$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft File: xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json) Hash identifier: KMbmZDappDjzXSVC1Jhh0BVw8QU1f76FLrlKxrFF8sI= Subject key identifier: B2:A7:81:F7:13:D9:B3:67:87:C9:1E:73:47:CC:96:31:27:A7:77:4F Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 Certificate issuer: /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft Manifest number: 04BD Signing time: Thu 03 Jul 2025 00:14:25 +0000 Manifest this update: Thu 03 Jul 2025 00:14:24 +0000 Manifest next update: Thu 10 Jul 2025 00:14:24 +0000 Files and hashes: 1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: WFiegboHX3c/dkZ7gaGPHA61393JZ8bLAYVBHhCQ2R0=) 2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: NBcgBUuRK2Oc31nKRp+BExXYFoPfjJAOt1Hb95kMeP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7740, serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Validity Not Before: Jul 3 00:14:24 2025 GMT Not After : Jul 10 00:14:24 2025 GMT Subject: CN=6865cb61-1879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:a2:fd:5a:5c:29:7e:c2:c2:14:c9:12:8d: 54:10:62:7a:36:d8:a4:00:3c:3d:1b:09:08:9e:95: de:93:b7:80:1e:5e:35:3a:ba:e4:2f:5e:45:4c:52: 4d:4a:8c:61:33:ad:3c:69:4b:38:ce:0f:47:ec:2f: be:fb:0f:9d:d3:d4:14:78:bd:c8:30:7d:56:73:8c: ef:14:a0:a7:52:07:74:a4:2a:f4:bb:4b:d6:95:1a: b9:f3:ef:72:21:b5:ab:92:68:93:ae:ee:c0:d3:29: 3d:c0:14:4f:ab:07:c9:e6:4b:70:cf:6a:7f:ba:bc: 12:cf:8b:f2:06:9d:ad:a0:e4:aa:9c:95:ab:19:c6: 49:93:50:42:d6:db:0d:f4:39:14:ea:72:b2:76:b8: 7d:b3:c8:61:ed:a6:70:d7:28:21:23:ba:8d:00:ba: e8:74:b1:98:53:3a:c1:78:7f:82:12:a4:8d:37:c8: 59:c6:92:1f:6f:a0:0f:5a:6f:0f:b2:ee:5d:eb:1e: ee:e0:cb:66:1b:23:22:86:b7:c3:27:8e:9f:5a:c4: 11:be:1c:10:c4:cd:bd:79:08:0f:ac:e3:bd:36:72: d0:b4:75:b6:06:df:b2:bf:56:94:65:5c:18:c4:ec: f7:c2:5a:0a:2c:fb:d9:ab:25:9d:e4:92:4f:65:47: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A7:81:F7:13:D9:B3:67:87:C9:1E:73:47:CC:96:31:27:A7:77:4F X509v3 Authority Key Identifier: keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:0d:c9:6e:86:a1:57:a9:0e:35:3e:df:c5:00:21:a2:2b:c0: 67:0c:70:5d:76:5d:ce:2d:69:88:ee:f1:58:c3:14:19:3c:b5: 97:2a:24:43:a6:00:cd:2b:12:88:25:a1:88:c3:ce:4d:7b:51: 3a:d3:29:81:d2:e9:8a:4a:ce:a0:d4:23:de:8c:e4:5c:2f:ce: 2a:02:60:c1:a3:b6:1e:32:33:a5:9e:65:22:ca:b1:1f:8c:8b: c3:10:70:f0:35:6c:5b:69:1f:de:61:89:27:93:b9:07:6d:df: 0c:e0:fe:53:18:61:69:2c:a5:9f:48:20:68:e8:20:b1:cf:49: 91:14:7c:30:de:8f:c6:cb:ec:02:b5:71:b7:ab:19:70:d6:fe: 44:1c:49:fa:0d:9e:5e:e7:a8:50:35:59:50:b1:c2:37:03:9d: c9:5c:eb:7f:e6:a0:1e:a5:40:3e:60:ad:52:a0:3d:4b:c3:13: ec:21:3b:dc:48:06:4c:ad:a2:12:ce:a2:ad:3e:ba:3c:2c:f2: 44:7e:4a:ad:7f:66:b2:79:52:26:85:6c:2e:58:22:cf:b3:c4: 53:9b:ea:c7:c3:bc:94:96:a5:2f:99:10:46:2c:9e:ec:f2:22: 64:97:e0:74:e8:e7:34:06:b5:72:78:1f:a9:f8:cb:25:45:9d: 5f:eb:d2:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NDAxMTAvBgNVBAUTKEM0MkExOEMyQjdCNzI1MUYyNTA2RjVGQTI3OEExNjJF ODQ0NDREQTYwHhcNMjUwNzAzMDAxNDI0WhcNMjUwNzEwMDAxNDI0WjAYMRYwFAYD VQQDEw02ODY1Y2I2MS0xODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Bei/VpcKX7CwhTJEo1UEGJ6NtikADw9GwkInpXek7eAHl41OrrkL15FTFJN SoxhM608aUs4zg9H7C+++w+d09QUeL3IMH1Wc4zvFKCnUgd0pCr0u0vWlRq58+9y IbWrkmiTru7A0yk9wBRPqwfJ5ktwz2p/urwSz4vyBp2toOSqnJWrGcZJk1BC1tsN 9DkU6nKydrh9s8hh7aZw1yghI7qNALrodLGYUzrBeH+CEqSNN8hZxpIfb6APWm8P su5d6x7u4MtmGyMihrfDJ46fWsQRvhwQxM29eQgPrOO9NnLQtHW2Bt+yv1aUZVwY xOz3wloKLPvZqyWd5JJPZUcEqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKngfcT 2bNnh8kec0fMljEnp3dPMB8GA1UdIwQYMBaAFMQqGMK3tyUfJQb1+ieKFi6ERE2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc0MC9GM0E3MTlERTMy MzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pSOGxCdlg2SjRvV0xvUkVU YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDb1l3cmUzSlI4bEJ2WDZKNG9XTG9SRVRhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc0MC9GM0E3MTlERTMyMzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pS OGxCdlg2SjRvV0xvUkVUYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4DcluhqFXqQ41Pt/FACGiK8BnDHBddl3OLWmI7vFYwxQZPLWXKiRD pgDNKxKIJaGIw85Ne1E60ymB0umKSs6g1CPejORcL84qAmDBo7YeMjOlnmUiyrEf jIvDEHDwNWxbaR/eYYknk7kHbd8M4P5TGGFpLKWfSCBo6CCxz0mRFHww3o/Gy+wC tXG3qxlw1v5EHEn6DZ5e56hQNVlQscI3A53JXOt/5qAepUA+YK1SoD1LwxPsITvc SAZMraISzqKtPro8LPJEfkqtf2ayeVImhWwuWCLPs8RTm+rHw7yUlqUvmRBGLJ7s 8iJkl+B06Oc0BrVyeB+p+MslRZ1f69Lg -----END CERTIFICATE-----Generated at Thu Jul 3 20:54:10 2025 by rpki-client