$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: QigYKNu2CnzqNFO6DRUpymx0pgP0qCCCKFZCSHz/qVQ= Subject key identifier: B8:A3:29:53:43:24:A1:40:4B:F8:F7:19:24:16:06:48:7C:96:0C:B1 Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 01B3 Signing time: Mon 21 Jul 2025 03:12:41 +0000 Manifest this update: Mon 21 Jul 2025 03:12:41 +0000 Manifest next update: Mon 28 Jul 2025 03:12:41 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: rnvaV7W4EVDNx7bwmv0RDEc4ZS+jx6d6zKWvl3fbxQo=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Jul 21 03:12:41 2025 GMT Not After : Jul 28 03:12:41 2025 GMT Subject: CN=687db029-ad28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:f3:a1:30:ee:36:df:7e:32:eb:ea:20:b4: 0f:62:5a:c0:79:cc:dc:d9:0c:83:48:d6:6f:2a:19: ec:63:d8:44:34:aa:9a:95:3e:25:47:0b:e4:15:cb: 81:49:16:3f:09:0f:84:7f:5d:56:b8:88:0e:ec:02: 87:73:a3:9d:46:a5:aa:57:36:0b:cd:9a:b2:d7:79: aa:79:42:6f:37:b7:7f:27:35:15:1b:46:30:1a:ef: b1:6c:8b:5a:7c:b8:80:f8:77:8f:7e:dc:b6:52:7c: 65:5d:7b:9d:36:15:66:e4:1e:85:ca:64:f7:bd:84: a5:82:08:70:ac:21:9f:24:ba:82:dc:48:4e:8e:e7: b4:39:ff:c2:d4:4d:ac:58:77:6c:50:03:2f:1f:fc: 95:01:16:89:6e:75:ed:e5:ea:6d:0f:9d:90:74:eb: dd:51:ad:be:71:0b:46:73:bb:5a:9b:d0:da:ae:66: 54:a2:24:23:55:ef:e3:56:fe:74:71:fa:00:65:83: e8:18:bb:f4:7f:47:53:fe:44:91:12:a8:45:fe:32: 11:a7:84:52:e1:f7:9a:6a:a1:76:ef:b1:fc:12:d3: 6c:57:f0:86:6d:7f:0f:06:c2:ba:da:4e:bf:76:e4: e4:ce:af:d9:46:a8:46:7a:c4:49:ef:77:02:0a:00: b6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A3:29:53:43:24:A1:40:4B:F8:F7:19:24:16:06:48:7C:96:0C:B1 X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d4:00:74:46:49:ac:2c:65:3c:9d:34:46:63:6e:82:ca:37: 99:1f:60:f4:b2:9e:70:fb:3b:a7:86:2c:7a:63:e1:13:46:9f: 58:c0:04:99:f1:90:3f:a1:43:d6:d8:71:d0:0a:d0:5c:68:28: ec:9f:91:3c:23:fe:da:4b:f9:0a:4c:a6:db:16:4a:55:2c:30: 2d:bd:d7:a0:40:71:cb:92:2a:b4:47:48:ba:97:af:8d:5b:6b: 6c:a4:c5:2b:aa:3d:22:13:f5:22:0f:ef:87:5e:7f:dd:32:b2: 8b:e7:2c:cf:82:e6:e4:33:fc:24:36:9a:21:0a:d6:4d:68:ef: e3:ca:ab:dd:94:87:69:1b:1e:33:78:fb:33:0a:30:7b:5d:a5: ec:96:49:ab:4d:4a:a7:b0:ae:60:ae:9f:ea:18:fa:37:8f:60: 64:80:aa:e2:09:a8:66:b9:b8:07:0d:94:cb:79:dc:11:c7:78: 6f:44:18:5e:8e:ad:54:9f:6c:9f:35:70:2f:93:d8:ef:e0:11: 39:7d:fd:e2:8a:b4:48:b9:8d:4a:cd:ba:2a:ed:7d:d7:4a:40: 03:a0:9a:a2:40:24:e4:b2:c0:ce:a7:1d:f9:6f:92:3e:fb:09: aa:e8:8c:a4:7b:ce:a3:81:2a:63:60:e8:93:2a:a1:cf:12:09: c3:4c:2f:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjUwNzIxMDMxMjQxWhcNMjUwNzI4MDMxMjQxWjAYMRYwFAYD VQQDEw02ODdkYjAyOS1hZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi/zoTDuNt9+MuvqILQPYlrAeczc2QyDSNZvKhnsY9hENKqalT4lRwvkFcuB SRY/CQ+Ef11WuIgO7AKHc6OdRqWqVzYLzZqy13mqeUJvN7d/JzUVG0YwGu+xbIta fLiA+HePfty2UnxlXXudNhVm5B6FymT3vYSlgghwrCGfJLqC3EhOjue0Of/C1E2s WHdsUAMvH/yVARaJbnXt5eptD52QdOvdUa2+cQtGc7tam9DarmZUoiQjVe/jVv50 cfoAZYPoGLv0f0dT/kSREqhF/jIRp4RS4feaaqF277H8EtNsV/CGbX8PBsK62k6/ duTkzq/ZRqhGesRJ73cCCgC2vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLijKVND JKFAS/j3GSQWBkh8lgyxMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt1AB0RkmsLGU8nTRGY26CyjeZH2D0sp5w+zunhix6Y+ETRp9YwASZ 8ZA/oUPW2HHQCtBcaCjsn5E8I/7aS/kKTKbbFkpVLDAtvdegQHHLkiq0R0i6l6+N W2tspMUrqj0iE/UiD++HXn/dMrKL5yzPgubkM/wkNpohCtZNaO/jyqvdlIdpGx4z ePszCjB7XaXslkmrTUqnsK5grp/qGPo3j2BkgKriCahmubgHDZTLedwRx3hvRBhe jq1Un2yfNXAvk9jv4BE5ff3iirRIuY1Kzboq7X3XSkADoJqiQCTkssDOpx35b5I+ +wmq6Iyke86jgSpjYOiTKqHPEgnDTC+8 -----END CERTIFICATE-----Generated at Mon Jul 21 13:27:38 2025 by rpki-client