$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json) Hash identifier: z7l9Aquxf/+qE3MxwTDky7D/7AMMcaLo+n6lu1vV0Ao= Subject key identifier: 94:10:21:E3:44:CF:19:2E:BA:21:EF:F0:31:C2:5E:39:99:74:4B:2F Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Certificate serial: 1193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft Manifest number: 118A Signing time: Mon 12 May 2025 17:08:57 +0000 Manifest this update: Mon 12 May 2025 17:08:57 +0000 Manifest next update: Mon 19 May 2025 17:08:57 +0000 Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: lBRnm+nMyQ9ANq00vaBHaf6yBS/BaysFF2SSLVC23FI=) 2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: M4Uy68TNp94xFF+NcUEXpxwPGkJfanh0Twj3I7FRSFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4499 (0x1193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Validity Not Before: May 12 17:08:57 2025 GMT Not After : May 19 17:08:57 2025 GMT Subject: CN=68222b29-8ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:72:01:33:c4:83:7d:03:49:b1:62:aa:ce:03: 05:53:84:dc:18:72:e0:b3:f2:95:05:fb:39:ec:dd: c3:34:7a:58:ef:9e:a8:86:ed:b0:21:11:16:15:31: 9f:de:8c:b2:11:b3:f5:e3:d3:1a:5a:29:a2:e5:17: 7f:71:a1:97:cd:fb:83:c3:84:7d:62:2c:39:85:0a: 06:4f:68:5a:df:d5:fd:cf:e8:cc:8a:93:cc:87:fd: d0:cc:93:93:e3:d4:96:a0:98:e5:92:13:fc:60:d5: 97:45:6d:0c:f9:f9:dc:18:ab:22:d1:b3:e8:fe:35: 75:b1:16:4d:76:bd:eb:9a:7d:06:45:25:13:1f:c6: f4:48:4d:d1:03:fd:b6:70:90:99:38:b7:09:2c:1b: aa:a8:50:a9:9b:7b:fb:8d:ce:29:42:fb:c5:20:cf: 36:7f:cf:35:29:8c:8a:b4:48:a2:66:23:44:19:ab: 50:ea:6d:41:90:6c:93:de:55:b2:a0:c1:d6:76:4d: 09:27:b6:37:8f:a3:d8:fe:5e:89:9e:2e:d4:c1:1f: 24:e5:10:75:01:ff:0d:18:c2:d0:0b:9e:99:c4:44: 76:c4:92:f9:5d:f2:f2:2f:c4:d7:c6:a0:0a:60:8c: 39:fe:a9:cd:b3:54:18:b0:6b:8a:21:82:9d:c4:7e: 8f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:10:21:E3:44:CF:19:2E:BA:21:EF:F0:31:C2:5E:39:99:74:4B:2F X509v3 Authority Key Identifier: keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b8:06:da:e7:c2:7a:a8:0b:d4:50:d5:9b:52:e0:37:c8:a4: 73:31:8e:35:84:46:47:94:b2:32:20:07:3b:73:b2:1a:30:99: e3:13:d0:96:d4:24:87:e2:a2:0f:38:0c:82:e6:04:d3:d9:a4: 6a:5f:7c:4d:57:4b:c4:7c:d2:b3:6d:f0:c0:67:37:97:cf:81: da:78:14:f9:42:99:28:3a:17:ac:81:6d:6c:cc:1f:f5:82:b4: 26:91:6b:b4:e3:b9:52:b7:41:81:39:71:da:7b:36:22:9d:a7: 08:1b:2c:69:12:d9:17:f5:81:09:5b:3c:a8:10:6c:c2:b9:41: 01:33:73:6c:be:a8:95:21:69:81:14:3b:8d:42:37:6a:01:43: 5e:eb:20:c3:e2:7a:eb:f1:1d:f1:c7:14:13:98:42:b6:d0:ba: de:53:1b:2a:c2:fd:a5:ab:57:42:5c:b4:d6:dc:da:7f:90:6e: 11:79:26:fb:29:40:9a:86:04:e2:f7:a9:10:9f:ff:4b:ac:07: 7d:26:a8:77:f5:af:88:12:e0:5f:49:3a:2d:54:f1:ac:ba:73: ff:78:cb:81:7b:2d:1d:ca:e2:23:20:3f:e2:b4:51:96:b3:f0: c7:5c:11:72:d5:9f:fe:aa:9a:0e:f2:4b:72:11:6f:91:49:c3: 35:8f:9a:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0MzVBMkI4NTQz QkNFNDc2MDkwHhcNMjUwNTEyMTcwODU3WhcNMjUwNTE5MTcwODU3WjAYMRYwFAYD VQQDEw02ODIyMmIyOS04ZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7nIBM8SDfQNJsWKqzgMFU4TcGHLgs/KVBfs57N3DNHpY756ohu2wIREWFTGf 3oyyEbP149MaWimi5Rd/caGXzfuDw4R9Yiw5hQoGT2ha39X9z+jMipPMh/3QzJOT 49SWoJjlkhP8YNWXRW0M+fncGKsi0bPo/jV1sRZNdr3rmn0GRSUTH8b0SE3RA/22 cJCZOLcJLBuqqFCpm3v7jc4pQvvFIM82f881KYyKtEiiZiNEGatQ6m1BkGyT3lWy oMHWdk0JJ7Y3j6PY/l6Jni7UwR8k5RB1Af8NGMLQC56ZxER2xJL5XfLyL8TXxqAK YIw5/qnNs1QYsGuKIYKdxH6PXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQQIeNE zxkuuiHv8DHCXjmZdEsvMB8GA1UdIwQYMBaAFMfPlD46dk83wAPNQ1orhUO85HYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODVFOS8wODI1MzhFQ0Y5 NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6ZkFBODFEV2l1RlE3emtk Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4LVVQanAyVHpmQUE4MURXaXVGUTd6a2Rnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6 ZkFBODFEV2l1RlE3emtkZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/uAba58J6qAvUUNWbUuA3yKRzMY41hEZHlLIyIAc7c7IaMJnjE9CW 1CSH4qIPOAyC5gTT2aRqX3xNV0vEfNKzbfDAZzeXz4HaeBT5QpkoOhesgW1szB/1 grQmkWu047lSt0GBOXHaezYinacIGyxpEtkX9YEJWzyoEGzCuUEBM3NsvqiVIWmB FDuNQjdqAUNe6yDD4nrr8R3xxxQTmEK20LreUxsqwv2lq1dCXLTW3Np/kG4ReSb7 KUCahgTi96kQn/9LrAd9Jqh39a+IEuBfSTotVPGsunP/eMuBey0dyuIjID/itFGW s/DHXBFy1Z/+qpoO8ktyEW+RScM1j5q7 -----END CERTIFICATE-----Generated at Mon May 12 23:27:28 2025 by rpki-client