$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: aUY24M2N5enxHINJXGTMjWUwERE5YSur41rWSmp0th0= Subject key identifier: CD:6E:52:65:3F:1A:EA:00:BF:CE:B9:89:5C:DB:27:C2:B0:D5:7E:72 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F22 Signing time: Wed 02 Jul 2025 16:08:28 +0000 Manifest this update: Wed 02 Jul 2025 16:08:28 +0000 Manifest next update: Wed 09 Jul 2025 16:08:28 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: 65y6T1FKWEgqax9nd1AbzQ5M05NR7XZzFlD63i/avWo=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: GAb6VP25Sih6kuMJl/07aQz0S9qS9uziUSigVGvFQjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7982 (0x1f2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Jul 2 16:08:28 2025 GMT Not After : Jul 9 16:08:28 2025 GMT Subject: CN=6865597c-881f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6a:5e:b1:1f:13:c6:d3:43:5a:0d:f0:84:e2: de:22:f5:fb:30:ab:91:ff:0a:83:52:d6:a1:3e:03: 44:ca:b5:61:e7:1a:69:48:5f:d1:dd:a1:d2:88:66: 80:c8:dc:09:f6:b7:de:40:23:39:77:2d:31:43:09: 8b:7b:4d:d4:81:37:f4:43:ad:17:4c:50:9f:e0:e5: 37:96:1a:32:1c:60:30:52:b7:96:6c:9c:48:00:7b: 72:82:68:45:75:5e:5e:18:3b:85:16:97:77:ed:ab: 4f:b4:2e:2c:65:27:83:09:4b:7d:c3:a6:b6:33:c4: 73:c0:ed:b3:52:0a:fa:ed:8b:a8:fc:11:30:c0:5a: 1a:32:d1:7a:7c:b7:9c:a9:a4:3c:b9:4f:98:e4:89: 6b:13:9b:bc:0a:5d:b6:82:8b:67:24:cd:10:7c:bd: bb:5a:48:70:9f:f5:b4:3c:25:b4:9c:20:b2:91:99: 74:30:71:0f:8e:be:0e:21:a1:50:21:a7:73:89:2a: 11:70:ca:1e:0a:61:0a:95:3a:d2:6a:02:f5:fe:3a: ec:f0:34:f6:ff:52:1d:f5:53:b8:5f:35:30:c6:7c: 2f:d6:93:58:c2:a3:78:20:07:73:a1:f6:04:1c:92: 38:bb:1a:34:e1:24:bb:69:41:e8:18:a6:23:d1:35: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6E:52:65:3F:1A:EA:00:BF:CE:B9:89:5C:DB:27:C2:B0:D5:7E:72 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c7:d4:24:63:ab:df:c7:17:cd:16:5d:17:21:1d:c3:a6:38: 0b:e8:dd:2e:6f:94:63:d7:19:b9:56:69:66:7d:12:d4:1e:e6: 67:66:88:06:54:44:41:77:9c:67:28:a6:83:69:8d:04:1f:86: 9d:7e:e1:8a:f7:f8:b8:f3:98:0b:b9:8c:dd:bb:b1:51:82:88: f8:f7:d8:2c:ff:3f:16:4f:3d:14:d4:c2:08:d5:35:aa:67:b2: 07:12:64:06:43:fe:8a:5e:a2:f8:ec:c5:21:a2:2a:56:1a:33: 27:7a:2a:9a:d5:3d:35:d4:f4:a5:c5:ae:d4:a9:d9:18:3d:48: f5:bc:83:d7:5c:df:58:13:f8:3d:7b:13:24:61:04:b5:93:a1: b5:11:02:c8:07:16:44:cc:8b:f9:a3:bc:11:25:2b:40:97:e2: c0:de:71:41:a8:4e:65:a2:9d:03:d4:4b:94:ab:1a:1b:f7:f7: df:96:a1:30:8e:9f:d2:c8:91:f8:6e:fa:27:e9:2d:2d:be:ab: ee:46:8b:91:14:f3:e9:07:77:1d:4b:89:18:53:f9:b2:71:3c: 14:b6:64:42:b9:01:33:ad:b3:34:17:ce:ae:be:fa:d0:f5:22: f7:76:84:37:f0:f4:be:76:66:1c:53:76:e7:53:ed:a4:ee:72: 47:0c:4c:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjUwNzAyMTYwODI4WhcNMjUwNzA5MTYwODI4WjAYMRYwFAYD VQQDEw02ODY1NTk3Yy04ODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGpesR8TxtNDWg3whOLeIvX7MKuR/wqDUtahPgNEyrVh5xppSF/R3aHSiGaA yNwJ9rfeQCM5dy0xQwmLe03UgTf0Q60XTFCf4OU3lhoyHGAwUreWbJxIAHtygmhF dV5eGDuFFpd37atPtC4sZSeDCUt9w6a2M8RzwO2zUgr67Yuo/BEwwFoaMtF6fLec qaQ8uU+Y5IlrE5u8Cl22gotnJM0QfL27Wkhwn/W0PCW0nCCykZl0MHEPjr4OIaFQ IadziSoRcMoeCmEKlTrSagL1/jrs8DT2/1Id9VO4XzUwxnwv1pNYwqN4IAdzofYE HJI4uxo04SS7aUHoGKYj0TWolwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1uUmU/ GuoAv865iVzbJ8Kw1X5yMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKx9QkY6vfxxfNFl0XIR3DpjgL6N0ub5Rj1xm5VmlmfRLUHuZnZogG VERBd5xnKKaDaY0EH4adfuGK9/i485gLuYzdu7FRgoj499gs/z8WTz0U1MII1TWq Z7IHEmQGQ/6KXqL47MUhoipWGjMneiqa1T011PSlxa7UqdkYPUj1vIPXXN9YE/g9 exMkYQS1k6G1EQLIBxZEzIv5o7wRJStAl+LA3nFBqE5lop0D1EuUqxob9/fflqEw jp/SyJH4bvon6S0tvqvuRouRFPPpB3cdS4kYU/mycTwUtmRCuQEzrbM0F86uvvrQ 9SL3doQ38PS+dmYcU3bnU+2k7nJHDEyj -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:09 2025 by rpki-client