$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft File: XsGmrXajq_3B4TKesmN8AYZLSAg.mft (raw, json) Hash identifier: 051Gcd7pb8+zSiMDLI87CbYvlbic73OrdY0r03skWfU= Subject key identifier: 42:E3:79:07:87:FA:6C:77:2E:D5:C5:AF:EA:0E:AF:1A:F5:D7:1D:E4 Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 07FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft Manifest number: 07C6 Signing time: Fri 18 Jul 2025 21:37:26 +0000 Manifest this update: Fri 18 Jul 2025 21:37:25 +0000 Manifest next update: Fri 25 Jul 2025 21:37:25 +0000 Files and hashes: 1: XsGmrXajq_3B4TKesmN8AYZLSAg.crl (hash: M1fZcaiuIFOG+kOjxZQi8gowuaOR+fdBn85MbSK9WtY=) 2: 46D6261876A511EB82E04A2FC4F9AE02.roa (hash: Z0HHcyxz7rmGLBYwcIWDSL9D03AdZbtYiS469aOTikg=) 3: B512A570109211ECA693D74EC4F9AE02.roa (hash: AOyufc93Chw9bEWHvFa0LDI+LOdW3FqSZFo43ILQvd0=) 4: 82BB885E4B9811EB85F74960C4F9AE02.roa (hash: ZpHbYhB9ExSCJ+11c8ap/OdAIsKxszdOCjimKJQDTek=) 5: E3AAE94243B511EB8DA3F473C4F9AE02.roa (hash: ftDRlCPQKF+Ib5B7VJZrq540hqlVUdTm8Q2C4Ih+cM8=) 6: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (hash: HxA8u7nmZWUr6BPYIZAwMw8J3pQQtwxfZZvWeTi7tWI=) 7: CF41132A1DE811EB9DE34963C4F9AE02.roa (hash: YABaqUWE/JPdcjinbFv0PWoHHYymCq6aO+ylU5Xzjo0=) 8: 046130D225FC11EC9D57EA7CC4F9AE02.roa (hash: XhE6x9E/aZ957HcPZHgLlj7Fv56GEXE7hy1IWMNgX6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2044 (0x7fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Jul 18 21:37:25 2025 GMT Not After : Jul 25 21:37:25 2025 GMT Subject: CN=687abe96-35c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:53:5b:67:2e:69:9b:bc:ec:7f:ed:00:a6: 9e:d4:62:1f:8a:90:de:f5:d8:59:7c:e1:ac:15:71: 84:f2:e8:9c:b2:82:c3:e0:46:e0:6d:4a:67:5b:97: 19:33:cf:b7:71:46:1f:ee:3a:93:44:ef:e9:75:8f: be:4a:2d:50:a3:18:6a:78:a2:8f:c9:39:5e:25:fb: 91:10:c0:11:04:b7:83:e9:d6:c6:18:33:9d:fe:a1: 00:22:b3:f3:72:5d:0c:fb:20:34:e6:14:f0:44:97: 0b:d4:ce:8d:d7:81:97:26:c7:f7:98:6a:98:ae:62: 13:05:c0:a3:0a:36:18:57:06:2b:7c:c3:83:27:f7: 2d:d9:d9:0f:ed:b1:55:69:b9:04:68:8f:58:b7:1b: 44:f9:cb:8f:70:40:57:7d:c0:86:bd:8c:95:0c:16: ca:64:4f:a8:1e:ad:8a:d0:b2:91:2d:3f:da:fc:f5: 2d:45:20:dc:1b:83:ce:c9:85:5d:5e:8c:ae:f7:e7: 07:18:1f:25:6b:f7:af:8c:f6:e5:27:c3:96:c8:4c: fa:4a:42:b6:74:4b:8f:30:81:e7:59:ea:f3:35:b2: 