$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: nVRo9xiXTgS0538+/be/ha9uY/sfl2mvgg0hUF/QJ30= Subject key identifier: 7E:E3:31:3E:F3:A6:17:08:8A:58:C9:40:94:7C:09:28:79:BD:D4:6D Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 0138 Signing time: Tue 29 Jul 2025 04:54:16 +0000 Manifest this update: Tue 29 Jul 2025 04:54:15 +0000 Manifest next update: Tue 05 Aug 2025 04:54:15 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: y6mU3GpCeF9Q+D+G0KaJP9hOAXL1Grtq84t6DJD9aTA=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: sPbI4s6oqdRUOiNi18Y1/q6iWjlYMVf5hdTw+xVFaMo=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: AVP7CNVml5F9ogjZv8lDcpc3+J0u+jj8KPjr/y0/brc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 04:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Jul 29 04:54:15 2025 GMT Not After : Aug 5 04:54:15 2025 GMT Subject: CN=688853f7-5575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:33:2f:09:4f:a5:10:24:90:2c:54:d7:d8: 6b:7b:32:99:b4:7f:de:0e:42:84:0d:24:b6:29:06: f7:d3:9e:a6:1a:ac:f5:d2:5f:d5:35:87:bd:f5:b7: fa:f2:2d:b9:2c:f3:de:24:85:33:5e:de:e7:c1:48: a3:00:97:d3:fd:05:9a:1c:2a:74:8d:bc:e8:d8:77: b2:c8:d6:29:b1:df:a1:fa:14:9c:f9:b3:1d:c5:6e: 46:08:94:38:1f:1e:93:43:bf:58:4f:66:c7:0c:44: 66:bf:83:29:15:47:cb:a3:e6:9f:26:a9:2a:2d:60: 6c:d3:76:8b:6d:fa:c9:6a:f1:39:01:58:89:16:42: 8a:c2:71:8c:82:04:c8:82:ff:d6:ed:ed:3a:6d:ca: 6c:0d:d5:dd:a5:b4:9c:72:cd:3c:35:d0:03:9c:7c: 98:d1:a3:f6:f1:a0:5b:b5:1c:1f:06:c2:49:b2:db: 28:d9:cf:59:66:09:6e:52:2b:ca:9b:ba:52:ae:02: af:e6:e1:fc:da:43:1e:af:8c:12:ca:c5:e4:f9:0f: 8a:a9:e4:77:f3:98:7c:2a:6f:8d:4c:2e:41:b6:33: ef:8f:ab:41:01:47:e7:94:cd:41:cc:8f:dc:b1:b2: cd:5b:cb:76:a0:42:ec:4b:25:5c:5b:15:9e:db:bb: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E3:31:3E:F3:A6:17:08:8A:58:C9:40:94:7C:09:28:79:BD:D4:6D X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:36:ba:ac:42:a9:68:71:c2:5d:11:66:9f:77:8a:84:72:99: f8:22:29:58:0c:b0:1a:9c:78:0c:8a:08:82:e7:54:6a:9d:11: a1:0e:4b:75:84:86:08:3f:50:36:44:76:2f:cb:a9:f8:8c:33: cf:92:eb:b0:03:db:9e:11:fd:fb:a2:5d:f3:2e:68:dc:11:5b: cd:a2:84:0b:e9:5e:17:38:31:a3:77:59:b5:79:5b:e3:96:35: 6d:70:71:dc:f1:74:7f:3d:73:19:7b:66:13:45:b8:ba:cf:4b: 2f:b6:9e:b2:f7:47:59:b8:6a:f1:7c:a6:fb:9f:d0:9d:f1:b1: ff:bb:74:24:c6:42:05:c0:d3:26:b1:54:d1:35:ce:07:5f:c1: 49:ce:ee:19:e7:74:4c:53:f7:9d:a4:df:19:a8:d7:46:94:01: d0:6f:cd:18:68:7e:2a:78:61:6a:7f:fc:71:0a:11:d1:a4:7b: 4d:af:7e:3a:f6:0c:b3:5f:94:1e:2e:3b:35:b3:97:51:66:cc: 16:1b:0b:8e:e1:aa:23:c8:2f:86:36:24:fa:ba:2b:6c:6d:24: 71:92:05:5b:a3:0d:90:24:db:1e:8a:f6:91:6b:1b:2d:0e:79: 40:6d:bf:59:d3:38:8a:67:4b:70:00:ac:5d:f7:c5:d7:0f:6c: 06:f4:64:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjUwNzI5MDQ1NDE1WhcNMjUwODA1MDQ1NDE1WjAYMRYwFAYD VQQDEw02ODg4NTNmNy01NTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwAzLwlPpRAkkCxU19hrezKZtH/eDkKEDSS2KQb3056mGqz10l/VNYe99bf6 8i25LPPeJIUzXt7nwUijAJfT/QWaHCp0jbzo2HeyyNYpsd+h+hSc+bMdxW5GCJQ4 Hx6TQ79YT2bHDERmv4MpFUfLo+afJqkqLWBs03aLbfrJavE5AViJFkKKwnGMggTI gv/W7e06bcpsDdXdpbSccs08NdADnHyY0aP28aBbtRwfBsJJstso2c9ZZgluUivK m7pSrgKv5uH82kMer4wSysXk+Q+KqeR385h8Km+NTC5BtjPvj6tBAUfnlM1BzI/c sbLNW8t2oELsSyVcWxWe27sa4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7jMT7z phcIiljJQJR8CSh5vdRtMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMNrqsQqloccJdEWafd4qEcpn4IilYDLAanHgMigiC51RqnRGhDkt1 hIYIP1A2RHYvy6n4jDPPkuuwA9ueEf37ol3zLmjcEVvNooQL6V4XODGjd1m1eVvj ljVtcHHc8XR/PXMZe2YTRbi6z0svtp6y90dZuGrxfKb7n9Cd8bH/u3QkxkIFwNMm sVTRNc4HX8FJzu4Z53RMU/edpN8ZqNdGlAHQb80YaH4qeGFqf/xxChHRpHtNr346 9gyzX5QeLjs1s5dRZswWGwuO4aojyC+GNiT6uitsbSRxkgVbow2QJNseivaRaxst DnlAbb9Z0ziKZ0twAKxd98XXD2wG9GQj -----END CERTIFICATE-----Generated at Tue Jul 29 14:53:08 2025 by rpki-client