$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: o6zutA4dznXX+C6+4pBgxAGAKm8ADzGsLuV16ry8igI= Subject key identifier: 43:32:98:D5:21:E6:6D:DF:7C:03:1B:F8:A4:3A:49:F9:F1:22:D1:5C Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 037F Signing time: Tue 01 Jul 2025 01:28:29 +0000 Manifest this update: Tue 01 Jul 2025 01:28:29 +0000 Manifest next update: Tue 08 Jul 2025 01:28:29 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: 4t/qGbX9rBQbDDJh66WcbeOmoPMtVPanXo7fNnArUxs=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Jul 1 01:28:29 2025 GMT Not After : Jul 8 01:28:29 2025 GMT Subject: CN=686339bd-c626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:8b:ca:90:c2:66:7b:a1:09:11:bf:af:ee: 49:ea:52:3a:de:36:46:b5:8b:8d:47:bd:f7:d3:70: 24:32:de:0a:36:ee:84:fa:e0:c9:55:a1:2c:ff:a7: fb:0f:97:5a:43:33:92:66:cf:6a:c0:66:d8:71:86: 83:d1:28:e7:58:87:3e:1f:6c:82:68:e0:d0:ba:18: 4d:1b:97:41:a0:6a:96:d2:f6:58:66:9f:0e:79:79: 99:26:c4:57:b7:82:6e:a4:9f:59:57:a7:8a:dc:0d: 1a:e7:d6:fb:fe:fe:2e:1e:e2:93:43:49:fb:91:f5: af:23:cd:35:bb:33:d1:96:ac:fd:db:2f:4d:f9:d6: 49:64:b7:87:d7:aa:2e:bb:d5:5b:17:71:2b:c2:a3: 35:76:02:03:9e:b8:11:73:3c:0c:34:d8:76:f8:90: 67:3f:9d:ec:2c:be:ea:d3:01:4c:ed:91:ab:1b:18: ed:8e:46:c0:a5:8d:f6:49:4e:74:2c:39:e1:e6:6b: 34:3f:f9:ad:b2:bc:03:1d:bc:e8:90:01:cc:1c:24: c4:6a:6d:1b:66:6e:e7:ba:e3:24:7e:72:fc:00:10: 39:ea:5e:11:69:8f:63:f5:e6:20:18:fd:4c:dc:ce: 3d:a1:e5:c6:fd:7e:7b:66:73:83:46:24:c2:2b:b4: 65:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:32:98:D5:21:E6:6D:DF:7C:03:1B:F8:A4:3A:49:F9:F1:22:D1:5C X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ab:bc:22:9a:ef:e4:a9:d1:f1:1e:94:42:fe:5a:49:cc:35: 16:0b:37:7c:eb:a4:e7:ee:a5:c4:2c:46:ed:7b:73:41:e4:68: b6:da:80:77:09:40:39:89:a4:a3:df:a9:a7:86:72:b9:e0:2a: dd:37:2a:89:0b:2e:6b:67:99:d5:49:d8:31:82:24:b6:2e:59: f1:88:00:e9:b2:0c:74:48:6a:64:d2:d7:d1:af:cd:41:e3:f9: 99:32:a2:5e:7d:a9:97:24:99:0c:40:3f:23:f1:cd:21:7f:f2: 7a:86:08:af:5a:94:5b:ca:c9:71:fd:05:16:9b:13:55:86:06: 4d:f8:c6:37:a9:72:40:45:71:09:bf:47:92:93:a7:f5:01:69: e3:25:ea:fe:77:50:fc:56:e2:5e:84:11:12:eb:10:f5:4c:b5: f7:e7:e8:22:91:e5:eb:c2:5a:54:31:bb:0e:be:c0:67:b6:6e: f8:9f:12:d1:51:8e:32:4c:d7:9d:c7:9b:7f:e3:79:e8:b9:74: 8c:cd:7b:25:ea:87:67:2f:92:e4:e5:51:16:7e:64:e2:b2:c6: c5:e0:cc:2a:5a:79:ec:53:75:29:79:de:36:a2:b1:b5:48:40: b1:49:6f:80:3b:94:63:11:c5:60:a3:ba:fb:b3:d4:b4:e2:08: e4:e7:0d:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjUwNzAxMDEyODI5WhcNMjUwNzA4MDEyODI5WjAYMRYwFAYD VQQDEw02ODYzMzliZC1jNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUaLypDCZnuhCRG/r+5J6lI63jZGtYuNR73303AkMt4KNu6E+uDJVaEs/6f7 D5daQzOSZs9qwGbYcYaD0SjnWIc+H2yCaODQuhhNG5dBoGqW0vZYZp8OeXmZJsRX t4JupJ9ZV6eK3A0a59b7/v4uHuKTQ0n7kfWvI801uzPRlqz92y9N+dZJZLeH16ou u9VbF3ErwqM1dgIDnrgRczwMNNh2+JBnP53sLL7q0wFM7ZGrGxjtjkbApY32SU50 LDnh5ms0P/mtsrwDHbzokAHMHCTEam0bZm7nuuMkfnL8ABA56l4RaY9j9eYgGP1M 3M49oeXG/X57ZnODRiTCK7RlOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMymNUh 5m3ffAMb+KQ6SfnxItFcMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiq7wimu/kqdHxHpRC/lpJzDUWCzd866Tn7qXELEbte3NB5Gi22oB3 CUA5iaSj36mnhnK54CrdNyqJCy5rZ5nVSdgxgiS2LlnxiADpsgx0SGpk0tfRr81B 4/mZMqJefamXJJkMQD8j8c0hf/J6hgivWpRbyslx/QUWmxNVhgZN+MY3qXJARXEJ v0eSk6f1AWnjJer+d1D8VuJehBES6xD1TLX35+gikeXrwlpUMbsOvsBntm74nxLR UY4yTNedx5t/43nouXSMzXsl6odnL5Lk5VEWfmTissbF4MwqWnnsU3Uped42orG1 SECxSW+AO5RjEcVgo7r7s9S04gjk5w0z -----END CERTIFICATE-----Generated at Tue Jul 1 21:31:37 2025 by rpki-client