$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json) Hash identifier: gJKXfaRgwmwbZL9IlyMyhKyHhQY8pX4JL9AFMOf9NmE= Subject key identifier: EB:C5:1C:B8:F3:3A:C9:13:A4:67:EB:A3:35:80:CB:89:F3:30:9E:AD Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft Manifest number: 02AA Signing time: Thu 03 Jul 2025 01:54:26 +0000 Manifest this update: Thu 03 Jul 2025 01:54:26 +0000 Manifest next update: Thu 10 Jul 2025 01:54:26 +0000 Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: Z5whahMWxqDg8D/9wnT1lckN9z2Ze9o/q8WYO8yaso4=) 2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: 5ddtdaIVi4uZX5Kvh4OHCGdOxyTvl3WbsBWufhivC2Q=) 3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ELuUl8jYoHQdUknrof/L+Xlspg+bgQj1KmK60+o/Jfs=) 4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: KuSwuFXT3RlQeIGfpEWkiu/ifBNFInANnuYBrAg51Cc=) 5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: cMcwlHYnO9+mh5veotjRirRXB4y0F0TlStRvvkDezXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Validity Not Before: Jul 3 01:54:26 2025 GMT Not After : Jul 10 01:54:26 2025 GMT Subject: CN=6865e2d2-3f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ad:f7:0f:1e:e4:bc:d5:f3:4b:b8:0f:40:db: 4c:b0:0b:2a:c4:f6:5d:ec:fa:97:ec:df:fe:12:bb: f7:39:d8:d5:c2:93:1f:46:f7:ae:8b:a3:64:cb:88: b4:d5:79:5b:c7:67:da:b9:c1:78:b3:c1:68:52:06: 8a:14:66:95:c3:34:20:82:14:57:9e:77:c3:ca:2e: 91:c8:cf:ce:34:9a:f2:9b:5d:9d:27:c8:c3:31:63: 07:22:6d:12:88:3f:4f:d1:9e:d3:e4:fa:3d:80:3b: 90:65:d0:23:8c:0a:bd:e7:6f:b2:9f:58:d7:5c:f1: 67:e0:8b:c6:a0:03:9a:c9:f0:c7:7b:df:f2:77:cd: 85:60:d1:7f:a5:f7:5f:c7:32:9d:8e:39:31:bf:00: e9:14:3f:46:18:d7:a5:0c:7e:6f:b4:ce:d8:1c:03: fd:45:e3:83:9c:43:73:36:95:b4:37:04:12:59:f0: 07:2a:cb:40:69:78:3b:78:b1:df:43:86:cb:73:94: f2:0a:e7:86:21:8f:98:48:bb:a5:26:d8:aa:f9:fc: 9e:73:b7:c5:9d:d2:66:69:70:53:1b:47:a0:e6:c2: db:65:cb:ca:8a:e5:96:b8:00:71:ee:f0:60:3b:f0: 86:cb:a6:32:ca:76:bc:04:c2:05:9f:66:22:01:f4: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C5:1C:B8:F3:3A:C9:13:A4:67:EB:A3:35:80:CB:89:F3:30:9E:AD X509v3 Authority Key Identifier: keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:1c:15:5e:8e:a4:b4:12:af:87:31:9c:52:78:be:64:30:4e: 75:e8:54:f6:dd:99:fa:56:70:a5:18:87:c9:eb:6f:12:02:2f: e0:2d:5d:68:43:35:35:86:f4:2a:88:f4:cd:1e:f1:cf:be:e8: c2:d1:d4:b5:9f:e2:c6:11:f2:93:b0:f8:68:11:c3:9e:85:72: a5:15:90:c4:8c:31:8f:52:ae:20:85:14:7e:88:8f:80:00:3a: 69:14:f4:88:13:6d:ab:ff:3d:6e:98:38:20:31:cf:db:fd:70: cb:68:9f:75:c3:25:03:c9:e4:ec:91:cb:62:9c:19:7c:99:35: 0b:65:36:6e:74:a2:ed:0b:b5:b5:5c:29:af:45:e5:a4:5d:e0: 74:16:04:60:67:08:cb:a7:a2:ae:69:ec:41:74:f6:91:12:4b: 31:2a:0e:a0:92:4d:7a:c3:65:fc:fd:2c:9c:74:db:94:c7:ca: 69:a2:7d:98:dc:70:a0:b8:d9:2c:f9:98:c4:69:0f:84:ac:55: c5:ca:2f:cf:5e:96:23:4a:f1:54:6a:5f:bc:74:eb:58:ec:6e: 9c:de:00:b9:da:53:6c:1b:d9:b9:2d:80:e9:f1:b1:87:d8:7a: 98:2c:04:15:7c:c4:d1:51:e0:a0:41:13:cf:fe:17:2b:36:2d: 04:d2:48:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE MzUxRDIzMkYwHhcNMjUwNzAzMDE1NDI2WhcNMjUwNzEwMDE1NDI2WjAYMRYwFAYD VQQDEw02ODY1ZTJkMi0zZjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5a33Dx7kvNXzS7gPQNtMsAsqxPZd7PqX7N/+Erv3OdjVwpMfRveui6Nky4i0 1Xlbx2faucF4s8FoUgaKFGaVwzQgghRXnnfDyi6RyM/ONJrym12dJ8jDMWMHIm0S iD9P0Z7T5Po9gDuQZdAjjAq952+yn1jXXPFn4IvGoAOayfDHe9/yd82FYNF/pfdf xzKdjjkxvwDpFD9GGNelDH5vtM7YHAP9ReODnENzNpW0NwQSWfAHKstAaXg7eLHf Q4bLc5TyCueGIY+YSLulJtiq+fyec7fFndJmaXBTG0eg5sLbZcvKiuWWuABx7vBg O/CGy6Yyyna8BMIFn2YiAfRRUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvFHLjz OskTpGfrozWAy4nzMJ6tMB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU3Ny85MDNFNEM3ODAzMTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmho RXh2TV9xSDN0NnZUVWRJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwHBVejqS0Eq+HMZxSeL5kME516FT23Zn6VnClGIfJ628SAi/gLV1o QzU1hvQqiPTNHvHPvujC0dS1n+LGEfKTsPhoEcOehXKlFZDEjDGPUq4ghRR+iI+A ADppFPSIE22r/z1umDggMc/b/XDLaJ91wyUDyeTskctinBl8mTULZTZudKLtC7W1 XCmvReWkXeB0FgRgZwjLp6KuaexBdPaREksxKg6gkk16w2X8/SycdNuUx8ppon2Y 3HCguNks+ZjEaQ+ErFXFyi/PXpYjSvFUal+8dOtY7G6c3gC52lNsG9m5LYDp8bGH 2HqYLAQVfMTRUeCgQRPP/hcrNi0E0kiv -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:56 2025 by rpki-client