$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: hiBOejDv7G6TbW1tab5x2rxIMlGZkpZtAhRfq43P/xA= Subject key identifier: D5:E9:2A:DB:75:2E:DA:3C:59:07:F5:C8:14:54:4E:89:67:BE:54:56 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 06A7 Signing time: Fri 04 Jul 2025 22:35:01 +0000 Manifest this update: Fri 04 Jul 2025 22:35:01 +0000 Manifest next update: Fri 11 Jul 2025 22:35:01 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: VzuD4jKxOUIFyMfvYj6N5yvGe5J7mv6KddBqKgcMhX8=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Jul 4 22:35:01 2025 GMT Not After : Jul 11 22:35:01 2025 GMT Subject: CN=68685715-ae16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:c9:82:3b:19:93:6e:2f:9a:5f:71:64:33: 84:29:5c:d5:0f:15:bd:46:a4:45:e1:31:d3:c4:5f: 04:60:5b:00:90:f2:3c:b6:ae:66:9c:45:92:92:36: 4b:3e:24:6b:0a:68:3d:a9:fc:8f:13:df:40:ab:91: 95:64:5e:e2:49:8a:ce:bc:db:a0:ba:c2:85:50:20: 66:18:80:90:75:46:b7:8d:c6:33:29:1e:22:af:f7: ec:87:3f:b3:74:9e:30:4e:0b:90:f3:7f:27:4a:b3: f8:40:d6:80:b6:d5:fe:3a:4f:b5:84:ec:9d:f7:bf: 5c:d3:7a:0a:1f:9a:db:ce:48:76:cc:27:a0:c1:e4: 14:39:9d:76:0a:b6:d3:47:4a:52:ab:df:57:b3:e9: 24:bc:76:5d:74:8f:75:9a:7b:3d:09:a7:cc:c4:94: d6:ca:af:4e:67:ba:d3:4b:76:0f:e4:cf:c6:ec:48: 7a:01:4d:08:d5:b0:56:9c:65:03:73:d1:76:6e:37: 4e:26:d3:11:2d:89:db:9a:75:67:a3:af:4b:b4:59: 5d:4f:95:a0:ff:4e:7a:b7:b9:63:d6:b2:e2:ff:30: 82:fd:88:57:05:ce:62:38:68:8e:da:fc:dd:07:46: cf:3b:7a:7f:4b:da:2c:3a:55:08:bc:28:02:2d:a7: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E9:2A:DB:75:2E:DA:3C:59:07:F5:C8:14:54:4E:89:67:BE:54:56 X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:e5:9f:2b:a6:5e:94:23:d5:4f:3d:2e:0d:66:c0:fb:38:d2: 42:a9:75:f0:d8:08:27:60:34:37:57:b9:17:b4:1b:49:38:30: 8c:82:5d:ad:cb:4f:c5:34:8f:af:25:ae:3d:4f:5f:6d:bb:89: 5f:1b:22:1e:83:9f:ac:c6:d7:bc:14:00:eb:a0:cd:ba:b4:4a: 97:69:e9:4b:a1:85:ae:d1:bb:e7:77:69:d4:59:41:39:4c:d5: d0:c9:10:e6:a5:99:74:e2:54:9d:19:af:c5:05:e8:cf:5b:05: bc:d3:b2:94:df:c6:79:75:47:24:15:a8:a9:9b:e5:1c:a1:dc: d9:8a:f0:ad:b8:e4:ef:ed:a4:67:22:71:80:6a:3f:ff:ab:af: 99:12:6d:7d:e9:79:d6:b5:ea:a9:16:53:85:71:ee:e0:80:05: c9:46:9c:01:94:18:c1:45:81:b7:d9:d7:b2:69:53:ce:f3:37: 68:77:65:d6:c4:b8:ba:3b:f0:15:a1:3b:5c:17:4d:c5:12:3b: d5:bf:5b:9c:ce:8a:03:39:be:58:eb:2b:5f:4d:9d:49:3b:9c: a9:99:af:d5:de:8c:eb:6f:a4:9e:12:50:cb:d0:f9:d1:96:ae: d4:3a:4f:90:6e:30:71:3c:f8:a2:e6:38:e1:f9:a3:e7:ac:26: 53:f4:5f:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUwNzA0MjIzNTAxWhcNMjUwNzExMjIzNTAxWjAYMRYwFAYD VQQDEw02ODY4NTcxNS1hZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwHJgjsZk24vml9xZDOEKVzVDxW9RqRF4THTxF8EYFsAkPI8tq5mnEWSkjZL PiRrCmg9qfyPE99Aq5GVZF7iSYrOvNugusKFUCBmGICQdUa3jcYzKR4ir/fshz+z dJ4wTguQ838nSrP4QNaAttX+Ok+1hOyd979c03oKH5rbzkh2zCegweQUOZ12CrbT R0pSq99Xs+kkvHZddI91mns9CafMxJTWyq9OZ7rTS3YP5M/G7Eh6AU0I1bBWnGUD c9F2bjdOJtMRLYnbmnVno69LtFldT5Wg/056t7lj1rLi/zCC/YhXBc5iOGiO2vzd B0bPO3p/S9osOlUIvCgCLaf1IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXpKtt1 Lto8WQf1yBRUTolnvlRWMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU5Z8rpl6UI9VPPS4NZsD7ONJCqXXw2AgnYDQ3V7kXtBtJODCMgl2t y0/FNI+vJa49T19tu4lfGyIeg5+sxte8FADroM26tEqXaelLoYWu0bvnd2nUWUE5 TNXQyRDmpZl04lSdGa/FBejPWwW807KU38Z5dUckFaipm+UcodzZivCtuOTv7aRn InGAaj//q6+ZEm196XnWteqpFlOFce7ggAXJRpwBlBjBRYG32deyaVPO8zdod2XW xLi6O/AVoTtcF03FEjvVv1uczooDOb5Y6ytfTZ1JO5ypma/V3ozrb6SeElDL0PnR lq7UOk+QbjBxPPii5jjh+aPnrCZT9F8C -----END CERTIFICATE-----Generated at Sat Jul 5 22:03:35 2025 by rpki-client