$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: Ni31+4AJM4rcLZV1KE+TNXTh2NdqAlUIuJayFRbzTIw= Subject key identifier: 88:09:9B:59:03:84:9A:F4:5C:4E:32:0D:61:3D:F4:EA:ED:CA:04:0E Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 0130 Signing time: Thu 03 Jul 2025 04:47:52 +0000 Manifest this update: Thu 03 Jul 2025 04:47:51 +0000 Manifest next update: Thu 10 Jul 2025 04:47:51 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: Ku3WN8Lh8EIBNDP34T5aSkGs0P7m5UDAxB9goVGe3NU=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Jul 3 04:47:51 2025 GMT Not After : Jul 10 04:47:51 2025 GMT Subject: CN=68660b77-7e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:1e:a6:a8:57:82:50:4a:ec:da:1f:8b:c1: 69:01:fb:9c:54:84:63:a2:ea:4f:4d:62:84:30:51: 8a:49:e1:e5:61:d4:0f:e1:61:da:bb:a0:28:a6:ff: 3d:db:3a:fc:61:89:3c:5c:e0:a3:2b:f3:23:b6:f0: 62:d0:0b:bc:08:46:73:9c:8f:db:c0:7c:e5:83:c8: 42:b6:a6:76:cd:04:4c:a2:9c:10:20:5c:e9:38:9d: 5a:04:98:90:51:d9:34:37:4e:7e:8f:c8:d1:0f:32: 4f:3f:59:3c:57:b2:70:b6:19:89:f9:6c:78:93:9a: 6e:b9:e6:86:43:b3:1c:89:e0:1a:cd:58:0b:8f:cb: d2:05:42:86:32:4a:56:a2:f8:a3:20:1a:5b:a3:ec: 76:a4:3e:b0:8c:b5:db:62:eb:c3:17:16:37:e0:2f: 64:49:5e:75:58:36:6a:d2:61:17:43:5f:af:c6:04: ae:79:96:62:b6:08:d1:d9:20:ec:5e:a7:ca:a3:ab: aa:d6:78:df:98:2e:9e:d1:16:49:63:d9:af:c1:c0: 19:cd:6d:20:ff:ba:ea:4d:b3:db:f0:17:5d:cc:20: 93:6f:70:60:ef:33:65:e8:5a:fc:aa:7c:54:33:dc: 80:b9:a6:80:b0:9f:1a:ae:ce:bf:b0:56:9a:fa:2d: c1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:09:9B:59:03:84:9A:F4:5C:4E:32:0D:61:3D:F4:EA:ED:CA:04:0E X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fc:22:0b:da:a9:c7:fb:a4:a8:69:6a:38:96:64:d1:90:9c: c1:77:36:c3:70:02:d6:ea:bd:00:43:8d:73:4d:17:e7:48:fc: 45:a4:cf:33:e2:b5:9d:05:f8:86:8a:0f:a3:74:f0:48:44:85: 83:fe:8c:41:36:63:5d:0f:92:99:82:f8:e5:ba:ed:77:ec:d6: 37:c5:02:6b:92:b2:91:c5:39:42:d2:58:31:cc:a4:5b:8b:8c: 9a:b9:1d:a7:75:e4:c3:e9:24:1a:93:43:f9:8c:bd:2a:b6:a6: d5:fd:47:a6:2f:ef:ce:a3:57:d2:f1:8b:4e:75:e3:46:cf:8d: 38:6f:76:75:ee:53:4b:4f:b3:44:fd:e7:f4:19:51:60:f1:72: 1b:76:ad:ae:fe:0c:86:5d:f1:26:43:11:fe:92:29:e2:be:04: 52:f4:74:6c:bc:48:fc:e6:93:ca:31:6c:6c:ff:da:b5:68:78: 4f:f0:03:9f:9a:27:06:3e:93:ef:d6:e5:9a:29:94:4f:16:d4: 88:3d:d9:f7:89:3c:db:18:35:49:80:a9:93:55:01:55:a1:93: 01:27:ad:67:c8:66:a3:fe:16:21:48:fb:12:51:4c:35:2e:3b: 70:29:67:c9:04:ad:98:4f:1c:ef:f1:ba:c5:13:20:ab:f8:22: 0d:3d:91:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUwNzAzMDQ0NzUxWhcNMjUwNzEwMDQ0NzUxWjAYMRYwFAYD VQQDEw02ODY2MGI3Ny03ZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4YepqhXglBK7Nofi8FpAfucVIRjoupPTWKEMFGKSeHlYdQP4WHau6Aopv89 2zr8YYk8XOCjK/MjtvBi0Au8CEZznI/bwHzlg8hCtqZ2zQRMopwQIFzpOJ1aBJiQ Udk0N05+j8jRDzJPP1k8V7JwthmJ+Wx4k5puueaGQ7McieAazVgLj8vSBUKGMkpW ovijIBpbo+x2pD6wjLXbYuvDFxY34C9kSV51WDZq0mEXQ1+vxgSueZZitgjR2SDs XqfKo6uq1njfmC6e0RZJY9mvwcAZzW0g/7rqTbPb8BddzCCTb3Bg7zNl6Fr8qnxU M9yAuaaAsJ8ars6/sFaa+i3BLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgJm1kD hJr0XE4yDWE99OrtygQOMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc/CIL2qnH+6SoaWo4lmTRkJzBdzbDcALW6r0AQ41zTRfnSPxFpM8z 4rWdBfiGig+jdPBIRIWD/oxBNmNdD5KZgvjluu137NY3xQJrkrKRxTlC0lgxzKRb i4yauR2ndeTD6SQak0P5jL0qtqbV/UemL+/Oo1fS8YtOdeNGz404b3Z17lNLT7NE /ef0GVFg8XIbdq2u/gyGXfEmQxH+kinivgRS9HRsvEj85pPKMWxs/9q1aHhP8AOf micGPpPv1uWaKZRPFtSIPdn3iTzbGDVJgKmTVQFVoZMBJ61nyGaj/hYhSPsSUUw1 LjtwKWfJBK2YTxzv8brFEyCr+CINPZEA -----END CERTIFICATE-----Generated at Thu Jul 3 21:54:42 2025 by rpki-client