$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft File: XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json) Hash identifier: p+iY/Ml5abPwAGNcohfm1lsGK0sCsRpCMFlubkcpzGg= Subject key identifier: A1:6D:56:6B:6C:DB:44:92:4D:B3:27:C2:03:10:E7:19:2F:6B:04:71 Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 Certificate issuer: /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft Manifest number: 8E Signing time: Sun 29 Jun 2025 05:30:18 +0000 Manifest this update: Sun 29 Jun 2025 05:30:18 +0000 Manifest next update: Sun 06 Jul 2025 05:30:18 +0000 Files and hashes: 1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: 31v30HV+SrcP85O/x4THV13Nq2sUAH7mfp90l5VbWxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Validity Not Before: Jun 29 05:30:18 2025 GMT Not After : Jul 6 05:30:18 2025 GMT Subject: CN=6860cf6a-06bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:ea:79:b3:e1:a6:0a:77:36:7b:e8:9d:a1: 27:c6:0d:ad:1f:4c:79:57:6b:77:f4:65:55:fe:b2: 8f:ef:83:1f:ae:af:99:55:1d:79:29:29:8d:53:81: 0d:ae:96:f1:70:a0:96:43:cb:15:ec:6b:7d:a6:ab: a7:0d:1c:a7:c7:68:c8:63:26:4b:86:0d:73:dd:78: 6d:9a:a3:d3:12:3e:3f:c4:d9:48:c9:9c:3e:92:bd: e0:b4:38:eb:5a:df:99:e6:1b:05:2d:18:74:c3:b7: f0:70:91:23:9c:42:28:3a:50:b0:3d:61:33:2e:43: 28:f6:8e:e4:39:20:13:41:ff:c0:09:4d:50:53:ef: eb:f7:d4:72:39:0f:61:47:31:47:a6:8f:89:d4:1b: 5c:8d:1e:d7:76:fc:18:a4:d0:05:09:98:0a:04:94: b9:e8:02:bd:98:24:ed:4d:e6:61:3e:da:09:6a:b3: 06:97:96:dc:e0:25:20:c6:09:f7:a6:6e:9b:b8:15: 7b:9a:01:62:2f:c7:c1:73:cb:1e:a6:b0:6c:19:b3: 0b:2f:c4:97:87:73:2d:5e:3f:dc:de:46:ed:21:32: d2:13:ce:dc:74:d8:c3:df:1a:32:0f:38:3e:27:03: 5a:db:5d:8d:a4:30:0f:ed:f5:dc:55:45:f3:a3:fe: dc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6D:56:6B:6C:DB:44:92:4D:B3:27:C2:03:10:E7:19:2F:6B:04:71 X509v3 Authority Key Identifier: keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:cb:0f:eb:6d:85:09:52:87:68:99:71:c2:b3:55:42:ab:b7: c3:6c:50:98:08:9e:81:69:99:3d:f2:a0:27:5a:ea:20:1f:c1: d3:4e:68:53:19:7e:ed:23:db:8f:c1:df:c9:8e:c6:b9:4c:5f: 44:b6:c8:54:83:c3:c1:0a:db:f0:3c:cb:74:1b:01:df:39:c0: 71:ab:a5:3d:8a:a5:da:22:21:6c:27:69:99:3c:0f:90:36:8b: 17:0f:9c:01:f3:26:61:07:52:93:55:2a:89:66:12:13:90:50: 09:be:f5:04:74:ac:a4:d0:74:69:63:ab:c2:fc:1e:9b:14:e7: b2:ca:a6:4e:dc:70:71:a5:6d:34:b2:e2:25:5e:b7:da:06:89: 62:44:8f:cb:96:39:84:49:c4:28:83:43:1e:9d:95:3f:a5:ea: 1f:51:d0:e2:90:96:cd:e5:9e:6b:e5:00:0b:2e:ca:94:11:20: 5f:40:fb:d0:27:e8:e6:10:62:79:0b:85:e5:42:cd:47:57:82: 11:52:49:73:02:a8:71:38:26:a3:b2:18:85:64:f8:9a:bb:ce: 1c:2a:a6:0b:ca:32:c3:35:77:40:67:18:a0:f1:15:80:e6:99: 12:6a:b0:2c:3f:4e:9c:44:e3:49:29:2f:fc:af:01:eb:f1:9f: b0:64:9b:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDVFOTYwRDUxODhGMDM2Rjc5RUFBNzk0MTU1MkNDRjQ2 Qjg3QUJGMDcwHhcNMjUwNjI5MDUzMDE4WhcNMjUwNzA2MDUzMDE4WjAYMRYwFAYD VQQDEw02ODYwY2Y2YS0wNmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAfqebPhpgp3NnvonaEnxg2tH0x5V2t39GVV/rKP74Mfrq+ZVR15KSmNU4EN rpbxcKCWQ8sV7Gt9pqunDRynx2jIYyZLhg1z3XhtmqPTEj4/xNlIyZw+kr3gtDjr Wt+Z5hsFLRh0w7fwcJEjnEIoOlCwPWEzLkMo9o7kOSATQf/ACU1QU+/r99RyOQ9h RzFHpo+J1BtcjR7XdvwYpNAFCZgKBJS56AK9mCTtTeZhPtoJarMGl5bc4CUgxgn3 pm6buBV7mgFiL8fBc8seprBsGbMLL8SXh3MtXj/c3kbtITLSE87cdNjD3xoyDzg+ JwNa212NpDAP7fXcVUXzo/7cLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFtVmts 20SSTbMnwgMQ5xkvawRxMB8GA1UdIwQYMBaAFF6WDVGI8Db3nqp5QVUsz0a4er8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9DODVCQTEyQzdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9YcFlOVVlqd052ZWVxbmxCVlN6UFJyaDZ2 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hwWU5VWWp3TnZlZXFubEJWU3pQUnJoNnZ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9DODVCQTEyQzdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9YcFlOVVlqd052 ZWVxbmxCVlN6UFJyaDZ2d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcyw/rbYUJUodomXHCs1VCq7fDbFCYCJ6BaZk98qAnWuogH8HTTmhT GX7tI9uPwd/Jjsa5TF9EtshUg8PBCtvwPMt0GwHfOcBxq6U9iqXaIiFsJ2mZPA+Q NosXD5wB8yZhB1KTVSqJZhITkFAJvvUEdKyk0HRpY6vC/B6bFOeyyqZO3HBxpW00 suIlXrfaBoliRI/LljmEScQog0MenZU/peofUdDikJbN5Z5r5QALLsqUESBfQPvQ J+jmEGJ5C4XlQs1HV4IRUklzAqhxOCajshiFZPiau84cKqYLyjLDNXdAZxig8RWA 5pkSarAsP06cRONJKS/8rwHr8Z+wZJvL -----END CERTIFICATE-----Generated at Mon Jun 30 00:21:07 2025 by rpki-client