$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json) Hash identifier: S5pHO85Zm9gTmoJWDvwRrBGYGfPOeB+fATsyOYdT+n8= Subject key identifier: 64:AD:BF:80:76:60:72:8A:14:A8:B9:96:D2:49:5B:24:41:BD:E2:D7 Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Certificate serial: 11A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft Manifest number: 119C Signing time: Sat 14 Jun 2025 17:08:46 +0000 Manifest this update: Sat 14 Jun 2025 17:08:45 +0000 Manifest next update: Sat 21 Jun 2025 17:08:45 +0000 Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: kn3OkfdX0YItBgW9xVtsMuv4xv73na7+yD9h4YkBDvQ=) 2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: S4PonvpkLuqmrbtgnv8T9QMFORQi4oK8GF7Qf1Ow3ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4518 (0x11a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Validity Not Before: Jun 14 17:08:45 2025 GMT Not After : Jun 21 17:08:45 2025 GMT Subject: CN=684dac9d-6e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:55:c3:33:85:c3:49:f7:b2:d1:af:05:b0:83: 3c:75:9d:d3:69:43:fa:72:1c:18:9c:c8:e0:cb:a0: de:b6:9c:5c:57:b2:78:98:dd:64:97:02:a8:c9:51: 47:1f:fa:75:48:02:48:f3:d7:5a:39:0d:35:50:28: 16:5d:29:81:e5:cf:75:62:d5:49:06:08:98:09:66: 0f:a1:e9:b6:51:09:5d:43:9b:0d:f6:98:f2:0b:21: b2:aa:a3:7c:43:10:bd:b0:22:05:86:19:57:12:33: 55:30:dd:80:e8:fd:11:59:6f:dc:98:f1:92:85:7f: fb:18:f4:d7:c9:94:6f:41:81:69:ed:98:02:42:d1: a3:5c:85:d8:d2:7f:a6:b1:72:25:c9:e2:02:cf:da: 9b:a7:eb:c3:be:85:76:d9:49:26:ec:5d:78:eb:6f: 61:ad:1c:97:6a:ed:b7:ca:56:24:bb:d2:03:db:f5: 6c:36:10:37:7f:a1:03:3b:81:52:3a:a1:5b:9a:16: 57:9d:30:91:56:07:d7:b8:3d:c7:42:c1:03:70:75: 48:59:49:3f:aa:b6:e0:2a:06:1c:52:31:dd:da:28: 41:51:e8:f6:d4:18:e4:b3:8f:e8:2b:3d:8e:01:ae: 9b:41:48:c3:01:6c:07:eb:9a:a6:99:66:d2:48:d2: d4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AD:BF:80:76:60:72:8A:14:A8:B9:96:D2:49:5B:24:41:BD:E2:D7 X509v3 Authority Key Identifier: keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:06:b9:9e:79:8a:eb:e4:5e:3c:59:3a:6d:df:94:76:eb:a2: 2c:98:8d:a8:d4:fa:5e:0d:c6:d3:07:7b:b8:c1:6d:73:d6:04: dd:00:87:6f:0e:75:32:e1:5d:76:2f:57:9c:f2:e1:44:e6:20: ab:35:65:24:54:0f:78:0e:c2:d8:a9:27:d7:83:7c:a2:51:ea: 4a:a5:30:21:12:8a:32:d5:3e:40:d6:3b:5d:e8:88:94:85:58: 1a:49:95:70:72:90:27:5d:ff:92:06:6b:73:0b:0c:c2:54:b6: 74:15:b5:ee:4d:8b:f5:90:24:0a:de:26:94:a2:c3:d1:5b:c8: 2f:4a:f5:9a:82:02:93:cd:6f:68:8b:98:a3:6f:57:2b:76:be: c1:49:7a:1e:eb:a3:be:22:13:4f:13:a4:82:34:06:db:be:ae: 2e:2f:e6:e4:5e:f0:7f:ae:5c:90:a3:9a:df:60:ac:10:ee:2c: d1:ff:4d:1f:87:7d:2f:db:52:f4:cc:e4:31:fc:4a:df:eb:5e: 91:d6:47:cc:4b:fc:e4:53:f2:e6:b2:62:0e:21:e5:73:d3:94: f6:56:89:c2:f0:7d:0c:e1:9a:51:52:23:16:6b:d6:82:28:70: d3:31:0d:7b:82:4e:9c:9e:93:27:75:ff:80:56:d1:7c:f0:61: 60:99:7c:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0MzVBMkI4NTQz QkNFNDc2MDkwHhcNMjUwNjE0MTcwODQ1WhcNMjUwNjIxMTcwODQ1WjAYMRYwFAYD VQQDEw02ODRkYWM5ZC02ZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7VXDM4XDSfey0a8FsIM8dZ3TaUP6chwYnMjgy6DetpxcV7J4mN1klwKoyVFH H/p1SAJI89daOQ01UCgWXSmB5c91YtVJBgiYCWYPoem2UQldQ5sN9pjyCyGyqqN8 QxC9sCIFhhlXEjNVMN2A6P0RWW/cmPGShX/7GPTXyZRvQYFp7ZgCQtGjXIXY0n+m sXIlyeICz9qbp+vDvoV22Ukm7F14629hrRyXau23ylYku9ID2/VsNhA3f6EDO4FS OqFbmhZXnTCRVgfXuD3HQsEDcHVIWUk/qrbgKgYcUjHd2ihBUej21Bjks4/oKz2O Aa6bQUjDAWwH65qmmWbSSNLU1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGStv4B2 YHKKFKi5ltJJWyRBveLXMB8GA1UdIwQYMBaAFMfPlD46dk83wAPNQ1orhUO85HYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODVFOS8wODI1MzhFQ0Y5 NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6ZkFBODFEV2l1RlE3emtk Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4LVVQanAyVHpmQUE4MURXaXVGUTd6a2Rnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6 ZkFBODFEV2l1RlE3emtkZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClBrmeeYrr5F48WTpt35R266IsmI2o1PpeDcbTB3u4wW1z1gTdAIdv DnUy4V12L1ec8uFE5iCrNWUkVA94DsLYqSfXg3yiUepKpTAhEooy1T5A1jtd6IiU hVgaSZVwcpAnXf+SBmtzCwzCVLZ0FbXuTYv1kCQK3iaUosPRW8gvSvWaggKTzW9o i5ijb1crdr7BSXoe66O+IhNPE6SCNAbbvq4uL+bkXvB/rlyQo5rfYKwQ7izR/00f h30v21L0zOQx/Erf616R1kfMS/zkU/LmsmIOIeVz05T2VonC8H0M4ZpRUiMWa9aC KHDTMQ17gk6cnpMndf+AVtF88GFgmXyN -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:18 2025 by rpki-client