$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft File: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json) Hash identifier: VfqsO56EAiMI79guagMbRSL7RDOMIT4atHFeo87FUfs= Subject key identifier: 85:83:12:7E:13:83:F5:28:BC:27:D2:6B:DB:10:AE:79:A8:CC:7F:C4 Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C Certificate issuer: /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft Manifest number: 069E Signing time: Tue 22 Jul 2025 22:31:34 +0000 Manifest this update: Tue 22 Jul 2025 22:31:33 +0000 Manifest next update: Tue 29 Jul 2025 22:31:33 +0000 Files and hashes: 1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: BgkgPF3+b0WOlPBoBZtIz5fdWSTL+JzgBydgk3akBzM=) 2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: 53zKcN6L7abJ9zpJ1rsGk1CMb4hTUDymJuK8BDIQ0eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 22:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91569FB, serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Validity Not Before: Jul 22 22:31:33 2025 GMT Not After : Jul 29 22:31:33 2025 GMT Subject: CN=68801145-f30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:35:22:36:0e:be:c7:47:73:85:b6:88:2a: ed:9c:49:6b:c9:ec:72:c8:98:3f:51:5c:02:d0:fd: e7:87:b9:83:1e:f5:bd:71:f8:b1:fd:41:2e:ed:62: f2:90:27:15:fd:da:67:37:8b:15:2c:e7:b3:df:55: 2d:af:03:01:08:2d:20:f7:54:6b:96:6c:a4:96:80: 6f:02:ef:31:e9:39:89:94:9f:29:4c:48:5f:ac:83: 28:7e:f2:7a:f8:9b:e5:90:55:ae:db:fd:e5:01:82: 53:c8:a3:0f:dd:18:31:a1:6b:27:5e:43:d6:6f:8c: 9c:27:26:46:e9:90:e8:66:55:5f:bd:5b:10:7b:eb: d4:bd:dd:9f:b0:de:11:f3:8b:61:72:73:52:88:19: bb:64:96:4d:e0:6b:3c:83:05:df:b3:b8:e3:03:2b: 41:30:b6:ae:cb:88:2f:a9:0a:a3:f3:78:b7:39:ec: a0:b2:67:79:50:33:49:2b:12:98:5c:6e:52:6a:28: 16:e6:2e:a3:82:22:4a:56:6a:60:d7:0d:db:09:39: 9f:92:f0:48:6a:11:da:6d:49:00:d7:71:24:7b:ab: e2:74:7a:1b:cd:55:b6:38:4d:57:89:ca:cc:1a:4c: 8c:c3:0d:f0:09:48:64:30:80:aa:55:18:3f:9b:e2: fb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:83:12:7E:13:83:F5:28:BC:27:D2:6B:DB:10:AE:79:A8:CC:7F:C4 X509v3 Authority Key Identifier: keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:6b:37:8f:49:e1:7a:d8:0a:82:36:ee:a1:25:45:38:73:20: 84:3a:24:07:c7:af:71:61:bd:ba:a0:13:94:c6:63:d0:79:92: 78:48:a8:08:e6:67:8d:d3:40:cd:e8:c0:ca:1f:8c:f0:2c:4a: 8d:14:0d:b1:d1:89:94:f5:2f:c4:03:ff:e1:cb:7a:12:a6:ff: f4:f3:b9:c2:d2:3c:5d:15:7d:24:47:e6:a0:30:eb:f3:f2:09: a6:c8:c3:00:32:16:9f:df:d5:42:ca:93:1a:f7:eb:68:1b:d4: 7e:75:49:61:30:0a:21:19:1b:50:76:86:95:e8:e9:a5:a9:42: 76:c2:c3:d0:d1:92:14:99:46:39:b0:eb:57:29:dd:95:33:14: cf:90:e6:6e:bd:fc:64:5f:a0:2b:df:e4:a0:d8:4b:1d:d8:38: 12:50:09:83:68:80:6d:b9:db:0d:12:61:7b:49:04:ae:54:ad: 6a:53:a3:f6:f2:05:84:a0:80:de:da:16:94:07:f3:c8:c9:a2: 98:93:dc:d8:7a:fc:3c:24:18:95:ab:28:0d:3c:90:ba:d6:d7: 9e:f3:c9:83:2c:ee:90:79:54:bf:16:d8:35:b4:60:1c:e8:3d: 1e:b2:10:ee:00:06:d3:2e:bc:b2:0f:1e:c3:e0:b9:48:69:e4: dc:0e:e5:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5RkIxMTAvBgNVBAUTKDVERUUxNkVGODVBMkJGODREQUQ4ODc2NjY3NTlCMUVD MTVEMUI5NEMwHhcNMjUwNzIyMjIzMTMzWhcNMjUwNzI5MjIzMTMzWjAYMRYwFAYD VQQDEw02ODgwMTE0NS1mMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZk1IjYOvsdHc4W2iCrtnElryexyyJg/UVwC0P3nh7mDHvW9cfix/UEu7WLy kCcV/dpnN4sVLOez31UtrwMBCC0g91RrlmykloBvAu8x6TmJlJ8pTEhfrIMofvJ6 +JvlkFWu2/3lAYJTyKMP3RgxoWsnXkPWb4ycJyZG6ZDoZlVfvVsQe+vUvd2fsN4R 84thcnNSiBm7ZJZN4Gs8gwXfs7jjAytBMLauy4gvqQqj83i3Oeygsmd5UDNJKxKY XG5SaigW5i6jgiJKVmpg1w3bCTmfkvBIahHabUkA13Eke6vidHobzVW2OE1XicrM GkyMww3wCUhkMICqVRg/m+L77QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWDEn4T g/UovCfSa9sQrnmozH/EMB8GA1UdIwQYMBaAFF3uFu+For+E2tiHZmdZsewV0blM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjlGQi84REUxRENEQTc2 MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0VGEySWRtWjFteDdCWFJ1 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlNFc3NFdpdjRUYTJJZG1aMW14N0JYUnVVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjlGQi84REUxRENEQTc2MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0 VGEySWRtWjFteDdCWFJ1VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVazePSeF62AqCNu6hJUU4cyCEOiQHx69xYb26oBOUxmPQeZJ4SKgI 5meN00DN6MDKH4zwLEqNFA2x0YmU9S/EA//hy3oSpv/087nC0jxdFX0kR+agMOvz 8gmmyMMAMhaf39VCypMa9+toG9R+dUlhMAohGRtQdoaV6OmlqUJ2wsPQ0ZIUmUY5 sOtXKd2VMxTPkOZuvfxkX6Ar3+Sg2Esd2DgSUAmDaIBtudsNEmF7SQSuVK1qU6P2 8gWEoIDe2haUB/PIyaKYk9zYevw8JBiVqygNPJC61tee88mDLO6QeVS/Ftg1tGAc 6D0eshDuAAbTLryyDx7D4LlIaeTcDuXI -----END CERTIFICATE-----Generated at Wed Jul 23 12:49:40 2025 by rpki-client