$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: odEiKPOCXsarFAcB4GP6Iecr4ohSl8eolG5+HxXH7Ho= Subject key identifier: 3D:5D:18:0D:86:FE:03:84:24:8B:2B:81:B7:11:E3:C4:B5:91:F8:A3 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: C2 Signing time: Thu 03 Jul 2025 06:01:55 +0000 Manifest this update: Thu 03 Jul 2025 06:01:55 +0000 Manifest next update: Thu 10 Jul 2025 06:01:55 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: vWSjcfVknndJhfh5KdV0l8Kbkiq4PDkHBjvWN5zhVM8=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Jul 3 06:01:55 2025 GMT Not After : Jul 10 06:01:55 2025 GMT Subject: CN=68661cd3-cbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:9c:aa:cd:ad:e1:60:06:6c:21:b3:b2:46: 28:05:29:f4:ca:78:47:66:a3:49:47:c2:60:3b:75: 2a:1e:fd:bc:c2:1a:ed:72:fa:fb:de:73:f0:52:3d: 44:a3:aa:a7:53:7b:8f:e8:3e:62:90:ba:8d:49:39: e0:0e:5d:35:41:a4:23:54:3f:0f:64:91:d5:de:c0: ea:63:50:46:11:3e:f3:38:fe:41:f6:5a:38:b0:51: e6:e6:72:3a:b9:4a:fe:5c:0f:fe:58:c5:72:49:a6: 6d:bc:dd:b9:80:2f:d7:a6:40:10:32:fe:55:dd:04: 8b:2d:84:6e:4d:0f:a5:12:18:4d:2a:d0:f3:f5:6a: 53:b1:2b:e4:f2:7b:4b:5e:3f:3b:94:e7:e0:16:49: 35:06:02:c8:10:01:15:1a:fc:f9:83:a0:4d:8b:b2: 7b:1b:04:30:4e:66:2f:99:89:fc:94:f3:c1:37:d4: 6e:9d:12:c9:83:c5:5c:a3:eb:7c:95:49:8a:9a:b9: 29:23:96:fe:83:9f:49:21:bf:77:0c:53:7a:f8:c5: 0a:cf:23:6b:4c:00:88:99:88:56:a2:ed:ea:1a:51: f2:33:21:a2:1e:cb:16:6e:b3:75:33:be:87:85:3c: e9:47:89:74:04:48:70:5b:97:7c:c3:e3:90:b1:25: b4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5D:18:0D:86:FE:03:84:24:8B:2B:81:B7:11:E3:C4:B5:91:F8:A3 X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:e4:03:55:0a:64:12:c6:4a:42:07:21:38:e6:6c:55:82:b6: 24:7e:b5:5f:e5:31:f2:cb:33:65:67:bb:db:9f:5b:6e:86:4e: 6a:b3:21:03:f1:2b:61:8a:1f:eb:24:68:5e:61:a8:a1:c4:84: e5:3c:3f:0d:5b:e8:2f:72:bf:c8:bd:d9:74:fc:27:94:88:b2: 88:c5:5e:ec:6b:4e:04:b9:37:39:6d:3e:51:cd:5b:79:c3:50: ae:ca:c6:89:39:95:49:64:c2:33:e5:63:81:31:41:8b:72:4b: 18:79:62:8d:2c:82:af:44:f3:e9:65:78:85:d3:1f:da:51:10: ce:1a:af:dd:22:4a:d9:de:5a:26:af:ad:35:6b:0c:65:f6:98: bb:96:22:ee:38:eb:b1:64:b9:31:5a:88:a3:b4:7c:8a:72:ea: fa:5d:97:84:c5:e6:e4:05:b9:d3:f9:db:ad:f7:e4:72:e9:8a: a1:57:d0:ab:af:de:4d:69:60:fc:c9:da:ba:81:74:a1:21:47: 44:53:0d:5a:1b:13:05:f4:34:f3:34:a5:03:42:b7:31:0e:fc: de:b8:d0:1a:4e:0b:4a:08:d2:1b:93:5f:34:8f:03:15:c8:3f: 6e:87:6a:78:55:5e:26:11:63:58:d2:57:e7:ac:44:05:6d:42: 49:d5:bd:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUwNzAzMDYwMTU1WhcNMjUwNzEwMDYwMTU1WjAYMRYwFAYD VQQDEw02ODY2MWNkMy1jYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYucqs2t4WAGbCGzskYoBSn0ynhHZqNJR8JgO3UqHv28whrtcvr73nPwUj1E o6qnU3uP6D5ikLqNSTngDl01QaQjVD8PZJHV3sDqY1BGET7zOP5B9lo4sFHm5nI6 uUr+XA/+WMVySaZtvN25gC/XpkAQMv5V3QSLLYRuTQ+lEhhNKtDz9WpTsSvk8ntL Xj87lOfgFkk1BgLIEAEVGvz5g6BNi7J7GwQwTmYvmYn8lPPBN9RunRLJg8Vco+t8 lUmKmrkpI5b+g59JIb93DFN6+MUKzyNrTACImYhWou3qGlHyMyGiHssWbrN1M76H hTzpR4l0BEhwW5d8w+OQsSW0hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1dGA2G /gOEJIsrgbcR48S1kfijMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ5ANVCmQSxkpCByE45mxVgrYkfrVf5THyyzNlZ7vbn1tuhk5qsyED 8Sthih/rJGheYaihxITlPD8NW+gvcr/Ivdl0/CeUiLKIxV7sa04EuTc5bT5RzVt5 w1CuysaJOZVJZMIz5WOBMUGLcksYeWKNLIKvRPPpZXiF0x/aURDOGq/dIkrZ3lom r601awxl9pi7liLuOOuxZLkxWoijtHyKcur6XZeExebkBbnT+dut9+Ry6YqhV9Cr r95NaWD8ydq6gXShIUdEUw1aGxMF9DTzNKUDQrcxDvzeuNAaTgtKCNIbk180jwMV yD9uh2p4VV4mEWNY0lfnrEQFbUJJ1b0k -----END CERTIFICATE-----Generated at Fri Jul 4 07:32:14 2025 by rpki-client