$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: IRK7Y/x184c7D+PC2WY+RAwpEGz2Iis2P8BeHhnLn7k= Subject key identifier: 87:18:3C:77:96:86:6E:13:45:30:09:7A:C1:D1:7D:00:C5:EE:3A:8E Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 012C Signing time: Sat 19 Jul 2025 04:50:35 +0000 Manifest this update: Sat 19 Jul 2025 04:50:34 +0000 Manifest next update: Sat 26 Jul 2025 04:50:34 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: qIkWCl2plNq2i625xv575iwy2EV04hM4gzCR4HxRN4s=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: W3PBLvmUcdE3zAX7FZy5vyT9kW67f//Ujbv+JZHmvZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: Jul 19 04:50:34 2025 GMT Not After : Jul 26 04:50:34 2025 GMT Subject: CN=687b241a-96fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:17:aa:a1:5e:11:a1:1b:76:ad:fc:2f:32: 75:a2:6a:58:7e:01:b6:6c:13:be:99:71:72:73:f6: 91:22:d4:a9:02:86:8a:77:e7:56:97:b7:24:5d:bf: b7:db:27:c9:81:8c:0c:df:1b:5f:40:c3:11:8d:cf: b3:2f:02:74:8f:8a:eb:3e:2c:b2:db:15:9a:3f:2d: 85:11:6c:4f:e4:32:19:3e:8b:2e:5d:2a:d5:43:e6: 24:fb:a9:cd:56:b4:c4:44:98:a6:38:58:3e:1a:66: 16:10:bb:58:b2:2d:7f:12:9d:ad:cb:8f:d3:78:45: c1:96:8d:a7:cf:3d:4a:cd:e0:b4:24:e3:6d:9e:7d: 96:4f:49:a9:94:4a:c0:12:ba:29:83:2a:45:8f:97: f8:e1:6c:df:d3:fd:cc:fe:38:a5:92:88:cf:4e:53: ca:55:a2:ea:b8:ae:bf:4d:0d:82:40:41:bf:c3:83: d9:e1:51:03:9d:d3:45:f0:46:48:0a:d5:4b:74:86: d5:cd:83:32:e1:4a:3e:7b:a2:e5:4e:7e:da:61:ef: 2d:6a:f5:31:53:2e:88:70:74:5b:7f:cb:0c:f6:43: 4e:41:c3:cb:a2:d1:9e:f3:fd:f7:1c:55:70:a4:f9: af:1b:38:56:48:1e:fd:1b:61:31:c3:09:53:a0:ef: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:18:3C:77:96:86:6E:13:45:30:09:7A:C1:D1:7D:00:C5:EE:3A:8E X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ad:32:f1:0f:72:20:78:20:b0:77:23:77:56:12:bb:14:df: 49:8f:42:7d:0e:68:57:38:35:24:0b:54:d6:f9:6b:e2:36:0c: a0:c5:db:d2:ef:fa:68:d9:6a:38:89:8e:31:00:f8:cf:79:44: 3b:3f:fb:f7:3c:8b:ff:73:e8:2b:a5:dc:61:52:fd:77:79:c6: eb:07:1e:ee:49:08:00:5a:cd:64:0f:02:f1:81:ce:82:98:be: 4d:31:1d:06:fd:48:ed:9f:4c:e7:62:7b:d2:2d:d1:91:e6:96: 11:79:bf:28:5a:7d:1f:c8:d1:c1:7c:52:6e:2f:06:f4:d7:5e: 36:29:1e:8d:42:46:b3:f2:07:9e:33:81:78:63:a2:d5:5a:b7: a6:e0:48:d4:94:22:47:38:24:96:76:bc:0c:6c:38:24:3e:48: c2:4c:eb:92:d9:71:31:ed:57:18:a6:28:26:14:4d:4a:94:1c: a7:ca:08:5f:8c:61:d9:06:de:03:49:55:25:4a:70:ac:d8:d0: 99:ab:ae:ee:c5:53:02:4b:5b:93:05:5f:0d:18:a6:6e:49:c5: e8:f2:c7:76:19:2b:a1:12:94:39:0f:ee:cd:47:cd:fe:63:89: c0:b9:27:91:e8:5a:64:ed:65:57:b4:52:b3:cf:f8:5a:e5:80: d8:3b:a1:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjUwNzE5MDQ1MDM0WhcNMjUwNzI2MDQ1MDM0WjAYMRYwFAYD VQQDEw02ODdiMjQxYS05NmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCoXqqFeEaEbdq38LzJ1ompYfgG2bBO+mXFyc/aRItSpAoaKd+dWl7ckXb+3 2yfJgYwM3xtfQMMRjc+zLwJ0j4rrPiyy2xWaPy2FEWxP5DIZPosuXSrVQ+Yk+6nN VrTERJimOFg+GmYWELtYsi1/Ep2ty4/TeEXBlo2nzz1KzeC0JONtnn2WT0mplErA EropgypFj5f44Wzf0/3M/jilkojPTlPKVaLquK6/TQ2CQEG/w4PZ4VEDndNF8EZI CtVLdIbVzYMy4Uo+e6LlTn7aYe8tavUxUy6IcHRbf8sM9kNOQcPLotGe8/33HFVw pPmvGzhWSB79G2ExwwlToO/bsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcYPHeW hm4TRTAJesHRfQDF7jqOMB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxrTLxD3IgeCCwdyN3VhK7FN9Jj0J9DmhXODUkC1TW+WviNgygxdvS 7/po2Wo4iY4xAPjPeUQ7P/v3PIv/c+grpdxhUv13ecbrBx7uSQgAWs1kDwLxgc6C mL5NMR0G/Ujtn0znYnvSLdGR5pYReb8oWn0fyNHBfFJuLwb01142KR6NQkaz8gee M4F4Y6LVWrem4EjUlCJHOCSWdrwMbDgkPkjCTOuS2XEx7VcYpigmFE1KlBynyghf jGHZBt4DSVUlSnCs2NCZq67uxVMCS1uTBV8NGKZuScXo8sd2GSuhEpQ5D+7NR83+ Y4nAuSeR6Fpk7WVXtFKzz/ha5YDYO6Ez -----END CERTIFICATE-----Generated at Sun Jul 20 07:13:47 2025 by rpki-client