$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: 9PK1JXekrnAlIyrypJVGrveUxgfeAljGeuXp6Hr603k= Subject key identifier: EE:22:6A:90:E3:2D:6C:6B:70:C8:09:7E:AB:1D:7F:7F:A6:60:D8:64 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 34B7 Signing time: Sun 20 Jul 2025 14:18:39 +0000 Manifest this update: Sun 20 Jul 2025 14:18:38 +0000 Manifest next update: Sun 27 Jul 2025 14:18:38 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: DyYNbubmwwCuZY+8JXR6ZjHNe88TJiQDfxuyE+fvSCk=) 2: 2C5F8752A10D11EFB9BE8476C4F9AE02.roa (hash: Iv390Bd/MJyqbzwOB0bqCA/PrLBJuVtYX/m4XRUDX5k=) 3: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: jfY5GTg8hmmhErbL9iwX+gxSO1reSXWac9mVO/Xqq1g=) 4: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: 6UO6N8yoyg6+8CvpDMt8iCmfSbV26PbG92dRF9r0otc=) 5: F8E58782A10C11EFA3C0F375C4F9AE02.roa (hash: joxi3OaPnE1De2CkoKX8c3yAH5f2DPtnnESV+trPxbM=) 6: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: 0Wsr5VamrOSe1PRZDclYr+ROoB9PidSlGQIwmrfuBe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Jul 20 14:18:38 2025 GMT Not After : Jul 27 14:18:38 2025 GMT Subject: CN=687cfabf-a6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9e:7f:7c:af:dd:55:eb:5b:30:eb:f7:5a:87: f0:93:97:9c:e3:a5:76:1c:7a:e3:45:d8:e6:14:ae: d3:52:43:15:1d:2c:0e:68:fa:5b:88:44:3d:8c:53: 95:05:48:8e:2e:6d:c0:9b:af:ba:03:99:a9:2b:00: 2a:be:20:59:d1:15:61:44:7b:b0:35:44:74:45:e4: 75:b9:f6:88:67:83:83:72:07:b5:a2:77:42:d7:66: 83:f5:b7:86:2b:68:19:ee:9a:6e:53:6e:a1:5e:61: 06:c9:53:aa:ef:03:99:d1:a8:5f:f1:da:3d:90:fc: 9c:5d:57:89:20:a0:26:b3:be:26:51:dd:76:90:d6: dd:75:98:d8:c2:ab:3d:ee:80:0a:27:d6:43:02:c6: 51:ce:c7:c1:20:de:81:06:da:d2:76:d1:bc:80:87: 13:44:c1:21:52:64:b6:55:9a:be:f2:1d:17:6f:ba: c3:58:2e:a4:30:99:b5:b9:54:c3:b4:df:a9:5c:c9: a7:c1:38:45:da:fb:f6:13:80:cc:da:22:46:e4:1c: 83:d2:b0:49:30:4c:bd:c0:0d:18:7f:13:be:14:a6: 3e:55:9a:37:b1:41:75:7e:c6:f7:18:74:26:37:03: 70:6e:c6:c9:84:f9:5e:a2:56:96:35:a8:d3:c3:15: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:22:6A:90:E3:2D:6C:6B:70:C8:09:7E:AB:1D:7F:7F:A6:60:D8:64 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c6:b1:57:ec:42:1b:76:c4:09:4f:3c:e4:4e:e5:c5:eb:5e: 88:e8:a9:bf:fa:3c:18:95:dd:5f:a1:70:32:d9:5b:23:4f:38: 6e:e5:fd:fc:19:28:fe:2b:ce:58:0d:b7:f3:b8:9b:ee:09:21: 40:5e:13:51:17:67:cb:96:8a:92:7b:a5:80:b3:b4:3c:d9:ef: 85:35:e6:73:45:33:e2:0b:ad:f4:6a:51:6f:a4:f6:04:c1:fe: f9:0d:26:55:5b:b9:48:f7:a6:b3:85:97:fb:b4:66:96:21:37: 4d:d2:8b:3b:1e:29:aa:8f:e6:14:0d:38:98:5b:eb:7e:10:44: 92:93:d0:26:0a:6a:e5:00:a9:76:bc:73:8e:27:ed:aa:4d:9b: 45:ab:25:fa:ac:8f:68:50:3a:18:58:b8:0b:28:a9:ed:f9:c9: 82:28:66:e1:a5:e7:c5:25:a3:c1:9b:7f:70:6b:99:bf:1e:cc: c7:b0:90:5d:93:0b:48:c8:7a:57:46:7b:6c:b9:14:2f:82:57: 1c:92:b8:1e:a2:25:81:28:f6:83:e6:42:56:99:40:87:d6:3c: 01:c5:17:e4:94:74:93:66:f8:ff:10:3e:0d:8a:ce:26:16:c3: c7:f8:7e:5b:8e:69:fa:d0:7d:3d:47:51:07:5f:6a:1a:ae:df: 97:2e:bc:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjUwNzIwMTQxODM4WhcNMjUwNzI3MTQxODM4WjAYMRYwFAYD VQQDEw02ODdjZmFiZi1hNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1J5/fK/dVetbMOv3Wofwk5ec46V2HHrjRdjmFK7TUkMVHSwOaPpbiEQ9jFOV BUiOLm3Am6+6A5mpKwAqviBZ0RVhRHuwNUR0ReR1ufaIZ4ODcge1ondC12aD9beG K2gZ7ppuU26hXmEGyVOq7wOZ0ahf8do9kPycXVeJIKAms74mUd12kNbddZjYwqs9 7oAKJ9ZDAsZRzsfBIN6BBtrSdtG8gIcTRMEhUmS2VZq+8h0Xb7rDWC6kMJm1uVTD tN+pXMmnwThF2vv2E4DM2iJG5ByD0rBJMEy9wA0YfxO+FKY+VZo3sUF1fsb3GHQm NwNwbsbJhPleolaWNajTwxXsmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4iapDj LWxrcMgJfqsdf3+mYNhkMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATxrFX7EIbdsQJTzzkTuXF616I6Km/+jwYld1foXAy2VsjTzhu5f38 GSj+K85YDbfzuJvuCSFAXhNRF2fLloqSe6WAs7Q82e+FNeZzRTPiC630alFvpPYE wf75DSZVW7lI96azhZf7tGaWITdN0os7Himqj+YUDTiYW+t+EESSk9AmCmrlAKl2 vHOOJ+2qTZtFqyX6rI9oUDoYWLgLKKnt+cmCKGbhpefFJaPBm39wa5m/HszHsJBd kwtIyHpXRntsuRQvglcckrgeoiWBKPaD5kJWmUCH1jwBxRfklHSTZvj/ED4Nis4m FsPH+H5bjmn60H09R1EHX2oart+XLrzf -----END CERTIFICATE-----Generated at Mon Jul 21 02:15:57 2025 by rpki-client