$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: G2VGZpxTtUcMavB2f6Z1S6hqnSmkjsDnfRBMRJ1Wft0= Subject key identifier: 64:2B:14:F1:8C:1F:96:1A:30:8A:18:07:62:E2:C5:03:3A:98:9E:2E Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 03B5 Signing time: Sat 19 Jul 2025 01:14:23 +0000 Manifest this update: Sat 19 Jul 2025 01:14:22 +0000 Manifest next update: Sat 26 Jul 2025 01:14:22 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: k5bFccQrpL6SqcQu5t/ATusysJ/qzqF44CNXSp9U7Sg=) 2: 8982CDE0461211F09E71FC3BC4F9AE02.roa (hash: ZhmNI4CDQtOYGtaG+m8Oq5UFkWXDcLhSYd3RPtdmH64=) 3: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: +fAen0eLm96Uw52DW70NMmBaXk/iGot7yVNxCoQPaiI=) 4: 8EFCF04C41B811F090AB3A2EC4F9AE02.roa (hash: hDxQAVQFGFJ7nkcpsrYv8NMpIOIs9N18rujrFzA3Mbc=) 5: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 6: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: rQrRKRNqLrNVEr8ai1wfn1FM9+uxSqSSHb0bzKO5WNg=) 7: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Jul 19 01:14:22 2025 GMT Not After : Jul 26 01:14:22 2025 GMT Subject: CN=687af16e-68c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:8d:54:e6:94:68:88:7b:29:bd:30:3c:c5: ef:d0:2a:d6:57:ae:f6:84:c7:84:ea:88:73:95:e2: 39:97:0c:e7:f7:ad:2b:7c:dd:2a:b4:c9:a2:d4:c5: f3:8e:18:a6:0a:33:30:ff:6e:f0:37:fc:90:62:19: 01:74:eb:87:ff:13:c8:0e:2d:1a:dc:25:f3:17:b0: 01:b2:92:1e:09:57:78:94:21:7e:20:59:13:b1:b4: 51:d3:44:17:4d:fc:c6:fd:cf:2b:4a:9e:f8:e3:86: e9:63:37:e3:8a:93:85:83:45:2c:f6:7c:ce:6d:35: 3b:01:7f:1b:0a:b2:77:0b:08:2d:4f:47:83:2d:f9: 6c:94:6a:1a:23:1f:8d:4d:14:03:c1:cb:2c:74:2e: 6f:e0:28:50:e5:1d:f4:83:c3:92:0a:4a:c0:cd:b0: 15:63:71:62:f2:7c:f8:a2:53:4b:61:eb:b7:e7:0d: 38:d1:a8:e3:fd:f4:e0:00:30:f7:d1:58:d8:e0:cf: f4:30:25:50:ce:5a:17:8c:9c:9e:be:be:b2:67:aa: c6:f0:c1:53:53:4c:4b:4c:d4:4d:1d:9e:e7:e6:be: 08:05:7c:69:a7:a3:9f:27:8c:3c:7f:e8:b7:e0:10: 42:d4:3a:67:c0:bc:b6:67:49:3e:34:e2:e8:2c:9a: 15:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2B:14:F1:8C:1F:96:1A:30:8A:18:07:62:E2:C5:03:3A:98:9E:2E X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:de:48:7b:c1:13:03:d4:a0:64:85:47:30:b4:a4:85:22:8f: f9:f1:db:42:a7:76:e9:41:4f:d1:ec:1d:c2:ba:ec:8b:50:c2: a0:23:cf:16:5b:6a:7b:5a:17:5f:ce:cf:c4:fa:41:f1:9e:61: de:f0:48:ae:56:05:6d:a7:dd:0d:dd:e5:60:c7:3a:a3:13:b5: 0d:3e:09:a2:e8:54:20:37:64:ec:6e:ec:22:7e:2f:d2:3d:11: e6:56:83:db:2e:8e:01:ff:20:6c:3b:d8:81:98:ec:3c:3c:1b: 82:ba:e8:4e:08:a7:93:35:de:4f:29:0b:72:2d:c1:9f:cf:19: 30:72:e6:5b:42:cb:9f:05:55:41:b8:27:ec:f2:79:af:2a:6f: f9:c9:6f:e3:32:9d:42:c9:26:38:93:ae:71:0e:df:90:25:be: c1:fa:2c:ec:52:d5:3f:37:24:f0:47:03:a4:aa:74:26:22:dc: 26:c8:b8:58:d2:3b:38:7f:26:39:04:ed:73:fe:54:45:7d:13: 7f:d8:38:74:33:73:c2:45:e3:bd:52:78:87:65:0d:4f:34:7f: 68:70:e8:dd:9b:04:27:55:02:2c:42:f0:b5:53:dd:65:70:c8: c9:b0:97:f6:78:71:89:97:2a:f7:29:29:9e:e0:2a:d3:c8:ee: 19:a4:85:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUwNzE5MDExNDIyWhcNMjUwNzI2MDExNDIyWjAYMRYwFAYD VQQDEw02ODdhZjE2ZS02OGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEeNVOaUaIh7Kb0wPMXv0CrWV672hMeE6ohzleI5lwzn960rfN0qtMmi1MXz jhimCjMw/27wN/yQYhkBdOuH/xPIDi0a3CXzF7ABspIeCVd4lCF+IFkTsbRR00QX TfzG/c8rSp7444bpYzfjipOFg0Us9nzObTU7AX8bCrJ3CwgtT0eDLflslGoaIx+N TRQDwcssdC5v4ChQ5R30g8OSCkrAzbAVY3Fi8nz4olNLYeu35w040ajj/fTgADD3 0VjY4M/0MCVQzloXjJyevr6yZ6rG8MFTU0xLTNRNHZ7n5r4IBXxpp6OfJ4w8f+i3 4BBC1DpnwLy2Z0k+NOLoLJoVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQrFPGM H5YaMIoYB2LixQM6mJ4uMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL3kh7wRMD1KBkhUcwtKSFIo/58dtCp3bpQU/R7B3CuuyLUMKgI88W W2p7Whdfzs/E+kHxnmHe8EiuVgVtp90N3eVgxzqjE7UNPgmi6FQgN2Tsbuwifi/S PRHmVoPbLo4B/yBsO9iBmOw8PBuCuuhOCKeTNd5PKQtyLcGfzxkwcuZbQsufBVVB uCfs8nmvKm/5yW/jMp1CySY4k65xDt+QJb7B+izsUtU/NyTwRwOkqnQmItwmyLhY 0js4fyY5BO1z/lRFfRN/2Dh0M3PCReO9UniHZQ1PNH9ocOjdmwQnVQIsQvC1U91l cMjJsJf2eHGJlyr3KSme4CrTyO4ZpIXt -----END CERTIFICATE-----Generated at Sun Jul 20 10:10:37 2025 by rpki-client