$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: nH5asSV1qIb7FIKvSl4ERkOjSbJSnrEpNlxtdyoOeEo= Subject key identifier: 33:0F:98:35:EF:24:FE:91:1F:26:42:3F:A5:AD:A4:72:05:0F:7A:46 Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 06E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 06E2 Signing time: Wed 02 Jul 2025 22:17:29 +0000 Manifest this update: Wed 02 Jul 2025 22:17:28 +0000 Manifest next update: Wed 09 Jul 2025 22:17:28 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: BPBrs5tbPPZTJrLFMabvOUVQrNLVa9MoO1tqi1/npbw=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: +cH8RmJhdymM82G2tjdg2T5wIUQwcB/rD1A615a7HRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1767 (0x6e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: Jul 2 22:17:28 2025 GMT Not After : Jul 9 22:17:28 2025 GMT Subject: CN=6865aff9-8ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:35:d6:aa:3b:33:1e:0a:6d:30:8c:ef:82: ae:97:d6:bf:dc:c2:2c:3e:07:6e:33:ae:70:40:f0: 16:9b:fc:c4:a7:8d:6c:8c:2a:4f:88:b3:e8:d3:33: b9:88:b2:52:11:bf:75:b1:c2:0f:61:25:84:db:9b: eb:e1:7a:67:93:31:d7:37:e1:ae:a8:6c:a1:a8:d4: fa:6f:e1:01:91:fc:24:9e:e5:b2:b6:89:f9:e1:0f: 81:c3:5c:44:bd:81:a3:23:2d:4f:62:ac:b6:b6:6e: e7:2e:bd:97:cd:19:98:19:f8:07:17:fe:23:d4:4e: a8:da:96:ba:21:2c:19:f6:2a:0e:70:3e:d8:31:8e: 31:60:b4:45:3b:ed:6e:e3:85:18:ab:a6:e7:c8:78: 90:ad:a2:d2:49:cb:78:a1:49:50:fd:07:d8:17:bd: 69:e1:93:ec:53:08:5d:ac:9a:36:9e:2a:aa:c1:f4: 4d:d7:54:3d:ab:a0:67:e1:07:93:a7:8e:eb:23:e5: ca:42:a6:94:71:e1:69:f4:fa:72:49:7b:7f:26:9a: 6f:46:4d:dd:9f:3f:fa:96:54:6e:e4:74:6d:0d:25: 1b:00:16:74:25:21:fc:f8:22:12:35:d6:4d:3e:ec: 8a:79:6f:20:70:c1:77:7d:a9:bc:39:21:6e:ce:93: c6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0F:98:35:EF:24:FE:91:1F:26:42:3F:A5:AD:A4:72:05:0F:7A:46 X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:08:44:1e:e0:71:8c:ff:01:89:cd:ea:04:dc:d4:1d:d5:73: f7:6c:5e:d5:d8:11:58:42:a7:7f:dc:76:a7:3d:da:ad:aa:5d: 4b:06:51:2e:86:db:35:ba:82:e6:c5:e6:af:79:b5:c4:10:ac: 99:39:40:7d:a6:f4:71:77:1e:87:29:4e:e1:6d:ff:2a:fc:79: c0:25:b6:1d:48:58:de:f0:1b:8d:d3:c2:34:a8:fa:8e:79:60: 43:35:1f:ae:92:5e:43:7b:0f:82:c0:9e:bd:eb:54:86:96:d0: 9b:3d:01:92:33:f6:83:c0:09:d7:28:b6:3f:95:a2:0b:c9:1f: 9c:fa:d1:e5:7d:8d:cf:bb:4c:1e:4d:02:cd:62:0f:49:e2:a0: 29:85:0a:af:65:05:b8:00:45:df:d2:6b:98:27:e4:5f:52:b1: 3f:71:3b:c6:eb:d1:3e:ab:22:8c:ef:ab:1b:89:d7:7d:c7:54: e4:47:03:10:98:32:46:f2:03:68:3a:66:ac:78:3a:1f:df:f2: f9:7b:04:b3:06:f1:23:4a:ce:a1:02:5b:cb:e1:82:8e:45:99: 4e:20:3a:3c:0f:2c:fa:36:33:8b:64:fb:fa:8e:22:34:db:a7: b9:12:d2:0d:5a:e7:40:09:42:20:30:ae:c0:0c:f3:58:9f:c3: 43:2f:ba:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjUwNzAyMjIxNzI4WhcNMjUwNzA5MjIxNzI4WjAYMRYwFAYD VQQDEw02ODY1YWZmOS04Y2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCQ11qo7Mx4KbTCM74Kul9a/3MIsPgduM65wQPAWm/zEp41sjCpPiLPo0zO5 iLJSEb91scIPYSWE25vr4XpnkzHXN+GuqGyhqNT6b+EBkfwknuWyton54Q+Bw1xE vYGjIy1PYqy2tm7nLr2XzRmYGfgHF/4j1E6o2pa6ISwZ9ioOcD7YMY4xYLRFO+1u 44UYq6bnyHiQraLSSct4oUlQ/QfYF71p4ZPsUwhdrJo2niqqwfRN11Q9q6Bn4QeT p47rI+XKQqaUceFp9PpySXt/JppvRk3dnz/6llRu5HRtDSUbABZ0JSH8+CISNdZN PuyKeW8gcMF3fam8OSFuzpPGGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMPmDXv JP6RHyZCP6WtpHIFD3pGMB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJCEQe4HGM/wGJzeoE3NQd1XP3bF7V2BFYQqd/3HanPdqtql1LBlEu hts1uoLmxeavebXEEKyZOUB9pvRxdx6HKU7hbf8q/HnAJbYdSFje8BuN08I0qPqO eWBDNR+ukl5Dew+CwJ6961SGltCbPQGSM/aDwAnXKLY/laILyR+c+tHlfY3Pu0we TQLNYg9J4qAphQqvZQW4AEXf0muYJ+RfUrE/cTvG69E+qyKM76sbidd9x1TkRwMQ mDJG8gNoOmaseDof3/L5ewSzBvEjSs6hAlvL4YKORZlOIDo8Dyz6NjOLZPv6jiI0 26e5EtINWudACUIgMK7ADPNYn8NDL7rF -----END CERTIFICATE-----Generated at Thu Jul 3 16:52:02 2025 by rpki-client