$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: tpYjXoBpLM1GepCdV/t8NJ1Dyoyiu4VT030g+qrH4Os= Subject key identifier: 69:42:44:5F:81:BC:26:D5:F8:64:BE:F9:CD:97:CC:D1:C0:E2:30:D7 Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0AE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0AC2 Signing time: Wed 02 Jul 2025 19:46:38 +0000 Manifest this update: Wed 02 Jul 2025 19:46:37 +0000 Manifest next update: Wed 09 Jul 2025 19:46:37 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: Gu/bjkJX99c32DMx9C2nWntzB0txxWvIBxS1rZJixd8=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2792 (0xae8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Jul 2 19:46:37 2025 GMT Not After : Jul 9 19:46:37 2025 GMT Subject: CN=68658c9d-3673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:bc:ab:7a:dc:00:0b:57:0c:95:37:da:12: 4d:42:45:02:46:b1:c0:5c:db:e8:60:c9:31:9d:a7: f3:f0:db:d7:42:6c:87:a7:56:eb:0c:51:95:7e:66: b5:0e:d6:7b:5e:a4:58:56:a4:06:1d:02:6d:40:b9: 3b:37:62:9b:d5:49:46:9b:8e:5c:5c:88:41:e1:fb: 8c:10:56:5b:8f:0b:54:4d:f2:0c:d3:bd:7f:33:34: fb:a9:5e:c1:12:4a:de:3c:7e:27:02:e0:ad:cb:a8: 21:15:a2:8d:5b:ff:3f:95:fb:40:35:c7:9e:ba:70: 21:22:03:27:aa:ee:dd:9a:c2:ac:57:38:61:eb:b4: c6:1d:19:7e:87:90:e9:bf:d4:a7:ee:54:21:38:70: c2:f2:18:eb:84:e4:db:d5:9f:a8:ba:af:de:da:76: 84:4e:97:f4:31:02:33:0b:2f:a5:24:8b:ba:96:94: f9:bc:3a:e5:bd:57:ca:97:cc:9f:6b:d3:2e:92:0f: 86:08:58:cd:e6:cc:df:2e:9f:8d:aa:99:69:47:33: 36:ac:06:ce:3c:5a:37:39:d3:e0:86:84:f6:9d:a4: 0d:26:45:85:50:0f:8b:85:21:1c:60:44:1b:f4:b0: 93:9d:8b:cf:e9:dd:e7:ab:01:93:76:81:fb:05:bc: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:42:44:5F:81:BC:26:D5:F8:64:BE:F9:CD:97:CC:D1:C0:E2:30:D7 X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:88:04:bf:22:66:b9:b1:cc:74:1e:c6:c1:35:04:e6:f5:db: 2e:9c:e1:eb:2a:ac:f3:81:fa:2a:7e:dc:fb:f7:50:42:92:3a: 30:ab:fa:d6:c0:53:9f:be:40:87:38:d0:a3:0f:df:30:8a:45: 44:15:ac:56:c5:02:a4:1a:e8:a7:13:24:2d:04:91:07:9c:e7: 55:6e:7a:c6:3d:81:e5:d5:cc:6a:3c:2a:b5:9c:da:77:8a:69: 20:79:23:5f:17:72:38:f5:eb:5b:d5:07:71:99:93:8c:1c:02: a0:73:46:8a:49:9f:5a:f5:93:0c:6e:b1:45:1b:a4:75:78:f2: ac:38:49:3c:f8:10:5d:c3:d7:e5:6d:75:0e:b0:40:c7:3f:76: 92:02:06:b0:21:79:ed:4c:ca:27:da:a7:23:2e:c3:46:78:04: 4a:58:73:3f:8e:d7:ac:d8:10:0e:7a:27:30:6c:2e:14:fd:45: 29:a8:69:22:d4:42:33:a3:3e:44:63:4c:ed:35:33:6c:f7:2b: 7c:cd:21:07:0c:a5:54:98:92:a8:5d:c6:f6:b6:a1:99:09:3f: ee:64:cb:f9:bc:e0:f8:37:cb:15:62:5e:eb:a1:45:e1:bc:cf: 4d:da:cb:4d:eb:a5:ed:d0:51:9a:0d:18:97:a0:b8:f3:11:76: 73:b6:66:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjUwNzAyMTk0NjM3WhcNMjUwNzA5MTk0NjM3WjAYMRYwFAYD VQQDEw02ODY1OGM5ZC0zNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyy8q3rcAAtXDJU32hJNQkUCRrHAXNvoYMkxnafz8NvXQmyHp1brDFGVfma1 DtZ7XqRYVqQGHQJtQLk7N2Kb1UlGm45cXIhB4fuMEFZbjwtUTfIM071/MzT7qV7B EkrePH4nAuCty6ghFaKNW/8/lftANceeunAhIgMnqu7dmsKsVzhh67TGHRl+h5Dp v9Sn7lQhOHDC8hjrhOTb1Z+ouq/e2naETpf0MQIzCy+lJIu6lpT5vDrlvVfKl8yf a9Mukg+GCFjN5szfLp+NqplpRzM2rAbOPFo3OdPghoT2naQNJkWFUA+LhSEcYEQb 9LCTnYvP6d3nqwGTdoH7BbzWOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlCRF+B vCbV+GS++c2XzNHA4jDXMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4iAS/Ima5scx0HsbBNQTm9dsunOHrKqzzgfoqftz791BCkjowq/rW wFOfvkCHONCjD98wikVEFaxWxQKkGuinEyQtBJEHnOdVbnrGPYHl1cxqPCq1nNp3 imkgeSNfF3I49etb1QdxmZOMHAKgc0aKSZ9a9ZMMbrFFG6R1ePKsOEk8+BBdw9fl bXUOsEDHP3aSAgawIXntTMon2qcjLsNGeARKWHM/jtes2BAOeicwbC4U/UUpqGki 1EIzoz5EY0ztNTNs9yt8zSEHDKVUmJKoXcb2tqGZCT/uZMv5vOD4N8sVYl7roUXh vM9N2stN66Xt0FGaDRiXoLjzEXZztmax -----END CERTIFICATE-----Generated at Thu Jul 3 20:34:27 2025 by rpki-client