$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: gexnTLAlyaPndQUM93GyILHIIhRdxtivukUiYDBeatw= Subject key identifier: 1D:B9:AC:E0:1F:97:FE:78:98:B4:07:3F:21:F8:F2:59:A0:8B:D4:9F Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 0123 Signing time: Tue 01 Jul 2025 05:12:48 +0000 Manifest this update: Tue 01 Jul 2025 05:12:47 +0000 Manifest next update: Tue 08 Jul 2025 05:12:47 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: LFFfTYoFt9JEKVZEkHLW0DV23EFABx0DfiP2Il23qUQ=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: W3PBLvmUcdE3zAX7FZy5vyT9kW67f//Ujbv+JZHmvZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: Jul 1 05:12:47 2025 GMT Not After : Jul 8 05:12:47 2025 GMT Subject: CN=68636e50-7de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d1:dd:b4:0d:77:02:05:f0:a3:98:ea:4b:11: 03:f2:52:bf:27:73:38:d1:0d:df:b3:a3:5d:09:d6: 3b:19:4d:22:43:03:99:ae:26:14:60:41:b2:a3:4d: 7e:83:e1:67:16:54:f0:64:91:30:df:82:cd:f9:b0: 4d:37:99:90:84:17:ea:00:f7:f6:80:d7:73:f1:93: e3:a8:1c:c5:ad:60:4f:00:07:64:91:c2:da:93:fb: 9c:19:ec:f1:d0:da:6c:f8:66:1b:36:6a:ec:88:93: da:d8:3a:e4:3d:a9:5f:69:f6:ac:e3:4e:83:da:8e: e4:5d:9e:2a:f8:75:d8:b5:ff:9f:47:f0:7f:50:fa: 03:82:50:b9:e5:27:c9:98:0e:f1:47:93:36:0f:34: da:5e:65:ae:02:c6:2b:37:4c:f9:ad:e7:06:01:d4: 65:82:eb:ad:fc:7b:ab:9d:fb:35:b5:a1:b6:7c:09: 4a:4c:ce:30:6b:6f:9d:d2:df:46:39:03:72:6c:a4: 3e:70:38:ee:74:d1:0f:9e:ae:7d:d5:1d:77:fa:fe: 71:44:9e:c2:54:dc:80:5c:21:80:5a:da:47:f0:82: 56:59:9a:c5:6d:18:cf:75:78:d2:9c:90:cb:17:00: 54:91:2f:ae:b6:91:15:b5:20:f9:c9:9d:f9:00:ab: 04:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B9:AC:E0:1F:97:FE:78:98:B4:07:3F:21:F8:F2:59:A0:8B:D4:9F X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ae:b1:ad:9b:cb:be:93:bb:82:36:03:79:13:68:88:55:65: 61:c5:a8:86:f7:86:8d:ab:86:52:4a:b7:7f:11:6d:d6:87:5c: 12:1e:72:53:fd:6a:a7:10:d3:91:a7:41:56:16:01:70:a1:1a: 26:41:ea:36:5f:5d:80:57:33:0e:0a:61:1a:6c:22:5e:30:db: c1:50:f8:c0:05:69:3a:7c:76:c1:95:a8:3c:a9:c0:42:7f:d0: 37:60:8e:5d:fd:1a:68:33:57:3d:45:92:ec:23:f9:0f:87:d3: ca:1d:da:eb:b5:cc:68:49:64:c8:c3:cd:48:b0:c0:c4:59:c1: cd:68:93:dc:a6:7b:92:34:4d:cc:0e:0d:27:f5:0a:71:72:2c: f0:b5:8c:33:11:74:8a:7d:99:28:16:18:0e:05:32:2b:15:02: bb:2c:9b:34:8d:ea:63:5d:63:94:33:07:5f:85:45:3c:5a:be: 25:be:27:c7:38:fc:78:e8:61:fa:f8:e8:64:5e:0d:31:3b:3d: ae:d3:23:af:67:f9:aa:37:64:58:14:5e:f7:63:a0:f4:f3:c1: 83:e0:a7:26:e2:e2:20:64:92:88:fe:c6:eb:a2:38:ba:0f:36: 92:62:ed:2f:c6:9f:89:77:47:ad:2b:30:02:1f:ed:c0:c6:97: 45:b5:dc:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjUwNzAxMDUxMjQ3WhcNMjUwNzA4MDUxMjQ3WjAYMRYwFAYD VQQDEw02ODYzNmU1MC03ZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09HdtA13AgXwo5jqSxED8lK/J3M40Q3fs6NdCdY7GU0iQwOZriYUYEGyo01+ g+FnFlTwZJEw34LN+bBNN5mQhBfqAPf2gNdz8ZPjqBzFrWBPAAdkkcLak/ucGezx 0Nps+GYbNmrsiJPa2DrkPalfafas406D2o7kXZ4q+HXYtf+fR/B/UPoDglC55SfJ mA7xR5M2DzTaXmWuAsYrN0z5recGAdRlguut/Hurnfs1taG2fAlKTM4wa2+d0t9G OQNybKQ+cDjudNEPnq591R13+v5xRJ7CVNyAXCGAWtpH8IJWWZrFbRjPdXjSnJDL FwBUkS+utpEVtSD5yZ35AKsEiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB25rOAf l/54mLQHPyH48lmgi9SfMB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAirrGtm8u+k7uCNgN5E2iIVWVhxaiG94aNq4ZSSrd/EW3Wh1wSHnJT /WqnENORp0FWFgFwoRomQeo2X12AVzMOCmEabCJeMNvBUPjABWk6fHbBlag8qcBC f9A3YI5d/RpoM1c9RZLsI/kPh9PKHdrrtcxoSWTIw81IsMDEWcHNaJPcpnuSNE3M Dg0n9QpxcizwtYwzEXSKfZkoFhgOBTIrFQK7LJs0jepjXWOUMwdfhUU8Wr4lvifH OPx46GH6+OhkXg0xOz2u0yOvZ/mqN2RYFF73Y6D088GD4Kcm4uIgZJKI/sbroji6 DzaSYu0vxp+Jd0etKzACH+3AxpdFtdxb -----END CERTIFICATE-----Generated at Wed Jul 2 23:25:55 2025 by rpki-client