$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft File: xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json) Hash identifier: 4C/RgnGbGrqcUmZqQuYr2uz9HR4QZEgdUCQm6vXIdCI= Subject key identifier: 9C:09:26:D7:41:A4:1C:D2:DE:7F:43:63:41:33:AB:50:B2:F2:9E:AC Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66 Certificate issuer: /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft Manifest number: 07E8 Signing time: Wed 02 Jul 2025 21:16:06 +0000 Manifest this update: Wed 02 Jul 2025 21:16:06 +0000 Manifest next update: Wed 09 Jul 2025 21:16:06 +0000 Files and hashes: 1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: dCr+WRfRqQA0BSYvyFr1kJMyo8fWrNWa0Apvxo6TzRw=) 2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: W17rFdVVlgGDVf5Sl4I92TD7UhWdwp3Z8iY6u8GBaHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266 Validity Not Before: Jul 2 21:16:06 2025 GMT Not After : Jul 9 21:16:06 2025 GMT Subject: CN=6865a196-d0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:a4:83:d3:7f:24:62:e1:12:eb:7c:d6:c1: d2:4b:fd:d4:3d:40:00:b3:8d:19:82:69:ba:db:fd: b2:87:da:ea:54:be:5d:e7:cf:a6:f7:79:1a:24:21: d8:d4:a3:38:3b:d5:20:b1:38:44:b0:80:59:50:4c: 5d:b3:17:79:51:dc:4b:68:02:f8:c1:30:7c:d7:d7: f5:9c:93:f0:e4:21:25:08:f9:8f:4c:d5:e7:eb:48: 3d:9b:c9:1d:6e:2e:2e:e2:2a:41:72:dd:3a:a6:a9: c5:ae:8d:fe:b7:3b:a5:54:ec:63:45:a6:94:4d:3d: 7c:a7:33:e0:fc:81:82:71:16:23:67:2c:5f:36:c2: 4a:0b:9d:bf:13:9e:42:3c:b4:f0:2f:dd:a2:b1:6a: d4:ea:ae:08:ee:f9:07:83:a6:0b:bb:27:77:77:b5: 4f:f7:69:94:12:e6:47:91:d4:66:58:13:b0:90:6f: ca:86:e4:56:90:4e:4c:6f:9d:05:2c:9c:21:cc:f8: c7:7e:f2:53:0d:ff:49:38:a4:0d:3b:4e:b6:b1:78: 12:17:c5:6c:35:61:91:ab:1f:f8:e9:9a:42:50:19: 93:2b:24:80:2f:a1:74:d5:cd:b2:ca:e3:43:ab:b6: 2c:4e:4c:50:28:d9:67:dc:dd:d4:df:eb:7c:ef:3d: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:09:26:D7:41:A4:1C:D2:DE:7F:43:63:41:33:AB:50:B2:F2:9E:AC X509v3 Authority Key Identifier: keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:84:f1:64:eb:94:48:4b:0a:2c:69:c6:92:f5:54:7b:5a:ae: df:98:5c:e8:50:fe:3a:f1:ac:f2:ec:c7:42:15:b1:d8:dc:d1: 9e:30:d0:56:76:08:3a:db:4e:7a:17:b5:69:83:b6:b5:a0:7a: 79:fa:a7:28:f7:cc:1e:71:90:29:62:fd:08:21:93:4c:a0:dd: c5:38:a1:a6:6e:ef:59:fc:fd:60:44:a9:c0:22:e2:ba:2d:5e: ea:2e:06:4b:9e:da:c4:e1:f6:1d:dc:c1:17:e6:f2:0b:0b:f9: 55:4e:d7:79:89:80:a9:76:d5:68:b5:ae:6a:34:e8:6b:af:f6: f9:14:96:f2:52:4d:65:ac:a9:89:45:53:a6:0a:4e:83:04:b6: 8b:58:71:b1:3b:41:f3:03:21:8a:c0:1d:2f:61:a5:cb:87:64: 11:e2:eb:72:fe:8d:5c:9a:e2:ef:18:26:5d:29:87:a9:5a:86: 72:02:08:0c:1a:ef:aa:8b:a2:cd:78:4e:78:be:1d:23:8a:b6: d0:3c:02:b0:08:68:c9:dc:01:4d:46:51:c3:a9:ee:0f:da:79: 81:9b:91:13:d4:a2:23:b8:71:be:e9:0b:66:89:c1:f3:c1:c6: 6c:24:79:6e:44:a6:15:8d:5d:67:69:68:13:57:06:06:54:a5: e6:94:78:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDNDYxMTAvBgNVBAUTKEM2QzE5MTY5RUVBN0QwNjZCQzlCQ0E3MkREODgzMEJD MTgzQTEyNjYwHhcNMjUwNzAyMjExNjA2WhcNMjUwNzA5MjExNjA2WjAYMRYwFAYD VQQDEw02ODY1YTE5Ni1kMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT2kg9N/JGLhEut81sHSS/3UPUAAs40Zgmm62/2yh9rqVL5d58+m93kaJCHY 1KM4O9UgsThEsIBZUExdsxd5UdxLaAL4wTB819f1nJPw5CElCPmPTNXn60g9m8kd bi4u4ipBct06pqnFro3+tzulVOxjRaaUTT18pzPg/IGCcRYjZyxfNsJKC52/E55C PLTwL92isWrU6q4I7vkHg6YLuyd3d7VP92mUEuZHkdRmWBOwkG/KhuRWkE5Mb50F LJwhzPjHfvJTDf9JOKQNO062sXgSF8VsNWGRqx/46ZpCUBmTKySAL6F01c2yyuND q7YsTkxQKNln3N3U3+t87z1f5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwJJtdB pBzS3n9DY0Ezq1Cy8p6sMB8GA1UdIwQYMBaAFMbBkWnup9BmvJvKct2IMLwYOhJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM0Ni8wNUNBREQxNkYx ODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBHYThtOHB5M1lnd3ZCZzZF bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hzR1JhZTZuMEdhOG04cHkzWWd3dkJnNkVtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM0Ni8wNUNBREQxNkYxODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBH YThtOHB5M1lnd3ZCZzZFbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDhPFk65RISwosacaS9VR7Wq7fmFzoUP468azy7MdCFbHY3NGeMNBW dgg62056F7Vpg7a1oHp5+qco98wecZApYv0IIZNMoN3FOKGmbu9Z/P1gRKnAIuK6 LV7qLgZLntrE4fYd3MEX5vILC/lVTtd5iYCpdtVota5qNOhrr/b5FJbyUk1lrKmJ RVOmCk6DBLaLWHGxO0HzAyGKwB0vYaXLh2QR4uty/o1cmuLvGCZdKYepWoZyAggM Gu+qi6LNeE54vh0jirbQPAKwCGjJ3AFNRlHDqe4P2nmBm5ET1KIjuHG+6QtmicHz wcZsJHluRKYVjV1naWgTVwYGVKXmlHgk -----END CERTIFICATE-----Generated at Fri Jul 4 14:39:08 2025 by rpki-client