$ rpki-client -vvf rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft File: x8MjS9JtrWKeLX70REhP5UHYFI4.mft (raw, json) Hash identifier: komSr78ILLDBzmma44WErBLf67dAFbAIJJ2IvGt1JQM= Subject key identifier: C0:FA:51:03:FF:D8:AB:AA:75:C0:B5:68:9B:A6:D3:70:02:D1:4B:35 Authority key identifier: C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E Certificate issuer: /CN=A91E36C4/serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft Manifest number: 36 Signing time: Thu 19 Jun 2025 07:00:52 +0000 Manifest this update: Thu 19 Jun 2025 07:00:51 +0000 Manifest next update: Thu 26 Jun 2025 07:00:51 +0000 Files and hashes: 1: x8MjS9JtrWKeLX70REhP5UHYFI4.crl (hash: nh0qxKJ3gb8d9y4LWijetu07OZ2fWr2SJyFBjTJwweA=) 2: FA429FD6FEED11EF826A3F81C4F9AE02.roa (hash: 39w+18fUPSiKVB8OhUL0ki9Bi8qUl1J3wP6kCBvBYqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E36C4, serialNumber=C7C3234BD26DAD629E2D7EF444484FE541D8148E Validity Not Before: Jun 19 07:00:51 2025 GMT Not After : Jun 26 07:00:51 2025 GMT Subject: CN=6853b5a3-1417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fe:42:11:d7:1a:7a:86:8c:37:4d:07:6b:d6: 8e:c7:86:a7:51:1f:c3:93:b3:63:5c:49:b5:29:05: d9:25:a8:9c:ee:4c:a8:48:79:25:43:ba:4a:7e:a9: c2:7a:4f:bc:4b:33:8e:f3:49:55:82:9d:aa:5b:e4: 32:db:aa:a5:8f:54:fc:1d:2c:54:58:e9:dc:fc:6a: 2a:eb:33:65:95:92:35:d3:85:0d:4d:92:9a:b3:33: b1:08:2f:5f:42:5f:62:ca:00:f2:30:19:96:34:6d: 89:c8:aa:dc:03:ce:92:d1:34:23:f9:88:f6:3e:ec: be:d8:a2:65:38:bd:45:b1:39:63:33:89:75:30:85: 59:f4:7e:a8:60:f9:8f:59:c4:ff:bd:1b:11:1f:98: de:ff:a5:15:39:dd:7a:b7:52:7e:e5:4d:db:a2:7a: 1f:13:64:88:b8:ca:51:80:6d:be:e9:21:92:38:15: 31:34:78:f4:68:6d:29:34:8b:a3:4d:bf:77:8e:db: 5c:23:37:ad:e5:79:4f:98:a1:87:2a:15:1b:36:15: e5:72:fe:7f:9c:29:0f:21:19:a9:a1:fa:e7:74:a1: ab:6e:59:a2:84:bf:0b:4e:85:1d:a4:e1:65:eb:c7: 53:4b:77:3f:a8:d2:c3:b6:db:28:0f:1c:cf:fd:61: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FA:51:03:FF:D8:AB:AA:75:C0:B5:68:9B:A6:D3:70:02:D1:4B:35 X509v3 Authority Key Identifier: keyid:C7:C3:23:4B:D2:6D:AD:62:9E:2D:7E:F4:44:48:4F:E5:41:D8:14:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8MjS9JtrWKeLX70REhP5UHYFI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E36C4/C1605852FEED11EF9FF6CE80C4F9AE02/x8MjS9JtrWKeLX70REhP5UHYFI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:d3:96:6f:71:3f:93:ff:7b:a6:b5:f5:6c:7e:7e:c8:5a:ee: 