$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: XjP2aL23uczJX3rbejtBgvtnpRuJtzbx1O3ybXE3GQM= Subject key identifier: AA:EA:F0:FD:DA:F5:81:8B:8B:C3:E3:2A:C5:04:8A:00:FD:CA:5C:85 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 0135 Signing time: Sat 19 Jul 2025 05:08:27 +0000 Manifest this update: Sat 19 Jul 2025 05:08:26 +0000 Manifest next update: Sat 26 Jul 2025 05:08:26 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: cf9iLlejYRnTh59J9eG93EvxAKrCboC0O2Xmb6PpdBs=) 2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Jul 19 05:08:26 2025 GMT Not After : Jul 26 05:08:26 2025 GMT Subject: CN=687b284b-8357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bc:84:bd:cb:7f:3d:5d:9b:f6:ec:a5:47:1c: aa:a9:1b:4a:ac:ad:d2:82:1c:c1:15:96:35:21:d9: 19:8f:51:a1:61:93:6d:c0:60:c4:d5:76:c2:2a:92: ca:6f:86:f0:dd:d0:9c:eb:a3:4f:39:25:08:50:ae: 67:08:e4:de:1e:2d:af:f2:91:ff:48:d8:9e:9d:74: b2:eb:6e:71:d7:2b:46:80:ed:a1:9b:86:92:e9:fe: 13:02:59:72:f2:d3:1d:09:da:3e:d0:3a:05:7b:24: 24:b2:fe:29:db:06:17:ef:f7:86:5d:e3:b0:c4:8a: ba:62:0e:20:b2:ec:a3:5e:4e:f6:7b:1b:7e:b5:7f: bf:40:b7:8a:ae:ae:eb:cd:85:c4:09:5f:5c:a4:77: d7:c4:5f:4c:5f:3a:75:47:44:85:af:82:43:f2:d1: ce:64:45:7f:a9:14:aa:89:4d:6c:d4:9a:1c:dd:b7: 6d:39:55:46:3a:7a:75:f3:80:a6:2f:bf:18:20:a7: 38:8f:78:45:d8:a8:10:e1:ca:e8:96:e6:10:43:4c: e8:54:a1:2d:af:7b:93:27:9c:43:a3:13:3e:6b:0e: 86:93:d2:1a:51:3f:6a:71:e8:aa:ee:ba:a6:02:0e: 48:3e:a9:cc:4f:fe:08:f9:51:5d:9c:3e:e3:86:4c: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EA:F0:FD:DA:F5:81:8B:8B:C3:E3:2A:C5:04:8A:00:FD:CA:5C:85 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d6:86:d2:cd:7c:45:86:56:52:1e:cc:55:76:cb:d9:c9:a8: 49:99:07:e7:eb:c7:a2:f6:7e:57:2d:f5:42:89:37:59:4d:78: 22:27:07:04:32:41:ba:bc:ab:68:df:64:d5:36:97:17:bd:74: 47:91:25:71:94:a7:83:10:49:e2:5c:f5:36:72:cd:03:25:7c: 90:20:09:0f:62:55:f8:4d:db:8b:df:9c:8b:ee:96:e0:80:af: 2a:e0:32:e5:0c:9c:cb:81:be:db:38:85:4b:40:ea:86:24:ee: 3e:2c:92:f9:bc:ed:da:e6:9c:6b:62:32:1c:9a:27:f8:26:81: 1a:b8:2c:5b:02:31:44:52:6d:ba:f8:98:31:c4:21:00:a1:95: 19:ae:ba:e7:e1:98:68:6f:4b:fd:45:5a:e4:18:05:d6:3d:6b: 02:81:1c:18:a0:31:6a:88:0a:8f:29:ad:f1:fb:38:65:1e:3a: dc:60:5b:8b:ef:3b:6d:98:ed:a6:50:d6:b3:c2:85:2a:4e:67: 30:14:4b:2a:bf:b9:5a:d8:c5:30:a1:78:70:ec:f2:91:33:29: 57:db:8a:c6:ef:26:f3:12:fe:06:33:18:4a:fb:03:b4:d0:2e: e0:1d:2e:61:b1:e0:e6:b2:13:0c:23:24:74:5e:42:36:ee:0a: 60:4e:a8:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUwNzE5MDUwODI2WhcNMjUwNzI2MDUwODI2WjAYMRYwFAYD VQQDEw02ODdiMjg0Yi04MzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7yEvct/PV2b9uylRxyqqRtKrK3SghzBFZY1IdkZj1GhYZNtwGDE1XbCKpLK b4bw3dCc66NPOSUIUK5nCOTeHi2v8pH/SNienXSy625x1ytGgO2hm4aS6f4TAlly 8tMdCdo+0DoFeyQksv4p2wYX7/eGXeOwxIq6Yg4gsuyjXk72ext+tX+/QLeKrq7r zYXECV9cpHfXxF9MXzp1R0SFr4JD8tHOZEV/qRSqiU1s1Joc3bdtOVVGOnp184Cm L78YIKc4j3hF2KgQ4croluYQQ0zoVKEtr3uTJ5xDoxM+aw6Gk9IaUT9qceiq7rqm Ag5IPqnMT/4I+VFdnD7jhkzj9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrq8P3a 9YGLi8PjKsUEigD9ylyFMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz1obSzXxFhlZSHsxVdsvZyahJmQfn68ei9n5XLfVCiTdZTXgiJwcE MkG6vKto32TVNpcXvXRHkSVxlKeDEEniXPU2cs0DJXyQIAkPYlX4TduL35yL7pbg gK8q4DLlDJzLgb7bOIVLQOqGJO4+LJL5vO3a5pxrYjIcmif4JoEauCxbAjFEUm26 +JgxxCEAoZUZrrrn4Zhob0v9RVrkGAXWPWsCgRwYoDFqiAqPKa3x+zhlHjrcYFuL 7zttmO2mUNazwoUqTmcwFEsqv7la2MUwoXhw7PKRMylX24rG7ybzEv4GMxhK+wO0 0C7gHS5hseDmshMMIyR0XkI27gpgTqg5 -----END CERTIFICATE-----Generated at Sun Jul 20 06:29:46 2025 by rpki-client