$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft File: XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json) Hash identifier: ckQCOl5JYA5QL8Bx441wZaLPmeRj7WnTeCjqO9PS1WU= Subject key identifier: A9:8D:DB:3A:A7:39:C1:AB:EA:14:8A:6B:88:32:A0:A3:88:6A:9D:29 Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Certificate serial: 0759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft Manifest number: 0738 Signing time: Fri 18 Jul 2025 22:06:44 +0000 Manifest this update: Fri 18 Jul 2025 22:06:44 +0000 Manifest next update: Fri 25 Jul 2025 22:06:44 +0000 Files and hashes: 1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: pHcScSwdD6lAv4k6u/qfxMqbPuxENW6NeTtFY3OopTA=) 2: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: ibMAngc6C4+JXufdc4UjRpgLZzdehYxv7hgLysgCefA=) 3: 94A5320663A111F092E32646C4F9AE02.roa (hash: e6KNfiSRL8HIlZFdQYAqnN5O/JJ1gZgCqccGEgtmPUM=) 4: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (hash: EtYv33VoONviB5DogmNb9f2t5IayVZNNzvoHIml90Q8=) 5: 0A37FEFA0E6311EDB98DEA0DC4F9AE02.roa (hash: B3TtfKIV8qBTfY8o/1C3LKcqpx/TLDJeKafLYgXCPS4=) 6: 9507206A63A111F092E32646C4F9AE02.roa (hash: M0FoVt5RwJimEJ3yM4LIg2YOQNmwyICgIMilWYDArBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Validity Not Before: Jul 18 22:06:44 2025 GMT Not After : Jul 25 22:06:44 2025 GMT Subject: CN=687ac574-2e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:70:e0:a4:6e:ba:2c:80:35:4f:bf:4d:70: 74:eb:54:c4:81:ae:df:b7:9d:08:f1:7a:9f:c3:0a: 06:5e:62:6d:68:03:8e:9e:ac:c7:6b:c6:25:28:08: 66:9d:0f:2a:0a:5b:7e:de:9d:16:be:26:cf:ac:85: 38:4e:3e:80:97:6f:e5:bf:26:12:f5:ce:3d:58:22: 4e:1e:cc:84:ee:5e:63:26:6c:bf:1c:f6:62:dc:8f: b7:7f:b3:a8:f7:18:02:2e:82:2e:95:1d:b7:61:bc: 5b:32:d1:bb:f4:39:8a:77:50:9b:4a:d5:e6:80:f5: c3:b5:3e:5a:93:f5:0d:ea:bc:61:49:be:4c:e5:85: ba:96:93:62:f2:27:ca:a6:5e:81:a5:49:ce:ad:d6: 2e:ae:29:0c:36:9e:43:60:df:f6:7c:fd:e5:a4:d2: bc:ad:58:dc:14:83:ff:42:a1:16:24:f2:ab:3d:3f: e3:b0:df:c4:de:2a:c4:eb:48:44:fe:61:4a:ab:d5: ac:d7:18:d9:45:2c:d6:d8:c4:2a:96:e8:f3:54:3c: 97:c1:6e:ab:a7:c3:e7:f0:a5:65:1d:fa:8d:db:67: cb:e3:f8:5e:c6:df:e5:1c:28:3c:6d:dd:7a:ab:ff: 13:3c:b4:36:cb:ea:b0:2f:20:e1:1d:bd:d3:51:fb: 68:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8D:DB:3A:A7:39:C1:AB:EA:14:8A:6B:88:32:A0:A3:88:6A:9D:29 X509v3 Authority Key Identifier: keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9b:7c:c9:8d:f7:bf:cf:63:ec:d1:0c:58:83:8b:b1:79:c7: 63:d3:b0:04:73:d4:29:30:e9:1c:4b:1e:9d:78:47:6e:e7:db: aa:7d:9f:6a:5f:67:0b:76:c9:95:ce:89:0e:6d:f0:89:a0:f5: 71:20:ac:77:a7:df:3a:7f:50:d4:b0:eb:0c:9f:cf:02:dd:c3: 7a:05:96:45:76:78:16:41:36:39:d6:74:55:3f:fe:95:5f:37: 89:63:6f:4d:88:0b:02:4c:7c:25:5b:af:4b:30:69:95:52:b5: 67:8d:77:e0:60:83:7f:eb:33:10:e9:38:3a:3e:05:eb:aa:c2: ed:8f:90:39:76:a1:7b:ac:be:72:b5:92:2b:c4:7f:85:7b:c4: 14:9c:24:31:28:c6:f6:f2:a8:96:ee:ee:d5:1e:0b:47:d9:bc: d5:9e:03:da:44:38:48:78:14:0f:6f:d5:cb:23:68:ac:6c:c4: 22:b4:06:a0:f1:21:ce:a6:7f:85:80:43:5e:67:d1:16:47:9d: 00:82:89:b1:59:6b:30:ef:66:dc:01:93:bf:96:57:87:0b:1c: 56:a7:9d:d9:7f:49:21:08:8f:8e:d3:03:79:5b:10:d3:0d:2c: ea:e5:af:0b:52:b7:84:d9:70:42:62:fa:13:88:ab:f7:d9:e9: 25:7b:98:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NEMxMTAvBgNVBAUTKDVFQTExQzhBM0EyOUUwNjk3M0MxRjEyMTYxMUQ1QTVD MkExQjA2OUQwHhcNMjUwNzE4MjIwNjQ0WhcNMjUwNzI1MjIwNjQ0WjAYMRYwFAYD VQQDEw02ODdhYzU3NC0yZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZlw4KRuuiyANU+/TXB061TEga7ft50I8XqfwwoGXmJtaAOOnqzHa8YlKAhm nQ8qClt+3p0WvibPrIU4Tj6Al2/lvyYS9c49WCJOHsyE7l5jJmy/HPZi3I+3f7Oo 9xgCLoIulR23YbxbMtG79DmKd1CbStXmgPXDtT5ak/UN6rxhSb5M5YW6lpNi8ifK pl6BpUnOrdYurikMNp5DYN/2fP3lpNK8rVjcFIP/QqEWJPKrPT/jsN/E3irE60hE /mFKq9Ws1xjZRSzW2MQqlujzVDyXwW6rp8Pn8KVlHfqN22fL4/hext/lHCg8bd16 q/8TPLQ2y+qwLyDhHb3TUftoPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmN2zqn OcGr6hSKa4gyoKOIap0pMB8GA1UdIwQYMBaAFF6hHIo6KeBpc8HxIWEdWlwqGwad MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0Qy81MUE5RUFDQzQx NjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRHbHp3ZkVoWVIxYVhDb2JC cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxRWNpam9wNEdsendmRWhZUjFhWENvYkJwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0Qy81MUE5RUFDQzQxNjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRH bHp3ZkVoWVIxYVhDb2JCcDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOm3zJjfe/z2Ps0QxYg4uxecdj07AEc9QpMOkcSx6deEdu59uqfZ9q X2cLdsmVzokObfCJoPVxIKx3p986f1DUsOsMn88C3cN6BZZFdngWQTY51nRVP/6V XzeJY29NiAsCTHwlW69LMGmVUrVnjXfgYIN/6zMQ6Tg6PgXrqsLtj5A5dqF7rL5y tZIrxH+Fe8QUnCQxKMb28qiW7u7VHgtH2bzVngPaRDhIeBQPb9XLI2isbMQitAag 8SHOpn+FgENeZ9EWR50AgomxWWsw72bcAZO/lleHCxxWp53Zf0khCI+O0wN5WxDT DSzq5a8LUreE2XBCYvoTiKv32ekle5ho -----END CERTIFICATE-----Generated at Sun Jul 20 16:34:55 2025 by rpki-client