$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft File: 8XiofFRzBDe6WfqpzhhP-HkP5PE.mft (raw, json) Hash identifier: 7AGGXZ621JyOEYD7QVwUCHItnlEZDztc/Gq9wsIIbQ0= Subject key identifier: B3:7A:30:83:F2:9D:A8:82:0B:1F:67:DA:86:87:19:20:F4:DA:34:4E Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1 Certificate issuer: /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft Manifest number: 04D9 Signing time: Sat 14 Jun 2025 23:30:47 +0000 Manifest this update: Sat 14 Jun 2025 23:30:46 +0000 Manifest next update: Sat 21 Jun 2025 23:30:46 +0000 Files and hashes: 1: 8XiofFRzBDe6WfqpzhhP-HkP5PE.crl (hash: 0mGWNCwIfqbpXMM27zMmH6OceoovrT0BMA8lKAzlXOY=) 2: CB89040A73EA11EC8A823312C4F9AE02.roa (hash: 6pWGQwdhpFKj5uyRVvtM8M7iiAHBMFerXsGqI0l0KTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1 Validity Not Before: Jun 14 23:30:46 2025 GMT Not After : Jun 21 23:30:46 2025 GMT Subject: CN=684e0627-f77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:19:82:d3:0c:ea:2b:1f:58:12:28:42:5f: 02:56:09:79:bd:5d:93:4e:8b:b9:b5:ad:f4:6c:76: 27:1c:e9:2c:08:0e:ed:4f:d5:6c:d3:e5:3a:32:11: 30:da:6e:84:58:f2:89:c1:be:64:28:de:bd:64:ad: 86:7e:98:ff:bd:70:4e:c2:81:d0:1e:0e:65:13:fb: 03:5c:b7:4e:27:a1:7f:1c:fb:cc:ab:42:9a:02:07: d4:ee:26:8c:67:7e:ac:18:f5:77:0c:58:6a:fd:35: ee:71:8e:3c:cb:f5:60:21:c0:d2:a8:9a:36:c1:35: 99:d2:ad:29:86:bd:7f:54:c0:8e:3d:59:12:12:22: 99:e1:4e:8b:e7:01:89:f7:11:1e:7f:6f:e2:c9:d9: aa:14:8a:18:02:56:04:01:8c:23:a2:f7:38:ca:d5: 5d:91:7f:01:fc:b2:79:79:3b:66:95:7a:20:ff:49: 90:c2:86:21:df:e4:85:9f:11:b9:75:28:d8:a7:5f: 15:94:75:25:04:b4:00:0a:0a:d8:5c:66:ac:db:f5: 5f:07:32:12:2d:42:3c:b8:08:02:2c:52:f7:ee:a3: dd:6f:6f:c6:ec:fa:a1:91:5f:ee:8f:01:0d:37:92: 84:01:a8:a8:04:4e:4e:4d:89:1d:c5:1b:e8:2b:0c: e9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7A:30:83:F2:9D:A8:82:0B:1F:67:DA:86:87:19:20:F4:DA:34:4E X509v3 Authority Key Identifier: keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:e0:aa:2f:23:a4:f6:8f:15:9d:77:e4:1d:07:3c:4e:3d:b1: 17:e3:c2:2d:cd:e0:3c:fc:44:09:5f:81:18:f9:01:ea:bf:1e: ec:21:bc:5f:db:f0:3d:d1:92:85:4e:2b:3c:ca:fa:79:32:06: 72:1e:d5:87:6a:bb:f6:a7:ac:cc:a3:92:e8:61:19:9b:06:84: de:12:94:1d:04:b0:c8:c0:35:08:78:12:6a:4c:1f:2a:b3:b8: 70:01:b8:bb:30:03:d2:c7:fa:41:71:5a:d0:5a:63:67:f2:c7: a4:1f:58:53:b2:43:33:ef:00:8c:7e:bf:e9:75:f1:27:df:36: a7:03:de:52:f0:1e:00:51:58:f4:64:e9:ae:a0:4c:35:f4:0e: 85:40:62:6a:f7:aa:3a:c5:6e:87:05:27:f4:a4:4e:ef:fb:62: 7b:bd:8f:3f:69:26:4e:29:4b:29:01:df:f6:39:63:ab:d5:50: bb:7b:44:28:8c:a2:14:04:13:65:ea:84:01:1a:11:fd:dc:44: a6:0a:0f:08:5d:7c:91:60:b2:39:2b:fb:6d:3d:3e:17:75:98: fa:0e:5f:04:27:62:e0:be:e1:a9:4c:ac:1c:be:62:91:89:a4: 7d:71:e6:af:87:f8:38:d2:92:d4:26:28:b7:61:38:6c:23:ec: 8b:3e:4a:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3OTIxMTAvBgNVBAUTKEYxNzhBODdDNTQ3MzA0MzdCQTU5RkFBOUNFMTg0RkY4 NzkwRkU0RjEwHhcNMjUwNjE0MjMzMDQ2WhcNMjUwNjIxMjMzMDQ2WjAYMRYwFAYD VQQDEw02ODRlMDYyNy1mNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnI4ZgtMM6isfWBIoQl8CVgl5vV2TTou5ta30bHYnHOksCA7tT9Vs0+U6MhEw 2m6EWPKJwb5kKN69ZK2Gfpj/vXBOwoHQHg5lE/sDXLdOJ6F/HPvMq0KaAgfU7iaM Z36sGPV3DFhq/TXucY48y/VgIcDSqJo2wTWZ0q0phr1/VMCOPVkSEiKZ4U6L5wGJ 9xEef2/iydmqFIoYAlYEAYwjovc4ytVdkX8B/LJ5eTtmlXog/0mQwoYh3+SFnxG5 dSjYp18VlHUlBLQACgrYXGas2/VfBzISLUI8uAgCLFL37qPdb2/G7PqhkV/ujwEN N5KEAaioBE5OTYkdxRvoKwzpFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLN6MIPy naiCCx9n2oaHGSD02jROMB8GA1UdIwQYMBaAFPF4qHxUcwQ3uln6qc4YT/h5D+Tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjc5Mi9EQkYxQzc3MjIx RUQxMUVDQkU5QzlBMUNDNEY5QUUwMi84WGlvZkZSekJEZTZXZnFwemhoUC1Ia1A1 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYaW9mRlJ6QkRlNldmcXB6aGhQLUhrUDVQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njc5Mi9EQkYxQzc3MjIxRUQxMUVDQkU5QzlBMUNDNEY5QUUwMi84WGlvZkZSekJE ZTZXZnFwemhoUC1Ia1A1UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI4KovI6T2jxWdd+QdBzxOPbEX48ItzeA8/EQJX4EY+QHqvx7sIbxf 2/A90ZKFTis8yvp5MgZyHtWHarv2p6zMo5LoYRmbBoTeEpQdBLDIwDUIeBJqTB8q s7hwAbi7MAPSx/pBcVrQWmNn8sekH1hTskMz7wCMfr/pdfEn3zanA95S8B4AUVj0 ZOmuoEw19A6FQGJq96o6xW6HBSf0pE7v+2J7vY8/aSZOKUspAd/2OWOr1VC7e0Qo jKIUBBNl6oQBGhH93ESmCg8IXXyRYLI5K/ttPT4XdZj6Dl8EJ2LgvuGpTKwcvmKR iaR9ceavh/g40pLUJii3YThsI+yLPkqz -----END CERTIFICATE-----Generated at Mon Jun 16 14:42:57 2025 by rpki-client