$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft File: XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json) Hash identifier: qx8lBk+dStgWU8VkjahiZ1oRSvZmFlC+IrZQOC9O1o4= Subject key identifier: 8D:FC:BE:36:2D:87:05:17:C6:22:10:C8:F3:5F:D1:2F:DF:BF:EF:FC Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 Certificate issuer: /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft Manifest number: 98 Signing time: Sat 19 Jul 2025 06:34:06 +0000 Manifest this update: Sat 19 Jul 2025 06:34:05 +0000 Manifest next update: Sat 26 Jul 2025 06:34:05 +0000 Files and hashes: 1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: tJ6aRsZC7V+WjyJpMmqr7kszky85KzT9Ou2nIgrodws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Validity Not Before: Jul 19 06:34:05 2025 GMT Not After : Jul 26 06:34:05 2025 GMT Subject: CN=687b3c5e-6a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:ee:0f:c2:f2:18:b8:e8:48:44:d0:ac:fe: 58:3e:80:aa:01:fe:34:05:d7:59:bb:4e:f5:49:d2: 83:95:15:92:8d:2e:71:0f:16:e4:44:c4:bd:f4:1f: 06:48:69:13:38:48:62:ab:a8:5a:28:a2:14:33:29: a8:db:87:34:b6:3e:f5:84:34:d2:97:2a:e4:2b:94: fd:7d:f1:d9:7c:73:50:9b:ad:18:b8:cc:eb:2c:5a: f9:42:14:d0:c5:26:40:8c:1a:ff:7a:d6:b9:25:83: 6f:28:7f:9f:7f:7f:30:5e:5b:fe:3b:e9:28:22:c4: e1:ae:bb:88:c2:18:b1:1a:72:81:76:1d:1a:aa:f6: 52:b0:62:f6:6f:68:ad:b1:1d:a5:d2:d2:f5:fd:a9: a6:6a:01:90:47:09:33:bb:d6:11:df:de:d0:77:bd: dd:b2:9f:ef:39:73:e4:fa:12:9d:28:28:5b:0e:23: 91:03:a8:29:1b:d3:e3:32:6d:d7:91:09:6e:57:00: cc:a8:91:fe:6d:30:4d:2e:ea:d5:9d:73:27:cf:4f: bf:2f:db:20:42:f9:6d:43:c6:2e:8b:1d:60:ae:e9: 89:de:01:2a:be:01:00:16:1c:86:49:9a:a6:de:91: 5b:5a:3b:6e:f8:7b:40:30:8f:83:48:60:13:41:18: c1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FC:BE:36:2D:87:05:17:C6:22:10:C8:F3:5F:D1:2F:DF:BF:EF:FC X509v3 Authority Key Identifier: keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:9d:c1:df:d0:40:2d:28:5e:70:c9:ef:3d:68:a0:ad:af:a0: e0:f9:13:20:0e:c1:96:ab:ff:a8:ae:79:06:49:7a:96:3e:ea: 79:5c:9a:f8:b8:a5:7a:b2:e7:2a:12:a9:45:69:e9:65:22:90: fb:3b:0c:d9:00:f9:c7:ad:ba:a4:02:b6:96:ba:90:73:18:e4: 9c:1a:f0:c3:09:b0:06:f2:86:a6:1f:fc:4a:f8:e2:ee:c9:d9: bf:47:ca:87:97:0d:4b:80:ee:b6:90:2a:73:89:30:90:e3:89: 6f:34:51:b8:8c:80:29:6b:fa:53:aa:ec:72:64:d4:07:e4:e4: 6f:71:6c:03:b6:67:28:0d:f6:32:e2:23:34:a4:9e:44:9f:e8: c2:74:3e:87:9a:7e:d7:17:23:21:d4:ca:35:c1:f6:ed:83:32: 87:b7:61:3d:21:f7:b7:24:c7:78:e4:3b:ed:4b:d1:a2:78:67: cd:13:c6:db:8a:44:14:26:5d:c3:b0:45:d3:63:1e:4e:3f:69: 1a:36:f0:aa:f9:39:c8:37:4e:b5:60:fe:6f:7c:8a:ba:0f:cc: b1:9e:19:d5:c5:00:b2:7b:50:b9:fc:fd:27:6f:05:6f:bd:f5: 1f:64:fe:bb:d9:9e:90:12:42:2e:de:fa:bf:e6:7d:8b:70:8f: 9e:03:c0:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE5MEYxMTAvBgNVBAUTKDVFOTYwRDUxODhGMDM2Rjc5RUFBNzk0MTU1MkNDRjQ2 Qjg3QUJGMDcwHhcNMjUwNzE5MDYzNDA1WhcNMjUwNzI2MDYzNDA1WjAYMRYwFAYD VQQDEw02ODdiM2M1ZS02YTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvXuD8LyGLjoSETQrP5YPoCqAf40BddZu071SdKDlRWSjS5xDxbkRMS99B8G SGkTOEhiq6haKKIUMymo24c0tj71hDTSlyrkK5T9ffHZfHNQm60YuMzrLFr5QhTQ xSZAjBr/eta5JYNvKH+ff38wXlv+O+koIsThrruIwhixGnKBdh0aqvZSsGL2b2it sR2l0tL1/ammagGQRwkzu9YR397Qd73dsp/vOXPk+hKdKChbDiORA6gpG9PjMm3X kQluVwDMqJH+bTBNLurVnXMnz0+/L9sgQvltQ8Yuix1grumJ3gEqvgEAFhyGSZqm 3pFbWjtu+HtAMI+DSGATQRjBMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI38vjYt hwUXxiIQyPNf0S/fv+/8MB8GA1UdIwQYMBaAFF6WDVGI8Db3nqp5QVUsz0a4er8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTkwRi9DODVCQTEyQzdC RUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9YcFlOVVlqd052ZWVxbmxCVlN6UFJyaDZ2 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hwWU5VWWp3TnZlZXFubEJWU3pQUnJoNnZ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTkwRi9DODVCQTEyQzdCRUMxMUVGOTk5RkJDMTlDNEY5QUUwMi9YcFlOVVlqd052 ZWVxbmxCVlN6UFJyaDZ2d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxncHf0EAtKF5wye89aKCtr6Dg+RMgDsGWq/+ornkGSXqWPup5XJr4 uKV6sucqEqlFaellIpD7OwzZAPnHrbqkAraWupBzGOScGvDDCbAG8oamH/xK+OLu ydm/R8qHlw1LgO62kCpziTCQ44lvNFG4jIApa/pTquxyZNQH5ORvcWwDtmcoDfYy 4iM0pJ5En+jCdD6Hmn7XFyMh1Mo1wfbtgzKHt2E9Ife3JMd45DvtS9GieGfNE8bb ikQUJl3DsEXTYx5OP2kaNvCq+TnIN061YP5vfIq6D8yxnhnVxQCye1C5/P0nbwVv vfUfZP672Z6QEkIu3vq/5n2LcI+eA8Ci -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:17 2025 by rpki-client