$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json) Hash identifier: HJel+BKcvSbmak6UvMqunEAAprL9eMNB7uOaqeK/o5k= Subject key identifier: 58:81:A7:F8:BE:DA:EF:CF:DB:F4:D1:3D:48:58:32:F3:F6:29:DC:60 Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft Manifest number: 0114 Signing time: Thu 03 Jul 2025 05:11:19 +0000 Manifest this update: Thu 03 Jul 2025 05:11:19 +0000 Manifest next update: Thu 10 Jul 2025 05:11:19 +0000 Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: cFxL6j2wznTWAGgI3R1jDgpo0vLi5vJbMJ/2k7hE1tQ=) 2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: rFJbuDYL88Z9KeNowFp3y8pDODtibJ7P1KjjzQ7u73o=) 3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: qHX8rwWLzYwQ68AYEwJa6sYGgUw03regWlERxMTMTs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Validity Not Before: Jul 3 05:11:19 2025 GMT Not After : Jul 10 05:11:19 2025 GMT Subject: CN=686610f7-bf62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:76:f2:5a:4e:1c:55:e5:0c:a8:23:49:37: d5:5e:55:94:e7:5b:e9:b1:7d:dd:70:b4:88:0d:14: 3f:d4:3a:bc:17:b7:17:c9:3b:cb:8b:11:aa:43:78: 57:06:76:d7:44:85:28:da:d1:ca:84:91:5a:ae:c6: 94:a6:e3:e5:0b:f3:3d:60:b5:e7:78:f2:2a:3e:fd: c9:75:d0:d2:94:4e:63:82:54:65:f7:38:3f:56:fb: 63:ff:65:b2:22:29:9c:6a:44:97:89:8b:09:f4:8e: c7:43:9f:b4:27:d1:37:61:6f:b7:25:bc:3c:5a:c7: bf:9a:6c:a1:9f:87:1d:f8:60:78:2e:3a:96:ec:44: 66:9e:37:9b:03:c4:89:09:8d:56:2c:1f:83:7d:b8: fc:63:a4:f8:82:41:da:5c:0a:1e:34:5e:64:6a:3e: c4:53:4f:05:05:f6:81:11:17:f7:5b:e7:49:80:9a: db:a3:0a:a3:81:60:bc:c8:7a:4e:e3:00:67:81:32: e4:69:0b:85:19:d7:a0:2a:38:14:39:4f:cb:a1:a3: e1:2b:9e:a7:98:9f:2d:93:57:be:a6:c2:09:45:1e: 57:71:7c:c8:d2:4e:ac:f5:2c:7c:25:91:de:6b:e5: 0f:6b:b2:98:2d:eb:fd:57:a8:2e:67:a8:73:ae:1d: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:81:A7:F8:BE:DA:EF:CF:DB:F4:D1:3D:48:58:32:F3:F6:29:DC:60 X509v3 Authority Key Identifier: keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:cf:41:fc:44:50:ba:15:fb:3e:5a:ed:f1:11:f8:95:d8:29: a4:37:9d:03:fc:bc:c1:05:33:d8:fb:26:2a:42:a3:a0:e4:f2: 3a:e4:d6:57:74:8c:69:36:aa:f4:31:dc:7a:c9:78:98:05:1c: f8:77:5d:40:52:a0:74:88:fe:77:af:45:a1:a6:38:27:5c:87: 82:dd:07:78:7c:28:90:08:4a:6c:e9:92:40:be:ed:96:5c:5d: 45:ab:a7:30:04:59:8e:6d:70:ba:98:70:47:0b:20:ba:46:b4: 8b:6f:54:23:37:07:b9:23:87:01:17:f4:c2:63:be:dd:62:07: da:97:13:6c:b5:5c:e2:b7:18:93:a1:e8:e3:2a:1a:7a:05:20: a1:69:e9:a1:c8:e1:e8:c2:48:98:3c:f0:27:5e:27:9a:6b:7e: a8:d1:f7:5e:23:f9:2a:09:e6:45:2f:db:f4:aa:dc:57:13:ae: 69:41:f9:50:98:c5:74:50:68:0b:37:e2:6a:f6:b4:51:87:16: c9:da:dd:6f:0f:33:6b:90:b2:32:90:ce:0d:0b:2d:87:03:63: 7a:51:a0:a2:ac:4b:62:ae:93:d5:eb:b6:74:49:3c:a5:81:e4: 75:03:40:f5:b7:8d:aa:59:28:10:b8:0f:8d:b2:10:a9:5e:c3: 3c:31:9d:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF OENFNzg4QTcwHhcNMjUwNzAzMDUxMTE5WhcNMjUwNzEwMDUxMTE5WjAYMRYwFAYD VQQDEw02ODY2MTBmNy1iZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uB28lpOHFXlDKgjSTfVXlWU51vpsX3dcLSIDRQ/1Dq8F7cXyTvLixGqQ3hX BnbXRIUo2tHKhJFarsaUpuPlC/M9YLXnePIqPv3JddDSlE5jglRl9zg/Vvtj/2Wy IimcakSXiYsJ9I7HQ5+0J9E3YW+3Jbw8Wse/mmyhn4cd+GB4LjqW7ERmnjebA8SJ CY1WLB+Dfbj8Y6T4gkHaXAoeNF5kaj7EU08FBfaBERf3W+dJgJrbowqjgWC8yHpO 4wBngTLkaQuFGdegKjgUOU/LoaPhK56nmJ8tk1e+psIJRR5XcXzI0k6s9Sx8JZHe a+UPa7KYLev9V6guZ6hzrh07BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiBp/i+ 2u/P2/TRPUhYMvP2KdxgMB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNBNi84MDc5NEM5QUMwOEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0 a21JcjViZTR2dV9vem5pS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRz0H8RFC6Ffs+Wu3xEfiV2CmkN50D/LzBBTPY+yYqQqOg5PI65NZX dIxpNqr0Mdx6yXiYBRz4d11AUqB0iP53r0WhpjgnXIeC3Qd4fCiQCEps6ZJAvu2W XF1Fq6cwBFmObXC6mHBHCyC6RrSLb1QjNwe5I4cBF/TCY77dYgfalxNstVzitxiT oejjKhp6BSChaemhyOHowkiYPPAnXieaa36o0fdeI/kqCeZFL9v0qtxXE65pQflQ mMV0UGgLN+Jq9rRRhxbJ2t1vDzNrkLIykM4NCy2HA2N6UaCirEtirpPV67Z0STyl geR1A0D1t42qWSgQuA+NshCpXsM8MZ2Q -----END CERTIFICATE-----Generated at Thu Jul 3 13:30:23 2025 by rpki-client