$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: gDaJbkqihmWEGEtmxvuJOElurdDriuE8k+5b/0sBu7o= Subject key identifier: E3:4C:A3:B9:9D:08:8D:B5:E7:DE:BA:95:1F:AE:A0:61:FA:EC:B3:1E Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 03A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 039A Signing time: Sat 23 Aug 2025 01:02:30 +0000 Manifest this update: Sat 23 Aug 2025 01:02:29 +0000 Manifest next update: Sat 30 Aug 2025 01:02:29 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: 9cPxx7+9BkHosCC20XwJZ/xz95GIcgXVfQKDw0YsalQ=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 931 (0x3a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Aug 23 01:02:29 2025 GMT Not After : Aug 30 01:02:29 2025 GMT Subject: CN=68a91326-d84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:cd:5c:4f:57:21:9e:e9:b3:19:eb:23:f6: 54:f9:a7:0a:19:fd:31:28:f7:39:f3:8e:91:01:ef: da:00:29:e7:40:4e:03:e5:fc:af:f1:44:fe:57:fd: c2:19:aa:73:8c:2f:12:e0:d8:34:a4:72:88:05:7b: 55:f6:e1:18:72:9e:75:ff:3b:2e:d9:a5:09:df:49: 8b:37:2d:b0:3c:d5:70:ac:65:2c:95:e1:23:77:cb: 6d:81:31:88:e9:3b:23:da:cf:12:2b:d9:88:2b:58: ab:d8:73:4a:02:7d:98:5b:4b:96:b0:04:19:e9:62: 95:da:4c:8b:d1:7a:59:25:9c:3f:36:a4:74:74:02: 29:10:9c:07:12:bc:35:1b:fa:ca:4e:81:42:24:d1: b6:e4:dc:0d:6c:1f:b3:5d:26:db:b1:c1:52:cb:a2: 0a:d4:01:b1:ff:69:b2:0d:36:b9:9d:4a:9f:e6:c4: c5:f4:3c:b8:55:fa:48:2a:da:77:5f:26:94:1e:07: 29:27:3f:d2:32:bc:94:07:68:c8:55:02:2c:32:f4: b0:31:b0:c8:ab:c6:80:67:1a:d1:1c:83:74:23:e6: 1b:f3:14:11:db:93:d0:8a:98:3c:ad:61:ca:03:de: 4d:d1:05:13:3f:0a:cd:24:ee:af:43:0c:cf:7e:fe: 77:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4C:A3:B9:9D:08:8D:B5:E7:DE:BA:95:1F:AE:A0:61:FA:EC:B3:1E X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3e:0a:4b:8d:b4:94:00:be:c3:9e:a2:59:17:fd:e0:68:d8: 11:b0:a4:49:b9:22:c7:6e:37:bf:57:f6:59:6c:0b:8f:d9:6c: c7:fa:42:dc:e3:b8:ba:5c:c6:39:0b:80:39:85:4f:81:20:6f: 83:be:1c:05:7f:4b:a3:06:5e:5f:18:02:d9:ee:50:1b:af:83: 4a:c3:db:07:c2:0d:29:1e:7c:da:aa:ee:cb:41:b3:d2:ee:c2: 9c:cf:25:1e:58:00:11:67:ba:d9:66:7f:ce:77:94:d7:02:eb: 4b:a6:09:ee:3d:b6:9d:e7:20:e6:a0:22:9f:6b:f1:71:a0:a5: 76:bf:d8:61:15:e7:a9:f6:60:12:43:d1:b2:81:d4:23:06:d4: 04:e8:65:8c:b5:3a:73:9a:73:a3:99:6c:a6:1d:c3:f4:aa:e3: 72:f5:e0:60:de:07:ca:ca:39:24:36:4f:c6:e2:f0:0a:e9:d3: 34:14:68:a6:b8:82:3e:1f:9d:20:10:63:da:23:12:ce:7f:e0: 3c:68:10:fa:6c:35:33:b7:31:d2:fd:18:b4:51:e7:65:29:39: 3e:91:5f:51:7f:b8:27:ad:53:e7:8b:95:db:ec:6c:fc:62:2c: cb:36:6a:a6:be:3c:5a:61:71:c2:b3:1a:8b:80:c6:05:51:b8: 05:be:d7:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjUwODIzMDEwMjI5WhcNMjUwODMwMDEwMjI5WjAYMRYwFAYD VQQDEw02OGE5MTMyNi1kODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EjNXE9XIZ7psxnrI/ZU+acKGf0xKPc5846RAe/aACnnQE4D5fyv8UT+V/3C GapzjC8S4Ng0pHKIBXtV9uEYcp51/zsu2aUJ30mLNy2wPNVwrGUsleEjd8ttgTGI 6Tsj2s8SK9mIK1ir2HNKAn2YW0uWsAQZ6WKV2kyL0XpZJZw/NqR0dAIpEJwHErw1 G/rKToFCJNG25NwNbB+zXSbbscFSy6IK1AGx/2myDTa5nUqf5sTF9Dy4VfpIKtp3 XyaUHgcpJz/SMryUB2jIVQIsMvSwMbDIq8aAZxrRHIN0I+Yb8xQR25PQipg8rWHK A95N0QUTPwrNJO6vQwzPfv53NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONMo7md CI215966lR+uoGH67LMeMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiPgpLjbSUAL7DnqJZF/3gaNgRsKRJuSLHbje/V/ZZbAuP2WzH+kLc 47i6XMY5C4A5hU+BIG+DvhwFf0ujBl5fGALZ7lAbr4NKw9sHwg0pHnzaqu7LQbPS 7sKczyUeWAARZ7rZZn/Od5TXAutLpgnuPbad5yDmoCKfa/FxoKV2v9hhFeep9mAS Q9GygdQjBtQE6GWMtTpzmnOjmWymHcP0quNy9eBg3gfKyjkkNk/G4vAK6dM0FGim uII+H50gEGPaIxLOf+A8aBD6bDUztzHS/Ri0UedlKTk+kV9Rf7gnrVPni5Xb7Gz8 YizLNmqmvjxaYXHCsxqLgMYFUbgFvtds -----END CERTIFICATE-----Generated at Sat Aug 23 13:44:16 2025 by rpki-client