$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json) Hash identifier: O5g7g02s1hywlYNJu++wjoJto0DB2eR0t+08ov5Kpdw= Subject key identifier: ED:3A:CD:26:6C:04:FE:BB:96:86:E4:82:5E:55:91:4D:A5:DA:5E:40 Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Certificate serial: 1927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft Manifest number: 191C Signing time: Tue 22 Jul 2025 16:34:29 +0000 Manifest this update: Tue 22 Jul 2025 16:34:29 +0000 Manifest next update: Tue 29 Jul 2025 16:34:29 +0000 Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: oSeY8aNJummURBmpoIkYhzeEP49QGPG3HduGKNwVgHU=) 2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: CF41fEpYfOio5+N+rdP4mHFE/1R/CEvPcYP/7UAC+WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 16:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6439 (0x1927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Validity Not Before: Jul 22 16:34:29 2025 GMT Not After : Jul 29 16:34:29 2025 GMT Subject: CN=687fbd95-df9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:23:5b:9c:6b:00:70:62:cb:9f:62:7d:bf: 9b:62:c7:ea:18:6c:0c:6e:f5:74:e0:56:3d:d3:6a: 07:a6:90:97:2b:a4:6e:e4:ae:2b:7c:47:05:b7:2f: fa:6e:aa:d1:04:fb:9a:a1:4b:d3:26:e0:79:d2:79: 6e:65:0a:60:c7:15:38:6e:32:64:5f:d7:a6:e0:4d: cf:d5:bb:da:e8:c5:68:26:8c:6b:af:e8:2f:89:85: b4:65:4a:f2:25:15:db:19:7f:62:04:20:dc:87:78: dd:b2:47:3c:3f:f7:7e:0e:32:4c:f7:2d:1f:7e:ae: 33:a7:59:e0:c4:c1:a5:3e:64:11:aa:16:6d:a2:68: 7c:ed:b8:68:c3:17:c4:06:a1:4d:12:b1:57:15:65: 92:e4:ab:61:b3:39:90:df:21:3a:7f:3c:3c:30:93: 77:d2:84:e9:f9:eb:30:81:73:05:cb:14:fd:73:c7: 7a:7b:63:1c:78:d5:f4:55:cf:03:47:a9:45:ba:56: 63:92:96:c5:f6:3d:b0:63:8b:d6:ac:b4:01:81:d0: e1:08:7c:f6:6a:b8:05:32:47:7c:1f:38:f6:aa:03: c1:1e:c2:49:8f:34:b4:11:1c:8f:22:c7:16:c2:29: 94:73:31:22:ea:f6:c7:cd:9b:b2:4f:4c:ee:bf:86: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3A:CD:26:6C:04:FE:BB:96:86:E4:82:5E:55:91:4D:A5:DA:5E:40 X509v3 Authority Key Identifier: keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:ac:66:cb:c1:ed:b2:4c:06:f1:e2:29:72:57:64:33:e1:a9: 78:96:b8:0b:6c:45:ab:68:b7:0f:f7:98:77:87:34:18:fe:8c: 47:9c:e2:bb:1a:19:7c:b7:de:94:e1:68:a2:ac:a2:da:e9:bb: 0a:78:42:22:3a:5e:e5:65:0c:ec:12:cb:c4:fa:98:01:11:5f: ad:5e:b4:4b:24:80:72:b1:bb:9e:40:0e:1a:67:da:2c:7c:74: 3d:12:60:61:c7:5b:18:2b:35:4f:6f:b2:d6:ed:af:ca:4f:c6: 74:b9:ce:7c:b1:3c:b4:e4:2d:e9:af:fa:88:2d:d0:7e:6f:38: ba:e1:bc:e9:a0:ba:bc:c2:f7:c7:2c:ce:bf:90:39:fc:24:54: 6e:f7:f4:fd:2f:6d:bb:ec:b4:2f:3a:e4:95:74:6e:92:a7:21: 7b:36:00:3e:5d:25:d3:a7:00:9c:d5:e1:ff:d6:2a:ed:b9:d6: 43:7f:67:6d:21:2a:f6:d7:43:03:94:59:78:02:fc:2b:60:fa: 31:cd:1f:ae:d7:db:88:14:47:91:35:5c:68:be:de:7a:9f:12: 7b:49:a8:5b:d7:75:89:29:f9:20:52:d0:11:40:4f:92:62:de: 20:24:11:b6:70:94:31:46:8c:fc:8b:ef:f4:5c:91:29:01:6c: a0:4a:44:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNjExMTAvBgNVBAUTKEM0OEFBQ0VCNEREQUVFM0M2MDQyRTY2MjE2QUQ3OTE1 MDdCNDdDNkIwHhcNMjUwNzIyMTYzNDI5WhcNMjUwNzI5MTYzNDI5WjAYMRYwFAYD VQQDEw02ODdmYmQ5NS1kZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhojW5xrAHBiy59ifb+bYsfqGGwMbvV04FY902oHppCXK6Ru5K4rfEcFty/6 bqrRBPuaoUvTJuB50nluZQpgxxU4bjJkX9em4E3P1bva6MVoJoxrr+gviYW0ZUry JRXbGX9iBCDch3jdskc8P/d+DjJM9y0ffq4zp1ngxMGlPmQRqhZtomh87bhowxfE BqFNErFXFWWS5KthszmQ3yE6fzw8MJN30oTp+eswgXMFyxT9c8d6e2MceNX0Vc8D R6lFulZjkpbF9j2wY4vWrLQBgdDhCHz2argFMkd8Hzj2qgPBHsJJjzS0ERyPIscW wimUczEi6vbHzZuyT0zuv4atYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO06zSZs BP67lobkgl5VkU2l2l5AMB8GA1UdIwQYMBaAFMSKrOtN2u48YELmYhateRUHtHxr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY2MS8xNkE2REM2MDgz REExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdqeGdRdVppRnExNUZRZTBm R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJcXM2MDNhN2p4Z1F1WmlGcTE1RlFlMGZHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY2MS8xNkE2REM2MDgzREExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdq eGdRdVppRnExNUZRZTBmR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKrGbLwe2yTAbx4ilyV2Qz4al4lrgLbEWraLcP95h3hzQY/oxHnOK7 Ghl8t96U4WiirKLa6bsKeEIiOl7lZQzsEsvE+pgBEV+tXrRLJIBysbueQA4aZ9os fHQ9EmBhx1sYKzVPb7LW7a/KT8Z0uc58sTy05C3pr/qILdB+bzi64bzpoLq8wvfH LM6/kDn8JFRu9/T9L2277LQvOuSVdG6SpyF7NgA+XSXTpwCc1eH/1irtudZDf2dt ISr210MDlFl4AvwrYPoxzR+u19uIFEeRNVxovt56nxJ7Sahb13WJKfkgUtARQE+S Yt4gJBG2cJQxRoz8i+/0XJEpAWygSkR5 -----END CERTIFICATE-----Generated at Wed Jul 23 08:20:25 2025 by rpki-client