$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: X6CCw7Br8CroULC0ZKzZGqjYLxUEB0kXf3COcY/4I80= Subject key identifier: 02:FA:AB:09:93:3B:A4:BC:60:59:8E:10:EB:C5:F9:B4:62:3D:1E:A5 Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 0121 Signing time: Fri 13 Jun 2025 03:40:25 +0000 Manifest this update: Fri 13 Jun 2025 03:40:24 +0000 Manifest next update: Fri 20 Jun 2025 03:40:24 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: V+lPeEQfYotK6WmJ0ftt9WalVc6mI34XwttoK5wQnkI=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: sPbI4s6oqdRUOiNi18Y1/q6iWjlYMVf5hdTw+xVFaMo=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: AVP7CNVml5F9ogjZv8lDcpc3+J0u+jj8KPjr/y0/brc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Jun 13 03:40:24 2025 GMT Not After : Jun 20 03:40:24 2025 GMT Subject: CN=684b9da8-2725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:48:95:56:72:79:18:ef:f5:88:d6:05:00: ba:25:15:dc:04:76:0e:77:d6:6c:62:8a:eb:de:62: 37:e7:20:39:07:16:34:98:4d:e2:53:a4:d3:cc:66: 42:93:6d:5b:7a:3e:d6:a4:f2:31:66:ed:01:ab:7f: 22:6c:46:8e:b5:3f:bf:0f:76:7f:ee:e3:f8:74:d8: 0d:f0:e5:cd:f1:f9:d0:1a:10:d6:98:48:63:d6:a0: 3e:22:77:bd:8d:25:eb:73:7d:f0:4c:5f:55:09:a8: 13:c8:4c:72:05:29:a4:22:53:2d:54:30:a4:ba:7b: 28:f0:e7:9a:fe:81:b2:eb:cf:f1:15:93:9c:71:44: 11:0b:eb:6f:07:ae:94:4f:b4:ad:c8:d5:4c:9d:05: a6:5b:a0:30:bc:9f:52:2f:28:0e:3b:b1:e9:d9:e4: b7:53:3e:49:67:89:6d:61:ef:6d:c9:d4:48:01:33: cc:c8:87:9f:7a:1b:4d:30:b6:da:16:47:78:92:ae: 6c:13:73:bd:c6:df:84:1d:71:3e:a2:13:a1:40:1a: c8:3e:31:bf:7d:97:05:82:c2:42:c5:fc:46:d7:11: bc:d8:a8:bf:bd:3b:05:e6:cc:10:1f:a7:bd:6f:98: 4f:99:6e:ea:4c:25:22:cb:9c:46:6c:8a:f0:70:1f: 6b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FA:AB:09:93:3B:A4:BC:60:59:8E:10:EB:C5:F9:B4:62:3D:1E:A5 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:81:83:d5:4e:c6:5f:ec:db:e9:74:9f:e6:60:fe:c3:67:82: 80:ae:7c:65:18:81:70:4c:28:d6:27:b5:49:9b:e4:77:09:a2: 9a:22:57:9b:69:c4:e6:f5:be:19:85:d0:f7:d3:e7:39:4c:84: 53:65:8d:27:4f:9a:be:8e:91:d0:36:fc:dd:4d:e9:8a:0d:8a: 0b:b9:11:c2:d6:2c:c4:f9:28:cf:ec:c1:ce:bc:1e:0b:43:ed: 3a:d0:b3:81:e8:09:45:a1:3e:2c:c6:a6:6e:e1:1c:e3:b7:ae: 11:cf:1e:b4:13:68:98:5d:23:b3:b6:4e:d9:df:88:06:14:ae: 8f:3a:e8:12:e6:3d:bf:bb:5e:8f:af:db:3f:49:b3:20:ee:7a: f1:42:cd:91:9c:bf:b8:0d:8f:64:49:a3:03:18:1e:09:3d:39: 05:89:2b:f9:9c:f2:72:da:34:6f:41:c7:0e:80:7b:ef:56:f4: 23:82:c7:e3:15:ce:b1:c7:33:e7:9d:98:8a:06:bd:9a:e3:41: ba:d4:29:48:4c:f4:77:7c:fe:11:fa:ff:55:0f:cf:e1:a4:06: 10:44:89:b9:1d:32:4b:fb:9d:96:41:11:4c:24:94:4b:93:1c: 2a:bf:e1:2a:5d:09:2b:7d:95:be:27:b6:8d:05:a4:76:a5:76: a0:05:52:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjUwNjEzMDM0MDI0WhcNMjUwNjIwMDM0MDI0WjAYMRYwFAYD VQQDEw02ODRiOWRhOC0yNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4ZIlVZyeRjv9YjWBQC6JRXcBHYOd9ZsYorr3mI35yA5BxY0mE3iU6TTzGZC k21bej7WpPIxZu0Bq38ibEaOtT+/D3Z/7uP4dNgN8OXN8fnQGhDWmEhj1qA+Ine9 jSXrc33wTF9VCagTyExyBSmkIlMtVDCkunso8Oea/oGy68/xFZOccUQRC+tvB66U T7StyNVMnQWmW6AwvJ9SLygOO7Hp2eS3Uz5JZ4ltYe9tydRIATPMyIefehtNMLba Fkd4kq5sE3O9xt+EHXE+ohOhQBrIPjG/fZcFgsJCxfxG1xG82Ki/vTsF5swQH6e9 b5hPmW7qTCUiy5xGbIrwcB9rqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAL6qwmT O6S8YFmOEOvF+bRiPR6lMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABgYPVTsZf7NvpdJ/mYP7DZ4KArnxlGIFwTCjWJ7VJm+R3CaKaIleb acTm9b4ZhdD30+c5TIRTZY0nT5q+jpHQNvzdTemKDYoLuRHC1izE+SjP7MHOvB4L Q+060LOB6AlFoT4sxqZu4Rzjt64Rzx60E2iYXSOztk7Z34gGFK6POugS5j2/u16P r9s/SbMg7nrxQs2RnL+4DY9kSaMDGB4JPTkFiSv5nPJy2jRvQccOgHvvVvQjgsfj Fc6xxzPnnZiKBr2a40G61ClITPR3fP4R+v9VD8/hpAYQRIm5HTJL+52WQRFMJJRL kxwqv+EqXQkrfZW+J7aNBaR2pXagBVKk -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:31 2025 by rpki-client