$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: jp0oQXtuAEc9ojnn9tKb0Vv7dhmf+SIVqZIXWnp3mFY= Subject key identifier: 9A:2F:4A:E7:9F:5E:11:BB:75:75:46:52:64:B1:29:B4:DA:AD:46:EF Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2BB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2BB8 Signing time: Wed 02 Jul 2025 15:39:13 +0000 Manifest this update: Wed 02 Jul 2025 15:39:13 +0000 Manifest next update: Wed 09 Jul 2025 15:39:13 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: 4CV1L1k5EQ8+p/imG0oMYaCgxuVr+V1E6ek1OWWmvAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11192 (0x2bb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Jul 2 15:39:13 2025 GMT Not After : Jul 9 15:39:13 2025 GMT Subject: CN=686552a1-dda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:68:f4:60:61:0b:2f:30:2c:17:1a:04:7b: 36:29:99:6f:fd:94:85:9d:a0:17:f3:58:db:2f:da: ab:82:23:c6:05:50:96:c9:c0:2e:34:92:38:ee:04: 15:e8:11:7f:9f:95:31:1b:28:f7:4f:9d:10:5e:f8: 42:8c:6d:63:9c:66:b0:80:96:e6:ec:d3:10:4f:39: d6:6c:a1:d8:76:5d:d4:41:5f:26:7c:50:c8:18:d7: 71:55:5f:41:ee:fd:42:57:67:69:81:b3:03:ce:66: 80:8a:06:02:35:c9:7b:e1:cf:5c:94:0e:70:9a:c3: ec:0c:b7:32:f0:fa:5f:22:71:73:a2:5a:58:48:a4: cf:5c:de:dd:50:56:c7:a8:a4:44:a2:24:10:3f:72: a4:11:5b:e4:6c:e9:f6:ea:9f:40:b8:22:72:39:87: 04:94:dc:e0:27:78:9d:21:f0:86:91:40:d6:f2:12: ac:6a:c9:21:43:18:37:66:27:1a:46:5c:ab:68:e6: 54:9d:67:db:3d:26:62:15:e6:b8:a0:b1:cf:25:70: a9:53:67:16:c2:2c:2e:42:e1:5d:8e:d5:31:37:6c: ef:1b:99:31:02:25:a9:3f:63:41:1d:f6:c0:af:61: f8:0d:07:1c:b4:5c:16:8e:23:2f:db:1e:0c:36:42: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2F:4A:E7:9F:5E:11:BB:75:75:46:52:64:B1:29:B4:DA:AD:46:EF X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:10:8b:b5:19:32:6d:18:f0:5f:74:3f:88:f5:c5:48:1f:17: f6:1b:5a:b0:fe:45:bd:72:d2:13:63:07:96:bf:02:78:3f:3f: ea:82:b8:c8:35:69:2d:02:a2:28:0f:bd:46:b1:24:60:bc:83: e5:05:de:8a:4e:5a:bd:38:16:80:9e:7d:b7:11:94:71:93:00: 43:43:8c:c1:35:e4:67:df:15:f1:70:95:73:cf:f3:ff:19:29: cd:68:11:52:18:04:93:b7:22:e9:25:d9:dd:92:fb:d0:e2:a6: 9f:4e:da:58:28:c1:ea:07:79:73:06:24:cc:9d:a9:fc:4d:40: 24:94:75:f7:41:d2:83:18:98:3c:35:46:85:4d:89:8f:ca:75: 64:68:b2:86:76:58:72:21:dc:b6:df:c2:68:43:10:6f:0d:09: dd:ac:6c:d8:6d:bc:7a:c5:6a:5b:90:4c:c6:aa:ed:da:6a:49: 74:93:dd:d2:4b:66:54:55:b2:56:8a:44:38:c1:f8:d2:6f:8c: 6d:ea:56:2c:b7:9d:47:02:d1:3f:cd:d6:3a:65:15:d7:29:fa: 00:b3:5a:f2:d1:33:25:ca:22:37:1f:5d:b3:70:89:9c:55:10: 4a:7e:8e:76:ee:d0:35:95:3a:42:22:9a:60:6a:c5:5f:f8:a9: 8a:c8:36:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUwNzAyMTUzOTEzWhcNMjUwNzA5MTUzOTEzWjAYMRYwFAYD VQQDEw02ODY1NTJhMS1kZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmxo9GBhCy8wLBcaBHs2KZlv/ZSFnaAX81jbL9qrgiPGBVCWycAuNJI47gQV 6BF/n5UxGyj3T50QXvhCjG1jnGawgJbm7NMQTznWbKHYdl3UQV8mfFDIGNdxVV9B 7v1CV2dpgbMDzmaAigYCNcl74c9clA5wmsPsDLcy8PpfInFzolpYSKTPXN7dUFbH qKREoiQQP3KkEVvkbOn26p9AuCJyOYcElNzgJ3idIfCGkUDW8hKsaskhQxg3Zica RlyraOZUnWfbPSZiFea4oLHPJXCpU2cWwiwuQuFdjtUxN2zvG5kxAiWpP2NBHfbA r2H4DQcctFwWjiMv2x4MNkLWkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJovSuef XhG7dXVGUmSxKbTarUbvMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtEIu1GTJtGPBfdD+I9cVIHxf2G1qw/kW9ctITYweWvwJ4Pz/qgrjI NWktAqIoD71GsSRgvIPlBd6KTlq9OBaAnn23EZRxkwBDQ4zBNeRn3xXxcJVzz/P/ GSnNaBFSGASTtyLpJdndkvvQ4qafTtpYKMHqB3lzBiTMnan8TUAklHX3QdKDGJg8 NUaFTYmPynVkaLKGdlhyIdy238JoQxBvDQndrGzYbbx6xWpbkEzGqu3aakl0k93S S2ZUVbJWikQ4wfjSb4xt6lYst51HAtE/zdY6ZRXXKfoAs1ry0TMlyiI3H12zcImc VRBKfo527tA1lTpCIppgasVf+KmKyDbf -----END CERTIFICATE-----Generated at Fri Jul 4 14:51:49 2025 by rpki-client