$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: +x6xgKFkgdudcpWA5f8LBPz4NSoJHPEfYk5dSXiyv5U= Subject key identifier: 6D:65:0A:2C:66:13:8B:F1:DA:C9:E0:DA:90:A8:E1:61:79:3A:2B:68 Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 0562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 055D Signing time: Wed 02 Jul 2025 23:41:13 +0000 Manifest this update: Wed 02 Jul 2025 23:41:12 +0000 Manifest next update: Wed 09 Jul 2025 23:41:12 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: 5VOMIC4q81VGpLTcAO+tgdMSJ0qbLrKIUhXtMzGia0A=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: H5pjI/DUhiXyW6sQwhGG/wb5HeJLy8aTxQs1mqyRqSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1378 (0x562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: Jul 2 23:41:12 2025 GMT Not After : Jul 9 23:41:12 2025 GMT Subject: CN=6865c398-1ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:ee:d3:3f:37:63:d9:53:b4:77:28:f3:0d: 10:66:36:bb:56:43:0e:45:25:fc:18:ae:33:31:9f: 9a:12:df:b5:37:ae:05:34:78:60:5d:4c:e3:1d:bd: 4d:1b:ae:53:e9:52:f9:56:7f:6f:7b:40:b6:19:d6: 4d:2d:71:d7:80:ae:01:ee:d1:f5:ee:eb:9d:55:03: e0:32:d3:c9:16:5b:a1:40:0b:37:34:04:36:d9:07: 07:b1:52:01:ec:8d:af:48:11:27:44:1c:63:2b:98: 9d:b1:2d:fa:9c:0d:c1:41:9e:c7:a9:44:38:a1:39: 5e:d8:f1:00:1c:39:d0:be:23:b1:43:e4:a1:bd:19: fc:52:60:08:2a:b3:9c:a2:d6:a9:4c:30:45:4c:61: 1f:37:55:e1:81:e5:28:1e:03:b8:cc:d4:05:13:97: e1:10:9f:35:63:32:ef:a6:ea:80:53:f6:8d:b3:54: 14:61:df:ad:6f:29:4c:37:83:ed:f4:48:e5:7d:02: f3:34:71:6e:63:35:9e:61:83:8e:95:c6:84:1b:1e: 3b:42:69:7e:e3:90:ff:90:46:ec:db:02:e2:2d:69: 5f:fa:eb:e4:15:f9:27:a2:40:60:83:36:38:37:f0: f1:18:7e:b3:70:50:2e:6b:eb:1f:2c:41:4b:0f:58: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:65:0A:2C:66:13:8B:F1:DA:C9:E0:DA:90:A8:E1:61:79:3A:2B:68 X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1c:f6:07:d9:73:cd:67:13:a2:3e:26:98:87:f4:96:e9:ce: 35:2a:16:8a:f4:89:1d:3f:06:12:6c:cf:18:b3:8b:a3:f5:05: 51:08:73:32:34:33:1a:0e:64:78:34:b7:7b:98:0d:6b:01:fe: ef:43:20:a3:af:7b:d8:81:34:20:c6:73:49:06:2d:c6:6f:37: ef:32:f8:ce:95:94:87:f4:21:0d:8f:c4:9c:fc:2c:76:19:24: 2b:d9:ed:e5:bf:d0:26:fa:9e:96:a5:2f:b9:65:7a:93:cd:15: 9e:1e:21:09:1e:a3:9e:03:e4:eb:98:ad:da:ff:97:30:5b:82: 11:37:ba:ae:a4:d5:10:3e:4b:5a:84:aa:20:10:f4:ba:bb:56: a0:7c:7f:9f:eb:7c:92:4d:af:1f:44:29:69:8e:c2:c9:c1:b7: 50:05:c2:ac:8c:bb:ae:86:07:25:bd:d0:18:32:b4:4e:ed:da: b5:5b:ff:2e:b4:85:92:8f:f3:23:58:f7:2f:fe:5a:28:43:a8: b9:05:96:fa:48:4a:f8:c4:3f:1f:51:44:6d:6d:37:44:4c:7a: 16:ec:5d:7f:06:79:b6:45:07:68:f4:2b:c2:8a:22:aa:54:0c: a7:fb:da:a4:a7:2c:c8:8e:ac:0f:2b:59:11:0c:92:55:dd:67: 99:32:a0:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjUwNzAyMjM0MTEyWhcNMjUwNzA5MjM0MTEyWjAYMRYwFAYD VQQDEw02ODY1YzM5OC0xYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/Pu0z83Y9lTtHco8w0QZja7VkMORSX8GK4zMZ+aEt+1N64FNHhgXUzjHb1N G65T6VL5Vn9ve0C2GdZNLXHXgK4B7tH17uudVQPgMtPJFluhQAs3NAQ22QcHsVIB 7I2vSBEnRBxjK5idsS36nA3BQZ7HqUQ4oTle2PEAHDnQviOxQ+ShvRn8UmAIKrOc otapTDBFTGEfN1XhgeUoHgO4zNQFE5fhEJ81YzLvpuqAU/aNs1QUYd+tbylMN4Pt 9EjlfQLzNHFuYzWeYYOOlcaEGx47Qml+45D/kEbs2wLiLWlf+uvkFfknokBggzY4 N/DxGH6zcFAua+sfLEFLD1irAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1lCixm E4vx2sng2pCo4WF5OitoMB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+HPYH2XPNZxOiPiaYh/SW6c41KhaK9IkdPwYSbM8Ys4uj9QVRCHMy NDMaDmR4NLd7mA1rAf7vQyCjr3vYgTQgxnNJBi3GbzfvMvjOlZSH9CENj8Sc/Cx2 GSQr2e3lv9Am+p6WpS+5ZXqTzRWeHiEJHqOeA+TrmK3a/5cwW4IRN7qupNUQPkta hKogEPS6u1agfH+f63ySTa8fRClpjsLJwbdQBcKsjLuuhgclvdAYMrRO7dq1W/8u tIWSj/MjWPcv/looQ6i5BZb6SEr4xD8fUURtbTdETHoW7F1/Bnm2RQdo9CvCiiKq VAyn+9qkpyzIjqwPK1kRDJJV3WeZMqDF -----END CERTIFICATE-----Generated at Thu Jul 3 09:05:29 2025 by rpki-client