$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: c27fMyms08V0ni/Cl0p9qgavSWZMlYcqtjXbJCwCymM= Subject key identifier: 9A:ED:2A:41:16:AC:EC:F5:7F:81:D7:89:4C:FE:FA:6D:9A:3E:DB:2A Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 0138 Signing time: Sat 19 Jul 2025 04:48:19 +0000 Manifest this update: Sat 19 Jul 2025 04:48:19 +0000 Manifest next update: Sat 26 Jul 2025 04:48:19 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: WQUI8PkM7M57lO29HufOMboeyBoO4rkdOj8rPyconeE=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Jul 19 04:48:19 2025 GMT Not After : Jul 26 04:48:19 2025 GMT Subject: CN=687b2393-43ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:f8:bd:b9:47:78:91:ee:4e:9a:49:2d:d2: 29:47:7f:9d:fe:1e:72:bd:b0:99:81:44:79:64:06: 0c:ac:ac:d4:4a:80:5d:10:d8:0f:52:35:be:a2:fc: 6d:c8:92:8e:02:de:66:61:8a:b5:f1:c5:7c:14:c9: b1:b2:82:c0:d5:a0:a6:b9:db:01:db:e8:7c:99:1b: 74:36:7f:ce:25:44:bb:de:9b:fd:c5:86:8a:5e:7f: 9f:bc:20:5c:bc:03:ba:62:4c:b0:c6:c3:52:12:b4: 7b:bc:09:20:96:a5:ea:9b:8e:2a:7c:23:ad:fe:b1: 5b:d3:0d:f0:99:2a:12:f1:41:ac:ec:12:c4:c4:cd: 84:40:29:55:d7:97:5c:ae:be:f4:a7:12:16:aa:e4: d9:81:b1:16:a1:55:ae:32:4b:11:10:22:ad:69:fb: a9:7f:2f:fe:49:68:b1:de:b4:2a:90:b3:eb:f9:3d: 93:0e:11:a0:f5:c4:b6:97:77:c9:24:8c:16:4f:ea: 4e:6b:ab:66:f2:6e:18:94:14:46:b9:2a:ed:59:aa: 2b:2d:62:87:31:73:92:97:e8:6e:c5:0a:a6:c0:f0: 16:31:c7:68:45:07:5b:4a:26:45:d5:cd:c3:09:3c: 10:a2:15:9a:45:1c:2b:89:24:00:cb:dd:56:a6:ef: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:ED:2A:41:16:AC:EC:F5:7F:81:D7:89:4C:FE:FA:6D:9A:3E:DB:2A X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:a8:22:95:b7:98:e2:8c:34:1e:57:91:d1:16:43:22:be:c5: 7b:36:af:38:d2:0f:a5:5b:87:22:73:05:68:71:69:e6:2c:36: 51:e7:3e:0c:62:94:61:6c:de:d2:f9:31:cb:52:6f:fe:7c:c1: e3:c4:84:e0:d4:15:2d:7b:e5:9f:30:47:9b:ba:75:ce:91:dc: 20:82:99:43:45:81:68:c9:cd:12:38:df:02:11:d2:c3:7c:89: d3:91:54:74:0f:67:52:72:2c:f7:fe:b2:b2:52:18:37:e5:92: 30:6d:60:57:d2:15:c4:14:9f:ce:08:48:a4:44:fd:e0:d0:3f: 0c:fc:5c:81:97:e8:db:16:5c:1e:38:ea:01:f8:95:52:51:2f: 2e:1e:7f:bf:7a:df:ef:56:a0:9c:bf:7c:26:01:a4:e5:5e:74: cb:e8:2d:db:2f:f0:21:47:d2:69:9c:16:1b:27:d1:c4:20:2d: c3:50:39:5f:a4:86:1b:6d:8a:44:f2:fd:ed:71:2e:f0:7a:d2: 82:be:1f:27:fd:76:80:66:d9:bf:22:50:c5:f8:9d:e7:7a:90: ea:ec:8f:69:c3:86:fb:bb:c9:2f:b9:65:3c:34:82:a8:87:df: f1:4c:a2:bf:ca:92:ef:b1:bb:81:2e:39:1a:52:05:f9:56:34: 15:ba:0c:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUwNzE5MDQ0ODE5WhcNMjUwNzI2MDQ0ODE5WjAYMRYwFAYD VQQDEw02ODdiMjM5My00M2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qj4vblHeJHuTppJLdIpR3+d/h5yvbCZgUR5ZAYMrKzUSoBdENgPUjW+ovxt yJKOAt5mYYq18cV8FMmxsoLA1aCmudsB2+h8mRt0Nn/OJUS73pv9xYaKXn+fvCBc vAO6YkywxsNSErR7vAkglqXqm44qfCOt/rFb0w3wmSoS8UGs7BLExM2EQClV15dc rr70pxIWquTZgbEWoVWuMksRECKtafupfy/+SWix3rQqkLPr+T2TDhGg9cS2l3fJ JIwWT+pOa6tm8m4YlBRGuSrtWaorLWKHMXOSl+huxQqmwPAWMcdoRQdbSiZF1c3D CTwQohWaRRwriSQAy91Wpu/lXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrtKkEW rOz1f4HXiUz++m2aPtsqMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFqCKVt5jijDQeV5HRFkMivsV7Nq840g+lW4cicwVocWnmLDZR5z4M YpRhbN7S+THLUm/+fMHjxITg1BUte+WfMEebunXOkdwggplDRYFoyc0SON8CEdLD fInTkVR0D2dSciz3/rKyUhg35ZIwbWBX0hXEFJ/OCEikRP3g0D8M/FyBl+jbFlwe OOoB+JVSUS8uHn+/et/vVqCcv3wmAaTlXnTL6C3bL/AhR9JpnBYbJ9HEIC3DUDlf pIYbbYpE8v3tcS7wetKCvh8n/XaAZtm/IlDF+J3nepDq7I9pw4b7u8kvuWU8NIKo h9/xTKK/ypLvsbuBLjkaUgX5VjQVugyN -----END CERTIFICATE-----Generated at Sun Jul 20 16:41:20 2025 by rpki-client