$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: fB2/DCu/1c6501qSwnG9SDSdOcg/npJ3/m44Y57HSbM= Subject key identifier: 64:51:94:E1:68:B4:57:69:78:EB:65:4F:E7:FE:AD:C9:1F:EB:A5:39 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 06AE Signing time: Fri 18 Jul 2025 22:27:29 +0000 Manifest this update: Fri 18 Jul 2025 22:27:28 +0000 Manifest next update: Fri 25 Jul 2025 22:27:28 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: P+t4RqwDeysokPkOos41qTHHyDhtoLTFy5eltPQ1Z+U=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Jul 18 22:27:28 2025 GMT Not After : Jul 25 22:27:28 2025 GMT Subject: CN=687aca51-71e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:2e:d9:9d:4c:db:05:fc:ae:53:ea:4a:69: ff:1b:03:51:7d:57:b7:26:5b:34:ad:42:b8:f2:84: 1f:59:2a:b3:8f:d5:a4:4a:cc:28:20:61:84:56:ac: cc:11:1a:16:90:81:75:6b:d6:84:bc:07:09:85:bd: cd:5a:99:2c:1b:46:3a:50:a1:0b:6b:be:e2:50:29: ef:91:77:43:82:65:fb:64:96:a0:3c:d8:28:dd:84: 2a:8a:7c:ba:42:d3:2d:17:4c:40:dd:41:88:17:40: 33:2e:02:8f:71:90:fe:6f:a3:7e:1f:19:50:88:be: 3f:c5:06:e0:6b:b7:a2:e4:ef:70:58:f7:95:22:df: c1:3e:c1:5a:e2:c9:dd:20:2a:a4:ce:e7:6a:ff:2e: 28:4e:02:1d:05:0b:6a:93:fe:89:04:39:25:e4:51: 87:93:7d:d2:68:2b:c2:e7:b6:5d:b0:71:2a:a3:27: ad:0b:8b:0c:e4:21:17:6f:6e:82:1c:5e:bd:0e:e3: ed:20:32:91:fb:21:9f:a6:30:77:fc:d4:3d:4a:0e: e6:52:17:02:4e:ee:f3:af:97:36:18:67:5b:d0:1b: 99:da:6f:d2:3b:8c:de:0d:53:c7:f6:5d:69:57:5d: 69:1d:0a:38:1c:e0:25:6f:12:15:83:e0:68:64:3a: 6d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:51:94:E1:68:B4:57:69:78:EB:65:4F:E7:FE:AD:C9:1F:EB:A5:39 X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e2:a2:7b:80:5a:ed:f9:e1:62:f7:bb:16:ca:57:f5:26:5a: 04:89:fc:e1:9a:ac:d2:85:77:1f:2c:91:76:b0:f9:5a:fd:d5: 6d:af:47:dd:4b:8f:06:b0:32:ce:29:85:af:c0:fe:e9:24:17: 50:8f:2e:82:c8:5a:c7:fb:c5:07:e1:a5:18:b8:03:0a:a4:58: ba:07:d2:ee:8a:16:76:19:98:26:ee:a0:bc:67:8a:c3:82:d1: ec:85:16:71:c5:82:e0:1a:d8:97:e6:11:ea:9b:3b:9b:bb:c3: d2:03:bd:06:01:f8:a1:bf:5d:01:7f:87:90:7e:62:fa:02:7c: a9:ca:ef:d8:c6:13:2c:db:ad:71:e3:7f:36:85:2b:ad:3f:7f: 62:2a:cb:83:17:4e:fa:e7:82:f6:36:75:3d:2e:13:42:1a:02: d6:42:ac:95:eb:18:5c:dc:4d:89:2a:06:92:d1:93:8e:48:df: 5f:42:b4:16:4f:0b:da:31:2f:fa:71:80:f4:6e:e6:f6:b9:0f: c1:93:e5:37:6e:7b:f5:22:62:56:af:12:59:3d:c5:36:59:23: f6:3d:0e:a4:a9:d6:ca:48:cf:fa:ea:c1:f0:7e:79:9a:8e:af: 23:7a:f8:ea:0b:56:71:e1:cb:49:ed:ca:b1:04:65:cb:f1:64: 1c:49:49:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUwNzE4MjIyNzI4WhcNMjUwNzI1MjIyNzI4WjAYMRYwFAYD VQQDEw02ODdhY2E1MS03MWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT0u2Z1M2wX8rlPqSmn/GwNRfVe3Jls0rUK48oQfWSqzj9WkSswoIGGEVqzM ERoWkIF1a9aEvAcJhb3NWpksG0Y6UKELa77iUCnvkXdDgmX7ZJagPNgo3YQqiny6 QtMtF0xA3UGIF0AzLgKPcZD+b6N+HxlQiL4/xQbga7ei5O9wWPeVIt/BPsFa4snd ICqkzudq/y4oTgIdBQtqk/6JBDkl5FGHk33SaCvC57ZdsHEqoyetC4sM5CEXb26C HF69DuPtIDKR+yGfpjB3/NQ9Sg7mUhcCTu7zr5c2GGdb0BuZ2m/SO4zeDVPH9l1p V11pHQo4HOAlbxIVg+BoZDptSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRRlOFo tFdpeOtlT+f+rckf66U5MB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx4qJ7gFrt+eFi97sWylf1JloEifzhmqzShXcfLJF2sPla/dVtr0fd S48GsDLOKYWvwP7pJBdQjy6CyFrH+8UH4aUYuAMKpFi6B9LuihZ2GZgm7qC8Z4rD gtHshRZxxYLgGtiX5hHqmzubu8PSA70GAfihv10Bf4eQfmL6Anypyu/YxhMs261x 4382hSutP39iKsuDF07654L2NnU9LhNCGgLWQqyV6xhc3E2JKgaS0ZOOSN9fQrQW TwvaMS/6cYD0bub2uQ/Bk+U3bnv1ImJWrxJZPcU2WSP2PQ6kqdbKSM/66sHwfnma jq8jevjqC1Zx4ctJ7cqxBGXL8WQcSUnk -----END CERTIFICATE-----Generated at Sun Jul 20 10:14:48 2025 by rpki-client