$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: kqz8IXUofBWcwhrvGsn4mTW/SnHkU79GvLKkSEKisso= Subject key identifier: B5:87:0B:B1:4E:D9:3E:D9:16:4C:55:2F:61:CC:FD:F3:89:DA:A3:BC Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: 43 Signing time: Thu 03 Jul 2025 07:43:26 +0000 Manifest this update: Thu 03 Jul 2025 07:43:26 +0000 Manifest next update: Thu 10 Jul 2025 07:43:26 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: EXmMA96eTkygtZY1TwLvhuqRuD5n3SBqRovAi3iBQYU=) 2: 8F9B067EF96011EF89D9E37DC4F9AE02.roa (hash: C4f1DGgr88zvtZI01sEk4X9+P0XVPyTaQ0X1w0t3gJE=) 3: 8F350932F96011EF89D9E37DC4F9AE02.roa (hash: EiButkFaJmxH2f9GmfvH+3lmi0BQDdaX71kUaJ4cIPE=) 4: 8EB1E9BCF96011EF89D9E37DC4F9AE02.roa (hash: ckgf3xD+pqJNwNoVSxIFNqkicDtbDleG9nDMcEDte9Q=) 5: 917D3A184BED11F0A2F7CC21C4F9AE02.roa (hash: IYpTiwoDdKk+DKwv65zZ7BTxOeFfDIMdePJWFd5JpGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: Jul 3 07:43:26 2025 GMT Not After : Jul 10 07:43:26 2025 GMT Subject: CN=6866349e-4a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:94:b5:0b:bd:e6:b5:97:3d:37:bb:6b:40: 92:ba:65:9c:5e:81:f1:91:5f:7c:9e:b6:91:6a:ab: 69:0c:be:87:ed:3d:88:6e:91:89:14:86:34:4f:f3: 3c:d2:33:ee:33:c2:0c:fb:56:b5:37:3d:00:cc:9e: ab:74:a4:07:42:f5:b1:f8:63:ef:27:ce:89:8d:be: a2:7d:2b:e7:14:58:bc:3a:92:90:fd:47:10:9a:be: 50:5b:08:f1:04:97:84:a5:70:19:3a:2d:e8:91:2e: af:08:a3:4f:8f:cb:4e:fb:f8:46:d5:d4:05:7c:25: 9f:df:b6:e4:a2:b8:1f:9f:11:5c:9e:20:2a:17:31: bc:b0:26:cb:9a:eb:6b:09:88:0a:66:c0:6e:98:da: 9f:58:9b:50:18:2c:79:10:c9:c5:cf:96:dc:31:d0: 94:13:53:f1:28:df:e5:70:d8:a3:87:74:0f:20:c1: a0:f1:1b:7f:63:66:b2:c7:2f:a1:54:68:ab:df:da: 92:8b:e5:c3:e0:60:84:d0:f3:20:5e:4d:7f:cf:28: 2b:b4:37:e1:72:8e:ba:de:c7:79:bf:9d:0b:f9:a5: ec:42:0d:cb:59:7c:25:5d:5d:98:cc:40:ca:ce:be: f6:e8:71:6b:4b:86:88:81:81:ef:eb:26:2b:ea:67: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:87:0B:B1:4E:D9:3E:D9:16:4C:55:2F:61:CC:FD:F3:89:DA:A3:BC X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:01:1d:de:1b:e5:34:b2:db:98:06:0b:56:2b:03:ba:f9:3e: a3:f7:c6:29:62:24:a3:e7:0b:aa:a8:67:f2:cd:2d:ec:1e:92: 80:9f:2a:56:3d:00:18:f5:86:80:b0:c7:fc:46:44:0b:0d:f3: 82:97:5e:bd:41:e3:bc:ca:84:f1:cb:85:e6:07:96:b1:8d:0b: 82:67:f9:21:84:86:17:66:d0:d7:af:06:90:e0:36:d9:48:99: 8a:62:de:35:fa:93:4b:a1:e9:41:51:df:8d:1c:74:1a:0f:b9: 1f:c8:b0:07:e1:cb:11:57:a4:d3:91:6c:0d:59:e6:19:27:a1: 7b:d7:d9:6a:09:f2:74:e5:e5:29:0b:72:4b:5b:79:64:c2:aa: e5:7c:2e:c7:43:ca:ec:0f:de:90:d7:70:85:74:ae:e1:40:cd: 54:0f:b3:d7:6f:55:94:fc:38:2a:58:e5:9c:2f:94:25:4e:05: dc:7d:3a:7a:23:2a:1e:55:00:90:4d:6e:4a:10:bc:29:ad:a3: 38:c7:6f:ea:fa:8d:d5:dd:4f:78:83:0b:94:95:54:17:2a:c7: 4a:3c:58:d2:49:5d:f0:c0:03:f8:76:e7:65:8e:36:a9:25:30: 95:39:0a:b3:b2:63:33:61:d5:09:c7:c1:92:1f:06:f5:3f:3e: ae:1d:86:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OERGNTExMC8GA1UEBRMoQzZGNzU4RUNEREM0QzlCMEY3MkYwNjVDMzVBRDU0Njk3 NDMyNzExQjAeFw0yNTA3MDMwNzQzMjZaFw0yNTA3MTAwNzQzMjZaMBgxFjAUBgNV BAMTDTY4NjYzNDllLTRhNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHT5S1C73mtZc9N7trQJK6ZZxegfGRX3yetpFqq2kMvoftPYhukYkUhjRP8zzS M+4zwgz7VrU3PQDMnqt0pAdC9bH4Y+8nzomNvqJ9K+cUWLw6kpD9RxCavlBbCPEE l4SlcBk6LeiRLq8Io0+Py077+EbV1AV8JZ/ftuSiuB+fEVyeICoXMbywJsua62sJ iApmwG6Y2p9Ym1AYLHkQycXPltwx0JQTU/Eo3+Vw2KOHdA8gwaDxG39jZrLHL6FU aKvf2pKL5cPgYITQ8yBeTX/PKCu0N+Fyjrrex3m/nQv5pexCDctZfCVdXZjMQMrO vvbocWtLhoiBge/rJivqZ0lxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtYcLsU7Z PtkWTFUvYcz984nao7wwHwYDVR0jBBgwFoAUxvdY7N3EybD3LwZcNa1UaXQycRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1LzMxRTBGMTZBRjk2 MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHZkWTdOM0V5YkQzTHdaY05hMVVhWFF5Y1JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 REY1LzMxRTBGMTZBRjk2MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJE M0x3WmNOYTFVYVhReWNScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADcBHd4b5TSy25gGC1YrA7r5PqP3xiliJKPnC6qoZ/LNLewekoCfKlY9 ABj1hoCwx/xGRAsN84KXXr1B47zKhPHLheYHlrGNC4Jn+SGEhhdm0NevBpDgNtlI mYpi3jX6k0uh6UFR340cdBoPuR/IsAfhyxFXpNORbA1Z5hknoXvX2WoJ8nTl5SkL cktbeWTCquV8LsdDyuwP3pDXcIV0ruFAzVQPs9dvVZT8OCpY5ZwvlCVOBdx9Onoj Kh5VAJBNbkoQvCmtozjHb+r6jdXdT3iDC5SVVBcqx0o8WNJJXfDAA/h252WONqkl MJU5CrOyYzNh1QnHwZIfBvU/Pq4dht4= -----END CERTIFICATE-----Generated at Thu Jul 3 20:54:08 2025 by rpki-client