$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: e2i9USUtAFAmD+8+0rKijdX0QcIXFvoOEneHGMBE3lM= Subject key identifier: 8C:9F:C1:C9:ED:64:7B:98:5B:F6:93:FB:58:8F:36:F6:76:F8:5F:6E Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 06D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 06C5 Signing time: Wed 02 Jul 2025 22:23:56 +0000 Manifest this update: Wed 02 Jul 2025 22:23:56 +0000 Manifest next update: Wed 09 Jul 2025 22:23:56 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: l6YXZDFJ5rwgcJvpGiNdGxg25u13iuVr0PWdhESXHRs=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Jul 2 22:23:56 2025 GMT Not After : Jul 9 22:23:56 2025 GMT Subject: CN=6865b17c-966a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:35:ef:ea:98:9a:67:d1:9d:d8:22:f3:60: 28:c5:e2:43:e5:5b:99:3b:23:6e:03:bb:35:2b:32: ad:4f:dd:ca:71:8a:10:2f:7d:d3:2e:6b:06:4e:00: 3d:14:7c:d1:ec:9f:2f:d2:a1:b5:b5:7a:bd:4b:36: cb:b3:ab:8a:a1:2b:81:7d:56:63:c8:b0:ca:b1:97: 08:e7:a0:ae:94:79:8f:fe:f8:bf:e5:d0:bf:a9:84: c6:80:73:85:c0:b6:c6:9c:4f:42:22:de:20:ba:6d: fe:43:b6:61:50:63:5d:7f:7c:63:1d:35:10:57:ad: 5b:ea:75:da:5d:f9:91:72:c4:4a:d5:1d:e3:e2:c1: bc:f8:b9:0a:e6:2a:e0:f8:f1:40:c8:81:d9:99:58: 9e:07:e5:4d:13:84:f6:e0:67:f8:72:81:cf:31:30: ec:11:9f:5f:31:fc:ad:c8:1d:43:76:ac:17:4e:3c: cc:bf:9b:42:9c:e1:31:99:da:43:ab:29:28:94:98: 86:dd:9e:91:3e:bb:8f:dd:65:36:e0:49:d3:50:98: 56:0b:1b:77:bf:8a:c3:e2:19:16:79:d6:d3:71:2b: 3c:de:98:9c:12:34:f9:ff:cc:3b:46:9f:2d:3e:ff: d3:fc:e1:cf:d6:69:72:54:44:45:60:9f:fe:b4:c0: 73:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9F:C1:C9:ED:64:7B:98:5B:F6:93:FB:58:8F:36:F6:76:F8:5F:6E X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:69:3c:9d:65:b4:f5:33:de:60:45:a3:dd:86:d5:2c:a9:bd: fb:26:41:b9:02:d8:40:87:8e:c9:7d:ce:54:c6:56:0f:ae:06: d2:b7:5f:f1:ba:38:24:3a:a8:c8:b1:2b:8b:9e:5c:85:2e:28: 3c:64:d7:f1:52:76:9d:9d:a8:c9:d4:85:60:04:0e:50:45:31: f5:68:22:f7:1f:bf:e5:b5:2d:4f:b0:4c:07:93:d2:f9:04:c4: 60:47:76:90:58:4d:9b:c2:06:d5:e9:a8:74:57:9a:de:cf:4f: ac:b9:4f:0e:ca:f9:b0:16:37:2b:fc:d0:7a:e2:a8:df:91:e1: 4d:2a:95:45:76:39:9c:8b:f2:80:3d:b5:65:46:e6:75:ff:8f: 73:9d:64:41:3d:73:0c:0e:e2:46:ef:bc:be:60:26:86:b8:fe: 64:4a:6f:dc:27:84:3d:50:12:c1:7b:0c:f8:6b:45:b8:0e:38: 46:51:78:91:3a:f5:f8:e6:ad:72:63:5f:ef:d7:8c:b5:e7:d5: 6d:b3:aa:6d:e1:d9:35:74:c7:bc:f8:fb:e8:38:d1:5f:42:9d: e8:f5:3b:f2:09:23:33:b9:1b:12:9d:23:46:2a:5f:f3:e3:46: c4:03:82:1c:42:b8:8c:d4:5b:50:d8:d7:45:82:51:88:ff:3e: 3a:be:a8:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjUwNzAyMjIyMzU2WhcNMjUwNzA5MjIyMzU2WjAYMRYwFAYD VQQDEw02ODY1YjE3Yy05NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQI17+qYmmfRndgi82AoxeJD5VuZOyNuA7s1KzKtT93KcYoQL33TLmsGTgA9 FHzR7J8v0qG1tXq9SzbLs6uKoSuBfVZjyLDKsZcI56CulHmP/vi/5dC/qYTGgHOF wLbGnE9CIt4gum3+Q7ZhUGNdf3xjHTUQV61b6nXaXfmRcsRK1R3j4sG8+LkK5irg +PFAyIHZmVieB+VNE4T24Gf4coHPMTDsEZ9fMfytyB1DdqwXTjzMv5tCnOExmdpD qykolJiG3Z6RPruP3WU24EnTUJhWCxt3v4rD4hkWedbTcSs83picEjT5/8w7Rp8t Pv/T/OHP1mlyVERFYJ/+tMBz9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyfwcnt ZHuYW/aT+1iPNvZ2+F9uMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMaTydZbT1M95gRaPdhtUsqb37JkG5AthAh47Jfc5UxlYPrgbSt1/x ujgkOqjIsSuLnlyFLig8ZNfxUnadnajJ1IVgBA5QRTH1aCL3H7/ltS1PsEwHk9L5 BMRgR3aQWE2bwgbV6ah0V5rez0+suU8OyvmwFjcr/NB64qjfkeFNKpVFdjmci/KA PbVlRuZ1/49znWRBPXMMDuJG77y+YCaGuP5kSm/cJ4Q9UBLBewz4a0W4DjhGUXiR OvX45q1yY1/v14y159Vts6pt4dk1dMe8+PvoONFfQp3o9TvyCSMzuRsSnSNGKl/z 40bEA4IcQriM1FtQ2NdFglGI/z46vqha -----END CERTIFICATE-----Generated at Fri Jul 4 10:57:54 2025 by rpki-client