$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json) Hash identifier: OcPH29YnEtsm7g+TlaBslTPlc1spjAxCS0Sy7J7cdgE= Subject key identifier: B6:48:96:FD:04:CE:51:07:6B:CC:D1:BC:59:D5:08:17:53:9E:A7:FC Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft Manifest number: 0199 Signing time: Tue 01 Jul 2025 03:46:50 +0000 Manifest this update: Tue 01 Jul 2025 03:46:50 +0000 Manifest next update: Tue 08 Jul 2025 03:46:50 +0000 Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: MzjOGp1ztngT38abq+WtvUNYjE6fRMY6AoIxJUfg6oE=) 2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: 0JcJhlyjlF7wNse9vwSRpqDIz9jgkXs09QG/XtA+FYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Validity Not Before: Jul 1 03:46:50 2025 GMT Not After : Jul 8 03:46:50 2025 GMT Subject: CN=68635a2a-6a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:2e:68:f5:e5:67:6c:61:4c:dc:21:42:8f: 06:ae:99:09:c5:4f:f0:f4:65:00:8b:b8:13:da:59: 78:bc:bf:53:85:67:4c:3d:4e:ea:17:02:3e:4d:58: 90:e0:b8:4d:c4:82:ed:5b:30:e5:c6:ee:3e:72:a2: b0:35:81:89:8e:25:85:8a:6e:de:e8:e0:63:84:de: ea:44:36:a2:03:a3:f1:42:0c:b6:d4:50:d8:5c:09: fb:b2:dc:a4:75:d0:db:34:72:27:84:b1:2a:3e:6c: 01:53:d6:c0:5a:31:dc:1c:ee:4d:8d:cc:e8:9e:7e: a1:d8:e1:5e:9f:49:91:92:f4:4f:65:a9:2b:9e:89: 7d:ee:9a:a1:83:f0:02:63:6b:02:66:26:f9:a5:66: ef:cb:b8:ed:68:95:36:1d:67:bd:61:25:5d:18:06: a3:01:59:13:fc:5e:5b:7b:ae:fc:42:9c:f3:4a:8d: 3b:c6:78:55:26:af:bc:37:73:53:6c:f3:bc:6f:e5: b8:4c:75:98:dc:9f:65:3b:32:6a:f9:fc:c1:b7:33: dc:64:cf:e3:fe:73:5e:65:d0:13:79:4a:49:56:f9: fa:a1:a1:5d:e4:95:47:ff:96:8c:d7:1d:9c:80:2b: 7a:ed:9d:70:c6:37:82:fe:cc:f8:72:a8:f1:d2:bb: d7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:48:96:FD:04:CE:51:07:6B:CC:D1:BC:59:D5:08:17:53:9E:A7:FC X509v3 Authority Key Identifier: keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:aa:b4:b3:1f:a2:a3:9e:c6:ff:97:fc:b9:b0:b1:65:99:89: a1:83:84:91:20:30:eb:50:5c:8b:c9:a4:8d:4b:86:98:78:7c: 91:54:93:6f:f5:a1:a5:39:f2:58:40:32:9c:eb:d0:94:05:21: be:4f:e8:4b:be:16:36:5b:52:a2:8b:d3:c4:c9:54:5a:69:e8: 30:50:87:9a:89:a0:b8:9c:3e:56:3b:84:9a:b9:74:f0:d9:29: 75:c9:54:45:e6:25:39:cb:e1:6b:cd:44:7e:57:6a:6f:6b:82: 0c:94:72:c5:c3:38:ad:53:f4:93:9d:12:6b:01:5f:bb:d8:9b: 73:13:71:a1:e6:06:0d:0a:95:18:f9:76:aa:3e:a9:9c:1f:75: 68:53:00:1f:07:53:6b:ef:ea:21:42:0a:47:1e:d9:88:18:b1: 32:01:62:f7:b2:60:48:90:80:b6:bf:94:8c:ed:f2:07:d6:c1: 27:89:61:94:ec:ee:43:3f:4d:e8:bb:e6:80:42:e7:9c:df:76: 4e:09:2e:73:90:6f:44:53:bd:ce:2d:43:6a:f7:cc:6d:15:73: ff:b3:0a:de:e1:51:8d:22:f9:c0:56:ac:04:ec:3a:63:34:bf: 41:f5:fc:45:16:50:7d:a4:3e:c3:13:c8:7a:17:58:38:c0:52: a4:90:d4:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3RDExMTAvBgNVBAUTKEM1QkQ4QTUwQ0FENUEwNUVGRTU3N0M0OUM0NzE0RTVE OUFCQjdGRUYwHhcNMjUwNzAxMDM0NjUwWhcNMjUwNzA4MDM0NjUwWjAYMRYwFAYD VQQDEw02ODYzNWEyYS02YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqF4uaPXlZ2xhTNwhQo8GrpkJxU/w9GUAi7gT2ll4vL9ThWdMPU7qFwI+TViQ 4LhNxILtWzDlxu4+cqKwNYGJjiWFim7e6OBjhN7qRDaiA6PxQgy21FDYXAn7styk ddDbNHInhLEqPmwBU9bAWjHcHO5Njczonn6h2OFen0mRkvRPZakrnol97pqhg/AC Y2sCZib5pWbvy7jtaJU2HWe9YSVdGAajAVkT/F5be678QpzzSo07xnhVJq+8N3NT bPO8b+W4THWY3J9lOzJq+fzBtzPcZM/j/nNeZdATeUpJVvn6oaFd5JVH/5aM1x2c gCt67Z1wxjeC/sz4cqjx0rvXEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZIlv0E zlEHa8zRvFnVCBdTnqf8MB8GA1UdIwQYMBaAFMW9ilDK1aBe/ld8ScRxTl2au3/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzdEMS8wNUE5OEYwRUUz QjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9GNy1WM3hKeEhGT1hacTdm LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiMktVTXJWb0Y3LVYzeEp4SEZPWFpxN2YtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzdEMS8wNUE5OEYwRUUzQjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9G Ny1WM3hKeEhGT1hacTdmLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6qrSzH6Kjnsb/l/y5sLFlmYmhg4SRIDDrUFyLyaSNS4aYeHyRVJNv 9aGlOfJYQDKc69CUBSG+T+hLvhY2W1Kii9PEyVRaaegwUIeaiaC4nD5WO4SauXTw 2Sl1yVRF5iU5y+FrzUR+V2pva4IMlHLFwzitU/STnRJrAV+72JtzE3Gh5gYNCpUY +XaqPqmcH3VoUwAfB1Nr7+ohQgpHHtmIGLEyAWL3smBIkIC2v5SM7fIH1sEniWGU 7O5DP03ou+aAQuec33ZOCS5zkG9EU73OLUNq98xtFXP/swre4VGNIvnAVqwE7Dpj NL9B9fxFFlB9pD7DE8h6F1g4wFKkkNQD -----END CERTIFICATE-----Generated at Thu Jul 3 03:49:39 2025 by rpki-client