$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: pBxd/cufXtBzSFKEjBQvaLOHkoXNvL+V1dJMrHYpths= Subject key identifier: ED:12:76:56:2C:17:EF:13:89:91:15:83:E0:89:5A:79:50:84:2D:58 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0AAE Signing time: Wed 02 Jul 2025 20:21:30 +0000 Manifest this update: Wed 02 Jul 2025 20:21:30 +0000 Manifest next update: Wed 09 Jul 2025 20:21:30 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: dyYeLeR41MWTjqSdCh/41UvZtOZYqHsIBwZcarGdIO0=) 2: CED9053CE35211EDB7F6B44EC4F9AE02.roa (hash: JmnrBzA6dJ9YsMu7pz9xXLOAQrwChmETl1tBrYYwR4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Jul 2 20:21:30 2025 GMT Not After : Jul 9 20:21:30 2025 GMT Subject: CN=686594ca-ad91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:19:fe:ba:04:24:cc:84:2e:09:e8:60:5a: f5:27:23:5f:40:7b:1f:63:1f:0e:2b:0d:35:b7:15: 6f:78:17:9f:26:47:1f:03:73:85:3b:50:01:67:c6: 35:a7:c0:d2:7d:43:25:d0:c4:33:a9:6d:d4:f3:4f: 6f:3f:57:af:1d:0e:19:6e:8f:bf:6c:21:39:ff:18: 51:e2:0e:b3:b1:b6:fb:64:65:a2:5e:7f:0b:0d:bb: 45:c3:b8:1c:c7:5d:2d:af:a4:41:80:7b:25:fa:d5: 43:aa:e5:90:fc:8f:39:74:34:dc:23:e9:9c:a0:ff: d0:24:c0:ad:77:3c:b0:be:73:1f:8c:ad:06:aa:8f: 79:30:bf:85:11:6a:dd:ec:bb:ea:ca:b1:82:c1:f7: 29:1d:9d:03:01:bf:f4:23:2e:ac:4d:4f:23:8a:3a: ed:31:80:81:c6:06:1b:81:14:42:47:c0:d2:33:0f: 2d:86:b6:86:86:c4:32:26:98:43:55:e2:73:c4:d8: 88:a9:b3:c0:9d:b7:27:a9:ab:7b:be:89:1f:20:b0: 40:47:3d:25:8f:9c:1c:c3:19:68:2d:2a:b8:16:dc: b8:4c:bd:6b:37:30:0a:45:75:22:2e:57:c0:99:d7: fa:50:a5:3f:ae:66:0b:da:73:61:02:07:f0:f0:e1: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:12:76:56:2C:17:EF:13:89:91:15:83:E0:89:5A:79:50:84:2D:58 X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9c:15:e7:ad:30:e6:f2:1b:ab:81:67:54:4c:52:cf:21:ce: b2:e4:40:51:c3:c3:2d:88:96:3c:d8:8a:6c:30:de:dd:9a:28: 1a:e9:ae:f2:eb:03:be:b5:b0:bf:11:2a:ca:81:15:d1:75:a7: 56:16:31:db:27:b9:96:38:cd:ec:2b:45:a5:d1:c6:27:a1:47: 3a:26:d8:a6:69:4d:9f:9e:7b:0c:8d:70:48:1d:48:4f:80:44: c8:72:95:14:d7:70:8c:3d:fc:2c:72:b7:27:3c:29:63:2a:83: 0c:c0:94:4d:15:f7:44:54:a0:d9:ea:5b:13:fb:1b:06:9f:ed: 06:b5:f3:1d:b4:da:3f:7f:ab:e0:4c:cb:56:1f:4b:6e:9d:2f: 54:ba:d5:31:8e:5c:2c:0d:69:d3:16:57:ba:35:79:1a:92:fb: cf:6e:59:a7:95:7d:aa:1c:64:0f:42:5e:04:81:a3:24:1c:ed: c5:1e:d5:a7:ab:58:36:93:80:b8:b7:eb:8b:d5:be:60:c2:d5: 18:d3:08:05:e3:0f:c6:5f:e5:21:ef:63:da:80:ee:ec:73:71: 6d:fa:08:18:23:37:83:ec:c9:bc:89:ee:fb:97:cd:7d:e0:6d: 5b:af:a8:ae:ac:1b:3d:28:79:3a:56:cd:7a:c3:d4:de:3c:17: 03:55:fe:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjUwNzAyMjAyMTMwWhcNMjUwNzA5MjAyMTMwWjAYMRYwFAYD VQQDEw02ODY1OTRjYS1hZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT0Z/roEJMyELgnoYFr1JyNfQHsfYx8OKw01txVveBefJkcfA3OFO1ABZ8Y1 p8DSfUMl0MQzqW3U809vP1evHQ4Zbo+/bCE5/xhR4g6zsbb7ZGWiXn8LDbtFw7gc x10tr6RBgHsl+tVDquWQ/I85dDTcI+mcoP/QJMCtdzywvnMfjK0Gqo95ML+FEWrd 7LvqyrGCwfcpHZ0DAb/0Iy6sTU8jijrtMYCBxgYbgRRCR8DSMw8thraGhsQyJphD VeJzxNiIqbPAnbcnqat7vokfILBARz0lj5wcwxloLSq4Fty4TL1rNzAKRXUiLlfA mdf6UKU/rmYL2nNhAgfw8OFVRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0SdlYs F+8TiZEVg+CJWnlQhC1YMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsnBXnrTDm8hurgWdUTFLPIc6y5EBRw8MtiJY82IpsMN7dmiga6a7y 6wO+tbC/ESrKgRXRdadWFjHbJ7mWOM3sK0Wl0cYnoUc6JtimaU2fnnsMjXBIHUhP gETIcpUU13CMPfwscrcnPCljKoMMwJRNFfdEVKDZ6lsT+xsGn+0GtfMdtNo/f6vg TMtWH0tunS9UutUxjlwsDWnTFle6NXkakvvPblmnlX2qHGQPQl4EgaMkHO3FHtWn q1g2k4C4t+uL1b5gwtUY0wgF4w/GX+Uh72PagO7sc3Ft+ggYIzeD7Mm8ie77l819 4G1br6iurBs9KHk6Vs16w9TePBcDVf5c -----END CERTIFICATE-----Generated at Fri Jul 4 07:30:43 2025 by rpki-client