16:01:dd:bb:dc:69:81:07:20:de:69:6c:e9:99:2a:a7:a1:39: 6e:ed:91:05:0c:86:13:0c:dc:f0:66:03:6d:55:8a:0a:b6:e7: b8:07:90:19:e3:77:21:30:90:8a:d5:7e:a6:04:2f:d9:7f:ca: 2d:db:e0:e2:02:ba:46:14:9a:01:40:d7:80:00:60:c3:c1:9b: ea:24:ee:9f:0f:94:bd:b9:cc:ee:8b:ca:39:32:b6:2d:d7:d4: e3:26:dc:f9:45:5a:f9:f7:d1:3b:e1:58:09:5d:87:de:3e:ab: 28:0b:3a:d2:db:26:2f:b1:38:ad:8e:bc:c2:06:c7:1a:cb:a3: 24:ee:8a:ad:b8:c3:7a:89:3f:f7:2d:29:cb:2f:9c:da:66:df: db:28:e6:7b:be:81:03:0e:ac:d1:fb:1b:c3:f3:57:32:07:72: 53:89:39:dd:3f:28:b6:24:57:27:4f:01:cc:71:7a:62:9b:76: 71:57:57:ef:1d:f3:03:aa:d1:9c:16:70:fa:f3:09:c7:ba:07: cf:00:6e:81:f3:03:4a:ad:27:83:a3:e1:68:84:2d:a9:11:fd: ef:8a:cc:c0:ed:fd:f8:c8:69:84:18:2d:c1:c2:0d:5f:03:69: 9d:64:0e:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzZDNDExMC8GA1UEBRMoQzdDMzIzNEJEMjZEQUQ2MjlFMkQ3RUY0NDQ0ODRGRTU0 MUQ4MTQ4RTAeFw0yNTA2MTkwNzAwNTFaFw0yNTA2MjYwNzAwNTFaMBgxFjAUBgNV BAMTDTY4NTNiNWEzLTE0MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc/kIR1xp6how3TQdr1o7HhqdRH8OTs2NcSbUpBdklqJzuTKhIeSVDukp+qcJ6 T7xLM47zSVWCnapb5DLbqqWPVPwdLFRY6dz8airrM2WVkjXThQ1NkpqzM7EIL19C X2LKAPIwGZY0bYnIqtwDzpLRNCP5iPY+7L7YomU4vUWxOWMziXUwhVn0fqhg+Y9Z xP+9GxEfmN7/pRU53Xq3Un7lTduieh8TZIi4ylGAbb7pIZI4FTE0ePRobSk0i6NN v3eO21wjN63leU+YoYcqFRs2FeVy/n+cKQ8hGamh+ud0oatuWaKEvwtOhR2k4WXr x1NLdz+o0sO22ygPHM/9YbO7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwPpRA//Y q6p1wLVom6bTcALRSzUwHwYDVR0jBBgwFoAUx8MjS9JtrWKeLX70REhP5UHYFI4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNkM0L0MxNjA1ODUyRkVF RDExRUY5RkY2Q0U4MEM0RjlBRTAyL3g4TWpTOUp0cldLZUxYNzBSRWhQNVVIWUZJ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDhNalM5SnRyV0tlTFg3MFJFaFA1VUhZRkk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NkM0L0MxNjA1ODUyRkVFRDExRUY5RkY2Q0U4MEM0RjlBRTAyL3g4TWpTOUp0cldL ZUxYNzBSRWhQNVVIWUZJNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMDTlm9xP5P/e6a19Wx+fsha7hYB3bvcaYEHIN5pbOmZKqehOW7tkQUM hhMM3PBmA21Vigq257gHkBnjdyEwkIrVfqYEL9l/yi3b4OICukYUmgFA14AAYMPB m+ok7p8PlL25zO6Lyjkyti3X1OMm3PlFWvn30TvhWAldh94+qygLOtLbJi+xOK2O vMIGxxrLoyTuiq24w3qJP/ctKcsvnNpm39so5nu+gQMOrNH7G8PzVzIHclOJOd0/ KLYkVydPAcxxemKbdnFXV+8d8wOq0ZwWcPrzCce6B88AboHzA0qtJ4Oj4WiELakR /e+KzMDt/fjIaYQYLcHCDV8DaZ1kDrI= -----END CERTIFICATE-----Generated at Thu Jun 19 11:31:54 2025 by rpki-client