$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json) Hash identifier: vDSyjOntr5nkuAa8fTHXp7xF6brrstDmbPcIP11cN7Y= Subject key identifier: DB:75:69:02:3A:4D:21:51:27:C0:CF:CC:CB:79:95:79:E7:84:2B:A8 Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft Manifest number: 018E Signing time: Thu 03 Jul 2025 03:34:56 +0000 Manifest this update: Thu 03 Jul 2025 03:34:56 +0000 Manifest next update: Thu 10 Jul 2025 03:34:56 +0000 Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: y6XwigzET5rjD3Lg2pVDGTA1WawpVDh1ErgeCCu871A=) 2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: 6AwMX4x/IYWolneJozQYQ/y6c1KiBasFJP05rV+jXS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Validity Not Before: Jul 3 03:34:56 2025 GMT Not After : Jul 10 03:34:56 2025 GMT Subject: CN=6865fa60-b779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:60:d0:46:8d:f8:f6:29:1d:d6:30:e0:b2: c2:9e:da:c2:52:2c:08:e7:17:9c:79:eb:76:5e:74: e4:8a:26:85:f3:8d:39:7d:9d:ae:0b:04:1a:ed:86: bb:74:6b:67:b4:39:71:eb:cf:8d:df:8e:c2:72:d0: cf:1c:30:bd:cc:6c:ff:ae:b6:0b:c3:fb:dc:4a:ff: 76:83:aa:75:b5:ab:81:7e:38:5e:99:aa:38:93:0b: 41:cb:bd:b7:80:2d:f0:56:93:0f:f6:bb:0d:df:9c: de:79:73:2d:92:4e:af:a9:d8:f1:ac:c9:68:13:4e: 65:40:c9:c8:50:65:20:d2:67:52:31:53:7c:38:ad: e1:3c:d0:63:42:44:80:43:5f:63:15:22:18:d0:81: c9:ab:7f:b3:77:97:af:64:94:a0:89:33:4b:4c:f9: 59:dc:67:8c:03:3d:31:c6:81:86:a2:6e:a1:90:3b: 45:7d:2a:8b:3c:7d:5c:23:8d:d9:bb:34:ba:67:a9: 18:1e:d7:ab:77:05:83:a9:f2:ee:eb:26:cf:b0:7e: d3:28:85:41:36:40:02:07:e0:27:0e:d2:bc:df:e6: 17:a4:7f:41:4b:e4:f6:cb:ba:be:da:54:60:82:c3: 33:a2:9c:a4:2d:5f:78:f1:1e:8b:3a:2b:42:e1:2b: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:75:69:02:3A:4D:21:51:27:C0:CF:CC:CB:79:95:79:E7:84:2B:A8 X509v3 Authority Key Identifier: keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:27:ae:13:aa:ca:65:1e:9b:7c:a5:f6:5a:f0:a5:07:6f:94: b1:63:27:ec:03:5c:ce:f4:25:42:f3:30:b1:16:3e:e2:62:c8: 79:fb:e5:f0:8e:47:19:e9:14:38:b3:fd:59:53:d7:69:34:9b: 8f:fd:4f:18:fd:c8:dd:31:ca:56:a5:aa:42:a3:8b:21:ae:12: 60:d6:59:69:34:a7:3e:30:ee:d4:34:b1:9a:c4:34:be:88:03: c6:43:3f:df:00:36:8c:dc:a3:ab:f4:a6:2e:e3:f3:84:7c:c6: 61:2f:2a:c6:59:68:33:db:eb:1b:f5:dc:03:8e:6d:24:ba:ab: 16:57:52:c4:4f:b0:9f:04:60:e8:4e:52:cf:ac:2a:35:a1:7e: d7:ed:cd:5c:c0:91:19:b2:95:f3:4a:cd:4e:d4:9e:6b:73:ec: 94:83:4e:9c:5e:1d:2e:78:2b:68:c0:21:d1:6a:93:fc:83:4f: 15:eb:59:fb:bf:fd:54:34:db:eb:fa:67:d0:e1:e7:b5:79:c0: 13:c1:2d:e3:21:ae:3f:6d:ae:34:b5:64:5b:8a:cf:b1:6d:38: ed:6a:f0:de:f6:40:14:2f:86:22:f7:37:11:73:11:2a:dd:86: 00:5a:c5:e6:2f:f0:e9:a0:0a:52:63:dd:35:ce:dc:37:e6:62: ff:d5:c5:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1MzIxMTAvBgNVBAUTKEM0RkE2QkJBQkZEMTk5N0NDOEYxRDIwRkU2QTU1NzRE RUU5QjMyNTYwHhcNMjUwNzAzMDMzNDU2WhcNMjUwNzEwMDMzNDU2WjAYMRYwFAYD VQQDEw02ODY1ZmE2MC1iNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkpg0EaN+PYpHdYw4LLCntrCUiwI5xeceet2XnTkiiaF8405fZ2uCwQa7Ya7 dGtntDlx68+N347CctDPHDC9zGz/rrYLw/vcSv92g6p1tauBfjhemao4kwtBy723 gC3wVpMP9rsN35zeeXMtkk6vqdjxrMloE05lQMnIUGUg0mdSMVN8OK3hPNBjQkSA Q19jFSIY0IHJq3+zd5evZJSgiTNLTPlZ3GeMAz0xxoGGom6hkDtFfSqLPH1cI43Z uzS6Z6kYHterdwWDqfLu6ybPsH7TKIVBNkACB+AnDtK83+YXpH9BS+T2y7q+2lRg gsMzopykLV948R6LOitC4SthEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNt1aQI6 TSFRJ8DPzMt5lXnnhCuoMB8GA1UdIwQYMBaAFMT6a7q/0Zl8yPHSD+alV03umzJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzMi85QTY2RUI5RUY2 NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Yekk4ZElQNXFWWFRlNmJN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQcHJ1cl9SbVh6SThkSVA1cVZYVGU2Yk1sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzMi85QTY2RUI5RUY2NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Y ekk4ZElQNXFWWFRlNmJNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQJ64TqsplHpt8pfZa8KUHb5SxYyfsA1zO9CVC8zCxFj7iYsh5++Xw jkcZ6RQ4s/1ZU9dpNJuP/U8Y/cjdMcpWpapCo4shrhJg1llpNKc+MO7UNLGaxDS+ iAPGQz/fADaM3KOr9KYu4/OEfMZhLyrGWWgz2+sb9dwDjm0kuqsWV1LET7CfBGDo TlLPrCo1oX7X7c1cwJEZspXzSs1O1J5rc+yUg06cXh0ueCtowCHRapP8g08V61n7 v/1UNNvr+mfQ4ee1ecATwS3jIa4/ba40tWRbis+xbTjtavDe9kAUL4Yi9zcRcxEq 3YYAWsXmL/DpoApSY901ztw35mL/1cX8 -----END CERTIFICATE-----Generated at Thu Jul 3 06:28:48 2025 by rpki-client