$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: 4Bys3Tk1AQP4StIDgoIT/0QNWuCVvUXtnVwb43J0Cj4= Subject key identifier: 37:27:A9:6B:BE:00:49:C2:70:0F:33:58:43:FE:DE:57:C6:80:88:F6 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 05A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 058E Signing time: Sat 14 Jun 2025 23:01:33 +0000 Manifest this update: Sat 14 Jun 2025 23:01:33 +0000 Manifest next update: Sat 21 Jun 2025 23:01:33 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: NSCJEkcmZh6DCiPWROtP4bONkVxTmggIKRkjTSwSWs4=) 2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: KgAjUYIuzjhpkZFNtYWs181NTAA2NQcYLWH/gU6nAAg=) 3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: lBw/oXqYii+CxdFQl9gOeByngEJHo8e2NzPJY0PJwPA=) 4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: q2RN3xLXUOsYwfNjHGYHuCEJyjXQ1ifjwY5JK1sjpVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1442 (0x5a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Jun 14 23:01:33 2025 GMT Not After : Jun 21 23:01:33 2025 GMT Subject: CN=684dff4d-96ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:26:74:bd:0d:44:f5:29:81:c8:e9:bc:01:62: 3b:fb:43:44:7b:6a:b6:2f:67:f3:89:c3:98:0d:03: 85:37:f2:37:2a:8f:0b:26:56:58:23:a3:3d:c1:1d: fe:4d:47:4d:63:e2:8e:38:67:4c:d7:38:79:14:38: cb:84:e7:56:0b:bd:bd:3e:14:d7:71:db:6c:00:02: 94:1b:e3:d4:24:8e:9d:a2:46:46:0e:30:4e:30:25: 2e:6b:af:81:24:ee:51:8f:91:b8:8e:11:57:68:2f: 52:de:8b:52:22:a3:a5:79:64:60:bb:a2:0f:ad:46: 71:b8:75:b7:8b:eb:37:98:38:cb:d8:7c:39:01:3b: c6:6b:12:b9:ac:0b:4f:40:89:ca:7f:89:f8:ae:55: a7:f3:8a:7d:c2:9a:63:52:67:89:84:2a:3e:1f:3c: f8:1a:a1:8e:64:29:11:a7:23:fa:8a:f4:be:dc:c4: ce:dd:55:ad:87:a9:d8:85:e5:3b:d8:d2:6e:d6:48: b0:b2:f9:d4:07:42:45:9c:ef:60:35:cf:71:aa:f6: 13:c3:10:78:03:ce:95:33:08:4f:57:fe:a0:22:43: 11:f1:cd:90:08:69:e1:ab:02:d2:48:98:c8:84:1e: 12:f8:54:aa:03:29:13:a2:4c:a2:62:66:70:bf:00: 87:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:27:A9:6B:BE:00:49:C2:70:0F:33:58:43:FE:DE:57:C6:80:88:F6 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:0b:59:ad:19:d1:b2:b5:91:6b:a5:fb:cb:62:b7:f6:dd:a3: c7:ac:58:82:c0:2f:86:6b:a1:da:0c:7e:05:d2:8c:ca:29:5b: 7d:51:35:be:3b:1c:d6:e2:55:c7:1e:08:26:54:4c:7d:e4:69: ef:08:8d:a4:2d:d5:fd:d8:d2:f6:6b:e1:5a:1c:6c:75:52:47: cb:ec:79:ed:dd:84:f8:fc:45:2a:ec:97:50:8a:9d:b8:8f:c6: 0b:50:26:ad:04:91:a6:75:64:83:f4:89:c7:34:ac:6e:51:33: 13:4a:4d:c0:e0:fa:5a:ba:a1:2a:81:ea:93:44:0b:69:dc:87: 26:b4:c0:2f:1f:43:8b:2d:ea:63:5c:4a:05:a5:95:35:78:6e: 16:50:d6:57:2a:f0:e8:80:53:34:a8:9f:12:68:9d:eb:80:ab: 6f:ce:a5:19:40:9e:a7:6a:62:cf:1e:eb:67:0f:9a:62:bb:66: ea:af:40:49:97:2b:dd:e6:5b:d3:e4:1c:cd:a2:06:a1:5b:b7: 77:77:d3:be:ab:63:73:ce:9c:50:83:5a:16:d2:51:09:98:3a: 85:46:02:d0:9f:ea:60:c8:91:c8:c9:ae:6a:23:30:ba:f0:5d: 59:7b:62:c5:5f:1e:3d:9c:60:82:16:6e:62:8c:db:5c:90:9c: 6f:79:46:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjUwNjE0MjMwMTMzWhcNMjUwNjIxMjMwMTMzWjAYMRYwFAYD VQQDEw02ODRkZmY0ZC05NmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8SZ0vQ1E9SmByOm8AWI7+0NEe2q2L2fzicOYDQOFN/I3Ko8LJlZYI6M9wR3+ TUdNY+KOOGdM1zh5FDjLhOdWC729PhTXcdtsAAKUG+PUJI6dokZGDjBOMCUua6+B JO5Rj5G4jhFXaC9S3otSIqOleWRgu6IPrUZxuHW3i+s3mDjL2Hw5ATvGaxK5rAtP QInKf4n4rlWn84p9wppjUmeJhCo+Hzz4GqGOZCkRpyP6ivS+3MTO3VWth6nYheU7 2NJu1kiwsvnUB0JFnO9gNc9xqvYTwxB4A86VMwhPV/6gIkMR8c2QCGnhqwLSSJjI hB4S+FSqAykTokyiYmZwvwCHHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcnqWu+ AEnCcA8zWEP+3lfGgIj2MB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHC1mtGdGytZFrpfvLYrf23aPHrFiCwC+Ga6HaDH4F0ozKKVt9UTW+ OxzW4lXHHggmVEx95GnvCI2kLdX92NL2a+FaHGx1UkfL7Hnt3YT4/EUq7JdQip24 j8YLUCatBJGmdWSD9InHNKxuUTMTSk3A4PpauqEqgeqTRAtp3IcmtMAvH0OLLepj XEoFpZU1eG4WUNZXKvDogFM0qJ8SaJ3rgKtvzqUZQJ6namLPHutnD5piu2bqr0BJ lyvd5lvT5BzNogahW7d3d9O+q2NzzpxQg1oW0lEJmDqFRgLQn+pgyJHIya5qIzC6 8F1Ze2LFXx49nGCCFm5ijNtckJxveUZM -----END CERTIFICATE-----Generated at Sun Jun 15 04:55:37 2025 by rpki-client