$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: HNjT2WC1YmmXyv7PUP2vfb23OmLJpGorsAKLiqoeidc= Subject key identifier: B8:AA:A0:0F:7D:31:D0:14:2E:29:4E:60:F7:18:5F:0C:93:8E:7D:AC Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 059A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 0586 Signing time: Fri 30 May 2025 23:31:11 +0000 Manifest this update: Fri 30 May 2025 23:31:11 +0000 Manifest next update: Fri 06 Jun 2025 23:31:11 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: NwG6Y5mfNuJNKiXPQTWqrLOSbf9zY0oIFrrWlX8Xb58=) 2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: KgAjUYIuzjhpkZFNtYWs181NTAA2NQcYLWH/gU6nAAg=) 3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: lBw/oXqYii+CxdFQl9gOeByngEJHo8e2NzPJY0PJwPA=) 4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: q2RN3xLXUOsYwfNjHGYHuCEJyjXQ1ifjwY5JK1sjpVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: May 30 23:31:11 2025 GMT Not After : Jun 6 23:31:11 2025 GMT Subject: CN=683a3fbf-3b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:f2:b1:a1:50:87:e5:b2:0a:d2:a8:66:9a: 7e:e2:12:d7:06:f1:68:4f:b5:ef:1c:a8:92:bf:eb: 7b:89:17:9a:9d:8d:42:b6:00:df:92:54:e7:c5:2f: fc:27:9d:ac:06:9f:3c:74:7b:e9:fc:b6:7d:81:cd: 28:37:93:fd:a9:2a:b3:1d:e6:8c:a0:4f:b4:bd:2d: 01:87:18:6e:5a:1d:c0:01:19:d9:22:27:bb:aa:5f: 50:6b:b9:d8:a0:93:88:d4:53:0b:63:3f:70:5a:00: c2:80:98:50:8c:a5:cb:5f:71:98:6a:46:4e:d3:e2: 1f:a9:44:c2:ec:13:2c:5a:64:79:9e:c9:18:60:2d: 85:b5:43:3e:0e:45:3a:d0:ba:0b:e0:58:7a:68:8d: 18:a6:f2:08:27:3d:b8:b6:09:21:14:63:91:fd:8a: 89:26:f8:dc:a2:96:59:ac:38:bb:94:f8:73:b9:48: c5:3e:fe:b7:50:f1:15:ff:2e:74:c8:07:07:55:1b: e1:6c:e8:b7:0d:c9:f1:a1:62:2c:01:05:6c:ec:14: 10:1d:87:2e:46:1a:ca:dc:d2:a3:c6:b9:92:70:90: 8b:e6:a4:74:c2:01:08:8c:03:e3:82:d4:15:c0:ad: d2:f4:33:1d:f6:8e:7a:60:9f:cd:63:53:c4:36:dd: 6c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:A0:0F:7D:31:D0:14:2E:29:4E:60:F7:18:5F:0C:93:8E:7D:AC X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:65:6e:38:5e:7a:10:e5:76:4c:7b:ba:27:9c:a9:b7:b6:92: 37:02:63:a5:a8:98:63:d3:04:91:03:d2:76:5c:3a:f8:b0:6c: d6:1a:03:39:ec:72:78:87:74:4d:94:ce:f4:ba:69:67:18:77: ba:f0:a6:07:a5:81:d9:19:75:ff:75:ff:a7:75:0a:df:6c:c0: 5e:d3:e8:76:bb:10:93:bc:73:9f:e7:18:ca:97:a9:6e:f5:3f: 69:0c:7f:ad:16:d2:44:94:bc:80:b5:39:c4:df:fe:1f:ca:25: 55:5c:64:44:6f:99:c2:f5:c4:36:9e:62:51:96:66:d4:f8:32: 64:7c:ee:3a:b6:2d:3a:ca:75:3c:b9:89:5f:67:52:63:66:57: 4b:b8:a8:2e:80:63:12:56:8a:3f:d2:ad:65:1f:3e:e4:f5:22: 13:5c:1c:a6:6b:01:a5:e1:01:4d:53:8d:b6:47:07:d4:50:2c: 97:1c:a6:6f:19:c0:a3:d7:d1:54:82:8b:2c:30:52:f5:f8:1c: dd:ac:d6:8b:12:eb:ca:69:28:95:0a:4b:d3:a3:73:c5:36:42: cc:28:ca:d2:85:10:4b:a6:3d:a8:c7:55:76:20:07:c6:f8:12: 91:42:44:4a:dd:92:54:22:6c:8c:8b:45:a9:b1:0a:fb:f8:89: e4:6f:8a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjUwNTMwMjMzMTExWhcNMjUwNjA2MjMzMTExWjAYMRYwFAYD VQQDEw02ODNhM2ZiZi0zYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj/ysaFQh+WyCtKoZpp+4hLXBvFoT7XvHKiSv+t7iReanY1CtgDfklTnxS/8 J52sBp88dHvp/LZ9gc0oN5P9qSqzHeaMoE+0vS0BhxhuWh3AARnZIie7ql9Qa7nY oJOI1FMLYz9wWgDCgJhQjKXLX3GYakZO0+IfqUTC7BMsWmR5nskYYC2FtUM+DkU6 0LoL4Fh6aI0YpvIIJz24tgkhFGOR/YqJJvjcopZZrDi7lPhzuUjFPv63UPEV/y50 yAcHVRvhbOi3DcnxoWIsAQVs7BQQHYcuRhrK3NKjxrmScJCL5qR0wgEIjAPjgtQV wK3S9DMd9o56YJ/NY1PENt1sLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiqoA99 MdAULilOYPcYXwyTjn2sMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRZW44XnoQ5XZMe7onnKm3tpI3AmOlqJhj0wSRA9J2XDr4sGzWGgM5 7HJ4h3RNlM70umlnGHe68KYHpYHZGXX/df+ndQrfbMBe0+h2uxCTvHOf5xjKl6lu 9T9pDH+tFtJElLyAtTnE3/4fyiVVXGREb5nC9cQ2nmJRlmbU+DJkfO46ti06ynU8 uYlfZ1JjZldLuKgugGMSVoo/0q1lHz7k9SITXBymawGl4QFNU422RwfUUCyXHKZv GcCj19FUgossMFL1+BzdrNaLEuvKaSiVCkvTo3PFNkLMKMrShRBLpj2ox1V2IAfG +BKRQkRK3ZJUImyMi0WpsQr7+Inkb4rC -----END CERTIFICATE-----Generated at Sat May 31 16:26:50 2025 by rpki-client