$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: /RbyeSaTjwHohxhX6lfJNYgC90PUh0DSmfyWdJOu3Xw= Subject key identifier: 40:F2:0A:7F:8A:13:92:C2:7F:83:60:E2:7F:B9:56:79:6D:A4:AA:48 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 06DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 06CD Signing time: Fri 18 Jul 2025 22:22:28 +0000 Manifest this update: Fri 18 Jul 2025 22:22:28 +0000 Manifest next update: Fri 25 Jul 2025 22:22:28 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: C4nGqVomkDqG3sYUN8ECPEQR7ZLeFFyZSSVxsP6hZKc=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1756 (0x6dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Jul 18 22:22:28 2025 GMT Not After : Jul 25 22:22:28 2025 GMT Subject: CN=687ac924-4230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0c:9b:76:b2:24:3f:3d:a0:6a:71:2f:3b:be: fe:2e:e6:b9:cb:44:17:5b:1c:cd:0a:fa:fb:6b:d2: e3:40:49:74:2e:e3:6b:73:10:e5:b3:7e:76:58:b2: 23:ef:cd:f7:47:08:e2:f5:ec:7a:17:a7:31:f2:ef: 60:ff:28:e1:24:0a:0b:fe:00:11:8d:63:73:63:b4: 94:74:09:8c:f0:60:0e:c3:8a:db:c8:22:2d:2b:f5: 9e:88:87:57:a6:28:09:58:7c:6d:f4:8e:34:63:d1: 30:fb:81:05:1f:ef:31:d5:5e:d1:f6:38:c2:05:0c: 21:ac:c3:51:1a:49:e3:b3:7c:99:38:30:59:1f:ad: 47:89:e6:f7:e4:ae:d7:77:d2:a1:50:11:04:b2:5d: 0d:f3:94:c1:3a:e1:23:74:42:c9:5b:b4:c2:e5:35: d8:73:ab:33:f5:00:46:58:06:90:2e:e6:a7:0d:38: ea:e2:78:2d:1f:a5:6d:63:0e:f0:8e:68:7f:4b:60: c8:91:2f:fe:3c:59:ac:54:64:7d:db:4a:60:82:04: 97:08:fa:3f:1b:97:de:9b:8a:9c:9f:f4:d1:df:32: 8c:fa:91:c7:2c:21:20:bd:f4:7f:f9:06:61:aa:78: 27:b3:dd:b7:54:53:6a:2e:a8:39:15:bd:39:26:b2: 21:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F2:0A:7F:8A:13:92:C2:7F:83:60:E2:7F:B9:56:79:6D:A4:AA:48 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:81:ff:e1:1d:67:0b:f0:5b:49:41:db:10:a1:0c:f1:17:a0: c7:a4:04:12:0b:1e:7e:09:93:af:77:b9:12:ee:15:76:8d:98: fc:de:cb:82:93:de:69:34:7a:af:52:b7:28:ea:28:ba:9e:d5: 49:34:6c:df:77:14:9f:c2:43:ba:15:a1:14:81:8f:9b:72:6a: 0a:c0:2b:4f:dc:cb:6e:f0:0f:86:8d:68:3e:a4:43:eb:6b:8a: 5d:07:e8:1e:3e:09:82:ca:fc:05:1d:00:c9:bd:1f:cd:2f:e3: fe:18:a1:74:de:8e:cf:b1:6b:55:4e:aa:8c:14:05:84:e8:db: 13:a4:c0:98:af:ed:fe:28:e3:c5:3f:a0:cf:76:9a:97:a4:4b: 25:cd:42:8a:05:62:82:fb:d7:a0:92:b9:bb:b2:3d:4a:6b:09: b4:f5:75:08:dc:05:e7:b6:23:01:b8:5d:f5:78:f6:cd:a1:c0: d0:34:e5:48:3d:85:60:3e:ef:fb:93:c1:a6:7a:32:f6:d2:2a: 76:5d:9f:6f:d9:6f:3e:f9:47:e8:10:be:f2:2d:3e:6c:8b:e4: 27:34:09:de:66:a2:5a:f3:c2:2d:67:5e:00:f4:74:56:5d:7e: 0d:99:30:5e:d5:9b:d2:04:28:9d:84:02:76:21:b7:85:ec:35: 47:bd:98:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjUwNzE4MjIyMjI4WhcNMjUwNzI1MjIyMjI4WjAYMRYwFAYD VQQDEw02ODdhYzkyNC00MjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gybdrIkPz2ganEvO77+Lua5y0QXWxzNCvr7a9LjQEl0LuNrcxDls352WLIj 7833Rwji9ex6F6cx8u9g/yjhJAoL/gARjWNzY7SUdAmM8GAOw4rbyCItK/WeiIdX pigJWHxt9I40Y9Ew+4EFH+8x1V7R9jjCBQwhrMNRGknjs3yZODBZH61Hieb35K7X d9KhUBEEsl0N85TBOuEjdELJW7TC5TXYc6sz9QBGWAaQLuanDTjq4ngtH6VtYw7w jmh/S2DIkS/+PFmsVGR920pgggSXCPo/G5fem4qcn/TR3zKM+pHHLCEgvfR/+QZh qngns923VFNqLqg5Fb05JrIhHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDyCn+K E5LCf4Ng4n+5VnltpKpIMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtgf/hHWcL8FtJQdsQoQzxF6DHpAQSCx5+CZOvd7kS7hV2jZj83suC k95pNHqvUrco6ii6ntVJNGzfdxSfwkO6FaEUgY+bcmoKwCtP3Mtu8A+GjWg+pEPr a4pdB+gePgmCyvwFHQDJvR/NL+P+GKF03o7PsWtVTqqMFAWE6NsTpMCYr+3+KOPF P6DPdpqXpEslzUKKBWKC+9egkrm7sj1Kawm09XUI3AXntiMBuF31ePbNocDQNOVI PYVgPu/7k8GmejL20ip2XZ9v2W8++UfoEL7yLT5si+QnNAneZqJa88ItZ14A9HRW XX4NmTBe1ZvSBCidhAJ2IbeF7DVHvZgg -----END CERTIFICATE-----Generated at Sun Jul 20 20:45:21 2025 by rpki-client