$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft File: 10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json) Hash identifier: UDIOr8X0G4pXES2PSORyfoCKNKPCn5e1FLflyJXCkPk= Subject key identifier: F8:8C:D5:7C:40:90:80:A7:B9:B7:78:11:C3:04:0D:AD:6C:1C:B5:28 Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft Manifest number: 0164 Signing time: Thu 03 Jul 2025 04:04:47 +0000 Manifest this update: Thu 03 Jul 2025 04:04:47 +0000 Manifest next update: Thu 10 Jul 2025 04:04:47 +0000 Files and hashes: 1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: BOY1eshiZC+alYpWqtFoRwJEnHoIZoViM6ueLehGngQ=) 2: 12DD779467A211EEA8239268C4F9AE02.roa (hash: 7lqdZ2FcePrtK+ORkGuFUebt7bprHrcQU1BOkcrtW3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Validity Not Before: Jul 3 04:04:47 2025 GMT Not After : Jul 10 04:04:47 2025 GMT Subject: CN=6866015f-5b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:94:ba:3e:30:40:b8:2f:01:4f:8a:f6:df: b0:20:09:cd:44:c7:29:3d:cf:a6:60:e8:b4:de:8c: e1:3f:01:fc:27:b9:4d:fb:bd:5e:9d:45:6d:f3:6e: 4c:51:5e:29:61:2b:98:0f:7a:c2:85:fa:07:e7:36: 1f:63:af:57:63:01:50:14:83:46:47:a7:30:26:64: 7a:3e:23:9a:cb:ac:a1:b3:50:7b:61:02:6a:6c:66: a5:ea:0d:cc:3f:cd:93:62:f7:5c:c3:c9:c4:42:bf: 45:17:12:fa:89:32:a9:f8:64:55:80:fe:d7:77:48: 20:39:d6:b1:a2:81:0c:6c:13:73:06:ca:ba:da:e9: 50:e5:9a:f0:da:c7:75:39:7a:dd:8f:c6:3d:67:cf: 6d:c0:42:75:37:57:3d:5e:32:6c:4d:8c:3f:5e:18: 56:42:02:77:1b:01:15:10:28:86:09:21:24:d1:10: 74:d5:2e:2a:01:48:8f:b7:e9:99:78:46:a5:07:18: aa:55:0f:47:8e:be:e5:16:e0:bb:4f:08:1f:52:ae: bb:e9:a9:a6:80:5e:d3:2d:84:65:e8:54:02:00:b1: 7b:56:42:c1:ee:a4:08:e1:f0:50:28:2a:67:35:8e: bf:1b:c1:c0:e8:a3:89:8e:28:5d:1e:72:62:5c:07: a1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8C:D5:7C:40:90:80:A7:B9:B7:78:11:C3:04:0D:AD:6C:1C:B5:28 X509v3 Authority Key Identifier: keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f9:c7:c6:e9:3a:99:f9:f1:07:ae:11:49:0f:39:4e:eb:54: 7a:37:ee:3c:94:70:39:ec:a6:ca:0c:b3:ca:f7:01:4f:00:b1: 0c:f1:e3:47:dc:35:ca:cc:ba:e2:06:38:38:71:08:11:a0:af: 89:2c:ea:72:ad:1f:e4:3b:7a:48:9b:b3:61:db:8e:4c:c8:52: 85:19:42:00:56:55:5b:a7:ef:82:e8:25:4a:e9:15:96:c5:6a: 95:50:51:89:0c:e0:c0:1d:76:7f:a7:44:52:a2:f0:99:cc:74: 35:e2:ab:f0:40:9a:b0:f1:0d:39:63:d7:7c:82:ad:bd:2f:0d: 4d:7d:33:62:c7:0b:9f:cf:d3:fa:59:45:61:fd:6c:80:59:f0: 43:46:2b:79:7b:12:26:90:0f:8d:3f:e4:d1:56:0b:ab:c7:b0: 47:1f:37:1d:8f:33:6d:d4:f3:8f:8a:6a:c6:46:f3:7d:30:95: aa:d5:77:03:99:a9:b2:94:ef:eb:c2:3e:56:c3:d4:d8:1e:33: 2b:61:5e:8e:22:d6:e7:a4:a9:47:9b:b7:30:61:07:7e:9c:01: a9:53:21:04:cd:ee:09:b3:70:4a:0b:ac:08:20:02:08:38:54: d7:9c:8d:f6:c7:bb:3d:7b:b3:f2:d4:bb:e0:dc:9a:fc:62:c7: ee:06:79:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3QzQxMTAvBgNVBAUTKEQ3NDVFMUM4NkIxODE4RjdEMDU2M0Y5MEU4QkExMkJF OEIxQUUzNzgwHhcNMjUwNzAzMDQwNDQ3WhcNMjUwNzEwMDQwNDQ3WjAYMRYwFAYD VQQDEw02ODY2MDE1Zi01YjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjaUuj4wQLgvAU+K9t+wIAnNRMcpPc+mYOi03ozhPwH8J7lN+71enUVt825M UV4pYSuYD3rChfoH5zYfY69XYwFQFINGR6cwJmR6PiOay6yhs1B7YQJqbGal6g3M P82TYvdcw8nEQr9FFxL6iTKp+GRVgP7Xd0ggOdaxooEMbBNzBsq62ulQ5Zrw2sd1 OXrdj8Y9Z89twEJ1N1c9XjJsTYw/XhhWQgJ3GwEVECiGCSEk0RB01S4qAUiPt+mZ eEalBxiqVQ9Hjr7lFuC7TwgfUq676ammgF7TLYRl6FQCALF7VkLB7qQI4fBQKCpn NY6/G8HA6KOJjihdHnJiXAehmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiM1XxA kICnubd4EcMEDa1sHLUoMB8GA1UdIwQYMBaAFNdF4chrGBj30FY/kOi6Er6LGuN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTdDNC9DNjNERjIwMDND NjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQZlFWai1RNkxvU3Zvc2E0 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwWGh5R3NZR1BmUVZqLVE2TG9Tdm9zYTQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTdDNC9DNjNERjIwMDNDNjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQ ZlFWai1RNkxvU3Zvc2E0M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA++cfG6TqZ+fEHrhFJDzlO61R6N+48lHA57KbKDLPK9wFPALEM8eNH 3DXKzLriBjg4cQgRoK+JLOpyrR/kO3pIm7Nh245MyFKFGUIAVlVbp++C6CVK6RWW xWqVUFGJDODAHXZ/p0RSovCZzHQ14qvwQJqw8Q05Y9d8gq29Lw1NfTNixwufz9P6 WUVh/WyAWfBDRit5exImkA+NP+TRVgurx7BHHzcdjzNt1POPimrGRvN9MJWq1XcD mamylO/rwj5Ww9TYHjMrYV6OItbnpKlHm7cwYQd+nAGpUyEEze4Js3BKC6wIIAII OFTXnI32x7s9e7Py1Lvg3Jr8YsfuBnmX -----END CERTIFICATE-----Generated at Fri Jul 4 17:40:20 2025 by rpki-client