$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: toKhxjDe1OoG0XB7P3ljRbR2kGMXUhLm3HJfWSYab04= Subject key identifier: 22:DF:08:B6:D8:7F:55:2B:FF:99:B9:EE:8F:9B:E1:15:8C:54:24:16 Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 07CC Signing time: Sat 28 Jun 2025 20:46:15 +0000 Manifest this update: Sat 28 Jun 2025 20:46:15 +0000 Manifest next update: Sat 05 Jul 2025 20:46:15 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: 7xPWXbWfEEsLb6dbnr+qrVWssbKyYS5ywNP8hylHV/4=) 2: FC4EA8D8918511EDB3CBB378C4F9AE02.roa (hash: 4bMonkEILF31i3rwXcmiWVxlZY8L3ObeZ0NQ0u78bEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Jun 28 20:46:15 2025 GMT Not After : Jul 5 20:46:15 2025 GMT Subject: CN=68605497-52e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:a5:a7:df:d6:dc:88:ed:a5:0b:d9:07:b3: 01:9c:85:78:86:e3:a2:cf:16:2d:53:27:9f:13:c5: 7a:91:e2:26:c3:1b:d4:98:70:3b:a9:32:4d:ea:6e: 6e:28:d9:be:d3:55:ff:f8:6d:14:28:15:5c:91:4a: f1:f9:b0:d7:8b:65:b9:00:52:1e:bf:a3:93:59:86: 46:0c:45:0a:ef:a9:44:e9:bc:ed:ed:76:1b:19:6e: f9:74:b5:a7:9f:4c:c4:8d:0f:1a:00:0a:ac:a0:4d: 56:32:a1:d2:0f:ad:17:02:14:73:d0:85:57:c1:af: 5c:6e:e8:0d:a0:57:a8:64:1c:8a:9f:80:58:c7:7a: 78:61:c0:3d:60:be:b1:16:9c:99:51:11:7f:27:8b: df:15:14:7f:5c:7e:1e:48:2b:58:ec:0c:55:0c:21: fb:91:80:09:7a:61:a8:17:c4:ff:d2:81:5e:38:c8: df:8e:b9:6c:4a:96:d4:eb:99:0e:cb:b9:2a:63:7a: 44:3d:95:ac:0c:ce:0a:90:53:ff:a2:23:ae:15:24: b2:17:38:16:bf:c8:3d:3c:9d:31:19:70:ef:19:6d: 6b:27:a7:30:f3:6e:eb:04:3b:5f:46:dd:33:f8:f9: bf:4e:d8:29:10:c0:78:03:58:2f:6b:64:3a:7f:b2: fb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DF:08:B6:D8:7F:55:2B:FF:99:B9:EE:8F:9B:E1:15:8C:54:24:16 X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:9b:63:dd:72:bb:db:05:f2:85:b8:87:37:f6:8f:a3:a1:16: 67:b0:59:85:a5:6c:f6:1b:0b:c4:02:b2:f5:97:ee:5f:89:3d: f2:1d:94:91:c3:b0:50:a5:de:2e:ff:13:4f:51:56:69:db:13: d5:72:9e:81:b8:f4:b2:ad:64:dd:4b:0c:d1:94:66:0e:bb:16: b5:27:45:08:be:6b:ae:2f:de:4a:43:e5:e7:dd:41:e7:bd:eb: 38:fb:2e:8b:ed:3f:96:c4:6c:38:1d:bc:56:a2:c4:43:32:54: bd:46:67:9d:f0:02:99:38:32:79:0f:23:ec:b4:a4:95:13:5d: 99:e6:22:12:75:d4:57:13:74:30:72:57:a9:57:52:da:3f:48: e5:92:44:59:de:6d:7d:f9:d0:1f:79:e5:b6:01:96:3a:78:03: f1:c0:ee:49:5c:22:54:38:ec:ae:0f:53:d9:7b:aa:07:5a:59: ee:c0:4c:c2:16:26:cd:6d:5e:fc:26:7c:c3:27:29:8e:a2:62: f9:1e:d3:d9:56:8b:81:24:67:10:83:a0:2f:79:f2:43:c9:88: e2:ed:ce:95:f6:c0:8e:69:0e:94:3e:43:e0:d3:5e:3a:5c:c0: 71:85:f9:7f:10:48:26:d9:28:32:5f:97:44:9d:88:50:94:61: a7:8c:b9:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjUwNjI4MjA0NjE1WhcNMjUwNzA1MjA0NjE1WjAYMRYwFAYD VQQDEw02ODYwNTQ5Ny01MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw6lp9/W3IjtpQvZB7MBnIV4huOizxYtUyefE8V6keImwxvUmHA7qTJN6m5u KNm+01X/+G0UKBVckUrx+bDXi2W5AFIev6OTWYZGDEUK76lE6bzt7XYbGW75dLWn n0zEjQ8aAAqsoE1WMqHSD60XAhRz0IVXwa9cbugNoFeoZByKn4BYx3p4YcA9YL6x FpyZURF/J4vfFRR/XH4eSCtY7AxVDCH7kYAJemGoF8T/0oFeOMjfjrlsSpbU65kO y7kqY3pEPZWsDM4KkFP/oiOuFSSyFzgWv8g9PJ0xGXDvGW1rJ6cw827rBDtfRt0z +Pm/TtgpEMB4A1gva2Q6f7L7BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLfCLbY f1Ur/5m57o+b4RWMVCQWMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWm2PdcrvbBfKFuIc39o+joRZnsFmFpWz2GwvEArL1l+5fiT3yHZSR w7BQpd4u/xNPUVZp2xPVcp6BuPSyrWTdSwzRlGYOuxa1J0UIvmuuL95KQ+Xn3UHn ves4+y6L7T+WxGw4HbxWosRDMlS9Rmed8AKZODJ5DyPstKSVE12Z5iISddRXE3Qw clepV1LaP0jlkkRZ3m19+dAfeeW2AZY6eAPxwO5JXCJUOOyuD1PZe6oHWlnuwEzC FibNbV78JnzDJymOomL5HtPZVouBJGcQg6AvefJDyYji7c6V9sCOaQ6UPkPg0146 XMBxhfl/EEgm2SgyX5dEnYhQlGGnjLnW -----END CERTIFICATE-----Generated at Mon Jun 30 18:24:33 2025 by rpki-client