$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft File: XozcAfwJtFN0mgHuUjmzXt4kvmw.mft (raw, json) Hash identifier: uN0MhrlS1BVcfcaHDil7OySivzCh423dV2DGl4SNmPw= Subject key identifier: 5D:FE:F5:7C:0C:3F:04:39:D6:3C:7D:3B:F5:96:0B:6F:1D:AD:6F:3D Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C Certificate serial: 074A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft Manifest number: 0744 Signing time: Wed 02 Jul 2025 22:00:19 +0000 Manifest this update: Wed 02 Jul 2025 22:00:18 +0000 Manifest next update: Wed 09 Jul 2025 22:00:18 +0000 Files and hashes: 1: XozcAfwJtFN0mgHuUjmzXt4kvmw.crl (hash: tl+IOhZFasFepPXJhwg8/tS/4C7tYYBWkhFIzW73yog=) 2: A5D573E4305A11EB921D6332C4F9AE02.roa (hash: YBEc7X7y2zLa5OdEGOrRlwoEuxYs7fU2wrxzm81YklQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C Validity Not Before: Jul 2 22:00:18 2025 GMT Not After : Jul 9 22:00:18 2025 GMT Subject: CN=6865abf3-2fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:6b:44:43:2e:e4:26:2a:d1:ad:f2:d6:5c: 5c:e5:c9:f1:61:14:97:76:9c:29:96:f3:58:dc:6e: 18:b4:9d:0c:79:c9:b9:25:60:6b:c2:13:7f:fb:d2: 8e:49:fd:6e:9a:f6:9b:6d:ba:ac:8f:3a:1f:11:3a: 55:20:9d:f8:25:71:36:a4:29:81:ba:1e:ef:24:25: c9:e6:75:03:4a:84:17:84:c5:19:2b:cb:78:dd:95: d6:2a:6a:a2:e6:72:0d:ad:88:32:7b:14:26:60:a3: c2:0d:2b:d2:c5:07:75:64:14:ac:a2:1e:fe:b0:56: 62:a8:36:37:23:1d:07:d5:b6:5d:8f:d0:26:59:f6: e4:f4:19:65:2d:88:15:44:50:8d:d6:39:89:35:b5: a1:3e:c4:09:ae:f9:30:66:b2:08:91:06:a0:76:8f: 63:7f:e5:c5:7a:06:48:8e:77:d7:eb:ae:92:2a:f1: dd:dd:2a:5b:a8:f6:19:94:ad:79:35:98:6b:5d:43: 70:39:4d:76:6e:6b:ac:c5:60:2b:49:77:19:e3:e3: aa:4b:76:18:60:53:c0:31:5e:0e:1b:33:2d:a9:16: b1:65:cf:9d:39:ef:c2:b2:69:7f:64:b6:2b:03:b3: 2d:52:33:b7:b7:c8:f8:87:00:c8:7f:db:50:75:ee: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FE:F5:7C:0C:3F:04:39:D6:3C:7D:3B:F5:96:0B:6F:1D:AD:6F:3D X509v3 Authority Key Identifier: keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e4:ae:d7:32:ae:92:9a:5f:08:c4:d4:6e:9c:7e:bf:1d:7a: 75:ff:53:99:27:a5:b9:d0:8c:f2:ca:ca:02:1a:dc:9e:eb:75: 4b:37:8a:6b:2e:95:b5:9c:66:e2:c0:1e:80:d1:41:fd:13:ae: 72:6f:03:4e:1b:17:51:db:06:44:da:51:76:77:09:84:98:94: aa:52:cb:ce:6d:ec:d8:8c:76:4f:4f:09:90:d9:14:50:99:ee: d0:1f:42:3c:68:ae:ae:20:cd:9e:bf:88:54:c5:e2:53:7c:e1: 48:38:09:82:66:5c:f3:ed:7f:41:17:34:d3:c5:98:72:ac:7a: 65:e1:29:61:a1:94:cb:75:f0:a3:53:fc:e7:99:a1:f7:0f:6c: eb:90:b7:98:7d:31:45:94:d5:f0:a0:49:86:c6:81:47:a2:41: 26:47:1e:52:bf:01:e1:b2:d5:0c:d8:f2:7d:03:4f:de:b2:9f: c1:c6:bf:bf:a0:55:92:32:c4:4b:3f:81:b9:9f:12:62:75:31: 24:34:15:25:15:0a:32:43:86:c4:9b:7b:1e:f3:28:0e:a3:f8: 2e:28:d9:12:08:e3:bf:8f:87:1d:f9:46:7f:43:67:42:0c:ed: be:2c:45:ea:37:1d:43:86:63:09:a1:85:f4:f8:ca:cf:cc:db: 77:79:30:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDRkExMTAvBgNVBAUTKDVFOENEQzAxRkMwOUI0NTM3NDlBMDFFRTUyMzlCMzVF REUyNEJFNkMwHhcNMjUwNzAyMjIwMDE4WhcNMjUwNzA5MjIwMDE4WjAYMRYwFAYD VQQDEw02ODY1YWJmMy0yZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLFrREMu5CYq0a3y1lxc5cnxYRSXdpwplvNY3G4YtJ0Mecm5JWBrwhN/+9KO Sf1umvabbbqsjzofETpVIJ34JXE2pCmBuh7vJCXJ5nUDSoQXhMUZK8t43ZXWKmqi 5nINrYgyexQmYKPCDSvSxQd1ZBSsoh7+sFZiqDY3Ix0H1bZdj9AmWfbk9BllLYgV RFCN1jmJNbWhPsQJrvkwZrIIkQagdo9jf+XFegZIjnfX666SKvHd3SpbqPYZlK15 NZhrXUNwOU12bmusxWArSXcZ4+OqS3YYYFPAMV4OGzMtqRaxZc+dOe/Csml/ZLYr A7MtUjO3t8j4hwDIf9tQde5ozQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3+9XwM PwQ51jx9O/WWC28drW89MB8GA1UdIwQYMBaAFF6M3AH8CbRTdJoB7lI5s17eJL5s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNENGQS8xQzJGQUIyRTMw NTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRGTjBtZ0h1VWptelh0NGt2 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvemNBZndKdEZOMG1nSHVVam16WHQ0a3Ztdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NENGQS8xQzJGQUIyRTMwNTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRG TjBtZ0h1VWptelh0NGt2bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp5K7XMq6Sml8IxNRunH6/HXp1/1OZJ6W50IzyysoCGtye63VLN4pr LpW1nGbiwB6A0UH9E65ybwNOGxdR2wZE2lF2dwmEmJSqUsvObezYjHZPTwmQ2RRQ me7QH0I8aK6uIM2ev4hUxeJTfOFIOAmCZlzz7X9BFzTTxZhyrHpl4SlhoZTLdfCj U/znmaH3D2zrkLeYfTFFlNXwoEmGxoFHokEmRx5SvwHhstUM2PJ9A0/esp/Bxr+/ oFWSMsRLP4G5nxJidTEkNBUlFQoyQ4bEm3se8ygOo/guKNkSCOO/j4cd+UZ/Q2dC DO2+LEXqNx1DhmMJoYX0+MrPzNt3eTAR -----END CERTIFICATE-----Generated at Fri Jul 4 08:44:01 2025 by rpki-client