$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: cCAjTvUI9gfsWN9ODeQq2ckvbxNvb9mXap9ERTOW8lI= Subject key identifier: E6:1F:E7:E4:07:A8:92:92:DC:3B:C0:1D:DA:FE:9E:BC:FE:A6:F3:B3 Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 01BD Signing time: Wed 02 Jul 2025 23:55:36 +0000 Manifest this update: Wed 02 Jul 2025 23:55:35 +0000 Manifest next update: Wed 09 Jul 2025 23:55:35 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: urf1AtS8WluifbPvy+OXTnjNwSYafxDNA75j6xsQiqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Jul 2 23:55:35 2025 GMT Not After : Jul 9 23:55:35 2025 GMT Subject: CN=6865c6f7-9738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:1d:94:46:94:14:11:e3:72:70:82:cb:e4: 60:59:1e:bc:66:4b:4c:0b:7a:ca:44:ea:c1:82:74: 1b:6d:6c:71:0e:f2:e6:19:f0:ce:8e:d7:45:11:15: ff:9c:c4:62:94:0f:5b:7f:b1:f2:1d:86:90:5e:63: 15:80:7a:48:be:dc:c2:fc:e0:a8:a7:4e:d0:d9:7f: de:e8:d7:c7:b6:51:eb:a8:22:4e:eb:7e:47:38:75: 9b:2c:18:89:2c:b8:65:9a:3a:34:e8:7c:d8:90:68: 97:3d:2a:aa:31:1d:5e:d7:61:df:70:f8:45:5b:ce: dd:d8:6e:aa:4a:b5:df:79:c0:ee:16:84:91:46:97: be:76:06:1e:6e:e9:c9:5d:15:06:a9:ed:3f:55:2c: 70:2a:fc:47:33:2c:63:e4:59:35:fc:c8:bd:0a:94: 90:62:43:dc:22:8f:41:8a:89:8b:09:c8:85:5e:23: 75:db:90:f5:a6:8b:b0:6d:35:2d:4d:11:fb:9c:60: 94:e7:4b:c1:0a:20:3c:7b:84:70:f8:cd:cd:07:74: 5e:5d:05:5d:a8:63:5a:36:0e:e7:4f:6d:60:b2:d7: fb:53:af:4a:ff:7c:f8:78:94:ab:2e:9f:28:1d:2d: 0b:a5:7a:58:e6:93:82:b8:f6:0f:2d:ab:6f:cf:14: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1F:E7:E4:07:A8:92:92:DC:3B:C0:1D:DA:FE:9E:BC:FE:A6:F3:B3 X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:7c:c4:a8:ed:9b:4e:4b:41:70:35:b2:74:b2:bc:3f:60:5c: fe:07:bc:74:88:8a:cf:6b:b7:dc:4f:86:64:e9:f4:d9:dc:69: 3a:95:ae:ac:b0:48:30:ca:01:5e:f9:b2:72:91:e8:98:a6:b2: 27:f1:5c:24:3b:78:49:72:1a:2e:0d:80:69:70:43:59:b0:34: 0a:6d:95:8a:0b:05:c4:4d:d2:65:c2:2b:e5:f7:2f:84:1a:f1: 56:61:74:87:7e:d3:de:c0:e3:77:13:12:d6:6a:13:a4:ed:af: 08:a5:79:3c:05:1c:06:d2:f4:64:e6:67:63:45:62:54:4b:02: 38:f3:61:5d:15:00:4f:b1:bd:ca:19:60:7e:6d:10:73:b3:69: 4a:ce:7c:37:c7:01:c5:7f:5c:4a:61:65:10:c5:ef:35:f2:14: 82:16:72:73:70:10:c8:dc:c3:40:4c:06:c6:45:c6:3d:a6:84: 65:47:3f:bf:1c:4a:81:4c:28:14:7b:8a:05:6b:76:1c:e6:ca: 3e:81:5a:56:17:44:a3:df:96:08:72:5c:71:08:c3:96:27:a1: 4a:95:70:71:15:1f:53:cd:e1:69:5d:42:3b:35:01:73:19:30: 00:20:3b:31:c5:8b:16:94:cf:0b:2a:ff:e7:1b:b3:a4:9b:ee: 4e:c9:5d:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjUwNzAyMjM1NTM1WhcNMjUwNzA5MjM1NTM1WjAYMRYwFAYD VQQDEw02ODY1YzZmNy05NzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMwdlEaUFBHjcnCCy+RgWR68ZktMC3rKROrBgnQbbWxxDvLmGfDOjtdFERX/ nMRilA9bf7HyHYaQXmMVgHpIvtzC/OCop07Q2X/e6NfHtlHrqCJO635HOHWbLBiJ LLhlmjo06HzYkGiXPSqqMR1e12HfcPhFW87d2G6qSrXfecDuFoSRRpe+dgYebunJ XRUGqe0/VSxwKvxHMyxj5Fk1/Mi9CpSQYkPcIo9BiomLCciFXiN125D1pouwbTUt TRH7nGCU50vBCiA8e4Rw+M3NB3ReXQVdqGNaNg7nT21gstf7U69K/3z4eJSrLp8o HS0LpXpY5pOCuPYPLatvzxR35QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYf5+QH qJKS3DvAHdr+nrz+pvOzMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0fMSo7ZtOS0FwNbJ0srw/YFz+B7x0iIrPa7fcT4Zk6fTZ3Gk6la6s sEgwygFe+bJykeiYprIn8VwkO3hJchouDYBpcENZsDQKbZWKCwXETdJlwivl9y+E GvFWYXSHftPewON3ExLWahOk7a8IpXk8BRwG0vRk5mdjRWJUSwI482FdFQBPsb3K GWB+bRBzs2lKznw3xwHFf1xKYWUQxe818hSCFnJzcBDI3MNATAbGRcY9poRlRz+/ HEqBTCgUe4oFa3Yc5so+gVpWF0Sj35YIclxxCMOWJ6FKlXBxFR9TzeFpXUI7NQFz GTAAIDsxxYsWlM8LKv/nG7Okm+5OyV3a -----END CERTIFICATE-----Generated at Thu Jul 3 21:07:08 2025 by rpki-client