$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft File: RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json) Hash identifier: YPA5M3aVvKxOWCIRxhTsiOeKJJdhyI7OdWcfeKDGN4A= Subject key identifier: 27:5E:9F:8F:74:A3:2E:52:FE:32:EA:98:BC:1A:90:E9:21:9B:2E:22 Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 Certificate issuer: /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Certificate serial: 0A2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft Manifest number: 0A27 Signing time: Sat 28 Jun 2025 19:28:09 +0000 Manifest this update: Sat 28 Jun 2025 19:28:08 +0000 Manifest next update: Sat 05 Jul 2025 19:28:08 +0000 Files and hashes: 1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: PI1iG+0Wu1PZfwoK7Q5jeywHI6OqTV1iMfyRv4nBSpw=) 2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: L7du7ZJlcmB2nN0ANGTgn5PQ8EaqXu+Bk+I6VvNhSKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Validity Not Before: Jun 28 19:28:08 2025 GMT Not After : Jul 5 19:28:08 2025 GMT Subject: CN=68604248-c970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bb:27:1b:0a:40:a0:ec:15:f9:cc:1b:2c:ef: 15:16:ff:5d:34:e8:5f:43:f8:ca:52:4b:f6:93:4a: f7:ee:04:e8:35:ce:9d:40:3f:07:9e:be:7b:cb:40: 17:25:82:fe:a2:d5:9e:6b:94:81:2f:ba:98:5c:3e: 3b:62:02:73:97:1d:b7:a3:aa:da:37:77:7f:e2:7a: fe:3d:23:b7:2f:3f:02:8e:00:b3:27:c9:56:60:71: 41:8e:f8:4c:f7:ea:db:fa:2a:2c:c0:62:b0:61:71: 72:6a:2e:2d:75:33:d1:f4:76:27:a2:ff:00:f3:b2: 32:ce:30:b0:34:d8:3d:ee:2d:5d:67:8f:00:76:fe: bc:c4:ab:b1:cd:38:99:0f:e0:d2:5f:35:ae:cf:5b: c1:06:a3:d9:d2:d6:00:08:00:3b:a5:e7:ec:57:fd: 78:c6:61:2b:da:6a:2a:b1:1a:24:01:72:bf:e4:45: f5:35:98:2a:de:b5:6e:fe:f8:75:bd:20:8c:ac:94: f1:53:65:ed:cc:29:b4:5f:c0:ca:b4:04:4c:49:24: ac:03:42:a5:5d:5c:3c:ea:6e:4d:b9:82:5f:3c:35: 0a:98:3e:55:f4:6b:23:ee:0d:20:24:39:e9:9b:dc: 36:e9:ac:9d:2c:b4:41:bd:18:b6:d3:5c:7a:cb:84: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5E:9F:8F:74:A3:2E:52:FE:32:EA:98:BC:1A:90:E9:21:9B:2E:22 X509v3 Authority Key Identifier: keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:bd:2a:87:e3:ba:8e:42:ee:9c:9f:c5:45:7b:c7:dc:3d:4a: fd:d3:e8:11:b5:5d:17:bb:64:25:59:23:b3:8f:b7:79:be:0a: bf:fe:ac:03:95:ef:3b:47:16:58:d2:b9:4d:36:1e:6f:6d:ac: 9d:e4:5b:b3:91:ca:87:74:8b:87:f6:97:c6:a4:46:54:bf:03: 18:f3:1e:69:a5:9f:96:20:5c:33:58:6b:5e:b6:e7:35:15:c3: 8b:51:01:1b:58:73:a1:da:7c:53:57:5d:44:70:75:bd:23:05: 02:c9:6a:86:9f:16:04:90:fc:d1:c6:be:cd:53:f6:f8:59:c0: ae:4a:4e:1a:59:04:bf:8b:90:a5:50:bc:5f:71:be:82:f5:04: 34:d8:fc:9d:b0:f0:da:d6:b8:5d:15:25:b7:c7:54:a3:80:c2: e2:04:df:98:84:43:7b:b3:81:43:cb:10:e3:a6:63:33:cc:dc: 03:35:4f:5b:5e:8e:16:62:c0:0f:2d:e8:e3:56:93:6d:36:1a: 99:42:14:48:6d:7b:63:13:07:15:c7:a7:dd:0b:3e:12:ce:d7: d4:4a:12:ca:c8:f2:65:8a:f3:c5:a8:a9:de:8c:21:a6:11:6f: a7:8e:6b:07:da:d4:45:b4:1f:d2:ac:40:0f:ee:0f:bc:23:c3: f7:cf:46:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2 QzczMUZCQTcwHhcNMjUwNjI4MTkyODA4WhcNMjUwNzA1MTkyODA4WjAYMRYwFAYD VQQDEw02ODYwNDI0OC1jOTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17snGwpAoOwV+cwbLO8VFv9dNOhfQ/jKUkv2k0r37gToNc6dQD8Hnr57y0AX JYL+otWea5SBL7qYXD47YgJzlx23o6raN3d/4nr+PSO3Lz8CjgCzJ8lWYHFBjvhM 9+rb+ioswGKwYXFyai4tdTPR9HYnov8A87IyzjCwNNg97i1dZ48Adv68xKuxzTiZ D+DSXzWuz1vBBqPZ0tYACAA7pefsV/14xmEr2moqsRokAXK/5EX1NZgq3rVu/vh1 vSCMrJTxU2XtzCm0X8DKtARMSSSsA0KlXVw86m5NuYJfPDUKmD5V9Gsj7g0gJDnp m9w26aydLLRBvRi201x6y4RWLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCden490 oy5S/jLqmLwakOkhmy4iMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0vSqH47qOQu6cn8VFe8fcPUr90+gRtV0Xu2QlWSOzj7d5vgq//qwD le87RxZY0rlNNh5vbayd5FuzkcqHdIuH9pfGpEZUvwMY8x5ppZ+WIFwzWGtetuc1 FcOLUQEbWHOh2nxTV11EcHW9IwUCyWqGnxYEkPzRxr7NU/b4WcCuSk4aWQS/i5Cl ULxfcb6C9QQ02PydsPDa1rhdFSW3x1SjgMLiBN+YhEN7s4FDyxDjpmMzzNwDNU9b Xo4WYsAPLejjVpNtNhqZQhRIbXtjEwcVx6fdCz4SztfUShLKyPJlivPFqKnejCGm EW+njmsH2tRFtB/SrEAP7g+8I8P3z0a3 -----END CERTIFICATE-----Generated at Sun Jun 29 17:46:46 2025 by rpki-client