$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: tbkEs5YLWR9xetYHqxycNSyVHM86PzXNt/LS9JjXih4= Subject key identifier: 8B:57:9E:B7:4E:70:26:9B:8C:02:82:1E:5B:A7:2A:5E:00:80:71:60 Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 036F Signing time: Sat 31 May 2025 01:07:36 +0000 Manifest this update: Sat 31 May 2025 01:07:36 +0000 Manifest next update: Sat 07 Jun 2025 01:07:36 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: OTWZojTGnwQUxOmiqiEJ6AIvXf62DodF5axukbe8fGE=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: May 31 01:07:36 2025 GMT Not After : Jun 7 01:07:36 2025 GMT Subject: CN=683a5658-a56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:de:6e:94:2e:df:85:fa:60:30:c9:b8:76: 80:82:36:28:99:9d:da:87:6f:d3:c1:98:68:81:ed: 4d:f3:a6:d6:3d:47:eb:8e:ab:99:05:ff:2f:34:31: 77:4e:6b:9f:bf:5c:26:3b:40:f8:c8:f6:a1:cc:41: 7e:89:fa:9a:07:0e:81:88:db:d6:10:46:a0:56:d3: 6d:a0:7b:9a:d0:a4:65:71:4c:c8:96:45:91:a0:dc: 7f:79:6e:83:8c:10:a4:61:92:9f:2a:6a:ba:38:87: ee:df:1a:80:ea:4c:1a:f7:0a:8e:3c:24:20:21:89: 74:16:2a:2b:12:a7:06:fe:de:1f:b8:4e:fe:3e:e4: 2a:89:03:08:d8:e0:15:e6:dc:b0:aa:79:a5:09:a5: b8:b2:03:5b:0e:8a:8b:51:e5:25:ef:57:c1:72:cf: 0a:50:04:02:8d:e1:47:67:58:39:18:a9:14:4c:be: 6b:aa:13:1d:36:e4:93:f9:34:4f:69:40:7d:8f:df: f1:78:bc:01:2e:b0:f5:12:c6:ac:6b:50:36:d0:86: 3f:46:69:80:d5:d4:ec:1e:b1:2b:16:98:3c:37:38: 48:fc:64:74:f2:86:01:93:d8:7c:ab:f6:99:b1:19: ab:38:86:b8:07:b3:b7:9d:b9:fc:ee:8e:68:46:08: 79:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:57:9E:B7:4E:70:26:9B:8C:02:82:1E:5B:A7:2A:5E:00:80:71:60 X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:86:17:ba:e6:f8:4c:ac:63:9c:e7:28:65:57:02:62:c4:6f: a2:cb:86:36:ba:23:b1:2b:1b:f0:8e:9f:5f:1e:25:47:d0:e9: 15:01:8b:e5:63:b8:1c:d3:60:57:55:15:b6:2a:2c:cf:97:1c: 39:53:21:ad:b1:9c:50:97:77:01:0c:38:07:aa:f6:4b:ad:61: 82:54:98:d6:e5:e0:88:ad:e9:d8:7e:7d:d8:d4:44:66:dc:dc: 97:27:e9:da:4a:44:b1:b9:c8:84:55:4b:71:88:5b:d0:b5:bf: 62:43:55:a9:e7:66:a5:74:87:fb:57:fe:56:7e:1d:f4:c8:81: 4b:c3:7d:b6:fb:73:35:3d:62:70:37:06:76:dd:b0:52:0a:2c: 80:d4:e8:2a:6a:38:bc:e6:08:7c:b6:ed:4b:8f:91:1c:05:5d: 0e:23:fe:2e:87:5e:be:6d:19:bd:93:87:41:c2:e5:fe:24:75: e1:21:3d:0d:64:a7:79:11:11:2b:8f:97:a6:fa:e5:ea:3d:56: f9:6f:bd:24:b0:47:0f:56:fb:61:f0:90:3e:33:db:bb:43:a3: 26:fb:e8:c3:bf:b3:1f:d3:18:b4:9d:9e:dc:cc:55:4e:67:a8: 84:bc:0c:b5:88:79:12:56:a4:1d:d9:fb:cb:20:05:19:67:92: a5:a3:d2:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjUwNTMxMDEwNzM2WhcNMjUwNjA3MDEwNzM2WjAYMRYwFAYD VQQDEw02ODNhNTY1OC1hNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsbebpQu34X6YDDJuHaAgjYomZ3ah2/TwZhoge1N86bWPUfrjquZBf8vNDF3 Tmufv1wmO0D4yPahzEF+ifqaBw6BiNvWEEagVtNtoHua0KRlcUzIlkWRoNx/eW6D jBCkYZKfKmq6OIfu3xqA6kwa9wqOPCQgIYl0FiorEqcG/t4fuE7+PuQqiQMI2OAV 5tywqnmlCaW4sgNbDoqLUeUl71fBcs8KUAQCjeFHZ1g5GKkUTL5rqhMdNuST+TRP aUB9j9/xeLwBLrD1Esasa1A20IY/RmmA1dTsHrErFpg8NzhI/GR08oYBk9h8q/aZ sRmrOIa4B7O3nbn87o5oRgh5+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItXnrdO cCabjAKCHlunKl4AgHFgMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmhhe65vhMrGOc5yhlVwJixG+iy4Y2uiOxKxvwjp9fHiVH0OkVAYvl Y7gc02BXVRW2KizPlxw5UyGtsZxQl3cBDDgHqvZLrWGCVJjW5eCIrenYfn3Y1ERm 3NyXJ+naSkSxuciEVUtxiFvQtb9iQ1Wp52aldIf7V/5Wfh30yIFLw322+3M1PWJw NwZ23bBSCiyA1Ogqaji85gh8tu1Lj5EcBV0OI/4uh16+bRm9k4dBwuX+JHXhIT0N ZKd5ERErj5em+uXqPVb5b70ksEcPVvth8JA+M9u7Q6Mm++jDv7Mf0xi0nZ7czFVO Z6iEvAy1iHkSVqQd2fvLIAUZZ5Klo9K9 -----END CERTIFICATE-----Generated at Sat May 31 16:31:19 2025 by rpki-client