$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft File: XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json) Hash identifier: Nqu8uxUHf67yDRbsXtPKjUlxc48rSAW2mxd/44s0Up4= Subject key identifier: 84:FE:BF:32:3D:02:3F:DE:2B:D0:49:08:04:80:4A:A5:09:7D:7A:CF Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft Manifest number: 016B Signing time: Sat 19 Jul 2025 04:23:21 +0000 Manifest this update: Sat 19 Jul 2025 04:23:20 +0000 Manifest next update: Sat 26 Jul 2025 04:23:20 +0000 Files and hashes: 1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: hSOVUsY/rw0UndGn+4z1iwku/TJySmc5MTr05I+SqqM=) 2: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: VRlasPmFdnGQ7jXmsGRiZ9YkkvB4UEQJbRXUpRC4bL8=) 3: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: Qgji862kow2VwzLmbLL0a0Y2hhvgFChH2ZT0r4kSTl8=) 4: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: qOQvPOfqQOexW3Sxvhsqmm5W1KEN72YTFSt5Z0QktXg=) 5: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: pidH+xtb8OXyN3SlmzLiBUdr0SQho8QbaXQpLP6w5rQ=) 6: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: LMxslHx0hj+eRPegweO/Q77RiY35syFR40MU3J+sT8s=) 7: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: Wa8VD0lmDOwdth5KoUIOfMLBdB57aoMl1cYAfCOjMXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Jul 19 04:23:20 2025 GMT Not After : Jul 26 04:23:20 2025 GMT Subject: CN=687b1db9-b4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8d:58:1c:d0:88:a5:cd:92:11:47:03:aa:f1: 3a:e6:66:10:f2:6b:79:09:b4:aa:e6:2e:bb:06:00: 08:0d:c2:e6:69:a0:7e:7a:f8:a3:a3:e6:62:73:54: 1c:62:35:d1:2b:89:59:e5:04:50:fa:17:39:85:c3: cf:24:fb:57:95:10:51:af:91:d2:92:f9:05:ec:72: 84:a0:37:28:04:83:2a:54:d9:d5:53:9f:54:de:e0: d7:5e:f4:aa:fc:27:fc:d5:c6:48:9a:d1:4a:df:35: e3:12:4c:ec:03:53:90:f1:b2:13:f6:a3:6f:e0:3b: cc:96:30:3f:53:65:22:6f:2c:59:67:cb:da:8a:cb: 72:61:de:58:fa:1f:95:1a:d2:21:31:1a:76:18:96: 0c:5b:eb:6d:d8:65:46:bb:1c:d6:6a:ea:11:31:07: 37:6a:07:b6:bb:d0:6c:36:93:cd:40:71:22:ff:44: d1:5f:cf:82:f2:08:82:3d:04:c5:98:b8:54:49:4e: 05:7d:58:1e:ee:53:c3:f8:c7:54:de:a1:7b:f9:ef: 05:71:df:93:21:f7:46:85:40:bb:c5:d5:45:42:78: 95:ce:9b:89:0c:e9:8e:91:2e:b0:49:1e:3b:75:a0: ab:fe:c1:03:3a:c9:28:36:74:72:d0:36:44:e0:c3: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FE:BF:32:3D:02:3F:DE:2B:D0:49:08:04:80:4A:A5:09:7D:7A:CF X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e0:7c:97:64:21:38:a6:8b:2c:f5:cc:a0:9a:1c:a4:39:c2: 47:dd:7e:08:fb:74:9e:bc:01:92:93:b2:17:bc:cd:dd:73:98: bd:0f:2c:ec:41:53:64:7c:92:9b:ce:2f:46:6d:0a:2c:16:6e: 75:f6:0e:c3:31:b0:d5:d4:c4:c3:a3:b0:d4:bf:ed:ad:c3:07: 97:97:12:5f:ae:97:84:7b:38:af:7d:83:4b:53:da:b4:36:c3: 84:b6:9b:6e:fe:d7:f5:c9:a4:fb:74:05:77:29:f4:1c:70:63: d0:b9:81:9e:1f:9f:55:aa:ae:fe:8c:a8:67:6f:95:42:ca:8e: 78:14:66:3e:f8:8d:d1:a5:7a:a8:44:8e:1d:8b:04:c9:3f:b5: 38:8f:27:5e:94:7d:f9:4b:70:6e:b7:06:db:e0:b6:6d:37:ea: 79:e1:b9:ae:ed:9d:c4:e0:e0:1a:cb:9a:6b:37:87:09:b1:cb: 1b:84:13:66:e0:d1:18:cb:e3:84:7a:53:86:bf:1f:68:db:2e: e7:7e:ea:4c:09:34:2b:31:92:cd:a7:06:68:5b:35:7b:35:2b: d3:72:6a:a6:72:74:76:6f:19:70:a0:02:ec:49:d2:1a:da:d8: db:4f:07:6d:ac:72:05:2c:a1:e0:51:93:df:8e:4d:10:fc:44: 58:c9:1c:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjUwNzE5MDQyMzIwWhcNMjUwNzI2MDQyMzIwWjAYMRYwFAYD VQQDEw02ODdiMWRiOS1iNGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Y1YHNCIpc2SEUcDqvE65mYQ8mt5CbSq5i67BgAIDcLmaaB+evijo+Zic1Qc YjXRK4lZ5QRQ+hc5hcPPJPtXlRBRr5HSkvkF7HKEoDcoBIMqVNnVU59U3uDXXvSq /Cf81cZImtFK3zXjEkzsA1OQ8bIT9qNv4DvMljA/U2UibyxZZ8vaistyYd5Y+h+V GtIhMRp2GJYMW+tt2GVGuxzWauoRMQc3age2u9BsNpPNQHEi/0TRX8+C8giCPQTF mLhUSU4FfVge7lPD+MdU3qF7+e8Fcd+TIfdGhUC7xdVFQniVzpuJDOmOkS6wSR47 daCr/sEDOskoNnRy0DZE4MO+PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIT+vzI9 Aj/eK9BJCASASqUJfXrPMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9FQTdFNUZBNjYzNkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZq TGwwel9zY3ZwME1fU2M0cG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk4HyXZCE4poss9cygmhykOcJH3X4I+3SevAGSk7IXvM3dc5i9Dyzs QVNkfJKbzi9GbQosFm519g7DMbDV1MTDo7DUv+2twweXlxJfrpeEezivfYNLU9q0 NsOEtptu/tf1yaT7dAV3KfQccGPQuYGeH59Vqq7+jKhnb5VCyo54FGY++I3RpXqo RI4diwTJP7U4jydelH35S3Butwbb4LZtN+p54bmu7Z3E4OAay5prN4cJscsbhBNm 4NEYy+OEelOGvx9o2y7nfupMCTQrMZLNpwZoWzV7NSvTcmqmcnR2bxlwoALsSdIa 2tjbTwdtrHIFLKHgUZPfjk0Q/ERYyRwt -----END CERTIFICATE-----Generated at Sun Jul 20 06:10:06 2025 by rpki-client