$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json) Hash identifier: QC1BhXdQc6pbowSgAlh1AFMtnTF9iUpggebGXnqqaKQ= Subject key identifier: E3:69:3C:E2:C6:95:7B:75:E5:E8:4B:BD:B1:C7:6F:32:75:AF:46:61 Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft Manifest number: F4 Signing time: Tue 01 Jul 2025 05:45:39 +0000 Manifest this update: Tue 01 Jul 2025 05:45:38 +0000 Manifest next update: Tue 08 Jul 2025 05:45:38 +0000 Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: eIUdLSRk0FmSksM3mrMqU6UeNuHSs4eWmJmkK9AfAD8=) 2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: osmG47ejUnqAfJKuMkDqKj8NyV5CxVCxx93M/mU6AGU=) 3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: tXFOS4K6NP0mWp2yqDrG4Mk0xH2TKVaPDDMjLQ6peHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Validity Not Before: Jul 1 05:45:38 2025 GMT Not After : Jul 8 05:45:38 2025 GMT Subject: CN=68637602-7699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:88:ab:16:60:55:d2:45:0c:08:36:bc:b6: 3b:fa:98:b8:c2:64:c7:b1:49:25:36:33:85:dd:52: 10:27:3e:f2:6e:49:7f:bb:a5:58:60:4d:f6:69:3e: 32:05:99:17:db:8d:c6:c5:d4:52:0f:32:48:48:e6: 0e:09:ce:61:6b:3b:c0:e2:7d:70:7c:a2:ce:0c:17: ef:6f:d7:83:44:37:e3:ac:57:96:53:32:53:dd:72: fe:ba:df:4c:ba:27:17:07:e9:4f:10:0f:bf:6f:39: 7f:2b:cd:23:94:e4:93:87:c3:1e:8e:7d:53:c4:6b: 69:9c:0b:7d:90:0c:19:e5:ea:61:29:6f:87:fc:e7: b5:c3:e6:d7:c3:eb:b1:5d:af:7d:81:dc:26:38:0f: b3:af:56:42:16:74:b5:ad:4f:32:f3:fa:60:a5:82: 06:1a:be:fd:d0:b5:bb:3c:ab:45:69:7e:95:00:36: b5:65:a2:82:36:72:6e:3e:3f:e4:24:3f:a1:c3:66: ce:2a:ad:0e:b9:cf:19:69:fa:c0:cc:8f:9b:82:51: c8:cf:7c:09:aa:45:24:da:37:88:f3:70:5e:b3:a7: 45:aa:cd:05:02:39:5f:54:1e:ee:4b:c4:d2:01:03: 01:d8:2d:65:3e:89:04:3b:27:d0:08:6f:33:b6:91: d1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:69:3C:E2:C6:95:7B:75:E5:E8:4B:BD:B1:C7:6F:32:75:AF:46:61 X509v3 Authority Key Identifier: keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:51:af:5b:59:b9:ad:54:94:73:f3:49:ae:e9:62:06:a6:2b: bd:0e:ee:84:1f:ab:2b:68:c2:1e:90:3b:e1:10:68:dd:ab:43: 61:49:27:4c:3c:49:c7:4b:b9:4d:6e:2a:b7:cf:3c:df:29:2f: fc:21:f1:03:98:b2:7b:fa:c2:0a:ef:62:01:51:85:57:4d:54: 8c:bb:99:cb:61:9d:7c:5e:88:dc:f5:7e:74:a1:20:5f:47:07: d9:61:5c:fe:2f:c5:c7:82:90:52:29:1b:a6:3a:f0:ff:f1:26: 35:8d:7d:2a:28:7d:72:fe:47:17:4b:c8:b8:af:3d:73:29:bd: d8:c0:d5:e8:79:b4:9f:70:2a:9d:72:62:fe:b1:2b:0c:1b:47: dd:b6:f1:5d:3c:f9:c1:49:ed:d8:b6:76:f9:63:55:a8:f5:e1: 82:74:57:c7:88:71:5b:7e:87:ab:6b:dc:c8:63:2f:fa:0e:85: ad:c8:d4:e7:0c:d5:c2:5d:7e:8d:cd:bf:54:ef:dc:53:10:d7: f2:25:79:36:34:b3:73:0a:bc:ce:be:5f:5c:62:68:50:7b:7b: 46:a0:4c:f1:36:7b:55:96:c6:11:95:29:78:9a:1e:2f:17:90: 9b:e9:c7:a1:75:dd:cd:3d:e5:5a:18:50:28:ca:dc:80:a9:0f: f1:62:59:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy OTFDNDdCQUYwHhcNMjUwNzAxMDU0NTM4WhcNMjUwNzA4MDU0NTM4WjAYMRYwFAYD VQQDEw02ODYzNzYwMi03Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2WIqxZgVdJFDAg2vLY7+pi4wmTHsUklNjOF3VIQJz7ybkl/u6VYYE32aT4y BZkX243GxdRSDzJISOYOCc5hazvA4n1wfKLODBfvb9eDRDfjrFeWUzJT3XL+ut9M uicXB+lPEA+/bzl/K80jlOSTh8Mejn1TxGtpnAt9kAwZ5ephKW+H/Oe1w+bXw+ux Xa99gdwmOA+zr1ZCFnS1rU8y8/pgpYIGGr790LW7PKtFaX6VADa1ZaKCNnJuPj/k JD+hw2bOKq0Ouc8ZafrAzI+bglHIz3wJqkUk2jeI83Bes6dFqs0FAjlfVB7uS8TS AQMB2C1lPokEOyfQCG8ztpHRxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONpPOLG lXt15ehLvbHHbzJ1r0ZhMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Ua9bWbmtVJRz80mu6WIGpiu9Du6EH6sraMIekDvhEGjdq0NhSSdM PEnHS7lNbiq3zzzfKS/8IfEDmLJ7+sIK72IBUYVXTVSMu5nLYZ18Xojc9X50oSBf RwfZYVz+L8XHgpBSKRumOvD/8SY1jX0qKH1y/kcXS8i4rz1zKb3YwNXoebSfcCqd cmL+sSsMG0fdtvFdPPnBSe3Ytnb5Y1Wo9eGCdFfHiHFbfoera9zIYy/6DoWtyNTn DNXCXX6Nzb9U79xTENfyJXk2NLNzCrzOvl9cYmhQe3tGoEzxNntVlsYRlSl4mh4v F5Cb6cehdd3NPeVaGFAoytyAqQ/xYlmH -----END CERTIFICATE-----Generated at Wed Jul 2 15:59:03 2025 by rpki-client