$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: as4YbhSrL7FMuTX3S+KtzjpvXhRK4qW99Ndoyh9NcsI= Subject key identifier: 5E:25:F0:13:34:7C:0F:14:3F:86:D4:1C:F4:72:B6:D1:46:D1:A3:24 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 0174 Signing time: Thu 03 Jul 2025 03:55:08 +0000 Manifest this update: Thu 03 Jul 2025 03:55:07 +0000 Manifest next update: Thu 10 Jul 2025 03:55:07 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: 4GL1X3DTCo8zM9/YZShYN1pl6o2iS0xOJ0LiSQDMJ3w=) 2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=) 3: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: GgalYjkY1TSQEVBeTqrV+j4tzZy8hdDlsyXixDM61Sw=) 4: 302B59C64EEF11EFB111F530C4F9AE02.roa (hash: scffRYc0fctIE4i3P8gIvlUcNEVTHSWwJA+vVFplTH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Jul 3 03:55:07 2025 GMT Not After : Jul 10 03:55:07 2025 GMT Subject: CN=6865ff1b-c1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:98:67:72:c1:83:a8:d3:fd:53:85:1f:3d: 7f:05:c5:92:3d:44:f2:37:c9:4f:b6:25:04:75:93: 6d:e5:4a:9b:54:af:19:39:6d:93:7e:e4:f4:46:5d: c0:ec:9b:2f:6c:af:de:92:e7:de:c9:71:ab:05:ef: 08:ec:a2:28:a4:b5:4a:f8:58:14:db:e2:b6:65:b2: fe:48:ea:7d:95:a4:9b:a3:49:cd:63:97:11:6f:e4: e3:73:b9:a5:27:90:03:92:63:2f:77:94:0a:af:aa: 11:e0:04:67:7e:90:e8:49:1e:6e:04:17:ec:43:0b: 41:10:bd:19:1d:f5:12:69:59:9e:46:56:97:fa:eb: 04:64:c9:da:8c:c9:e0:01:65:97:e7:ac:b9:4b:fe: e9:30:7c:c5:b1:b4:8f:db:72:ac:44:e1:af:13:e8: d9:42:b2:5d:36:75:d7:a1:aa:6d:81:18:6d:43:89: 9a:82:62:c4:b3:14:43:83:69:15:af:a1:69:87:50: e7:8c:f0:91:d1:92:78:a6:1f:9b:ff:ab:5e:2b:c7: f4:ba:90:ac:a3:0a:fe:82:d5:b2:44:3e:af:2b:44: 5f:4d:40:c2:88:29:4c:77:fe:cd:92:57:2a:6e:4f: 02:96:bc:16:28:c8:c7:f9:d8:d3:93:4b:3e:e0:20: 12:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:25:F0:13:34:7C:0F:14:3F:86:D4:1C:F4:72:B6:D1:46:D1:A3:24 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:eb:81:cb:d5:70:ea:53:9f:78:31:e0:1c:7c:7f:cf:89:63: 00:dc:4e:f9:03:57:f0:a7:5b:cf:d2:8e:93:12:6b:5e:a5:1e: 29:02:b7:23:0a:1e:59:81:7b:ad:65:8c:8e:98:4c:ed:74:97: 9f:a4:ad:3f:54:90:6c:e4:76:12:d3:c5:ba:92:df:9d:17:e3: bb:bf:fe:00:30:e0:3b:f2:75:0a:03:fc:9a:3d:ec:48:8f:8d: 06:ee:f5:a5:6b:51:c4:fe:17:89:d9:8a:d1:b4:1c:0d:b2:83: 9b:d5:92:ff:65:10:d8:6d:c1:66:42:6f:79:2e:51:89:2c:75: 9e:34:41:85:ec:46:48:74:81:da:1c:69:cc:a4:11:40:ef:fd: 0c:ef:2c:cf:2c:c1:88:51:ad:43:22:42:26:91:64:f5:e3:15: af:bd:da:8a:d7:9d:4a:c9:5d:1f:b0:e9:fb:88:80:32:80:28: ae:d0:03:f6:6e:9e:67:73:62:2d:a5:e6:26:91:28:bd:9a:c3: 6a:0d:de:79:f3:01:07:b4:4b:3d:db:6e:4d:a6:5d:c8:18:48: 16:e1:cc:e4:54:6f:27:4a:fe:48:0c:c9:45:a0:2b:dc:d0:9f: 03:95:f4:52:f3:68:27:97:2c:1b:d2:8f:60:ad:c4:71:6b:f8: a6:5f:d5:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUwNzAzMDM1NTA3WhcNMjUwNzEwMDM1NTA3WjAYMRYwFAYD VQQDEw02ODY1ZmYxYi1jMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGiYZ3LBg6jT/VOFHz1/BcWSPUTyN8lPtiUEdZNt5UqbVK8ZOW2TfuT0Rl3A 7JsvbK/ekufeyXGrBe8I7KIopLVK+FgU2+K2ZbL+SOp9laSbo0nNY5cRb+Tjc7ml J5ADkmMvd5QKr6oR4ARnfpDoSR5uBBfsQwtBEL0ZHfUSaVmeRlaX+usEZMnajMng AWWX56y5S/7pMHzFsbSP23KsROGvE+jZQrJdNnXXoaptgRhtQ4magmLEsxRDg2kV r6Fph1DnjPCR0ZJ4ph+b/6teK8f0upCsowr+gtWyRD6vK0RfTUDCiClMd/7Nklcq bk8ClrwWKMjH+djTk0s+4CASpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4l8BM0 fA8UP4bUHPRyttFG0aMkMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC64HL1XDqU594MeAcfH/PiWMA3E75A1fwp1vP0o6TEmtepR4pArcj Ch5ZgXutZYyOmEztdJefpK0/VJBs5HYS08W6kt+dF+O7v/4AMOA78nUKA/yaPexI j40G7vWla1HE/heJ2YrRtBwNsoOb1ZL/ZRDYbcFmQm95LlGJLHWeNEGF7EZIdIHa HGnMpBFA7/0M7yzPLMGIUa1DIkImkWT14xWvvdqK151KyV0fsOn7iIAygCiu0AP2 bp5nc2ItpeYmkSi9msNqDd558wEHtEs9225Npl3IGEgW4czkVG8nSv5IDMlFoCvc 0J8DlfRS82gnlywb0o9grcRxa/imX9Xt -----END CERTIFICATE-----Generated at Thu Jul 3 11:00:52 2025 by rpki-client