$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json) Hash identifier: vjOVWtjqlHwHkhVTH7X8LpWJLmD5elTI6HOsJKp3lxM= Subject key identifier: 92:C6:F7:EC:E9:7F:A2:DD:57:49:39:40:BB:75:4B:B3:8D:35:10:14 Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft Manifest number: 0155 Signing time: Thu 03 Jul 2025 04:11:33 +0000 Manifest this update: Thu 03 Jul 2025 04:11:33 +0000 Manifest next update: Thu 10 Jul 2025 04:11:33 +0000 Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: Xj7+sh2ytuRStBaxamFA2IKdjB2hCT++4Deq+2Lcjv4=) 2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: ocnHIom5bfqYmJrUux5YVIb0Vcn2/L2ylLJbcgISr0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Validity Not Before: Jul 3 04:11:33 2025 GMT Not After : Jul 10 04:11:33 2025 GMT Subject: CN=686602f5-fe0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5e:55:76:5c:5a:7b:12:3c:71:48:91:c9:88: 91:58:c2:07:c8:03:77:f8:8f:0e:f7:23:05:97:c3: dd:5b:ac:50:ae:c3:ba:ad:b0:17:86:4d:b0:55:e3: 51:63:9c:ff:c3:42:ef:5b:7c:e7:0f:2f:66:ba:7c: 1f:f8:8f:8d:71:ec:92:41:b0:ec:50:fc:fa:0d:58: 31:fb:24:99:dd:43:00:45:31:6c:b9:e4:09:75:46: 71:61:4f:53:ff:f3:a3:38:bc:2b:91:b5:0d:38:0d: 9a:9f:19:3e:1c:59:f1:33:b9:d3:25:9d:c0:74:37: 27:4a:f5:f8:74:34:fd:05:88:03:8e:c2:c2:90:32: 92:8b:60:86:73:2c:34:c4:ab:38:8b:e5:1d:5b:36: e8:cd:af:83:e1:e3:db:73:cf:9b:1b:12:85:eb:6c: 4d:00:89:7c:58:97:01:db:64:c9:ec:85:f0:27:d3: 23:73:05:5b:63:72:14:dd:4e:f5:f1:86:bc:f6:22: 7f:9d:2d:eb:a4:9d:06:c7:96:2f:6d:26:7a:0b:2f: ac:79:5c:44:52:4c:f4:30:6f:33:43:a7:5b:4b:47: cf:c4:fb:dd:3b:63:af:14:16:ce:37:1d:c2:74:91: 25:1a:1e:ff:c2:8d:d8:fa:70:a3:54:25:49:ac:01: e7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C6:F7:EC:E9:7F:A2:DD:57:49:39:40:BB:75:4B:B3:8D:35:10:14 X509v3 Authority Key Identifier: keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:86:ee:5d:ab:67:97:e3:6f:5a:fc:b0:54:ee:93:81:fe:46: 4c:fa:6b:3f:74:e7:3a:2a:37:80:a6:87:59:6e:37:b5:7d:41: 53:90:8f:bf:26:23:51:c9:74:78:d6:da:79:59:8f:90:47:eb: c5:66:96:97:ab:24:03:ec:d4:30:29:93:78:4e:34:8d:52:2f: fc:cd:10:6d:7a:14:22:2e:b3:12:97:e9:64:b0:2c:be:fa:e3: 95:09:6f:f3:f5:04:f9:b6:9e:0a:71:83:3e:e6:e3:ef:dd:35: f5:1a:e4:df:90:67:00:99:78:26:ac:a3:02:8c:02:04:55:25: db:52:77:44:14:83:05:e3:1a:11:2e:a9:cb:c4:18:e2:e0:11: d0:c4:53:78:83:c6:ec:79:ae:24:5f:46:74:05:92:1b:79:a3: 95:02:22:22:c9:a2:06:f1:59:3e:15:cd:2b:3d:1e:a2:e4:b7: c7:bd:52:3a:c0:46:3d:f5:95:c7:9a:b3:c5:b0:7d:b6:e7:ef: c7:29:b3:e1:f8:5d:46:ba:21:93:20:eb:ab:78:b4:4d:16:3a: 43:19:cf:06:59:ec:fc:03:50:66:c4:38:50:1d:cd:b4:35:f1: b9:6f:a6:b9:d7:8c:0f:81:2a:24:68:02:20:01:8f:65:49:71: 04:e3:55:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC MDU5MTFCOUMwHhcNMjUwNzAzMDQxMTMzWhcNMjUwNzEwMDQxMTMzWjAYMRYwFAYD VQQDEw02ODY2MDJmNS1mZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAql5VdlxaexI8cUiRyYiRWMIHyAN3+I8O9yMFl8PdW6xQrsO6rbAXhk2wVeNR Y5z/w0LvW3znDy9munwf+I+NceySQbDsUPz6DVgx+ySZ3UMARTFsueQJdUZxYU9T //OjOLwrkbUNOA2anxk+HFnxM7nTJZ3AdDcnSvX4dDT9BYgDjsLCkDKSi2CGcyw0 xKs4i+UdWzboza+D4ePbc8+bGxKF62xNAIl8WJcB22TJ7IXwJ9MjcwVbY3IU3U71 8Ya89iJ/nS3rpJ0Gx5YvbSZ6Cy+seVxEUkz0MG8zQ6dbS0fPxPvdO2OvFBbONx3C dJElGh7/wo3Y+nCjVCVJrAHnawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLG9+zp f6LdV0k5QLt1S7ONNRAUMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6 NnAzWmRRTzhuU2l3V1JHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJhu5dq2eX429a/LBU7pOB/kZM+ms/dOc6KjeApodZbje1fUFTkI+/ JiNRyXR41tp5WY+QR+vFZpaXqyQD7NQwKZN4TjSNUi/8zRBtehQiLrMSl+lksCy+ +uOVCW/z9QT5tp4KcYM+5uPv3TX1GuTfkGcAmXgmrKMCjAIEVSXbUndEFIMF4xoR LqnLxBji4BHQxFN4g8bsea4kX0Z0BZIbeaOVAiIiyaIG8Vk+Fc0rPR6i5LfHvVI6 wEY99ZXHmrPFsH225+/HKbPh+F1GuiGTIOureLRNFjpDGc8GWez8A1BmxDhQHc20 NfG5b6a514wPgSokaAIgAY9lSXEE41XM -----END CERTIFICATE-----Generated at Fri Jul 4 01:07:34 2025 by rpki-client