$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: BIPOsXCSxUiCbjI9eQ9qKx/Wp2vuaho3arvkCE+xKK4= Subject key identifier: 74:E6:31:76:8A:CB:07:B3:F0:92:AE:F8:8D:44:B7:D9:7F:E4:AD:DE Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 012D Signing time: Thu 03 Jul 2025 05:12:17 +0000 Manifest this update: Thu 03 Jul 2025 05:12:17 +0000 Manifest next update: Thu 10 Jul 2025 05:12:16 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: idndUPRXut/+Yre7X9xKyPkxKQ+F7/wxi5d6H/QQtn0=) 2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Jul 3 05:12:17 2025 GMT Not After : Jul 10 05:12:16 2025 GMT Subject: CN=68661131-609f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7a:c2:3b:4f:e7:00:2d:42:4f:ce:f0:bb:ff: ae:b4:1d:7b:3d:a0:6f:c5:75:3f:03:c9:a6:cc:87: 55:d8:7d:d1:92:e7:d3:59:9c:6c:ef:5c:83:86:ad: e6:86:77:2f:2b:a5:4e:ce:7c:ef:de:e7:63:e7:ad: b9:20:8a:ff:68:3b:fa:20:6f:74:df:78:a1:26:b5: 5a:90:44:d0:d8:df:19:c0:11:c8:d8:13:3a:16:ec: 6b:1c:4b:17:8b:53:c6:ea:b4:0a:0e:95:bc:cf:0a: 31:17:66:97:b8:a2:7a:71:86:3b:9c:50:7d:26:8e: a4:01:29:c3:49:43:06:1c:9d:c0:9f:30:ef:06:ce: 09:16:12:fb:31:48:c6:cd:47:21:18:ef:5d:4b:66: 69:1f:40:2f:9b:5d:8f:46:ea:06:cb:0d:ee:62:2d: 2a:90:f8:0f:48:29:4f:b1:d7:fd:c1:b7:3e:7f:36: 51:d0:23:93:6f:6f:2a:63:0c:06:a8:3f:03:87:92: 68:21:91:ec:0d:fa:cf:e9:8d:43:f7:82:6a:00:30: 36:a5:0d:68:93:d2:17:f9:22:fb:f9:b4:9d:f3:16: 7f:35:a9:83:29:d8:07:24:77:19:0e:76:89:89:63: 13:6c:01:b3:2d:b5:1a:70:22:42:30:48:cc:98:d5: 82:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E6:31:76:8A:CB:07:B3:F0:92:AE:F8:8D:44:B7:D9:7F:E4:AD:DE X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:80:8a:3d:4f:56:38:a9:da:2e:ec:df:b3:fd:54:47:9e:79: 85:6b:24:cd:c0:a1:9a:c1:2c:dc:b3:12:c0:57:e9:f0:a2:c8: 49:34:80:1c:7e:08:ff:8a:03:2a:67:76:c4:25:22:6e:f9:5a: 11:e1:0e:60:dc:a2:7b:33:f2:fe:db:59:fc:5f:f3:c1:a5:da: 2b:ae:18:86:a1:1d:e6:59:cb:e2:7f:95:99:ff:ee:48:9a:70: e7:21:4c:bc:04:cb:bd:86:ea:0d:f1:d6:75:0a:86:c3:6e:2e: 38:1f:58:fe:df:58:4c:6f:8d:14:6d:cc:eb:8d:54:12:a1:56: 5f:00:a0:0e:39:96:f2:10:06:99:aa:51:8a:3b:fe:3f:eb:45: 99:cb:f2:8f:4e:a3:10:ea:8c:a7:b9:1d:95:de:5c:ef:32:60: aa:65:93:47:30:7b:13:ff:db:4d:95:9c:a4:45:12:64:15:17: 16:d3:89:03:5e:fe:7b:a7:dd:e6:f4:90:67:a5:51:c2:f6:a5: 62:9f:8e:4d:3b:e4:ef:15:78:c7:09:40:da:4c:7d:41:f0:fc: 57:80:87:29:83:6e:4b:43:6b:47:ce:01:85:3e:53:45:1d:28: 34:aa:ad:5d:80:cf:e0:77:c9:8a:7a:f0:24:c6:f2:e2:3f:64: 2e:6a:4f:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUwNzAzMDUxMjE3WhcNMjUwNzEwMDUxMjE2WjAYMRYwFAYD VQQDEw02ODY2MTEzMS02MDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHrCO0/nAC1CT87wu/+utB17PaBvxXU/A8mmzIdV2H3RkufTWZxs71yDhq3m hncvK6VOznzv3udj5625IIr/aDv6IG9033ihJrVakETQ2N8ZwBHI2BM6FuxrHEsX i1PG6rQKDpW8zwoxF2aXuKJ6cYY7nFB9Jo6kASnDSUMGHJ3AnzDvBs4JFhL7MUjG zUchGO9dS2ZpH0Avm12PRuoGyw3uYi0qkPgPSClPsdf9wbc+fzZR0COTb28qYwwG qD8Dh5JoIZHsDfrP6Y1D94JqADA2pQ1ok9IX+SL7+bSd8xZ/NamDKdgHJHcZDnaJ iWMTbAGzLbUacCJCMEjMmNWC5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTmMXaK ywez8JKu+I1Et9l/5K3eMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBugIo9T1Y4qdou7N+z/VRHnnmFayTNwKGawSzcsxLAV+nwoshJNIAc fgj/igMqZ3bEJSJu+VoR4Q5g3KJ7M/L+21n8X/PBpdorrhiGoR3mWcvif5WZ/+5I mnDnIUy8BMu9huoN8dZ1CobDbi44H1j+31hMb40UbczrjVQSoVZfAKAOOZbyEAaZ qlGKO/4/60WZy/KPTqMQ6oynuR2V3lzvMmCqZZNHMHsT/9tNlZykRRJkFRcW04kD Xv57p93m9JBnpVHC9qVin45NO+TvFXjHCUDaTH1B8PxXgIcpg25LQ2tHzgGFPlNF HSg0qq1dgM/gd8mKevAkxvLiP2Quak+C -----END CERTIFICATE-----Generated at Thu Jul 3 23:19:54 2025 by rpki-client