$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: MAF0R7bqgpzxAzggq78XIk6gL7PotkZGFs6ldOq6QnE= Subject key identifier: AF:72:A5:BE:DC:C5:9F:54:EC:F8:FB:2D:09:83:6E:C9:90:E5:78:21 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 233B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2309 Signing time: Tue 22 Jul 2025 15:56:46 +0000 Manifest this update: Tue 22 Jul 2025 15:56:45 +0000 Manifest next update: Tue 29 Jul 2025 15:56:45 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: EObxCKX7QqFB9axT/RIF1NIojQyD3QI/tpeARPCbzBQ=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ceQW0pBKYX0iNvGIXu+d5odgS50V86e35zycTc8Ud5M=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 15:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9019 (0x233b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Jul 22 15:56:45 2025 GMT Not After : Jul 29 15:56:45 2025 GMT Subject: CN=687fb4bd-b592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:2a:3c:02:ec:b2:af:29:b7:63:e5:46:3e: 6b:2b:af:85:cc:3b:57:d6:2e:b8:22:d6:4e:19:b6: e9:8c:d5:f2:5b:23:4a:cb:47:3b:ae:81:c0:57:63: 17:b4:2a:12:7e:eb:75:0d:79:ff:61:03:cb:9d:97: f0:45:f4:c3:49:d9:72:d1:23:0e:f5:95:46:e0:5b: b1:0f:a3:79:ba:b8:d8:aa:e3:9e:50:a3:b5:cb:a8: 49:d1:92:69:9f:68:12:8f:5d:1c:6d:cd:18:e6:4c: 46:76:bd:5b:90:69:f3:65:94:42:55:ee:ac:fd:83: 8a:12:a7:85:54:da:bf:d2:bf:78:86:0c:2d:3c:f4: 11:de:db:f0:c1:34:28:ba:f5:6d:5c:0e:83:70:3a: 0d:58:f9:94:6f:fb:22:56:e2:d3:da:65:17:89:83: 5a:67:6d:71:05:dc:2e:d8:84:2d:fc:4c:b9:fa:6d: bf:f7:19:25:9c:20:56:de:51:e0:df:5a:09:20:c2: d5:e2:2f:7e:7d:eb:72:c6:37:86:74:33:c8:72:08: 29:11:5a:8c:0a:1d:23:4f:a0:59:fb:8b:51:fe:41: c9:cf:54:3d:76:75:56:54:32:e0:d7:3b:5e:52:c1: f3:95:54:ed:9d:75:d1:ea:21:58:58:2a:b4:77:b0: cb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:72:A5:BE:DC:C5:9F:54:EC:F8:FB:2D:09:83:6E:C9:90:E5:78:21 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fa:2c:9f:68:28:24:85:43:ef:73:c6:de:78:27:cc:b2:06: 70:27:c3:ea:a5:3d:f3:39:26:d6:b6:bb:a6:f4:3d:a3:17:a5: 9d:7a:a6:44:79:27:8a:3d:3f:d7:77:0e:ba:11:13:0f:da:2e: bd:51:20:5a:f8:1d:af:62:37:8a:2e:4d:fc:76:b5:ac:e4:23: 7f:0a:c0:9b:c5:c4:2d:2e:6e:92:c1:e2:ac:0f:45:7f:28:31: 8a:a1:8b:f8:04:fc:b3:c4:3e:73:29:9c:9a:7a:77:66:65:39: a7:df:98:e7:0a:5f:da:ee:43:70:99:60:c1:6f:a9:50:ed:51: 55:94:f0:f8:fa:99:ff:0c:cc:c6:43:db:40:94:51:ce:e1:4e: 60:94:b3:d9:a6:3d:26:20:90:4b:d4:5d:f3:5c:91:c4:17:ff: 69:aa:58:a3:7d:80:d6:69:0b:17:55:99:47:9d:2a:2f:81:4d: 16:be:16:3f:f0:b4:a0:66:89:08:97:2f:68:32:33:a4:1f:40: 1d:9f:e0:cc:93:39:90:b9:1b:f4:fe:94:91:be:6c:2c:ad:4c: 9e:e9:3b:c2:36:c1:48:72:96:5e:67:21:67:24:c6:8a:d5:d0: a9:e7:e1:06:a9:89:6f:00:4b:54:50:e9:d8:f2:39:5e:c9:3d: 19:dd:6f:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjUwNzIyMTU1NjQ1WhcNMjUwNzI5MTU1NjQ1WjAYMRYwFAYD VQQDEw02ODdmYjRiZC1iNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYoqPALssq8pt2PlRj5rK6+FzDtX1i64ItZOGbbpjNXyWyNKy0c7roHAV2MX tCoSfut1DXn/YQPLnZfwRfTDSdly0SMO9ZVG4FuxD6N5urjYquOeUKO1y6hJ0ZJp n2gSj10cbc0Y5kxGdr1bkGnzZZRCVe6s/YOKEqeFVNq/0r94hgwtPPQR3tvwwTQo uvVtXA6DcDoNWPmUb/siVuLT2mUXiYNaZ21xBdwu2IQt/Ey5+m2/9xklnCBW3lHg 31oJIMLV4i9+fetyxjeGdDPIcggpEVqMCh0jT6BZ+4tR/kHJz1Q9dnVWVDLg1zte UsHzlVTtnXXR6iFYWCq0d7DLEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9ypb7c xZ9U7Pj7LQmDbsmQ5XghMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/+iyfaCgkhUPvc8beeCfMsgZwJ8PqpT3zOSbWtrum9D2jF6WdeqZE eSeKPT/Xdw66ERMP2i69USBa+B2vYjeKLk38drWs5CN/CsCbxcQtLm6SweKsD0V/ KDGKoYv4BPyzxD5zKZyaendmZTmn35jnCl/a7kNwmWDBb6lQ7VFVlPD4+pn/DMzG Q9tAlFHO4U5glLPZpj0mIJBL1F3zXJHEF/9pqlijfYDWaQsXVZlHnSovgU0WvhY/ 8LSgZokIly9oMjOkH0Adn+DMkzmQuRv0/pSRvmwsrUye6TvCNsFIcpZeZyFnJMaK 1dCp5+EGqYlvAEtUUOnY8jleyT0Z3W/d -----END CERTIFICATE-----Generated at Wed Jul 23 12:17:28 2025 by rpki-client