$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json) Hash identifier: A/rEUfOAfLT8TXIVaI8QwwNFRN4kA8KU4/Opkriq2L0= Subject key identifier: D2:26:89:39:50:B1:06:3B:F9:85:EF:CF:2E:E1:7A:F0:E9:68:C1:10 Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 25B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft Manifest number: 259F Signing time: Mon 30 Jun 2025 15:46:47 +0000 Manifest this update: Mon 30 Jun 2025 15:46:46 +0000 Manifest next update: Mon 07 Jul 2025 15:46:46 +0000 Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: EpKfrZyf8OJm3UqB3hmbz/Ybx6s9O/g37osb3Ac8vzE=) 2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: pVWyhrhr52dDPOhFrnd0oPU2DOTP+1UBjUuKhhhwO0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9656 (0x25b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: Jun 30 15:46:46 2025 GMT Not After : Jul 7 15:46:46 2025 GMT Subject: CN=6862b166-7172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:07:9f:de:42:69:87:f0:38:2b:c8:ad:ae: 49:7c:72:6b:58:72:cd:04:93:e1:b6:13:25:1e:6f: 15:27:14:f0:e9:c2:74:30:f2:20:c6:41:d9:20:10: 16:af:d6:de:97:b8:b9:dd:02:f2:1a:ac:52:94:05: e0:52:5e:2e:a0:c4:3a:bb:a4:af:df:d4:12:59:4b: 6d:7e:62:c1:12:db:36:6e:7f:0c:fa:5e:08:15:1e: 15:27:d5:c4:21:df:ef:e9:ce:72:cf:de:a5:48:10: d6:81:36:c9:ee:17:ba:68:84:5b:56:18:7c:c7:9d: 8d:19:35:f0:a9:0c:2e:0e:24:21:b7:96:a0:7b:6c: 6e:db:f2:e9:48:7b:3a:89:f0:b6:5d:c4:3e:ae:da: a4:28:33:27:90:6e:62:d4:25:5e:41:df:77:9b:eb: 5a:8f:02:05:ea:0f:47:13:e7:3f:b4:25:ca:c0:6e: 72:ff:f3:9f:32:a3:f6:1d:44:27:d3:23:d1:33:26: 08:5f:65:91:27:3c:66:38:69:74:4a:87:64:39:84: 0e:0d:8a:1c:12:4b:6d:5c:7b:0d:9f:8b:10:dd:6b: 69:39:e8:c8:6e:12:34:f1:81:3a:bb:ec:29:a0:58: ed:0b:72:b1:01:77:3f:b0:da:b9:95:4b:a7:6f:b5: 4b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:26:89:39:50:B1:06:3B:F9:85:EF:CF:2E:E1:7A:F0:E9:68:C1:10 X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:28:03:68:bf:6b:25:15:bf:e6:c0:16:41:76:f3:03:cf:ae: 08:41:90:86:29:4e:ea:e4:8e:c1:d6:27:4e:bc:04:04:1d:cf: b1:bf:1b:e9:8f:fd:4e:11:50:d5:b5:d7:c4:d9:7f:5a:17:31: a5:52:63:ce:52:84:7b:43:e8:8e:b7:0f:1e:6e:40:32:ff:c4: d2:d3:4d:dc:3d:19:38:f2:86:75:71:35:cc:54:e7:ae:54:61: 9d:81:04:56:ce:7a:ea:f9:78:a8:5e:17:17:7b:12:90:11:b4: dd:72:9b:3c:7d:dc:f9:9d:ed:43:3d:a0:91:d3:f0:65:0b:98: d7:2e:1f:98:98:2d:43:30:93:26:99:ef:ab:8f:34:c1:b7:02: 58:b9:58:29:86:d1:7d:c8:c5:66:f4:83:5a:0e:91:90:0e:5a: 51:a3:b1:d7:17:0b:ad:65:8d:10:fb:34:bf:0d:f2:41:a7:75: 0a:79:c7:c7:47:09:94:78:bc:8c:c2:db:2d:d4:a1:00:38:ba: 28:29:e6:0a:3f:e7:14:dd:88:9a:cd:14:54:c0:84:b4:9c:a8: 4c:c5:61:cd:7c:ea:91:04:9f:be:29:57:b5:ed:29:06:3c:5b: dd:e6:cd:68:10:73:46:b0:94:ba:d7:c5:f6:b0:ee:88:b3:d2: c9:23:68:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjUwNjMwMTU0NjQ2WhcNMjUwNzA3MTU0NjQ2WjAYMRYwFAYD VQQDEw02ODYyYjE2Ni03MTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53cHn95CaYfwOCvIra5JfHJrWHLNBJPhthMlHm8VJxTw6cJ0MPIgxkHZIBAW r9bel7i53QLyGqxSlAXgUl4uoMQ6u6Sv39QSWUttfmLBEts2bn8M+l4IFR4VJ9XE Id/v6c5yz96lSBDWgTbJ7he6aIRbVhh8x52NGTXwqQwuDiQht5age2xu2/LpSHs6 ifC2XcQ+rtqkKDMnkG5i1CVeQd93m+tajwIF6g9HE+c/tCXKwG5y//OfMqP2HUQn 0yPRMyYIX2WRJzxmOGl0SodkOYQODYocEkttXHsNn4sQ3WtpOejIbhI08YE6u+wp oFjtC3KxAXc/sNq5lUunb7VLtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNImiTlQ sQY7+YXvzy7hevDpaMEQMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly Mklia0M5cVNmMVhjYl9QbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcKANov2slFb/mwBZBdvMDz64IQZCGKU7q5I7B1idOvAQEHc+xvxvp j/1OEVDVtdfE2X9aFzGlUmPOUoR7Q+iOtw8ebkAy/8TS003cPRk48oZ1cTXMVOeu VGGdgQRWznrq+XioXhcXexKQEbTdcps8fdz5ne1DPaCR0/BlC5jXLh+YmC1DMJMm me+rjzTBtwJYuVgphtF9yMVm9INaDpGQDlpRo7HXFwutZY0Q+zS/DfJBp3UKecfH RwmUeLyMwtst1KEAOLooKeYKP+cU3YiazRRUwIS0nKhMxWHNfOqRBJ++KVe17SkG PFvd5s1oEHNGsJS618X2sO6Is9LJI2jG -----END CERTIFICATE-----Generated at Tue Jul 1 15:26:37 2025 by rpki-client