$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: 8cMEi+LHWCD5zaEjU+X5O++LiDo/y2aA/wn+gJebCbY= Subject key identifier: C1:AC:1E:E8:AD:1A:33:65:B9:E1:3B:B5:A8:56:13:0A:C3:DC:7C:F4 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 0586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 0573 Signing time: Thu 24 Apr 2025 23:09:08 +0000 Manifest this update: Thu 24 Apr 2025 23:09:07 +0000 Manifest next update: Thu 01 May 2025 23:09:07 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: ctULrAgcAWAhylRqQiAGxOedcA3rkgWpAt3eSnyOKNY=) 2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: KgAjUYIuzjhpkZFNtYWs181NTAA2NQcYLWH/gU6nAAg=) 3: 660A349884C511EFB2831C16C4F9AE02.roa (hash: q2RN3xLXUOsYwfNjHGYHuCEJyjXQ1ifjwY5JK1sjpVs=) 4: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: 5+nKIDKYjPUjJXitKA/NG2KaCsn8s1r6GRZFIHnwdms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Apr 24 23:09:07 2025 GMT Not After : May 1 23:09:07 2025 GMT Subject: CN=680ac494-9fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:35:59:cc:4f:08:4c:5d:7e:71:e5:8d:78:c6: e7:82:a4:66:7d:6c:1b:67:13:c2:30:54:e0:86:0b: 3e:1a:77:c7:ce:03:e1:08:84:7c:aa:c6:0f:5d:e7: 65:54:2f:f9:46:b6:e1:5b:c7:c7:8f:c3:3a:c4:ab: 4a:fc:05:92:ae:ba:32:78:a4:d8:97:b5:5f:16:95: c3:83:72:34:f2:67:3d:3c:42:0c:62:9e:6f:b7:17: 4b:3c:1d:c9:aa:8f:3a:50:9c:18:fd:11:c2:5b:54: 1f:27:41:6f:71:3a:c0:9a:10:89:fa:14:47:b4:ed: 59:dc:ea:33:3b:64:19:a0:b4:b8:69:f5:82:74:4e: 4e:54:6a:da:67:e3:37:d9:7e:d3:5c:bf:09:2d:a3: 46:6b:03:30:cf:47:56:a4:37:21:6d:4c:d2:cf:6e: 19:e1:fd:d2:64:45:9a:6c:ca:a9:f3:53:0b:18:65: 30:a5:b2:14:09:13:e8:87:85:85:ba:90:0f:34:62: 27:98:5c:a4:3b:cf:8a:e4:35:00:27:11:83:ae:f3: ee:90:d9:e0:29:2f:e1:ea:b3:81:80:c8:55:38:6b: c4:62:bb:40:b0:29:8a:9c:75:bd:17:d8:57:35:98: 8e:71:a2:c5:bb:22:e9:c3:68:ea:63:aa:52:24:2f: 26:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AC:1E:E8:AD:1A:33:65:B9:E1:3B:B5:A8:56:13:0A:C3:DC:7C:F4 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6a:66:6e:a5:fc:fa:7a:00:42:e4:00:3c:df:b4:c0:02:73: 35:51:92:e1:82:46:87:a5:55:7d:e7:b8:64:e0:8b:d8:5f:38: 69:6f:ab:7a:be:cb:25:fa:df:2f:88:dc:40:08:64:6e:13:af: 8e:16:c7:08:63:98:67:c0:c0:17:28:84:bd:e5:f3:b3:c1:e8: 9d:a1:54:6a:2f:a9:31:58:de:29:46:1d:b1:0b:97:7b:e5:d0: 6b:58:73:c2:7a:e7:48:5b:f2:b5:cf:fb:a1:20:76:70:59:98: 37:00:f8:8e:ae:fa:ed:c4:00:da:03:19:77:dd:7e:a5:d6:26: bf:5d:52:ce:01:a2:b3:62:c8:6b:f0:e0:15:e8:77:e0:ca:d6: 82:0c:55:b6:14:2e:58:d1:f2:e2:4e:bf:50:c7:52:c3:e2:73: e8:e8:94:86:94:d9:e9:05:c4:68:ec:14:95:5e:6d:61:19:88: 2f:eb:d3:79:5a:31:a4:98:1a:42:70:e2:d6:1c:c3:80:b4:6e: 08:b3:a5:8e:5d:e1:a8:94:bf:e9:b0:b9:08:fe:25:8e:70:93: 11:a5:98:7b:a3:8b:92:37:bf:6e:d8:98:c3:71:36:25:a4:46: e4:ed:a5:d4:24:89:6f:67:d8:12:1c:04:f1:b5:05:46:55:4a: 06:0d:37:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjUwNDI0MjMwOTA3WhcNMjUwNTAxMjMwOTA3WjAYMRYwFAYD VQQDEw02ODBhYzQ5NC05ZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zVZzE8ITF1+ceWNeMbngqRmfWwbZxPCMFTghgs+GnfHzgPhCIR8qsYPXedl VC/5RrbhW8fHj8M6xKtK/AWSrroyeKTYl7VfFpXDg3I08mc9PEIMYp5vtxdLPB3J qo86UJwY/RHCW1QfJ0FvcTrAmhCJ+hRHtO1Z3OozO2QZoLS4afWCdE5OVGraZ+M3 2X7TXL8JLaNGawMwz0dWpDchbUzSz24Z4f3SZEWabMqp81MLGGUwpbIUCRPoh4WF upAPNGInmFykO8+K5DUAJxGDrvPukNngKS/h6rOBgMhVOGvEYrtAsCmKnHW9F9hX NZiOcaLFuyLpw2jqY6pSJC8mmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGsHuit GjNlueE7tahWEwrD3Hz0MB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+amZupfz6egBC5AA837TAAnM1UZLhgkaHpVV957hk4IvYXzhpb6t6 vssl+t8viNxACGRuE6+OFscIY5hnwMAXKIS95fOzweidoVRqL6kxWN4pRh2xC5d7 5dBrWHPCeudIW/K1z/uhIHZwWZg3APiOrvrtxADaAxl33X6l1ia/XVLOAaKzYshr 8OAV6HfgytaCDFW2FC5Y0fLiTr9Qx1LD4nPo6JSGlNnpBcRo7BSVXm1hGYgv69N5 WjGkmBpCcOLWHMOAtG4Is6WOXeGolL/psLkI/iWOcJMRpZh7o4uSN79u2JjDcTYl pEbk7aXUJIlvZ9gSHATxtQVGVUoGDTdl -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:26 2025 by rpki-client