$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft File: XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft (raw, json) Hash identifier: uRXtNsDd3J1HUxmiacW4mVXewW2SQPi/1ki0mgglh5c= Subject key identifier: 70:CF:7F:43:BC:33:07:34:01:5A:94:67:54:E4:8A:52:19:EC:36:A3 Authority key identifier: 5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 Certificate issuer: /CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Certificate serial: 09ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft Manifest number: 09E0 Signing time: Wed 02 Jul 2025 20:09:47 +0000 Manifest this update: Wed 02 Jul 2025 20:09:47 +0000 Manifest next update: Wed 09 Jul 2025 20:09:47 +0000 Files and hashes: 1: XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl (hash: iavWXmyV2GYj6OjVjSsRha4NSAMjJsQGIUylpfnIVSQ=) 2: 97E61FE46F2111EB85D19531C4F9AE02.roa (hash: QT/K5tGfOd7GalxXyOBi4xKWLa0cvDIyEyK/W9LM+Pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B34, serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Validity Not Before: Jul 2 20:09:47 2025 GMT Not After : Jul 9 20:09:47 2025 GMT Subject: CN=6865920b-4277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:e4:d6:15:a1:ab:de:19:bf:67:2e:95:c4: 33:33:be:67:bb:99:1c:58:06:68:ed:4d:70:73:b8: 98:26:7f:fb:5b:18:dc:95:85:85:59:90:29:20:69: 81:05:e8:da:a6:2b:16:57:b1:0c:1f:e9:68:17:41: 05:f3:c9:8b:bd:ff:83:0a:48:f7:96:59:ad:21:f3: f4:b1:3e:91:b3:b9:e5:63:38:71:8e:e7:9f:f3:71: a3:9a:27:c0:01:b3:7b:d8:85:6b:3d:f0:3b:91:9f: 57:98:58:b0:00:5e:31:cf:bd:8d:15:33:77:10:38: dd:0b:63:f8:0c:a9:2b:d8:bb:69:71:11:7e:07:b2: 97:34:7c:2a:5d:3b:89:31:9a:d8:e6:5f:52:d5:10: 7e:c9:7c:6e:e4:41:9e:3c:5a:a1:b4:ea:4a:12:2f: 8e:47:9c:38:0d:75:a2:ff:07:68:9f:58:25:84:0f: 34:8c:41:7a:b9:86:1b:05:37:8e:70:48:57:94:68: 27:d2:50:e6:c3:a8:e6:0c:a5:bd:87:9e:9c:6d:33: cd:36:bf:95:4d:2b:3d:1f:90:43:80:50:00:18:da: 6a:ae:59:e2:12:fd:b3:86:4b:f2:70:6f:ac:ee:50: 71:4c:43:8d:68:e3:5f:55:b0:ac:d5:c1:28:6d:35: ed:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:7F:43:BC:33:07:34:01:5A:94:67:54:E4:8A:52:19:EC:36:A3 X509v3 Authority Key Identifier: keyid:5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:51:6a:e1:71:71:7f:94:63:a5:5c:48:fe:d9:c8:c9:11:3e: ff:1c:02:ac:5a:82:ba:33:00:63:4d:90:9a:c1:ac:d1:1d:1a: 93:40:a2:97:f3:96:6a:26:83:41:9c:3d:bc:d2:d7:6a:28:ef: 00:d8:0d:bb:47:9c:fa:76:a8:ca:24:27:60:e3:e4:41:7a:31: 30:c1:e7:6c:99:10:21:e7:b5:75:86:66:8e:8d:0b:fb:02:b1: 95:f9:10:f7:30:2b:be:9e:44:28:de:7f:3e:6c:d9:bd:fe:f1: 6a:54:ba:31:7a:16:f1:1a:0f:8e:aa:06:9b:a1:7f:42:1e:07: e3:ac:ce:f6:be:23:00:b7:ce:0e:aa:f5:da:eb:5d:e6:ef:11: ef:f2:80:27:91:98:12:52:79:7b:9c:8f:33:bb:02:00:46:66: 33:f9:6e:fe:81:a1:ff:55:1e:56:82:d8:ec:0d:b3:68:25:a9: 17:c4:15:d6:09:73:b0:79:eb:06:4b:c4:63:fb:d6:b0:d8:2e: f8:00:3b:c9:83:a7:50:1f:bd:94:19:0d:60:68:8d:13:3d:55: 03:5f:03:c0:aa:ac:00:0b:c8:7b:e6:c9:79:67:91:3f:d0:72: dc:bf:e6:b8:11:8e:a7:b6:da:91:8b:0b:db:99:f4:7b:88:1c: 96:51:07:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMzQxMTAvBgNVBAUTKDVERjEwMkUyQTVFNzM2NzcyMUMxMThEQkVDREE2MDJB ODAyOUVFOTQwHhcNMjUwNzAyMjAwOTQ3WhcNMjUwNzA5MjAwOTQ3WjAYMRYwFAYD VQQDEw02ODY1OTIwYi00Mjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVTk1hWhq94Zv2culcQzM75nu5kcWAZo7U1wc7iYJn/7WxjclYWFWZApIGmB BejapisWV7EMH+loF0EF88mLvf+DCkj3llmtIfP0sT6Rs7nlYzhxjuef83GjmifA AbN72IVrPfA7kZ9XmFiwAF4xz72NFTN3EDjdC2P4DKkr2LtpcRF+B7KXNHwqXTuJ MZrY5l9S1RB+yXxu5EGePFqhtOpKEi+OR5w4DXWi/wdon1glhA80jEF6uYYbBTeO cEhXlGgn0lDmw6jmDKW9h56cbTPNNr+VTSs9H5BDgFAAGNpqrlniEv2zhkvycG+s 7lBxTEONaONfVbCs1cEobTXtyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDPf0O8 Mwc0AVqUZ1TkilIZ7DajMB8GA1UdIwQYMBaAFF3xAuKl5zZ3IcEY2+zaYCqAKe6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIzNC82MDM3RDVEQzgy QTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5uY2h3UmpiN05wZ0tvQXA3 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmRUM0cVhuTm5jaHdSamI3TnBnS29BcDdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIzNC82MDM3RDVEQzgyQTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5u Y2h3UmpiN05wZ0tvQXA3cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPUWrhcXF/lGOlXEj+2cjJET7/HAKsWoK6MwBjTZCawazRHRqTQKKX 85ZqJoNBnD280tdqKO8A2A27R5z6dqjKJCdg4+RBejEwwedsmRAh57V1hmaOjQv7 ArGV+RD3MCu+nkQo3n8+bNm9/vFqVLoxehbxGg+OqgaboX9CHgfjrM72viMAt84O qvXa613m7xHv8oAnkZgSUnl7nI8zuwIARmYz+W7+gaH/VR5WgtjsDbNoJakXxBXW CXOweesGS8Rj+9aw2C74ADvJg6dQH72UGQ1gaI0TPVUDXwPAqqwAC8h75sl5Z5E/ 0HLcv+a4EY6nttqRiwvbmfR7iByWUQeZ -----END CERTIFICATE-----Generated at Thu Jul 3 00:32:22 2025 by rpki-client