$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json) Hash identifier: AWU9rKNz5dlSYOkt0BmcCUYZT+yrwKRv5bcU1Kb5Qn8= Subject key identifier: 93:A0:E5:B3:05:27:29:EE:AF:A3:3E:23:E4:7F:2D:FE:AF:2D:37:41 Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 12CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft Manifest number: 47A4 Signing time: Wed 02 Jul 2025 14:21:10 +0000 Manifest this update: Wed 02 Jul 2025 14:21:09 +0000 Manifest next update: Wed 09 Jul 2025 14:21:09 +0000 Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: wM/XYuIRfutoMcT8pVaRhsocq8xtwKtAz2eQ5UdO9dk=) 2: C5FA430E179711EDB9008D18C4F9AE02.roa (hash: GHnN7IPBztwTSkz/5T1Pzn2mpFjuZRSGTdYW2a+IpUM=) 3: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: idks1lefYLO6nPenvXoGS0zMdLXoYOwMfOiIKkDlkB8=) 4: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: gZAAhBS7lDX/ARKaEp+quX+YnSdkN0XwL2ShlYH1ilM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4814 (0x12ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Jul 2 14:21:09 2025 GMT Not After : Jul 9 14:21:09 2025 GMT Subject: CN=68654055-570f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:b2:71:30:87:32:f6:80:38:38:b0:de:e2: c3:a1:c9:a4:dc:9e:f9:8a:11:a1:23:25:f7:00:9e: 5e:33:26:cb:0f:22:bb:05:11:f2:f5:cb:a1:a3:82: 01:38:35:b4:57:fb:52:3d:63:29:0d:8b:68:ab:c7: 56:32:5d:63:76:97:0e:c9:3e:cc:7f:f6:20:93:18: 48:9b:f2:c4:b6:17:d1:94:d8:36:ae:3f:d2:88:04: fa:c3:2d:75:ce:68:7f:2f:9d:fa:7e:87:b7:b9:49: 2f:9e:17:15:85:86:e3:d7:cd:49:02:11:0b:ce:0c: 9e:d4:9a:43:8a:d8:b9:97:a5:cd:20:43:51:da:bc: be:75:5b:bf:c5:9f:ac:b6:e0:9e:88:fa:bb:d3:62: c1:2e:53:a5:67:db:85:05:83:c5:09:c1:d5:7a:92: 5f:08:34:c5:8c:29:75:48:f5:9d:02:b4:45:44:78: 03:3b:7f:ac:0e:2f:94:62:40:e2:11:d1:9a:52:9b: fd:bf:a7:af:8a:31:1b:6b:3f:c1:cd:a3:12:94:8e: 4d:6c:da:84:60:60:65:23:7f:55:0b:db:49:7f:6a: a8:8c:b7:45:92:9a:fc:d9:df:ef:a6:24:45:9c:05: a6:11:4a:3f:07:20:1a:21:a7:b6:f4:08:ac:d0:e9: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A0:E5:B3:05:27:29:EE:AF:A3:3E:23:E4:7F:2D:FE:AF:2D:37:41 X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7a:31:c3:f5:ea:87:1b:2c:0d:eb:1a:35:d3:66:bf:00:6e: cd:7b:4e:b2:99:63:d9:dc:57:15:8c:08:a7:34:24:c4:b5:ff: 8a:3e:08:56:7e:fb:6a:c8:7c:9b:7d:07:06:f8:39:ea:88:d7: fb:fb:7d:9d:41:04:a7:97:0e:60:21:2b:54:50:ad:79:d3:ea: 5f:9f:a7:d9:3f:42:49:af:85:1a:b6:17:b9:31:d0:b2:9c:cd: 79:0b:ea:f0:7e:e4:99:1c:2d:5b:e5:ab:57:79:49:97:9b:7c: 48:8f:17:38:6b:cd:d7:bb:dc:86:aa:8c:b4:d8:45:df:01:ac: 09:0a:69:53:50:a7:07:05:d9:a9:de:e0:5c:4d:fc:2c:f7:ee: d2:15:9e:05:dc:b7:c9:dc:e2:62:c7:cf:ea:01:cd:dd:98:3a: c7:d7:8c:b5:f4:47:8c:db:f8:e6:3f:01:5a:74:b7:f5:18:af: 9d:f5:47:81:4d:a4:94:03:67:40:0f:8a:a0:f7:a9:6a:b4:f4: 6b:c5:13:97:f5:b6:04:42:6a:d9:ea:a2:1b:e4:35:bb:ed:ec: f4:e9:5e:17:63:ac:13:30:2f:47:c1:e9:54:8a:cf:5e:7b:e4: 7b:50:67:79:f8:18:02:d6:9b:1c:9c:6a:0e:d6:48:d5:2c:bc: f7:da:6d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjUwNzAyMTQyMTA5WhcNMjUwNzA5MTQyMTA5WjAYMRYwFAYD VQQDEw02ODY1NDA1NS01NzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVeycTCHMvaAODiw3uLDocmk3J75ihGhIyX3AJ5eMybLDyK7BRHy9cuho4IB ODW0V/tSPWMpDYtoq8dWMl1jdpcOyT7Mf/YgkxhIm/LEthfRlNg2rj/SiAT6wy11 zmh/L536foe3uUkvnhcVhYbj181JAhELzgye1JpDiti5l6XNIENR2ry+dVu/xZ+s tuCeiPq702LBLlOlZ9uFBYPFCcHVepJfCDTFjCl1SPWdArRFRHgDO3+sDi+UYkDi EdGaUpv9v6evijEbaz/BzaMSlI5NbNqEYGBlI39VC9tJf2qojLdFkpr82d/vpiRF nAWmEUo/ByAaIae29Ais0OlN+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOg5bMF Jynur6M+I+R/Lf6vLTdBMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB eTc0T1ExbW5lQnBHSkxuODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACejHD9eqHGywN6xo102a/AG7Ne06ymWPZ3FcVjAinNCTEtf+KPghW fvtqyHybfQcG+DnqiNf7+32dQQSnlw5gIStUUK150+pfn6fZP0JJr4Uathe5MdCy nM15C+rwfuSZHC1b5atXeUmXm3xIjxc4a83Xu9yGqoy02EXfAawJCmlTUKcHBdmp 3uBcTfws9+7SFZ4F3LfJ3OJix8/qAc3dmDrH14y19EeM2/jmPwFadLf1GK+d9UeB TaSUA2dAD4qg96lqtPRrxROX9bYEQmrZ6qIb5DW77ez06V4XY6wTMC9HwelUis9e e+R7UGd5+BgC1pscnGoO1kjVLLz32m00 -----END CERTIFICATE-----Generated at Thu Jul 3 15:25:03 2025 by rpki-client