJyTbDG7W2twV5vWkdgkPYECQQUxKsxC03zVjjbiXXbF l1QS2zZVBsDgLfpiariR7Fl66KlJLK4nSw1h//eG/sYM53oaXRQCvWjk0r4BjKPZ DYcRh1F+dZU+G3Xt9uKb5pSbnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONJXAR9 1VqoJDOmOw7UgSs9GGfhMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYBMvEBkwda+MdoLt2filVvw60pS2+1HcjAP8vbraBG+kAeBoJ8mc8 p3HzE32hfAHMHUOTL2LOdiO+xz3f8/qUQlmvAwlY4rLOIoz9MicrzTBFZnHAYoXw T5sktasiMDhg1UebVWBA0pbIzFUCgYleN4zwZse67j7cmxsaoldpo/XzQtW7Uu9W 32xsW3pH61I3fUw1hd7CLeumxtCkOvNSNoNmRtPP2iDQO04JZON4OOuRwYLaN+b8 /RP7N5dM74bQlZ+BONX242Q64pFQ/KorDU5Iv1GgXrqaMjiPlRYUqYHnDjArxGFK PgrE/N2NDeF1TcqI70BX2MSOnKw+rVrX -----END CERTIFICATE-----Generated at Sat May 31 17:44:11 2025 by rpki-client