$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: GLw1gOE945I02m24ow4aGmKwanO/jrMnmokNrcWbFSE= Subject key identifier: F6:97:25:1B:02:76:6A:4F:29:30:88:44:F9:60:F5:9F:AA:05:A2:AC Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 15 Signing time: Thu 03 Jul 2025 08:17:22 +0000 Manifest this update: Thu 03 Jul 2025 08:17:21 +0000 Manifest next update: Thu 10 Jul 2025 08:17:21 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: fdVpUpXyEZrngI/RqISejX0f1u9qy08PHDWqcBDryG8=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GaxzV7+DkMGpd57xnNkPMderTpqjXPXFd/uGzJlcq9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Jul 3 08:17:21 2025 GMT Not After : Jul 10 08:17:21 2025 GMT Subject: CN=68663c92-9935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:69:9b:3a:9b:94:e9:a5:75:8c:bd:11:09:98: cf:62:fc:c9:3f:cd:90:04:fe:14:78:01:31:a1:5f: 01:b5:a0:e2:7e:2c:8d:db:29:26:0d:81:a5:a0:fd: e5:2c:5b:68:38:c8:a6:74:72:1f:8c:eb:c9:52:4f: be:99:f8:33:01:7a:fd:e4:c8:87:cd:23:83:c9:9b: 70:66:52:19:d3:36:25:74:af:30:84:e0:7e:54:f9: 33:63:b3:34:34:29:36:6a:86:ec:4d:84:a6:4d:5b: 75:08:b3:5c:08:02:d0:99:17:4e:55:a1:55:7a:1b: 27:49:36:93:39:40:6c:2c:d4:89:51:57:0a:e9:b6: 74:fe:38:50:02:4b:fa:1e:93:e1:a8:f3:f3:a8:9b: bc:a5:f6:00:7a:57:ab:4e:c9:5b:a8:10:ab:7f:13: 66:eb:68:b1:fe:3e:36:da:5e:ba:e6:d5:0d:28:8d: ca:39:09:f7:38:00:d7:76:f1:fe:1a:c8:05:c6:8d: 01:1a:5d:45:3c:88:e6:57:39:31:a0:64:87:b1:39: 39:30:23:ba:30:99:7a:b2:76:fa:3a:eb:54:df:ee: 86:95:c4:01:a6:cb:34:00:b9:e3:68:d7:27:c8:74: 99:97:56:46:ab:7a:0e:71:8d:e1:3f:88:fe:27:21: 34:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:97:25:1B:02:76:6A:4F:29:30:88:44:F9:60:F5:9F:AA:05:A2:AC X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2b:32:df:6e:36:d1:23:1c:ec:1d:c4:7c:9d:ce:66:6b:ad: 22:ce:4d:1d:96:05:5e:54:96:16:15:a6:fa:2d:90:61:40:8d: e2:26:33:2e:6e:ba:37:c0:78:f2:7a:51:a7:a9:a0:15:a6:af: 61:f8:f6:34:0f:9f:9d:a2:c7:8d:52:e5:5f:be:b3:65:d0:b4: 00:f4:9e:9c:b6:fd:5c:fe:2e:a7:92:d3:c9:0a:77:bc:5c:8a: ee:34:92:d0:f9:00:3b:7c:43:36:c9:4e:e3:1d:a3:b9:e4:ae: 83:e6:9e:c0:bf:dc:f2:e2:47:1f:37:24:d4:74:15:1e:91:69: 3f:27:39:0b:7e:44:a4:40:90:76:26:71:f6:d1:f0:1c:34:f9: a4:09:15:d4:b7:49:c7:93:0a:0f:ab:61:de:98:6c:fc:53:f4: c4:d2:65:3e:c1:d8:e0:72:91:d4:05:64:02:c6:e7:12:e4:ab: a0:e4:a5:d0:bb:ea:ab:84:fd:09:46:e7:c7:c3:95:47:a5:57: 76:df:86:03:0e:ff:f5:f7:25:bc:fd:cf:62:61:ca:13:95:4d: 83:1e:9e:28:59:7e:06:af:2f:32:e6:ca:f0:54:ac:63:3e:7a: 87:92:4b:d3:8b:74:0c:e4:c1:ea:15:74:4f:bd:f4:34:a5:8f: bc:3a:d8:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTA3MDMwODE3MjFaFw0yNTA3MTAwODE3MjFaMBgxFjAUBgNV BAMTDTY4NjYzYzkyLTk5MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZaZs6m5TppXWMvREJmM9i/Mk/zZAE/hR4ATGhXwG1oOJ+LI3bKSYNgaWg/eUs W2g4yKZ0ch+M68lST76Z+DMBev3kyIfNI4PJm3BmUhnTNiV0rzCE4H5U+TNjszQ0 KTZqhuxNhKZNW3UIs1wIAtCZF05VoVV6GydJNpM5QGws1IlRVwrptnT+OFACS/oe k+Go8/Oom7yl9gB6V6tOyVuoEKt/E2braLH+PjbaXrrm1Q0ojco5Cfc4ANd28f4a yAXGjQEaXUU8iOZXOTGgZIexOTkwI7owmXqydvo661Tf7oaVxAGmyzQAueNo1yfI dJmXVkareg5xjeE/iP4nITT3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9pclGwJ2 ak8pMIhE+WD1n6oFoqwwHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHorMt9uNtEjHOwdxHydzmZrrSLOTR2WBV5UlhYVpvotkGFAjeImMy5u ujfAePJ6UaepoBWmr2H49jQPn52ix41S5V++s2XQtAD0npy2/Vz+LqeS08kKd7xc iu40ktD5ADt8QzbJTuMdo7nkroPmnsC/3PLiRx83JNR0FR6RaT8nOQt+RKRAkHYm cfbR8Bw0+aQJFdS3SceTCg+rYd6YbPxT9MTSZT7B2OBykdQFZALG5xLkq6DkpdC7 6quE/QlG58fDlUelV3bfhgMO//X3Jbz9z2JhyhOVTYMenihZfgavLzLmyvBUrGM+ eoeSS9OLdAzkweoVdE+99DSlj7w62BM= -----END CERTIFICATE-----Generated at Thu Jul 3 23:21:40 2025 by rpki-client