$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json) Hash identifier: 7VTOBkiVNGKIzOQi5MMVFU1LGUwcNa7a7UMFIFwBvd4= Subject key identifier: AD:23:8E:35:84:FD:B1:41:DA:1F:F2:3C:F3:91:D9:3B:1D:5D:9B:26 Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft Manifest number: 0567 Signing time: Mon 30 Jun 2025 23:44:30 +0000 Manifest this update: Mon 30 Jun 2025 23:44:29 +0000 Manifest next update: Mon 07 Jul 2025 23:44:29 +0000 Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: dHRvc92d0CSS6TnXwZY6cFpI4O/0uczWvR8rlySVVJ8=) 2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: jxQWNR1P8sYKVza0W/49c3uTybsGhMQmKrsxrcNc/xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Jun 30 23:44:29 2025 GMT Not After : Jul 7 23:44:29 2025 GMT Subject: CN=6863215d-b561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:32:2d:d6:24:a0:80:b7:91:c1:d3:33:73:05: 2b:51:c8:70:e2:9f:b1:9b:f2:1b:b8:91:47:7d:40: a2:20:f8:92:e7:6a:b2:ad:db:72:cd:b5:ba:0c:e4: ec:af:87:86:66:d8:02:c8:03:b2:9a:63:b2:16:11: 88:07:4e:96:9f:60:c0:a6:65:75:21:e9:7b:7c:cb: 08:64:ec:a9:46:f5:c9:9e:64:f4:74:6d:26:e5:0e: 0e:a6:8c:d6:8b:07:27:c2:72:4b:07:30:7c:04:9b: 1c:74:ce:89:f9:2b:fd:ad:13:bf:2f:25:9b:37:bf: 09:fe:8c:bf:c8:63:11:21:85:dc:50:b9:8d:18:70: 8b:15:8f:a9:dc:29:ed:44:40:26:07:db:d1:9b:c4: d6:8f:6f:d5:b5:02:bc:14:27:77:d4:8d:da:d0:69: f8:e5:24:08:70:4d:46:ba:38:2e:03:31:08:af:5d: 5a:85:cb:cf:55:bb:f8:c0:3f:80:27:45:f7:d4:00: 8d:c7:bc:f0:ae:12:e1:5c:96:cb:ae:ca:26:aa:9a: a5:02:f9:d0:13:0c:2f:e8:76:e5:6e:4e:e7:75:e9: 9d:db:02:d6:53:35:0f:3b:7a:ad:95:2c:03:fc:c7: e5:41:24:50:5d:f2:46:bc:78:da:21:65:f1:8b:96: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:23:8E:35:84:FD:B1:41:DA:1F:F2:3C:F3:91:D9:3B:1D:5D:9B:26 X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:90:7b:38:f9:d5:d9:92:c4:d4:ed:ab:b3:7b:a5:c4:99:2e: 55:5d:96:14:31:b5:c1:5e:eb:1f:d8:94:6a:f4:d4:20:ff:5a: 5b:1b:00:40:05:f0:69:b8:2b:c0:90:96:65:e9:70:eb:2a:52: ad:a4:05:28:66:f4:a3:ac:2d:9e:4a:58:1b:71:33:68:4f:0e: d0:a8:de:70:95:3a:6d:c1:c6:c2:7e:dc:7e:e7:9b:07:72:8d: 09:8f:69:8c:9d:83:87:3b:e3:14:6f:42:8f:63:54:2c:f2:04: 7e:de:10:52:7a:c8:2b:7b:78:dc:59:b6:93:52:e3:b2:14:40: 21:11:9a:a2:31:ee:e9:33:ad:95:8c:7f:7e:f7:cb:da:51:f9: b9:64:ed:49:59:83:43:62:8c:59:98:9c:d4:d3:79:c0:d9:20: a9:66:23:c8:76:62:d7:e6:6d:c1:cf:f2:90:2b:fa:12:f9:c4: 36:af:e9:aa:69:5e:36:fe:8f:a7:b2:a7:98:5b:0c:7b:9a:14: 5c:86:a7:90:69:38:24:6b:ff:86:bc:1d:2a:6e:5c:6d:52:a9: fa:d3:33:c4:50:21:be:19:91:08:e2:de:0b:e0:57:46:2a:9a: 41:31:cf:c0:c8:af:be:85:90:03:03:fe:44:94:02:68:ff:b9: 6a:d8:de:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjUwNjMwMjM0NDI5WhcNMjUwNzA3MjM0NDI5WjAYMRYwFAYD VQQDEw02ODYzMjE1ZC1iNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zIt1iSggLeRwdMzcwUrUchw4p+xm/IbuJFHfUCiIPiS52qyrdtyzbW6DOTs r4eGZtgCyAOymmOyFhGIB06Wn2DApmV1Iel7fMsIZOypRvXJnmT0dG0m5Q4OpozW iwcnwnJLBzB8BJscdM6J+Sv9rRO/LyWbN78J/oy/yGMRIYXcULmNGHCLFY+p3Cnt REAmB9vRm8TWj2/VtQK8FCd31I3a0Gn45SQIcE1GujguAzEIr11ahcvPVbv4wD+A J0X31ACNx7zwrhLhXJbLrsomqpqlAvnQEwwv6Hblbk7ndemd2wLWUzUPO3qtlSwD /MflQSRQXfJGvHjaIWXxi5bIiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0jjjWE /bFB2h/yPPOR2TsdXZsmMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhCQy85MjA5MjM5MEVBRDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1 ZGJFc0ktQXdyRlRGSUZjV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYkHs4+dXZksTU7auze6XEmS5VXZYUMbXBXusf2JRq9NQg/1pbGwBA BfBpuCvAkJZl6XDrKlKtpAUoZvSjrC2eSlgbcTNoTw7QqN5wlTptwcbCftx+55sH co0Jj2mMnYOHO+MUb0KPY1Qs8gR+3hBSesgre3jcWbaTUuOyFEAhEZqiMe7pM62V jH9+98vaUfm5ZO1JWYNDYoxZmJzU03nA2SCpZiPIdmLX5m3Bz/KQK/oS+cQ2r+mq aV42/o+nsqeYWwx7mhRchqeQaTgka/+GvB0qblxtUqn60zPEUCG+GZEI4t4L4FdG KppBMc/AyK++hZADA/5ElAJo/7lq2N71 -----END CERTIFICATE-----Generated at Wed Jul 2 20:09:39 2025 by rpki-client