$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: 17HxNusKytfnjUmslHAPjY1khPs5kdOJpxk8pSkwauI= Subject key identifier: 8F:92:69:46:6D:00:60:44:81:B1:48:ED:AC:33:D2:71:28:64:4A:D5 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 033F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 0329 Signing time: Sun 29 Jun 2025 00:43:54 +0000 Manifest this update: Sun 29 Jun 2025 00:43:54 +0000 Manifest next update: Sun 06 Jul 2025 00:43:54 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: T+18YJFEkHKXDXGVTls3uf+nYKX2LliFbXrJVcrobyg=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: +2b/qGdWsAWR/BKJskTGfjOIk8WF3Jjfuxvh9LPPuaA=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: QkUOxUdOqeDJq40oU7W9ZvA1XabLukGzl2cHkw2yMIw=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 6J35YVUmzZ1s4Ice2keaYAnPdVe/zMmpQD23cIxvFqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 831 (0x33f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Jun 29 00:43:54 2025 GMT Not After : Jul 6 00:43:54 2025 GMT Subject: CN=68608c4a-3aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:a8:bf:90:01:37:35:b9:e0:23:77:13:70: 94:64:b0:b7:de:73:54:0e:82:fc:3b:44:49:4a:21: 7e:49:9d:18:d2:06:5d:eb:d3:56:1e:09:46:e4:5e: 8a:68:b6:24:17:67:cc:bc:ea:11:08:a9:38:df:69: 53:85:88:8f:15:2b:98:e0:83:1a:4c:57:b6:a0:b9: cb:79:8e:74:bb:df:9b:40:d1:71:11:fa:fd:9b:e6: 87:28:e8:f2:bb:73:1e:8c:bc:0b:67:61:30:9c:df: 65:a1:3a:d1:1d:28:a8:c5:c9:83:b5:5c:a5:57:7f: d1:cc:5d:6f:94:14:be:69:ad:82:a4:e5:93:10:d1: 60:f2:0c:72:78:c1:f9:20:9c:df:36:bf:a7:b9:ff: c6:39:23:3c:7a:29:75:e6:50:3f:12:5f:69:97:e6: 80:e5:2d:09:8b:2d:bd:ad:d9:9b:f2:71:42:cc:8d: af:ea:42:f7:ad:aa:68:5d:67:11:a5:25:e0:61:10: a1:36:6a:9d:b6:45:3f:6b:20:96:7b:48:bf:ce:e3: c1:4c:d6:34:45:f6:d7:aa:ab:11:ad:dd:1e:88:eb: 46:8b:e6:fe:1f:cc:ff:f3:69:24:e9:ef:a7:6d:c5: 97:26:dc:22:0e:86:1a:bd:79:36:b4:46:9a:d1:3f: b9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:92:69:46:6D:00:60:44:81:B1:48:ED:AC:33:D2:71:28:64:4A:D5 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:b3:d7:44:fc:79:c6:71:5d:f7:e6:ab:3c:15:c1:8b:e9:62: 12:3f:b2:19:67:41:1e:1f:ba:8a:f2:6f:1a:c7:fe:dc:d0:25: a0:76:a7:7f:19:16:0f:9d:0c:49:f2:18:19:dc:6e:99:e4:dc: f6:14:04:85:a1:6f:ba:99:62:bc:a7:2d:12:8b:3f:19:70:d1: a0:aa:42:07:d2:6b:db:6b:e9:b0:64:62:9b:e7:81:e1:b4:a7: e0:ae:a0:b0:79:00:7a:a6:5a:23:19:8d:75:9a:09:30:03:a9: c4:5d:67:47:bf:99:33:e0:ed:40:b2:91:86:d8:16:b1:6f:f4: 44:6e:e2:5c:e7:00:a1:4c:66:c1:bf:c6:2c:98:4b:0a:5e:1c: 91:d7:6e:69:2a:f2:5f:b8:88:6c:6e:2a:33:ab:56:5a:07:59: 10:20:52:f2:8e:61:c6:81:c3:f4:b7:cf:7b:a5:02:74:04:0f: 6a:23:c1:b3:ac:8c:b6:27:3c:d0:27:3a:60:c3:ec:eb:9a:22: af:30:b3:56:06:0f:dc:b2:2f:22:c1:20:9e:ec:b8:d4:58:8e: de:e9:1a:c1:a8:15:57:4e:ac:ce:f3:37:c3:11:55:52:ba:81: 0a:a6:3f:60:70:5a:c9:f1:c7:35:9b:7e:8b:af:0e:21:b1:90: 2a:0f:b7:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjUwNjI5MDA0MzU0WhcNMjUwNzA2MDA0MzU0WjAYMRYwFAYD VQQDEw02ODYwOGM0YS0zYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJaov5ABNzW54CN3E3CUZLC33nNUDoL8O0RJSiF+SZ0Y0gZd69NWHglG5F6K aLYkF2fMvOoRCKk432lThYiPFSuY4IMaTFe2oLnLeY50u9+bQNFxEfr9m+aHKOjy u3MejLwLZ2EwnN9loTrRHSioxcmDtVylV3/RzF1vlBS+aa2CpOWTENFg8gxyeMH5 IJzfNr+nuf/GOSM8eil15lA/El9pl+aA5S0Jiy29rdmb8nFCzI2v6kL3rapoXWcR pSXgYRChNmqdtkU/ayCWe0i/zuPBTNY0RfbXqqsRrd0eiOtGi+b+H8z/82kk6e+n bcWXJtwiDoYavXk2tEaa0T+5DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+SaUZt AGBEgbFI7awz0nEoZErVMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCs9dE/HnGcV335qs8FcGL6WISP7IZZ0EeH7qK8m8ax/7c0CWgdqd/ GRYPnQxJ8hgZ3G6Z5Nz2FASFoW+6mWK8py0Siz8ZcNGgqkIH0mvba+mwZGKb54Hh tKfgrqCweQB6plojGY11mgkwA6nEXWdHv5kz4O1AspGG2Baxb/REbuJc5wChTGbB v8YsmEsKXhyR125pKvJfuIhsbiozq1ZaB1kQIFLyjmHGgcP0t897pQJ0BA9qI8Gz rIy2JzzQJzpgw+zrmiKvMLNWBg/csi8iwSCe7LjUWI7e6RrBqBVXTqzO8zfDEVVS uoEKpj9gcFrJ8cc1m36Lrw4hsZAqD7eL -----END CERTIFICATE-----Generated at Mon Jun 30 20:00:43 2025 by rpki-client