$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json) Hash identifier: vShj88N8EPxZZb+Q9NMwcKxAN/Ml9zWLqsp7hDdn7aM= Subject key identifier: BD:F3:8F:2E:85:52:B6:D9:29:3E:87:41:0E:E4:21:6E:07:4B:FE:1A Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft Manifest number: 028B Signing time: Thu 03 Jul 2025 02:01:55 +0000 Manifest this update: Thu 03 Jul 2025 02:01:55 +0000 Manifest next update: Thu 10 Jul 2025 02:01:54 +0000 Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: KOzYA2V2wR5uhaMekFCjrMdI/Mp+OwKPSSoDSbRc5mA=) 2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: 7VxNMjQG1zgfT4tsEQfcFuOpbFyf2w1++cKzRTPQB1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Validity Not Before: Jul 3 02:01:55 2025 GMT Not After : Jul 10 02:01:54 2025 GMT Subject: CN=6865e493-3861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9b:5e:df:28:de:da:48:b9:ac:9d:ce:d0:0b: 7d:a2:94:95:23:4e:41:17:c3:9b:28:a9:a9:8b:5f: 5c:d5:b8:50:7b:ce:8b:2f:69:bf:cc:58:69:d9:63: 76:f5:46:f4:34:b5:61:0b:28:86:77:8a:5a:a3:79: 86:de:2d:fe:5d:e5:13:2b:ff:1f:68:f8:15:21:35: 62:7b:52:7b:36:5e:33:30:a5:ab:ac:bb:b9:fa:c5: 12:69:51:a4:80:e1:48:d7:58:5e:de:45:e2:9c:01: 82:5f:d9:b5:c7:4f:83:b6:eb:03:de:d4:e1:a1:60: a1:5c:9b:36:5e:8d:63:71:f3:dd:8d:61:7f:f3:4e: b8:9f:7f:a4:4f:d2:d8:d0:51:83:11:dd:e6:d3:16: 3a:98:21:b5:8b:82:c5:44:bc:4c:05:f5:8b:5a:0e: c8:6e:4f:68:03:00:58:8a:1b:c6:c5:5d:c3:08:c0: 67:94:fb:0c:f6:91:40:d8:f5:13:10:d9:72:f4:d4: 86:a0:e8:41:7e:c5:02:4d:0a:98:d8:72:42:38:97: 4a:a4:2b:ad:1f:e0:c1:db:8f:8a:83:7b:8b:f4:1b: 12:f3:17:d4:7b:1f:a8:bd:23:0c:25:dd:4b:9e:7a: b4:d8:63:7b:5b:b5:07:cc:53:b9:54:8a:19:c8:f5: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F3:8F:2E:85:52:B6:D9:29:3E:87:41:0E:E4:21:6E:07:4B:FE:1A X509v3 Authority Key Identifier: keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fb:01:fe:e0:46:ce:fa:81:a3:95:89:6a:c1:49:cd:2f:4a: b9:64:1b:8d:cf:8a:84:71:97:d9:2f:55:e0:42:0c:ea:df:2c: af:fc:77:3a:40:ae:6b:97:86:58:a6:be:fc:63:05:e5:f7:33: 7a:95:d9:d6:df:dc:5b:68:c8:69:e6:b1:a2:60:e9:ef:de:f7: 53:bf:f7:5c:04:73:72:eb:fa:fc:30:33:5e:0f:e7:5e:a4:eb: 93:8d:bc:e8:a1:75:d3:92:8c:9a:7e:cb:03:f7:7f:60:a5:38: 8e:15:64:90:ac:b2:4f:8f:03:33:33:f7:50:da:3f:8d:46:7b: 8c:88:2b:97:ec:dd:41:45:8d:25:dc:28:c5:9e:42:3f:51:8f: 26:aa:eb:91:33:cb:b7:f7:cc:6a:9f:90:93:67:f1:6a:99:8a: c3:fd:72:1d:41:4a:e6:22:62:af:b8:e2:0a:63:cc:21:40:a8: b1:5c:d6:7c:9d:07:7d:b1:8c:9c:10:30:91:2e:b2:00:f2:ef: 29:4a:23:8e:ac:ab:24:39:7a:e6:c2:72:d0:16:40:a7:69:c5: d4:a1:91:74:bb:35:c6:1e:30:89:e8:e4:54:fd:b1:4e:e7:6c: 7b:57:d1:6d:45:f5:14:86:3b:d3:a3:ac:a8:5e:14:7c:87:76: 6a:b3:60:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1OUUxMTAvBgNVBAUTKDVFNzNFREQ5NkZGMjdBODg1RjYxMzU2RUE3N0IxRjU0 MzVDODRGQ0MwHhcNMjUwNzAzMDIwMTU1WhcNMjUwNzEwMDIwMTU0WjAYMRYwFAYD VQQDEw02ODY1ZTQ5My0zODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05te3yje2ki5rJ3O0At9opSVI05BF8ObKKmpi19c1bhQe86LL2m/zFhp2WN2 9Ub0NLVhCyiGd4pao3mG3i3+XeUTK/8faPgVITVie1J7Nl4zMKWrrLu5+sUSaVGk gOFI11he3kXinAGCX9m1x0+DtusD3tThoWChXJs2Xo1jcfPdjWF/8064n3+kT9LY 0FGDEd3m0xY6mCG1i4LFRLxMBfWLWg7Ibk9oAwBYihvGxV3DCMBnlPsM9pFA2PUT ENly9NSGoOhBfsUCTQqY2HJCOJdKpCutH+DB24+Kg3uL9BsS8xfUex+ovSMMJd1L nnq02GN7W7UHzFO5VIoZyPVy0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3zjy6F UrbZKT6HQQ7kIW4HS/4aMB8GA1UdIwQYMBaAFF5z7dlv8nqIX2E1bqd7H1Q1yE/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU5RS9DQjBFQTc3NjBD Q0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVvaGZZVFZ1cDNzZlZEWElU OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huUHQyV195ZW9oZllUVnVwM3NmVkRYSVQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU5RS9DQjBFQTc3NjBDQ0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVv aGZZVFZ1cDNzZlZEWElUOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6+wH+4EbO+oGjlYlqwUnNL0q5ZBuNz4qEcZfZL1XgQgzq3yyv/Hc6 QK5rl4ZYpr78YwXl9zN6ldnW39xbaMhp5rGiYOnv3vdTv/dcBHNy6/r8MDNeD+de pOuTjbzooXXTkoyafssD939gpTiOFWSQrLJPjwMzM/dQ2j+NRnuMiCuX7N1BRY0l 3CjFnkI/UY8mquuRM8u398xqn5CTZ/FqmYrD/XIdQUrmImKvuOIKY8whQKixXNZ8 nQd9sYycEDCRLrIA8u8pSiOOrKskOXrmwnLQFkCnacXUoZF0uzXGHjCJ6ORU/bFO 52x7V9FtRfUUhjvTo6yoXhR8h3Zqs2D2 -----END CERTIFICATE-----Generated at Fri Jul 4 01:38:23 2025 by rpki-client