$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft File: xWFyqoU5BINNkF08MAE0TdKhjp4.mft (raw, json) Hash identifier: Kro+kGIu7FnsrWVtxgxoYNRV1Bo7GVHpun6X98gEvXo= Subject key identifier: 50:76:FE:B9:62:10:58:F9:BA:BD:D9:A0:06:6A:4A:71:9E:8B:61:9D Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft Manifest number: 0190 Signing time: Sat 05 Jul 2025 03:50:44 +0000 Manifest this update: Sat 05 Jul 2025 03:50:44 +0000 Manifest next update: Sat 12 Jul 2025 03:50:44 +0000 Files and hashes: 1: xWFyqoU5BINNkF08MAE0TdKhjp4.crl (hash: h476Jr8wfEXdy07xaT7XnfusQm+7IfaXr0woYAeQBRg=) 2: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (hash: QJic5b/HC6ZO9L9AzouyI1f/AhHlKpyjlXdUDRpV06s=) 3: 6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (hash: fvrvhYuIB4wEmKs1ycLwW/A4j4ALVpjcmKJeAfUulIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Validity Not Before: Jul 5 03:50:44 2025 GMT Not After : Jul 12 03:50:44 2025 GMT Subject: CN=6868a114-8ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:75:45:f4:f1:14:10:9d:25:b7:80:d3:79: 04:b0:65:11:78:fc:95:47:a8:a9:11:27:f7:c6:3c: 94:19:75:49:b1:de:9b:1b:2e:c4:9e:95:7d:e9:78: e6:ce:bb:37:af:f7:81:83:0c:56:d6:e3:75:43:8c: 2a:33:07:44:2c:e3:c3:7a:8b:9a:a7:20:3c:18:08: ec:ab:09:a6:8f:eb:de:46:3b:61:63:6c:df:47:67: b9:7a:9f:06:29:80:25:0b:85:8b:cd:e5:41:5a:a3: 38:ce:a9:d9:25:96:2e:fb:39:1e:cc:cb:87:b6:fb: 96:7c:b3:f6:2d:10:ee:83:7c:db:95:fb:5b:67:79: 0d:fd:d3:40:db:f4:14:80:60:17:f6:ac:05:75:f4: fd:0b:13:2c:1b:82:6b:dd:b8:67:73:7a:1d:ee:98: 94:54:ff:40:09:1c:c6:6d:32:ee:11:eb:fa:d5:6d: 75:bb:56:39:6b:b8:d4:a0:05:7c:9a:f9:50:6e:96: 6a:61:6e:55:83:64:20:d6:70:07:1c:39:c0:95:03: 11:64:03:6c:6f:0a:d7:56:56:a3:97:a4:c7:ba:ed: 12:a9:e1:d5:ff:40:58:d8:60:8a:c1:48:3e:0d:6e: 3d:0e:6b:11:f3:76:a1:9c:b1:75:3c:c2:e0:db:7c: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:76:FE:B9:62:10:58:F9:BA:BD:D9:A0:06:6A:4A:71:9E:8B:61:9D X509v3 Authority Key Identifier: keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:66:d6:a0:c2:4a:7a:4f:51:1e:2d:15:c7:ca:30:60:17:d4: 0d:64:30:f9:ae:58:ac:74:14:08:f6:18:a6:1a:8d:c6:a6:dc: f2:28:d7:fb:7b:36:0a:54:da:4e:a8:df:ff:0c:00:46:2b:53: 6c:6c:ca:67:1b:bd:fd:b2:63:03:64:47:c9:3b:1b:4e:0f:85: ce:0f:b2:7f:a3:e0:0e:24:b8:7b:a2:b3:41:76:8b:fb:0e:c9: bd:53:b9:2b:44:38:ec:5d:05:9c:2f:5a:aa:1f:c3:3e:0e:9c: cd:c3:cc:4b:19:96:71:63:fc:1e:11:38:a2:82:df:d0:27:ef: 8c:05:0e:d6:ee:3b:98:79:92:d3:0f:66:c2:67:83:82:a8:a4: 63:95:87:1b:6c:e2:4a:36:f8:6e:c9:63:55:54:3a:71:c7:bc: 5e:75:f4:c3:54:c7:cf:8d:7b:6d:15:f5:bb:f5:7d:e6:63:53: bf:e8:94:b0:b7:ef:43:bb:b3:a0:3f:bc:c0:38:2f:fe:0f:4b: 5b:9c:b1:e8:c9:8e:b6:ca:db:24:3a:cb:33:af:ba:dc:a9:d4: db:3c:ea:85:cd:61:38:4e:3d:09:5c:cb:85:d8:cf:13:5c:c1: 87:fa:21:41:6c:2e:7d:aa:73:5f:91:ca:2d:ac:7a:0b:a9:05: 3a:bd:13:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzMjExMTAvBgNVBAUTKEM1NjE3MkFBODUzOTA0ODM0RDkwNUQzQzMwMDEzNDRE RDJBMThFOUUwHhcNMjUwNzA1MDM1MDQ0WhcNMjUwNzEyMDM1MDQ0WjAYMRYwFAYD VQQDEw02ODY4YTExNC04ZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8F1RfTxFBCdJbeA03kEsGURePyVR6ipESf3xjyUGXVJsd6bGy7EnpV96Xjm zrs3r/eBgwxW1uN1Q4wqMwdELOPDeouapyA8GAjsqwmmj+veRjthY2zfR2e5ep8G KYAlC4WLzeVBWqM4zqnZJZYu+zkezMuHtvuWfLP2LRDug3zblftbZ3kN/dNA2/QU gGAX9qwFdfT9CxMsG4Jr3bhnc3od7piUVP9ACRzGbTLuEev61W11u1Y5a7jUoAV8 mvlQbpZqYW5Vg2Qg1nAHHDnAlQMRZANsbwrXVlajl6THuu0SqeHV/0BY2GCKwUg+ DW49DmsR83ahnLF1PMLg23xUmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFB2/rli EFj5ur3ZoAZqSnGei2GdMB8GA1UdIwQYMBaAFMVhcqqFOQSDTZBdPDABNE3SoY6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDMyMS81MkIyRTAxNjAw QzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJTk5rRjA4TUFFMFRkS2hq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hXRnlxb1U1QklOTmtGMDhNQUUwVGRLaGpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDMyMS81MkIyRTAxNjAwQzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJ Tk5rRjA4TUFFMFRkS2hqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3Ztagwkp6T1EeLRXHyjBgF9QNZDD5rlisdBQI9himGo3GptzyKNf7 ezYKVNpOqN//DABGK1NsbMpnG739smMDZEfJOxtOD4XOD7J/o+AOJLh7orNBdov7 Dsm9U7krRDjsXQWcL1qqH8M+DpzNw8xLGZZxY/weETiigt/QJ++MBQ7W7juYeZLT D2bCZ4OCqKRjlYcbbOJKNvhuyWNVVDpxx7xedfTDVMfPjXttFfW79X3mY1O/6JSw t+9Du7OgP7zAOC/+D0tbnLHoyY62ytskOsszr7rcqdTbPOqFzWE4Tj0JXMuF2M8T XMGH+iFBbC59qnNfkcotrHoLqQU6vROO -----END CERTIFICATE-----Generated at Sat Jul 5 11:46:14 2025 by rpki-client