$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json) Hash identifier: kkcMi24V6sPkZISbDWDTIiqQZCy/GE2zNunczu45wVM= Subject key identifier: 2D:D3:DC:25:34:CD:CA:62:F7:AB:0B:9D:8B:8A:9B:D6:C9:E8:C1:FB Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft Manifest number: 0197 Signing time: Mon 21 Jul 2025 03:29:53 +0000 Manifest this update: Mon 21 Jul 2025 03:29:52 +0000 Manifest next update: Mon 28 Jul 2025 03:29:52 +0000 Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: 4HBNQhbXL2zXRG59tbxU+taXkSQV30U4cLVCzPpNL1c=) 2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: SO9SbWUjXyJ9Yb5w7Q+6mTlLwT6ktJsJ2PGUdf4nf50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Validity Not Before: Jul 21 03:29:52 2025 GMT Not After : Jul 28 03:29:52 2025 GMT Subject: CN=687db431-2b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:ed:3c:88:86:ca:ac:cc:85:46:69:8f:b0: 35:7c:ad:0a:27:01:88:4c:24:c3:f2:71:cb:d1:bc: a7:b7:61:66:f7:7c:a4:56:0f:79:30:89:17:a7:78: 19:78:f3:ff:1e:e3:82:58:ad:46:d7:f4:b3:0d:e0: 4e:5b:11:8a:f3:a1:41:8b:35:98:ee:f6:72:06:68: 72:8b:30:b4:86:5a:68:1a:83:96:37:fe:8f:dd:25: fd:e8:ce:1f:80:db:2f:15:de:1c:d8:97:77:53:78: 92:9e:b7:5d:6e:87:33:40:b3:8c:5b:55:45:d4:05: ea:15:30:dd:f6:da:ab:09:05:db:be:52:f1:74:a5: ab:9e:11:8a:47:7d:d6:db:c4:12:49:09:84:b8:b8: 42:5b:a0:44:ca:2c:6d:17:c5:70:c8:4b:a8:21:91: 07:16:7f:11:8f:2d:fc:54:51:d1:51:4e:7a:a0:fc: 57:00:ce:e3:35:f0:02:a4:f8:84:ff:30:ed:4c:0a: 86:9d:fe:81:e1:8c:9d:8e:05:8e:18:f9:4a:ae:55: 78:11:45:50:46:22:1f:9b:c9:3d:15:c6:4b:33:dd: 40:1b:26:00:7a:6b:de:13:b3:69:fb:76:86:7e:13: 8f:09:85:d1:14:ea:16:99:61:b1:c1:95:6d:74:30: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D3:DC:25:34:CD:CA:62:F7:AB:0B:9D:8B:8A:9B:D6:C9:E8:C1:FB X509v3 Authority Key Identifier: keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:38:bf:91:39:19:e6:f2:e6:ec:f8:b0:8d:bb:45:33:72:0c: 8d:45:28:7a:26:2f:9f:cd:e0:5f:b9:39:c2:10:a9:bc:82:ad: ac:6b:0d:4b:75:18:16:8b:61:f0:c0:a2:6b:6e:f3:3f:4b:33: 43:60:36:ff:cd:a9:f0:58:65:7f:43:05:75:5f:48:5d:77:30: 82:88:62:2c:57:1f:29:99:af:59:6a:03:82:cf:b4:94:79:16: fe:c6:6f:e5:88:96:ae:a1:85:11:c9:71:6b:76:7b:c2:87:cf: a9:8a:3a:ce:3e:92:bd:93:33:c1:81:26:03:8c:ee:ef:e1:ec: 9d:80:7e:b0:76:a8:9f:58:8c:c5:d2:7f:d1:11:81:8f:ab:67: 8b:dc:36:4e:b1:c0:8e:f3:fc:7b:50:39:59:89:cb:bf:48:cb: a9:4d:04:db:77:30:0d:64:4d:e3:74:d4:55:fa:71:d5:3e:b4: 70:f6:38:70:f4:a2:3e:50:bf:ce:2e:1d:4a:c7:ff:01:f7:35: 30:71:75:8f:db:7b:d1:cc:29:bf:0b:4f:e7:40:be:1b:60:3b: 88:2f:ea:83:80:5a:bc:09:5d:0f:46:8e:d5:b8:ee:68:c6:ee: 4c:78:bf:8f:48:89:9b:54:af:e4:45:d8:7a:db:d3:3f:8f:d8: 94:0c:d6:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzQTkxMTAvBgNVBAUTKDVDMTdBRjJFMEFBRjQ5MENFQUE4NEUyQUFBNzE0ODNE MDM5NUYxRTQwHhcNMjUwNzIxMDMyOTUyWhcNMjUwNzI4MDMyOTUyWjAYMRYwFAYD VQQDEw02ODdkYjQzMS0yYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiXtPIiGyqzMhUZpj7A1fK0KJwGITCTD8nHL0bynt2Fm93ykVg95MIkXp3gZ ePP/HuOCWK1G1/SzDeBOWxGK86FBizWY7vZyBmhyizC0hlpoGoOWN/6P3SX96M4f gNsvFd4c2Jd3U3iSnrddboczQLOMW1VF1AXqFTDd9tqrCQXbvlLxdKWrnhGKR33W 28QSSQmEuLhCW6BEyixtF8VwyEuoIZEHFn8Rjy38VFHRUU56oPxXAM7jNfACpPiE /zDtTAqGnf6B4YydjgWOGPlKrlV4EUVQRiIfm8k9FcZLM91AGyYAemveE7Np+3aG fhOPCYXRFOoWmWGxwZVtdDAjiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3T3CU0 zcpi96sLnYuKm9bJ6MH7MB8GA1UdIwQYMBaAFFwXry4Kr0kM6qhOKqpxSD0DlfHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNBOS9BNjM4NzY4NEZB QTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNRenFxRTRxcW5GSVBRT1Y4 ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCZXZMZ3F2U1F6cXFFNHFxbkZJUFFPVjhlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNBOS9BNjM4NzY4NEZBQTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNR enFxRTRxcW5GSVBRT1Y4ZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzOL+RORnm8ubs+LCNu0UzcgyNRSh6Ji+fzeBfuTnCEKm8gq2saw1L dRgWi2HwwKJrbvM/SzNDYDb/zanwWGV/QwV1X0hddzCCiGIsVx8pma9ZagOCz7SU eRb+xm/liJauoYURyXFrdnvCh8+pijrOPpK9kzPBgSYDjO7v4eydgH6wdqifWIzF 0n/REYGPq2eL3DZOscCO8/x7UDlZicu/SMupTQTbdzANZE3jdNRV+nHVPrRw9jhw 9KI+UL/OLh1Kx/8B9zUwcXWP23vRzCm/C0/nQL4bYDuIL+qDgFq8CV0PRo7VuO5o xu5MeL+PSImbVK/kRdh629M/j9iUDNaF -----END CERTIFICATE-----Generated at Tue Jul 22 05:13:38 2025 by rpki-client