$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: FI7knh5qhYDK+SolQ52QuK+ZbAwaz/kXIS1IbYWn9tM= Subject key identifier: 81:A7:AA:CC:B7:73:63:06:AF:AA:DA:B3:B6:97:B4:E4:F3:C1:36:CB Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: 6B Signing time: Tue 01 Jul 2025 06:38:17 +0000 Manifest this update: Tue 01 Jul 2025 06:38:17 +0000 Manifest next update: Tue 08 Jul 2025 06:38:17 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: tvJn4SZqhGo9sqztog/q7f3oNt9yanw59u8zEc/6UCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Jul 1 06:38:17 2025 GMT Not After : Jul 8 06:38:17 2025 GMT Subject: CN=68638259-8ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:3b:3d:10:e5:af:e1:15:ac:0f:32:59:9e: 5a:e1:0e:c8:31:d1:f4:91:31:82:3d:c2:2a:ce:85: 1a:fc:40:3b:d7:28:c9:1c:e9:7d:b0:18:8a:a4:bf: a9:7b:9f:c5:c8:d8:00:c1:26:75:70:b3:f0:83:4e: e8:e0:66:15:84:1c:7d:89:4d:6d:d8:0e:cf:36:47: 48:bd:66:14:ff:83:e7:a7:f0:2c:3d:71:97:a1:38: 65:b0:66:3a:da:1b:de:4a:12:aa:3a:2d:30:60:0c: 45:68:63:4f:fd:69:a1:4c:b9:32:9b:6a:70:20:9f: 27:e0:95:e5:9e:15:61:f3:79:78:3f:69:1f:10:21: f0:b7:c7:ae:02:c2:51:93:a1:61:98:db:af:5d:9e: 04:ed:f0:75:e6:d5:92:f0:eb:6f:eb:98:d3:84:b0: 64:16:2c:cf:08:3e:57:ff:05:e0:fb:2c:3f:a0:b2: 42:16:01:fe:1b:11:c9:32:bc:63:b5:7e:2d:33:88: 33:77:09:53:99:76:f5:eb:35:11:97:2a:7b:45:b6: 33:34:72:fc:f6:ac:15:ce:cb:bd:c8:bd:0c:19:13: a6:e4:a3:e1:ed:46:ed:ab:3c:7f:19:e5:01:50:20: c5:5a:51:c0:92:b8:8e:77:a4:1a:48:d2:59:d4:13: 66:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A7:AA:CC:B7:73:63:06:AF:AA:DA:B3:B6:97:B4:E4:F3:C1:36:CB X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e5:9e:4f:be:e8:ec:34:12:61:77:70:d6:8d:3b:10:e4:4c: 3f:8e:27:94:a9:34:a8:ab:37:26:b7:0a:22:1f:1f:d2:0c:ec: e1:34:ef:ac:cd:0a:a6:cd:1e:cc:69:d4:01:ee:3e:86:28:69: d4:85:f9:9a:20:9b:73:40:45:4b:a2:bb:5e:eb:20:0f:a8:7e: a4:91:90:e4:98:41:f4:da:2e:38:36:a1:77:31:60:ac:4f:3f: 23:7f:52:88:74:f8:2d:40:64:13:a3:55:7f:a6:73:b2:3e:fd: 5a:3e:f1:8d:3e:a0:7d:d9:8c:b8:79:7c:e1:66:40:47:b8:b4: a6:ab:cc:90:25:d8:55:b3:c2:87:ae:f9:b7:2b:1e:fa:a3:70: 55:f0:e6:50:f6:33:e5:9e:7b:01:d6:ae:ff:52:9f:dc:9c:f7: 30:cc:99:47:64:ae:d1:4e:1a:86:31:75:a9:d2:ea:a7:c6:d7: dc:8b:b6:d5:c9:4a:5a:d6:d5:00:99:3d:60:04:b9:0d:13:43: 3f:ea:ae:7a:04:89:00:fc:d8:8a:85:ba:c2:8f:66:b8:a2:8b: e9:63:eb:00:dd:28:97:2d:7a:bf:b4:82:12:b6:10:52:d9:f4: a7:10:fc:74:c2:21:10:75:e2:83:fd:03:b1:9d:cd:05:87:e5: 94:c4:15:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDg1NTExMC8GA1UEBRMoNUVGNUUxQTU4NUM0OEUyQkM0NTBCQTcyRjRDMzEzNDY4 MEU1MkIwRDAeFw0yNTA3MDEwNjM4MTdaFw0yNTA3MDgwNjM4MTdaMBgxFjAUBgNV BAMTDTY4NjM4MjU5LThhZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB6Ds9EOWv4RWsDzJZnlrhDsgx0fSRMYI9wirOhRr8QDvXKMkc6X2wGIqkv6l7 n8XI2ADBJnVws/CDTujgZhWEHH2JTW3YDs82R0i9ZhT/g+en8Cw9cZehOGWwZjra G95KEqo6LTBgDEVoY0/9aaFMuTKbanAgnyfgleWeFWHzeXg/aR8QIfC3x64CwlGT oWGY269dngTt8HXm1ZLw62/rmNOEsGQWLM8IPlf/BeD7LD+gskIWAf4bEckyvGO1 fi0ziDN3CVOZdvXrNRGXKntFtjM0cvz2rBXOy73IvQwZE6bko+HtRu2rPH8Z5QFQ IMVaUcCSuI53pBpI0lnUE2YxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgaeqzLdz Ywavqtqztpe05PPBNsswHwYDVR0jBBgwFoAUXvXhpYXEjivEULpy9MMTRoDlKw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwODU1L0UxQUU1NDdDQjEz ODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHZYaHBZWEVqaXZFVUxweTlNTVRSb0RsS3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw ODU1L0UxQUU1NDdDQjEzODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2 RVVMcHk5TU1UUm9EbEt3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGTlnk++6Ow0EmF3cNaNOxDkTD+OJ5SpNKirNya3CiIfH9IM7OE076zN CqbNHsxp1AHuPoYoadSF+Zogm3NARUuiu17rIA+ofqSRkOSYQfTaLjg2oXcxYKxP PyN/Uoh0+C1AZBOjVX+mc7I+/Vo+8Y0+oH3ZjLh5fOFmQEe4tKarzJAl2FWzwoeu +bcrHvqjcFXw5lD2M+WeewHWrv9Sn9yc9zDMmUdkrtFOGoYxdanS6qfG19yLttXJ SlrW1QCZPWAEuQ0TQz/qrnoEiQD82IqFusKPZriii+lj6wDdKJcter+0ghK2EFLZ 9KcQ/HTCIRB14oP9A7GdzQWH5ZTEFQM= -----END CERTIFICATE-----Generated at Thu Jul 3 06:33:32 2025 by rpki-client