72:21:4e:dc:ff:6d:40:24:9e:f5:f6:35:f1:64:75: 05:0c:39:b9:b2:47:28:4a:78:52:f2:c4:4e:db:29: 6c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E3:79:07:87:FA:6C:77:2E:D5:C5:AF:EA:0E:AF:1A:F5:D7:1D:E4 X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b0:07:e7:00:3d:a6:cc:ac:d6:9c:f6:b8:55:83:8b:c3:be: e7:e7:c3:39:c5:08:8a:66:fa:21:bf:d4:60:16:cc:ed:66:ee: ff:3e:96:c2:9c:1e:7d:7f:66:20:fa:b5:b1:2d:1f:80:42:9f: 47:47:67:b9:cd:ac:fe:7c:5b:78:30:f8:ff:b1:a9:38:77:60: be:ff:b0:88:d3:41:71:1a:9f:98:4b:8e:a9:4a:67:0b:3a:1f: f3:01:7e:00:ab:b6:e1:be:f6:c0:81:c8:93:2f:e1:2d:dd:54: 56:d9:f4:97:3e:aa:dd:07:19:8b:49:9f:bb:5b:c6:db:af:dc: 6f:00:5f:79:79:97:b6:f0:48:f0:cc:44:d1:c6:bb:6e:bb:96: 68:04:7a:a1:84:47:1b:01:e9:12:39:c3:77:30:97:a6:09:09: 9f:22:2c:65:a4:dd:f7:1b:18:e5:74:8c:42:46:5b:42:0c:f2: 17:1e:87:32:c8:4e:b6:19:f1:92:3a:45:94:5c:94:e7:72:4f: 5d:eb:0e:90:b4:66:5c:46:58:b0:a9:c9:8b:30:b8:55:7c:e2: db:46:9a:58:b1:e7:51:58:49:cb:82:9a:de:9d:5e:16:66:d3: 05:72:b7:72:42:f1:d1:6e:2e:b7:e9:e3:10:4a:55:61:9e:a4: 74:e1:1d:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjUwNzE4MjEzNzI1WhcNMjUwNzI1MjEzNzI1WjAYMRYwFAYD VQQDEw02ODdhYmU5Ni0zNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28RTW2cuaZu87H/tAKae1GIfipDe9dhZfOGsFXGE8uicsoLD4EbgbUpnW5cZ M8+3cUYf7jqTRO/pdY++Si1QoxhqeKKPyTleJfuREMARBLeD6dbGGDOd/qEAIrPz cl0M+yA05hTwRJcL1M6N14GXJsf3mGqYrmITBcCjCjYYVwYrfMODJ/ct2dkP7bFV abkEaI9YtxtE+cuPcEBXfcCGvYyVDBbKZE+oHq2K0LKRLT/a/PUtRSDcG4POyYVd Xoyu9+cHGB8la/evjPblJ8OWyEz6SkK2dEuPMIHnWerzNbJyIU7c/21AJJ719jXx ZHUFDDm5skcoSnhS8sRO2ylsiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELjeQeH +mx3LtXFr+oOrxr11x3kMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjIwQi9CQTcxQjY0ODEyMDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFf M0I0VEtlc21OOEFZWkxTQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDsAfnAD2mzKzWnPa4VYOLw77n58M5xQiKZvohv9RgFsztZu7/PpbC nB59f2Yg+rWxLR+AQp9HR2e5zaz+fFt4MPj/sak4d2C+/7CI00FxGp+YS46pSmcL Oh/zAX4Aq7bhvvbAgciTL+Et3VRW2fSXPqrdBxmLSZ+7W8bbr9xvAF95eZe28Ejw zETRxrtuu5ZoBHqhhEcbAekSOcN3MJemCQmfIixlpN33GxjldIxCRltCDPIXHocy yE62GfGSOkWUXJTnck9d6w6QtGZcRliwqcmLMLhVfOLbRppYsedRWEnLgprenV4W ZtMFcrdyQvHRbi636eMQSlVhnqR04R2/ -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:23 2025 by rpki-client