$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: RO2OvWBgZk/0w9oHpzDTK7VA6mmXKe+21RvrApGfCE0= Subject key identifier: 4C:1B:50:0D:3C:32:55:53:47:17:A5:F3:19:D0:C9:11:77:90:AF:10 Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 349F Signing time: Wed 02 Jul 2025 14:41:30 +0000 Manifest this update: Wed 02 Jul 2025 14:41:29 +0000 Manifest next update: Wed 09 Jul 2025 14:41:29 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: vv5g+8aJeio6YadGHHhdCTTPvwakk0BlWtyNLtFFaOU=) 2: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: m1Ja+K+BQF88h58Y18w9A7vu3WiRuOsB65pKsql8BvI=) 3: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: Zl4gUZhHt66LNUFLaLmernm+th1hHU0/5O3LszjxBds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Jul 2 14:41:29 2025 GMT Not After : Jul 9 14:41:29 2025 GMT Subject: CN=6865451a-8a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:93:f7:f0:ed:53:81:0c:11:e4:1a:ee:d8: 7c:23:89:0a:a9:4b:d8:35:30:5f:1e:e3:16:64:f2: 21:b5:a9:44:3f:d4:47:ce:d3:aa:6a:a6:7c:9a:b4: 1a:67:e5:00:89:b6:24:3f:f9:46:57:e2:38:82:a5: 13:de:d7:f4:e4:50:b7:79:36:23:85:7a:0d:27:d3: 76:2d:77:a7:63:c3:6c:ea:a0:9a:dc:d8:10:f2:11: d7:c6:c0:bb:f4:da:27:3f:f3:13:33:bc:01:e9:c5: d8:a2:c0:14:74:62:5e:7d:74:06:6c:4c:30:0c:d2: 21:8d:b0:07:d7:e6:ec:0c:95:1f:5a:11:7f:8f:6f: 9b:f0:47:3b:fb:6d:40:cf:16:63:1a:32:08:69:66: a7:1d:87:5e:d0:38:2b:3a:7c:a4:70:3c:00:98:ce: e1:10:ca:aa:9b:ea:b7:60:fb:ed:18:91:07:e3:34: 27:6f:fc:7b:ed:19:47:e6:d8:be:0d:85:2e:ba:41: 13:62:bf:83:0d:12:b0:7e:5f:3b:38:a0:db:63:4b: 35:b7:9c:50:c8:21:10:85:e3:9d:94:75:ed:49:d9: 49:17:82:8f:25:a9:d6:61:9e:74:07:7a:69:7f:61: 8d:97:07:c8:b6:42:43:8a:02:09:10:6f:fc:46:23: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1B:50:0D:3C:32:55:53:47:17:A5:F3:19:D0:C9:11:77:90:AF:10 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:cb:52:8b:fe:ec:6e:33:88:a4:b0:2a:1c:d1:59:1c:27:67: 62:50:53:dd:91:08:58:0c:75:9a:58:52:0f:f2:a3:1f:9f:79: 78:bc:2c:94:73:c6:e8:09:7e:a3:d0:6b:e8:34:38:90:a5:98: e2:3d:0b:05:96:5c:ab:ca:2c:fb:ad:c5:f4:45:40:bc:3e:ee: 40:d6:fb:66:80:ef:d2:e1:11:3b:0b:35:9a:a9:b9:d6:b7:52: 5c:fb:f8:94:7f:2a:22:b3:1b:79:cb:1c:af:6b:72:ce:6a:60: 6d:9b:70:6c:c5:59:94:a8:1b:4b:1a:88:e4:9f:b4:7d:24:17: aa:b1:2c:6b:1f:e0:e1:b2:91:c9:cc:46:45:f8:53:a9:5b:3f: 1f:6c:78:db:47:83:52:b3:8a:fd:90:fa:1d:ee:a4:00:a4:f1: 06:f4:52:f7:3a:41:51:08:2a:a6:1c:07:8e:7e:54:e9:39:67: de:2d:f6:a6:e4:e0:08:9c:73:d6:21:08:7c:23:07:3b:fc:9d: ca:da:ca:9f:4b:d9:ee:e6:33:eb:6c:1c:1a:19:61:aa:9d:f7: 97:8b:71:b0:66:b0:b9:e1:98:10:f3:fe:55:84:71:69:30:06: 8d:93:4e:9d:45:9b:27:7e:63:98:95:c7:99:11:f6:51:f2:39: 41:01:65:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjUwNzAyMTQ0MTI5WhcNMjUwNzA5MTQ0MTI5WjAYMRYwFAYD VQQDEw02ODY1NDUxYS04YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RaT9/DtU4EMEeQa7th8I4kKqUvYNTBfHuMWZPIhtalEP9RHztOqaqZ8mrQa Z+UAibYkP/lGV+I4gqUT3tf05FC3eTYjhXoNJ9N2LXenY8Ns6qCa3NgQ8hHXxsC7 9NonP/MTM7wB6cXYosAUdGJefXQGbEwwDNIhjbAH1+bsDJUfWhF/j2+b8Ec7+21A zxZjGjIIaWanHYde0DgrOnykcDwAmM7hEMqqm+q3YPvtGJEH4zQnb/x77RlH5ti+ DYUuukETYr+DDRKwfl87OKDbY0s1t5xQyCEQheOdlHXtSdlJF4KPJanWYZ50B3pp f2GNlwfItkJDigIJEG/8RiOz2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwbUA08 MlVTRxel8xnQyRF3kK8QMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0y1KL/uxuM4iksCoc0VkcJ2diUFPdkQhYDHWaWFIP8qMfn3l4vCyU c8boCX6j0GvoNDiQpZjiPQsFllyryiz7rcX0RUC8Pu5A1vtmgO/S4RE7CzWaqbnW t1Jc+/iUfyoisxt5yxyva3LOamBtm3BsxVmUqBtLGojkn7R9JBeqsSxrH+DhspHJ zEZF+FOpWz8fbHjbR4NSs4r9kPod7qQApPEG9FL3OkFRCCqmHAeOflTpOWfeLfam 5OAInHPWIQh8Iwc7/J3K2sqfS9nu5jPrbBwaGWGqnfeXi3GwZrC54ZgQ8/5VhHFp MAaNk06dRZsnfmOYlceZEfZR8jlBAWVb -----END CERTIFICATE-----Generated at Thu Jul 3 12:15:29 2025 by rpki-client