$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: X6im7crm6fVPBhCq88nXaTEcExfd+tVTtOx0tJYi6lw= Subject key identifier: 29:0A:B9:6F:12:EA:0B:63:A7:67:FE:47:C3:B1:B7:D7:8D:C0:78:8E Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 03A3 Signing time: Tue 09 Sep 2025 00:51:01 +0000 Manifest this update: Tue 09 Sep 2025 00:51:00 +0000 Manifest next update: Tue 16 Sep 2025 00:51:00 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: Cfij7jOYLmva6KZbcw1jRzP+wmlmmeVHRWkgxXn0Lxc=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Sep 9 00:51:00 2025 GMT Not After : Sep 16 00:51:00 2025 GMT Subject: CN=68bf79f5-2f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:17:94:95:53:55:17:20:f3:4b:a8:de:68: 8e:8b:8c:7a:88:dd:83:6b:ac:8b:f6:d7:7a:2c:0b: f8:ce:ac:3d:5c:05:1a:99:f4:07:c3:be:41:96:5b: c1:a2:b6:08:d2:54:f5:d1:e9:ed:7f:91:c6:64:1d: bf:d6:b1:c7:2b:1a:d4:c9:9f:9a:01:7a:d4:9b:6f: fc:ec:d5:f8:aa:d3:aa:5d:00:52:87:e4:ff:ef:d8: 57:93:ba:f7:90:b0:95:af:f5:60:bc:79:b1:de:1a: 0c:43:a3:07:ce:d4:8e:57:fd:cf:8f:ec:6e:34:4a: f5:e0:58:ac:79:06:23:cb:a0:91:2d:20:b4:76:45: d4:f3:61:e0:56:10:0c:cc:4f:5d:7d:f7:58:80:0e: 43:09:56:48:ac:b6:b5:d1:61:6f:21:eb:40:66:3f: 5c:7d:d1:5b:df:de:b3:9c:ff:c0:71:ff:2a:92:19: b3:80:a6:f0:5b:d1:84:b1:e6:3d:5c:1d:6d:c8:fd: d0:d5:e9:a4:b7:0d:51:d5:98:24:a6:bf:de:c3:1f: 8c:da:db:be:41:e8:89:c1:cf:0d:64:2e:f5:04:d8: 90:11:17:3e:a6:9e:c1:29:4e:9b:03:6d:7c:6c:4f: 1d:99:8e:b5:06:77:c0:b0:f8:6e:1f:35:bb:b9:5b: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0A:B9:6F:12:EA:0B:63:A7:67:FE:47:C3:B1:B7:D7:8D:C0:78:8E X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:98:d6:4f:c7:f9:43:16:b5:d0:a0:a0:aa:79:42:99:72:f6: 40:7e:42:b5:1f:09:ed:52:22:f8:f8:2a:9c:aa:e2:e3:4b:ef: 96:e1:b7:77:18:6a:5c:47:db:4e:06:a2:50:dc:7a:c7:e0:42: b2:69:1a:d5:c2:ed:fc:e9:15:e8:99:61:c2:bb:95:50:ac:a8: 67:ec:c4:76:b5:c9:94:83:30:7e:5e:88:15:10:87:74:93:f9: 49:33:be:c4:9c:f9:61:8f:99:22:7c:53:80:2f:43:50:a7:c5: ad:7f:21:61:69:95:bd:7e:63:fe:b0:4f:81:7d:15:e6:39:91: 9c:a3:36:a7:2d:da:ef:b8:42:07:9f:23:a1:72:d7:d8:b7:e0: 8f:9e:81:98:49:b0:04:ad:2c:f6:1b:d6:b8:61:ab:f0:77:3b: ca:11:96:76:16:25:35:f1:bc:69:3a:41:60:10:f0:5e:02:9a: db:fe:6d:78:f3:3c:4c:81:22:ae:fb:29:47:7f:b5:3c:d4:99: 83:c8:81:87:b1:c3:8f:33:52:0d:e3:ca:a6:ed:d5:c1:8b:9a: 8c:56:7c:23:37:7f:b2:b1:ff:b8:98:51:02:7d:e5:84:2e:03: 02:d8:f6:a5:cf:dc:1c:45:44:e6:2f:91:cc:60:58:76:dc:b8: 75:1b:73:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjUwOTA5MDA1MTAwWhcNMjUwOTE2MDA1MTAwWjAYMRYwFAYD VQQDEw02OGJmNzlmNS0yZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwB0XlJVTVRcg80uo3miOi4x6iN2Da6yL9td6LAv4zqw9XAUamfQHw75BllvB orYI0lT10entf5HGZB2/1rHHKxrUyZ+aAXrUm2/87NX4qtOqXQBSh+T/79hXk7r3 kLCVr/VgvHmx3hoMQ6MHztSOV/3Pj+xuNEr14FiseQYjy6CRLSC0dkXU82HgVhAM zE9dffdYgA5DCVZIrLa10WFvIetAZj9cfdFb396znP/Acf8qkhmzgKbwW9GEseY9 XB1tyP3Q1emktw1R1Zgkpr/ewx+M2tu+QeiJwc8NZC71BNiQERc+pp7BKU6bA218 bE8dmY61BnfAsPhuHzW7uVvFqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkKuW8S 6gtjp2f+R8Oxt9eNwHiOMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDmNZPx/lDFrXQoKCqeUKZcvZAfkK1HwntUiL4+CqcquLjS++W4bd3 GGpcR9tOBqJQ3HrH4EKyaRrVwu386RXomWHCu5VQrKhn7MR2tcmUgzB+XogVEId0 k/lJM77EnPlhj5kifFOAL0NQp8WtfyFhaZW9fmP+sE+BfRXmOZGcozanLdrvuEIH nyOhctfYt+CPnoGYSbAErSz2G9a4YavwdzvKEZZ2FiU18bxpOkFgEPBeAprb/m14 8zxMgSKu+ylHf7U81JmDyIGHscOPM1IN48qm7dXBi5qMVnwjN3+ysf+4mFECfeWE LgMC2Palz9wcRUTmL5HMYFh23Lh1G3Mf -----END CERTIFICATE-----Generated at Thu Sep 11 00:25:53 2025 by rpki-client