$ rpki-client -vvf rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft File: x8MjS9JtrWKeLX70REhP5UHYFI4.mft (raw, json) Hash identifier: R1kZqnkCH9cqx8wqDFwOmxFWIwbteh9eEMIGUtar9hw= Subject key identifier: 13:08:69:88:22:06:C9:B5:FA:48:78:9B:03:54:0E:06:50:C8:17:08 Authority key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E Certificate issuer: /CN=A91E36C4/serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft Manifest number: 2C Signing time: Sat 31 May 2025 07:19:45 +0000 Manifest this update: Sat 31 May 2025 07:19:45 +0000 Manifest next update: Sat 07 Jun 2025 07:19:45 +0000 Files and hashes: 1: x8MjS9JtrWKeLX70REhP5UHYFI4.crl (hash: 3zERleA5awT3ZWfVcGBnmrAnn96Qn0RLE5+wGSPJkaM=) 2: FA429FD6FEED11EF826A3F81C4F9AE02.roa (hash: 39w+18fUPSiKVB8OhUL0ki9Bi8qUl1J3wP6kCBvBYqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Validity Not Before: May 31 07:19:45 2025 GMT Not After : Jun 7 07:19:45 2025 GMT Subject: CN=683aad91-2669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:14:12:ad:ad:b8:00:e2:61:5d:0d:4a:94: 66:4b:bf:b0:6a:1c:8f:67:90:e1:33:b4:22:60:32: 0d:c8:bf:65:4e:4c:18:99:2d:a4:d4:f1:bf:b0:43: 07:c0:e4:a1:f7:ce:aa:e6:7c:62:f9:a4:71:db:52: b4:52:0d:5c:df:8d:bc:da:67:95:57:a0:b0:53:8c: 42:81:94:89:f0:9f:18:68:e1:0e:aa:49:a5:4b:68: 64:b0:df:b1:8f:c6:e1:65:00:8d:ea:02:1f:28:c8: 1e:04:05:b2:95:1d:0c:d0:35:c2:4f:fd:a6:2c:b9: 05:71:ad:60:3a:29:cb:f1:f0:ca:06:93:27:79:71: 94:a6:28:c1:a2:59:db:06:08:63:d1:36:46:18:b8: 0c:96:f8:c0:60:86:e3:12:7e:3c:9d:5b:5b:c2:c5: 6a:96:6f:3b:b2:13:e2:b0:f3:64:c6:cd:65:5c:ce: 51:c6:bf:b3:46:8b:9e:c7:7a:a1:9f:f7:e0:41:e3: 25:51:fe:93:cf:88:4b:82:f7:34:2d:66:5a:6d:23: e9:63:ac:47:c1:82:01:64:7c:75:4d:7a:bc:ab:78: 34:a5:03:20:5f:f9:a7:45:c5:28:f2:ad:6d:30:d2: 85:61:e0:29:61:5c:35:6d:70:11:74:78:8b:96:ad: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:08:69:88:22:06:C9:B5:FA:48:78:9B:03:54:0E:06:50:C8:17:08 X509v3 Authority Key Identifier: keyid:C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:03:e8:57:24:ea:4c:57:70:07:fc:52:24:e4:18:78:30:71: 0c:d5:77:eb:c1:9e:52:6f:7c:4f:75:ea:60:e1:9b:5e:f4:ca: 07:b7:be:b5:2c:44:c6:8e:15:4e:7d:ae:7a:6a:9a:20:ae:70: 4c:0e:4c:77:1d:68:6d:20:e6:fb:ef:81:50:47:f9:ce:c7:e0: 71:6f:cd:ce:9e:56:8a:21:31:60:4e:6b:48:82:8c:22:7a:db: 3d:30:0a:35:53:a6:65:46:40:80:c8:f9:a7:55:39:14:56:54: ef:a1:b0:50:c9:64:13:43:3b:20:9b:52:e2:5d:f9:b0:82:9c: 92:0a:33:d5:ba:8e:77:29:f2:4f:0d:a3:c1:b5:62:1a:62:e4: 1f:1a:b4:05:de:bb:17:8f:16:16:01:3e:26:17:52:ee:8d:36: 02:a2:22:92:e4:0c:71:ab:37:d6:3d:67:be:58:5b:fc:67:d2: 40:68:27:77:df:38:f1:ae:f0:41:94:ef:37:37:f6:2c:c0:1d: d9:f2:14:a5:5d:85:75:2c:3d:0c:21:8d:c0:0e:ce:f8:d5:e7: c9:cf:2c:8f:56:3a:4a:0f:54:03:1f:c0:a7:9e:57:12:e4:73: 99:87:67:6d:ca:a0:58:a1:9b:fd:c1:44:d9:32:65:ec:05:94: b4:32:d0:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzZDNDExMC8GA1UEBRMoQzdDMzIzNEJEMjZEQUQ2MjlFMkQ3RUY0NDQ0ODRGRTU0 MUQ4MTQ4RTAeFw0yNTA1MzEwNzE5NDVaFw0yNTA2MDcwNzE5NDVaMBgxFjAUBgNV BAMTDTY4M2FhZDkxLTI2NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsChQSra24AOJhXQ1KlGZLv7BqHI9nkOEztCJgMg3Iv2VOTBiZLaTU8b+wQwfA 5KH3zqrmfGL5pHHbUrRSDVzfjbzaZ5VXoLBTjEKBlInwnxho4Q6qSaVLaGSw37GP xuFlAI3qAh8oyB4EBbKVHQzQNcJP/aYsuQVxrWA6Kcvx8MoGkyd5cZSmKMGiWdsG CGPRNkYYuAyW+MBghuMSfjydW1vCxWqWbzuyE+Kw82TGzWVczlHGv7NGi57HeqGf 9+BB4yVR/pPPiEuC9zQtZlptI+ljrEfBggFkfHVNeryreDSlAyBf+adFxSjyrW0w 0oVh4ClhXDVtcBF0eIuWrRdLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEwhpiCIG ybX6SHibA1QOBlDIFwgwHwYDVR0jBBgwFoAUx8MjS9JtrWKeLX70REhP5UHYFI4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNkM0L0MxNjA1ODUyRkVF RDExRUY5RkY2Q0U4MEM0RjlBRTAyL3g4TWpTOUp0cldLZUxYNzBSRWhQNVVIWUZJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDhNalM5SnRyV0tlTFg3MFJFaFA1VUhZRkk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NkM0L0MxNjA1ODUyRkVFRDExRUY5RkY2Q0U4MEM0RjlBRTAyL3g4TWpTOUp0cldL ZUxYNzBSRWhQNVVIWUZJNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADID6Fck6kxXcAf8UiTkGHgwcQzVd+vBnlJvfE916mDhm170yge3vrUs RMaOFU59rnpqmiCucEwOTHcdaG0g5vvvgVBH+c7H4HFvzc6eVoohMWBOa0iCjCJ6 2z0wCjVTpmVGQIDI+adVORRWVO+hsFDJZBNDOyCbUuJd+bCCnJIKM9W6jncp8k8N o8G1Yhpi5B8atAXeuxePFhYBPiYXUu6NNgKiIpLkDHGrN9Y9Z75YW/xn0kBoJ3ff OPGu8EGU7zc39izAHdnyFKVdhXUsPQwhjcAOzvjV58nPLI9WOkoPVAMfwKeeVxLk c5mHZ23KoFihm/3BRNkyZewFlLQy0Bk= -----END CERTIFICATE-----Generated at Sat May 31 17:03:34 2025 by rpki-client