$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: aUOepQyODcFNC9qqqJLRX95+WZNzDuPVBvcyVx1yNoA= Subject key identifier: 2C:8A:63:6C:CB:40:41:42:88:4C:3C:52:D5:C0:64:24:70:C5:55:0B Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 2542 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 2532 Signing time: Wed 02 Jul 2025 15:47:52 +0000 Manifest this update: Wed 02 Jul 2025 15:47:52 +0000 Manifest next update: Wed 09 Jul 2025 15:47:52 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: HF2kA0GC37gev/+nMGNNCdNQijx6V3Qs7jC/hoooVU8=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: xnMX5X2YJrVvWA8Z+ilrknMulrMIGU6wGg57HKZlkt0=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: f2BKC0SfvfCVZzewNCyKNQgaDwalvIHM6ibs4HCHEDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9538 (0x2542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: Jul 2 15:47:52 2025 GMT Not After : Jul 9 15:47:52 2025 GMT Subject: CN=686554a8-3ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:a0:1b:4e:cd:bd:de:7f:de:f6:1e:53:d5: 99:67:18:02:58:ab:ab:36:b2:6b:f1:bf:00:c9:91: 82:c7:90:7c:f1:d6:e6:3a:33:c3:ea:1d:12:b4:5d: fa:01:2b:b2:46:46:1a:37:29:60:55:85:45:fd:82: 9e:0f:b7:22:71:c9:78:72:23:8f:0f:82:3c:c5:b8: 79:f0:70:0a:19:b5:28:be:f0:27:99:60:96:bd:04: c4:0b:83:d6:92:a5:62:05:c4:42:dc:01:40:e7:f6: 95:c6:ab:e8:a7:ea:ed:a6:2c:1d:6d:b5:85:e7:6d: 7d:8e:89:e5:18:79:1a:a9:2d:51:87:ff:56:fd:73: 0e:0b:0d:3b:a0:12:5f:0d:25:0c:e1:96:65:7e:3d: f8:cc:f4:43:d4:5a:ed:c9:4d:f6:3e:c1:dc:ed:a9: 79:ee:24:7d:f2:4d:c9:bb:82:d0:9e:d6:18:8b:ea: be:fc:f5:7b:b1:f7:4c:20:28:50:10:48:21:12:56: 6b:4d:b1:1b:dd:98:2c:82:e1:47:5d:12:be:e0:91: a8:e7:34:65:4a:db:68:7e:dc:4e:1a:fd:0f:a4:7d: 9b:08:ab:46:b5:a1:4d:13:87:2b:a5:99:e3:2b:67: 98:96:84:72:ac:d0:da:9e:28:f0:77:9e:8c:fa:0a: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8A:63:6C:CB:40:41:42:88:4C:3C:52:D5:C0:64:24:70:C5:55:0B X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b4:ea:fa:86:e6:1c:f1:f6:9f:5f:e4:bd:01:e6:e0:dd:15: 6f:e4:84:5a:7b:c6:50:33:7e:b7:e3:4e:11:83:6b:ca:5c:ed: 32:e9:73:92:a5:b8:a4:a1:18:b2:9f:eb:41:c4:07:ff:99:92: ab:60:e5:8b:20:68:58:86:8b:36:cf:56:df:84:94:61:39:3b: 55:03:be:50:44:ae:90:3e:62:a6:78:80:30:6a:16:2e:b0:ee: 5d:3a:3b:f0:bd:92:6c:c4:63:39:e3:16:37:ab:70:f8:ce:9c: 37:ab:99:4e:09:60:f3:cc:11:a2:f6:6a:73:33:1a:60:a7:ff: 6b:7e:46:95:33:b8:6d:fe:06:10:5b:0f:1b:08:7b:5b:1b:a2: f6:c1:a6:15:de:4c:f6:bc:26:dc:29:e7:7f:15:e1:f1:96:7d: 31:a6:c5:6d:1e:0d:1c:4f:d3:c0:10:d2:bd:5b:e0:ca:91:55: 3c:04:13:6a:9f:7e:ae:fd:dd:1d:b1:12:af:1f:6b:d9:c8:c8: 92:61:cf:66:00:50:59:d4:9c:c0:50:0d:2e:24:56:a7:2f:f7: e4:eb:3f:e1:9c:53:d8:01:59:25:8c:33:95:3b:e3:8b:81:17: 2e:56:d1:70:90:b5:83:20:5c:77:23:32:59:23:a5:60:55:99: 83:5b:5a:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUwNzAyMTU0NzUyWhcNMjUwNzA5MTU0NzUyWjAYMRYwFAYD VQQDEw02ODY1NTRhOC0zYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnd6gG07Nvd5/3vYeU9WZZxgCWKurNrJr8b8AyZGCx5B88dbmOjPD6h0StF36 ASuyRkYaNylgVYVF/YKeD7ciccl4ciOPD4I8xbh58HAKGbUovvAnmWCWvQTEC4PW kqViBcRC3AFA5/aVxqvop+rtpiwdbbWF5219jonlGHkaqS1Rh/9W/XMOCw07oBJf DSUM4ZZlfj34zPRD1FrtyU32PsHc7al57iR98k3Ju4LQntYYi+q+/PV7sfdMIChQ EEghElZrTbEb3ZgsguFHXRK+4JGo5zRlSttoftxOGv0PpH2bCKtGtaFNE4crpZnj K2eYloRyrNDanijwd56M+gpS2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyKY2zL QEFCiEw8UtXAZCRwxVULMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdtOr6huYc8fafX+S9Aebg3RVv5IRae8ZQM363404Rg2vKXO0y6XOS pbikoRiyn+tBxAf/mZKrYOWLIGhYhos2z1bfhJRhOTtVA75QRK6QPmKmeIAwahYu sO5dOjvwvZJsxGM54xY3q3D4zpw3q5lOCWDzzBGi9mpzMxpgp/9rfkaVM7ht/gYQ Ww8bCHtbG6L2waYV3kz2vCbcKed/FeHxln0xpsVtHg0cT9PAENK9W+DKkVU8BBNq n36u/d0dsRKvH2vZyMiSYc9mAFBZ1JzAUA0uJFanL/fk6z/hnFPYAVkljDOVO+OL gRcuVtFwkLWDIFx3IzJZI6VgVZmDW1rZ -----END CERTIFICATE-----Generated at Thu Jul 3 23:09:04 2025 by rpki-client