$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: seTWmQn50yM1g4Qg6kujALK8DBxzIhu1s2vAV8iD3Hg= Subject key identifier: 6A:36:83:62:A4:54:A6:3D:76:8F:02:DF:4D:76:86:2A:A5:7D:9F:19 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 0108 Signing time: Thu 03 Jul 2025 05:11:12 +0000 Manifest this update: Thu 03 Jul 2025 05:11:11 +0000 Manifest next update: Thu 10 Jul 2025 05:11:11 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: HI58wUW80nSPlGGQpu38+ifQho2aO31Jd+xoFttLP54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Jul 3 05:11:11 2025 GMT Not After : Jul 10 05:11:11 2025 GMT Subject: CN=686610ef-4a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:55:f6:13:6a:a7:35:78:d9:30:a9:ea:2d:02: ff:c2:ed:d7:51:96:c9:18:fd:cc:44:ac:31:08:30: d8:16:47:ae:2e:11:a8:7b:3b:c9:54:20:ad:65:23: b6:2f:27:9b:91:cc:57:76:c0:54:e8:5f:94:25:71: 6e:17:f2:50:7f:6a:32:bf:b7:ff:84:44:75:64:e2: ab:e9:ef:90:af:b5:64:4d:4e:50:f0:fe:f1:89:19: ca:2a:13:bc:ee:1b:41:36:6e:1c:88:26:b5:70:db: 10:eb:17:1a:e7:9d:6d:6e:af:bf:3b:d3:dd:82:02: 34:98:47:59:5b:ac:4f:37:c4:f3:a9:03:f6:79:ca: 81:2a:00:83:50:4c:bb:b3:e1:cb:9b:d0:5a:c5:4a: 0d:e8:f1:6c:2c:9a:8d:aa:bc:a5:7e:f5:ec:7c:25: 17:c9:b1:e5:a9:10:5f:df:73:1d:d9:cc:a4:87:92: c1:5e:03:b5:0c:e3:3b:e5:b4:98:a4:69:3d:95:90: 93:88:99:bf:61:13:63:ba:c9:3a:cd:93:32:b7:5d: 8b:3d:0e:eb:bc:e6:72:56:17:78:26:45:a2:a9:dc: 7a:25:f7:9d:6b:7d:b3:7c:4f:ba:e8:f1:dd:b0:92: be:46:0b:50:c5:21:8f:de:a6:46:2e:36:e8:4f:35: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:36:83:62:A4:54:A6:3D:76:8F:02:DF:4D:76:86:2A:A5:7D:9F:19 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:f5:db:69:8d:db:d1:e5:71:5f:2a:01:81:e5:81:84:03:3e: 9c:fd:fe:7e:51:a3:b3:23:d8:71:4f:b4:f4:11:d8:59:40:dd: 7d:dc:41:ca:0e:e1:a5:51:ef:61:43:b3:44:1a:ee:39:9b:4f: ec:ad:f0:af:49:55:9e:19:dd:ca:4d:55:a3:5c:3e:04:37:51: 64:6a:67:34:7e:f0:ae:fa:27:d3:47:29:f0:aa:52:9a:69:fa: dc:61:2e:fb:07:7a:43:39:74:d4:9c:51:24:03:8e:7c:7c:74: 60:c3:b1:d1:3d:d4:40:ae:fb:15:f5:2a:40:41:d1:5b:cc:0c: 19:9a:fb:e9:50:43:d4:fc:1b:55:2d:bb:4f:bf:1c:1c:e3:20: a4:05:53:c1:f7:af:ff:71:95:7e:b7:a8:f8:8a:7a:54:b7:e2: 5e:b3:39:b1:4e:37:91:c8:9a:5d:e5:83:62:c4:82:1d:a8:3b: aa:9b:ca:e7:8c:41:0c:15:71:6d:a4:68:80:18:65:6b:b6:e8: 0f:8f:c1:15:fb:1f:43:96:b6:63:d7:9a:00:a7:ae:4b:da:60: 0e:d1:af:9c:6f:d1:63:1c:ff:71:9f:12:3b:cf:a4:ff:bd:1c: 4a:d9:76:50:95:4f:b9:96:b5:40:4b:64:6f:68:78:fb:93:02: 23:c9:e0:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUwNzAzMDUxMTExWhcNMjUwNzEwMDUxMTExWjAYMRYwFAYD VQQDEw02ODY2MTBlZi00YTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31X2E2qnNXjZMKnqLQL/wu3XUZbJGP3MRKwxCDDYFkeuLhGoezvJVCCtZSO2 LyebkcxXdsBU6F+UJXFuF/JQf2oyv7f/hER1ZOKr6e+Qr7VkTU5Q8P7xiRnKKhO8 7htBNm4ciCa1cNsQ6xca551tbq+/O9PdggI0mEdZW6xPN8TzqQP2ecqBKgCDUEy7 s+HLm9BaxUoN6PFsLJqNqrylfvXsfCUXybHlqRBf33Md2cykh5LBXgO1DOM75bSY pGk9lZCTiJm/YRNjusk6zZMyt12LPQ7rvOZyVhd4JkWiqdx6Jfeda32zfE+66PHd sJK+RgtQxSGP3qZGLjboTzUHawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGo2g2Kk VKY9do8C3012hiqlfZ8ZMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDM9dtpjdvR5XFfKgGB5YGEAz6c/f5+UaOzI9hxT7T0EdhZQN193EHK DuGlUe9hQ7NEGu45m0/srfCvSVWeGd3KTVWjXD4EN1Fkamc0fvCu+ifTRynwqlKa afrcYS77B3pDOXTUnFEkA458fHRgw7HRPdRArvsV9SpAQdFbzAwZmvvpUEPU/BtV LbtPvxwc4yCkBVPB96//cZV+t6j4inpUt+JeszmxTjeRyJpd5YNixIIdqDuqm8rn jEEMFXFtpGiAGGVrtugPj8EV+x9DlrZj15oAp65L2mAO0a+cb9FjHP9xnxI7z6T/ vRxK2XZQlU+5lrVAS2RvaHj7kwIjyeDR -----END CERTIFICATE-----Generated at Sat Jul 5 05:33:23 2025 by rpki-client