$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: uFeYZZeoOTVZGR8xQCggYKUtdXZEmRXx7iVtK0J4fj8= Subject key identifier: 09:1A:90:FE:47:54:AC:A2:33:C6:B9:DB:A1:9B:AA:D6:25:0E:D2:B4 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 017C Signing time: Sat 19 Jul 2025 03:55:28 +0000 Manifest this update: Sat 19 Jul 2025 03:55:27 +0000 Manifest next update: Sat 26 Jul 2025 03:55:27 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: OjRicg8LokBSRyWXeXhfBdwjoJt4jLgVHL2JspKgGNg=) 2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=) 3: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: GgalYjkY1TSQEVBeTqrV+j4tzZy8hdDlsyXixDM61Sw=) 4: 302B59C64EEF11EFB111F530C4F9AE02.roa (hash: scffRYc0fctIE4i3P8gIvlUcNEVTHSWwJA+vVFplTH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Jul 19 03:55:27 2025 GMT Not After : Jul 26 03:55:27 2025 GMT Subject: CN=687b172f-a8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:d2:4a:cc:b1:08:a3:b9:3e:d9:22:b1:20: f5:0c:cb:a2:1b:58:5a:d4:44:e5:e7:6d:a8:61:b4: f3:22:6c:c6:98:fa:4f:cd:8d:c2:48:ea:8f:6c:45: af:3d:68:c8:05:9f:79:93:f0:6a:23:7e:67:07:01: 9a:66:77:87:60:6d:5b:f3:ce:56:b1:0a:1a:4d:2d: 2e:fa:f7:22:a7:c5:bb:d3:68:6f:e1:41:a8:f1:79: de:9a:1e:51:42:fd:1f:43:04:5a:bc:4c:9c:68:2c: da:72:6c:8b:5c:a1:44:c9:04:12:bb:99:e6:72:bf: 76:11:d9:55:59:26:d3:fb:b9:37:e2:72:9a:72:d8: c5:f6:95:9a:1f:2c:7e:85:7a:13:a5:32:10:60:69: ab:d4:50:df:7b:b3:c6:8e:3e:4d:06:61:fb:32:6c: d5:a4:b0:55:34:80:c8:9c:eb:96:44:b2:7f:cf:4e: 93:2c:4d:55:d5:d0:07:94:0d:8c:16:a5:69:fe:14: 87:2d:86:e6:0a:99:1d:66:fa:04:0f:72:c8:b5:b5: 35:d2:40:c8:f8:c1:26:b2:a8:11:84:2c:a8:b6:84: 40:c5:c0:7d:0a:c7:35:a2:08:05:39:18:ea:08:80: 1b:1d:e4:70:0e:2c:c4:54:14:39:2a:25:51:15:2f: 3f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1A:90:FE:47:54:AC:A2:33:C6:B9:DB:A1:9B:AA:D6:25:0E:D2:B4 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:96:d1:63:46:ba:dd:7b:f0:62:27:3b:27:cf:7d:89:ad:ee: 97:b6:a2:05:f2:ef:f5:f6:eb:06:04:e0:5b:12:ed:fe:3a:2d: 4b:81:cd:d5:bf:f1:2c:45:1a:d9:6f:a3:a5:e2:01:34:ef:ac: 63:aa:46:60:39:3b:0b:18:a8:22:e4:f7:61:49:4d:e7:8b:dc: f7:44:28:5d:5d:26:c5:9e:ed:8f:bd:5e:4f:11:9a:ff:30:d5: c2:2f:2a:80:7c:84:13:c1:4e:ca:9e:38:7c:25:4e:ab:5a:cb: 07:4a:e6:0f:5e:33:fc:6e:fb:25:61:b1:44:c0:00:7c:bc:2b: 01:e7:c0:e0:1a:e3:ea:14:7b:0a:26:70:29:22:a4:7a:6f:53: 5a:8d:a8:b7:24:69:af:4a:c2:9a:19:e7:d8:b1:51:95:a6:96: b2:49:87:6b:72:8a:1f:8e:ea:f0:0a:5d:c3:58:de:67:a9:17: 35:0d:3c:0b:73:a7:05:03:5a:55:46:6e:bf:94:46:c3:61:70: 19:98:7f:6c:cd:1b:6a:79:b4:0f:71:6f:8a:d7:5f:cb:e2:91: a0:13:d9:d2:55:bb:d3:30:29:27:8a:1e:50:17:f9:c6:06:cd: 6f:96:ad:d5:a5:fe:ad:ab:87:0a:b1:79:59:bf:bd:26:f8:aa: f9:23:91:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUwNzE5MDM1NTI3WhcNMjUwNzI2MDM1NTI3WjAYMRYwFAYD VQQDEw02ODdiMTcyZi1hOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuELSSsyxCKO5PtkisSD1DMuiG1ha1ETl522oYbTzImzGmPpPzY3CSOqPbEWv PWjIBZ95k/BqI35nBwGaZneHYG1b885WsQoaTS0u+vcip8W702hv4UGo8Xnemh5R Qv0fQwRavEycaCzacmyLXKFEyQQSu5nmcr92EdlVWSbT+7k34nKactjF9pWaHyx+ hXoTpTIQYGmr1FDfe7PGjj5NBmH7MmzVpLBVNIDInOuWRLJ/z06TLE1V1dAHlA2M FqVp/hSHLYbmCpkdZvoED3LItbU10kDI+MEmsqgRhCyotoRAxcB9Csc1oggFORjq CIAbHeRwDizEVBQ5KiVRFS8/1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkakP5H VKyiM8a526GbqtYlDtK0MB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABltFjRrrde/BiJzsnz32Jre6XtqIF8u/19usGBOBbEu3+Oi1Lgc3V v/EsRRrZb6Ol4gE076xjqkZgOTsLGKgi5PdhSU3ni9z3RChdXSbFnu2PvV5PEZr/ MNXCLyqAfIQTwU7Knjh8JU6rWssHSuYPXjP8bvslYbFEwAB8vCsB58DgGuPqFHsK JnApIqR6b1Najai3JGmvSsKaGefYsVGVppaySYdrcoofjurwCl3DWN5nqRc1DTwL c6cFA1pVRm6/lEbDYXAZmH9szRtqebQPcW+K11/L4pGgE9nSVbvTMCknih5QF/nG Bs1vlq3Vpf6tq4cKsXlZv70m+Kr5I5EU -----END CERTIFICATE-----Generated at Sun Jul 20 15:08:54 2025 by rpki-client