$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json) Hash identifier: jgfgqnWdn92TbVo2977QZgi05wCKN/QEx6oZbijEzxw= Subject key identifier: A2:6D:92:8B:83:A3:5B:50:59:3A:8B:C4:AE:7F:41:C9:84:03:D7:51 Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft Manifest number: 07AA Signing time: Mon 30 Jun 2025 21:28:59 +0000 Manifest this update: Mon 30 Jun 2025 21:28:59 +0000 Manifest next update: Mon 07 Jul 2025 21:28:59 +0000 Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: brARSvGsoG3Tn5tkdMyV5ANmGUfIhgTLh2dg08lhRME=) 2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: pAxKOEsb1/KFe+q3FlaBgvrNZLF2dQ46tY3qWb9WHrw=) 3: 21EE9510083211EB81509633C4F9AE02.roa (hash: wjVXkLI0cRiF7TL9Zg9ZcPtd+sgFgSN+IcqPU2UoUBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186 Validity Not Before: Jun 30 21:28:59 2025 GMT Not After : Jul 7 21:28:59 2025 GMT Subject: CN=6863019b-aa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:90:a7:56:e5:01:54:c8:60:7f:16:ed:66: 9b:2c:54:e8:1b:98:f8:0b:dc:8e:77:59:d3:2a:ef: c1:30:34:3c:f4:29:cd:5d:ff:8e:14:49:8d:dc:33: 8b:92:df:f0:d2:f5:cc:07:e0:01:7a:43:be:66:43: b1:17:c6:81:6c:85:b5:f5:40:d8:6f:10:f4:3a:f8: f6:2f:ba:67:3c:20:fb:f5:e2:11:83:e9:26:17:80: 59:37:78:90:80:18:8c:21:48:1f:7d:bf:0e:06:61: 5f:7c:0b:3f:f2:2c:43:d8:ee:98:0f:dd:aa:41:85: 85:9f:d8:38:29:0f:63:82:91:76:66:66:f0:31:8a: d9:26:55:05:b7:63:05:89:f1:e4:83:0b:7c:9f:3d: 99:5d:f6:5d:98:79:1c:d7:3b:14:3d:cd:5e:3f:b9: 9a:d0:03:55:6f:6f:0f:59:61:d9:aa:1b:ba:6f:1a: db:51:2c:f6:37:6b:61:66:07:97:8d:f9:c6:4b:04: be:66:3c:e0:de:32:3a:9b:bc:30:12:b2:6d:0c:9f: 92:77:dd:66:a8:01:f5:8e:be:f4:4b:ab:bf:52:9b: 7c:a5:1e:e3:da:ff:30:c4:0b:4e:0a:5b:0a:94:4d: 32:1d:f8:c0:80:1e:58:92:7c:b4:b3:fa:c9:76:d9: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6D:92:8B:83:A3:5B:50:59:3A:8B:C4:AE:7F:41:C9:84:03:D7:51 X509v3 Authority Key Identifier: keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:7a:cc:bf:53:71:08:60:74:0b:cc:4b:49:86:95:db:73:67: b6:51:f9:0a:7c:da:6e:9a:4b:1a:04:96:ea:43:b6:d8:89:5c: ed:4f:8d:ab:e9:00:bb:7a:85:49:3c:50:62:17:24:b5:a7:51: 80:70:e3:43:6c:31:50:bf:83:7f:2b:97:b5:7c:ee:29:fa:14: cd:72:fd:d8:8a:39:3a:52:c5:10:3b:08:5f:f7:3a:85:5c:85: b4:d1:fb:1d:f5:f7:ab:e5:c7:40:a1:ea:85:21:44:db:3c:64: f5:3b:a8:7c:c0:bb:95:c6:da:ba:a4:e3:24:88:96:e7:ed:17: 71:8c:bf:85:de:df:c3:63:c1:46:c0:1f:20:13:b8:66:e8:b7: ac:09:f4:1d:fc:92:5d:a8:07:c4:67:2c:a0:9d:46:43:5d:4c: 92:02:0f:d0:54:8a:59:59:18:8c:71:ea:e0:3f:c9:7a:c6:f9: c0:28:62:81:2d:50:06:41:d1:55:78:3c:2c:65:c1:cb:33:b8: ac:60:55:fb:e3:15:74:0c:d1:76:a7:46:ae:b3:6e:e1:9e:39: 34:37:2e:06:ac:ff:e8:75:f8:c6:54:d5:28:e0:c0:8c:2d:7d: c3:dd:24:5d:ec:1f:26:79:62:86:51:3b:75:04:d4:68:ca:19: f6:26:93:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF RkFCMzExODYwHhcNMjUwNjMwMjEyODU5WhcNMjUwNzA3MjEyODU5WjAYMRYwFAYD VQQDEw02ODYzMDE5Yi1hYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwheQp1blAVTIYH8W7WabLFToG5j4C9yOd1nTKu/BMDQ89CnNXf+OFEmN3DOL kt/w0vXMB+ABekO+ZkOxF8aBbIW19UDYbxD0Ovj2L7pnPCD79eIRg+kmF4BZN3iQ gBiMIUgffb8OBmFffAs/8ixD2O6YD92qQYWFn9g4KQ9jgpF2ZmbwMYrZJlUFt2MF ifHkgwt8nz2ZXfZdmHkc1zsUPc1eP7ma0ANVb28PWWHZqhu6bxrbUSz2N2thZgeX jfnGSwS+Zjzg3jI6m7wwErJtDJ+Sd91mqAH1jr70S6u/Upt8pR7j2v8wxAtOClsK lE0yHfjAgB5Ykny0s/rJdtld1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJtkouD o1tQWTqLxK5/QcmEA9dRMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4 MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTRFOS9GRTU3QzJCQzA4MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZ RzhYNElrRHNrNVR2cXpFWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAesy/U3EIYHQLzEtJhpXbc2e2UfkKfNpumksaBJbqQ7bYiVztT42r 6QC7eoVJPFBiFyS1p1GAcONDbDFQv4N/K5e1fO4p+hTNcv3Yijk6UsUQOwhf9zqF XIW00fsd9fer5cdAoeqFIUTbPGT1O6h8wLuVxtq6pOMkiJbn7RdxjL+F3t/DY8FG wB8gE7hm6LesCfQd/JJdqAfEZyygnUZDXUySAg/QVIpZWRiMcergP8l6xvnAKGKB LVAGQdFVeDwsZcHLM7isYFX74xV0DNF2p0aus27hnjk0Ny4GrP/odfjGVNUo4MCM LX3D3SRd7B8meWKGUTt1BNRoyhn2JpOY -----END CERTIFICATE-----Generated at Wed Jul 2 19:39:17 2025 by rpki-client