$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: coWi6nqHsR2BU6K6b7wl76nvedDaNQd4OS7K8CDxXYQ= Subject key identifier: 51:76:C2:CF:7F:EF:B0:C5:AA:F1:82:04:B8:A4:C5:FA:20:21:F0:BE Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 09AA Signing time: Fri 18 Jul 2025 20:18:19 +0000 Manifest this update: Fri 18 Jul 2025 20:18:18 +0000 Manifest next update: Fri 25 Jul 2025 20:18:18 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: OAlFSzD4XDA5WaX8oDd7BZj+Ngzd/KIgEpWdrbhT8Yg=) 2: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: XjGmTLSTgsODpSCPTs5pCmUy9NRCIk0AE9Vg9MOaVdU=) 3: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: 2XvjAuC6Hirm3HWv88SHGUEeMWi9XgXjvYQVlXNxZVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: Jul 18 20:18:18 2025 GMT Not After : Jul 25 20:18:18 2025 GMT Subject: CN=687aac0b-3d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6e:9c:41:4f:91:de:2e:1c:ab:b1:fb:53:dc: b9:12:08:2b:fc:6a:8e:22:d5:21:72:e4:91:2a:9c: dc:07:be:5a:b6:91:77:42:f0:a5:cb:f9:5a:70:2b: 34:c9:10:ef:84:2a:38:ca:e2:10:fd:84:84:2b:4c: 2d:2b:15:10:2a:67:3b:6b:7d:21:e5:8d:51:28:d8: c7:1b:66:52:bb:6f:30:b1:f9:78:70:33:1d:cf:71: b1:8c:d4:38:cd:1c:17:c0:6a:12:3e:7d:50:67:e7: 0d:53:6b:e2:3f:fc:46:1e:91:80:05:aa:11:a4:fa: bc:d4:94:95:77:da:fe:c6:aa:8c:7f:d9:13:6e:08: de:94:f5:ac:7a:2a:58:80:f6:65:b1:32:a1:53:d9: 4b:f8:20:60:14:14:c5:a8:fe:c0:43:f6:1c:b4:8a: 65:4c:44:87:cd:52:5c:a0:a2:cd:06:5b:68:48:dd: 17:e6:19:a3:3e:6f:21:66:91:71:26:9d:c3:a6:a3: e2:ea:af:6c:d8:fa:1d:92:e1:34:b7:86:6a:66:db: 9d:77:18:56:95:06:ef:09:26:63:ce:9f:ad:28:98: b7:29:b9:52:d6:e7:58:ea:ce:83:c5:3f:84:c7:ab: dd:dc:96:22:05:3e:5b:e8:89:dc:dd:ee:a0:f6:9f: 0b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:76:C2:CF:7F:EF:B0:C5:AA:F1:82:04:B8:A4:C5:FA:20:21:F0:BE X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:01:01:c5:42:4f:4d:d7:cf:6a:08:2d:e3:1d:88:83:ad:80: ae:0c:fb:ae:cd:79:76:88:0b:ca:5f:3d:92:40:bc:d7:a1:51: 5d:26:d3:0e:07:30:9e:d7:09:89:74:43:30:8e:5b:0b:99:70: 2a:4c:d7:90:f8:1f:c8:e5:d9:ce:97:f7:92:a7:04:c3:8c:04: 1d:cc:23:45:e3:5f:bb:7b:d6:96:cb:ee:80:10:03:8a:c7:97: b4:48:b9:f4:3f:41:61:2f:d7:36:88:63:46:1e:e5:b4:12:bf: 75:37:f1:0c:8a:50:b5:b4:0d:b0:54:1d:f0:82:f5:ac:c1:e2: 56:4f:9c:f6:b2:bd:f7:60:de:df:bc:c9:bd:7b:36:0b:50:e3: 84:a8:21:2d:d5:55:f3:74:4e:07:be:27:10:5f:6a:55:ab:d5: 40:2b:9c:ba:eb:f7:14:6b:0f:2f:d6:69:7a:0b:41:0a:ff:85: 32:fe:58:f4:70:bd:d6:a6:59:c1:a1:a6:35:ce:24:fe:f0:aa: f2:47:53:66:9b:91:8e:f7:51:97:e4:ce:94:47:2c:a2:00:23: 0b:5c:9c:12:84:05:43:42:fb:c2:06:9b:42:cc:a5:a6:2a:4e: 50:53:e6:e0:81:5e:15:92:18:8f:db:34:70:25:72:72:a8:36: b5:e4:24:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjUwNzE4MjAxODE4WhcNMjUwNzI1MjAxODE4WjAYMRYwFAYD VQQDEw02ODdhYWMwYi0zZDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq26cQU+R3i4cq7H7U9y5Eggr/GqOItUhcuSRKpzcB75atpF3QvCly/lacCs0 yRDvhCo4yuIQ/YSEK0wtKxUQKmc7a30h5Y1RKNjHG2ZSu28wsfl4cDMdz3GxjNQ4 zRwXwGoSPn1QZ+cNU2viP/xGHpGABaoRpPq81JSVd9r+xqqMf9kTbgjelPWseipY gPZlsTKhU9lL+CBgFBTFqP7AQ/YctIplTESHzVJcoKLNBltoSN0X5hmjPm8hZpFx Jp3DpqPi6q9s2PodkuE0t4ZqZtuddxhWlQbvCSZjzp+tKJi3KblS1udY6s6DxT+E x6vd3JYiBT5b6Inc3e6g9p8L2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF2ws9/ 77DFqvGCBLikxfogIfC+MB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtAQHFQk9N189qCC3jHYiDrYCuDPuuzXl2iAvKXz2SQLzXoVFdJtMO BzCe1wmJdEMwjlsLmXAqTNeQ+B/I5dnOl/eSpwTDjAQdzCNF41+7e9aWy+6AEAOK x5e0SLn0P0FhL9c2iGNGHuW0Er91N/EMilC1tA2wVB3wgvWsweJWT5z2sr33YN7f vMm9ezYLUOOEqCEt1VXzdE4HvicQX2pVq9VAK5y66/cUaw8v1ml6C0EK/4Uy/lj0 cL3WplnBoaY1ziT+8KryR1Nmm5GO91GX5M6URyyiACMLXJwShAVDQvvCBptCzKWm Kk5QU+bggV4VkhiP2zRwJXJyqDa15CTZ -----END CERTIFICATE-----Generated at Sun Jul 20 06:51:49 2025 by rpki-client