$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json) Hash identifier: hHgx3PBZc5QWJk2VQBHxO5UmhonC1O9OPll+xRpPcAM= Subject key identifier: 15:61:D3:03:B7:B3:64:F8:CD:D6:5C:E3:63:04:35:CD:EC:F5:96:D9 Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft Manifest number: 011C Signing time: Sat 19 Jul 2025 05:07:28 +0000 Manifest this update: Sat 19 Jul 2025 05:07:27 +0000 Manifest next update: Sat 26 Jul 2025 05:07:27 +0000 Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: 3dANCFR1gk/L0ZL95dwAqEbNPDGs1unS5peqI2FUm1U=) 2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: rFJbuDYL88Z9KeNowFp3y8pDODtibJ7P1KjjzQ7u73o=) 3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: qHX8rwWLzYwQ68AYEwJa6sYGgUw03regWlERxMTMTs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Validity Not Before: Jul 19 05:07:27 2025 GMT Not After : Jul 26 05:07:27 2025 GMT Subject: CN=687b280f-2e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7f:f6:0e:87:73:9e:e4:94:e2:a2:2c:80:e3: 2a:87:9d:45:6f:1e:87:d4:3a:8e:cb:06:6a:7f:9f: 25:c9:79:44:d8:d0:ae:fa:92:98:49:40:54:73:9a: 4f:f0:82:50:e8:8d:bf:a0:df:f7:65:ca:8b:bc:dc: 9a:7c:3b:9f:3b:4f:26:34:78:96:b7:4c:80:2c:72: b1:96:08:a6:1d:21:36:db:a0:9e:fd:4f:f6:a3:22: 17:09:35:17:6c:62:c0:f4:df:bf:e3:bf:c1:0d:92: d1:f5:55:ca:9a:b4:1d:ce:f4:dd:17:96:34:d3:b0: 90:9a:96:53:ff:66:0e:55:19:69:cb:4c:3c:8c:20: 45:7e:72:1b:b7:94:fe:4b:c8:68:59:03:3e:87:1b: 10:1d:78:5c:57:ef:44:c4:a5:0c:a7:24:ac:fb:43: 68:82:30:f8:5e:24:79:ed:a9:e0:b1:5f:3f:59:93: 41:67:41:29:c8:0b:5d:6c:14:ea:7c:69:7b:9c:cb: 7d:57:a0:e3:90:a5:c2:ab:c6:06:28:1e:61:66:05: ad:d3:3b:1c:1f:13:e5:3a:1d:a3:41:da:ef:95:f2: fb:17:5f:38:ef:4f:39:db:5d:3d:22:c1:48:6a:96: c1:8e:ca:cb:87:a9:2e:da:03:fe:c0:a4:aa:d9:13: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:61:D3:03:B7:B3:64:F8:CD:D6:5C:E3:63:04:35:CD:EC:F5:96:D9 X509v3 Authority Key Identifier: keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:b5:62:05:5f:6e:cd:5c:0e:82:2f:3e:06:47:fc:9c:41:43: 10:02:9f:59:fe:bb:ea:16:a1:1a:37:86:f3:d8:c5:58:63:f6: f8:43:48:9b:99:2d:12:2f:48:7d:29:e0:ba:2d:ab:41:c7:12: ba:61:7e:76:00:c5:7e:01:b3:9e:49:b0:af:8c:8c:fa:eb:88: 0d:96:f5:86:d7:da:95:26:7a:78:9d:07:99:d5:5f:d2:12:d4: 4a:e4:45:eb:71:fd:97:30:5c:c1:95:df:ea:cf:ca:fe:56:ab: 67:3e:d1:7b:cd:24:79:ea:26:9e:19:1b:cc:0f:ef:a4:21:48: 52:57:30:c9:0f:ca:13:bf:5b:3f:2d:df:62:12:a8:d8:ed:a6: c2:07:df:cd:27:2c:60:01:64:fa:76:f7:aa:68:39:86:d1:29: 3a:a9:f1:01:13:47:ec:a6:36:9e:f1:b0:5e:6a:76:53:d5:00: 28:95:3f:76:72:02:a2:53:b5:d9:48:45:fe:7e:1d:95:b7:7b: 35:27:92:14:7c:bc:73:b1:48:14:77:15:db:86:71:79:a0:9c: 42:bc:76:c6:41:cd:ea:32:9d:ec:91:8a:79:dc:42:7c:b8:11: b8:f4:78:47:83:9e:b5:34:58:ad:31:e9:12:7f:93:0d:08:ff: 4f:99:80:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF OENFNzg4QTcwHhcNMjUwNzE5MDUwNzI3WhcNMjUwNzI2MDUwNzI3WjAYMRYwFAYD VQQDEw02ODdiMjgwZi0yZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9H/2DodznuSU4qIsgOMqh51Fbx6H1DqOywZqf58lyXlE2NCu+pKYSUBUc5pP 8IJQ6I2/oN/3ZcqLvNyafDufO08mNHiWt0yALHKxlgimHSE226Ce/U/2oyIXCTUX bGLA9N+/47/BDZLR9VXKmrQdzvTdF5Y007CQmpZT/2YOVRlpy0w8jCBFfnIbt5T+ S8hoWQM+hxsQHXhcV+9ExKUMpySs+0NogjD4XiR57angsV8/WZNBZ0EpyAtdbBTq fGl7nMt9V6DjkKXCq8YGKB5hZgWt0zscHxPlOh2jQdrvlfL7F18470852109IsFI apbBjsrLh6ku2gP+wKSq2RNFewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVh0wO3 s2T4zdZc42MENc3s9ZbZMB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNBNi84MDc5NEM5QUMwOEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0 a21JcjViZTR2dV9vem5pS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2tWIFX27NXA6CLz4GR/ycQUMQAp9Z/rvqFqEaN4bz2MVYY/b4Q0ib mS0SL0h9KeC6LatBxxK6YX52AMV+AbOeSbCvjIz664gNlvWG19qVJnp4nQeZ1V/S EtRK5EXrcf2XMFzBld/qz8r+VqtnPtF7zSR56iaeGRvMD++kIUhSVzDJD8oTv1s/ Ld9iEqjY7abCB9/NJyxgAWT6dveqaDmG0Sk6qfEBE0fspjae8bBeanZT1QAolT92 cgKiU7XZSEX+fh2Vt3s1J5IUfLxzsUgUdxXbhnF5oJxCvHbGQc3qMp3skYp53EJ8 uBG49HhHg561NFitMekSf5MNCP9PmYDh -----END CERTIFICATE-----Generated at Sun Jul 20 07:33:18 2025 by rpki-client