$ rpki-client -vvf rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft File: XHIqJhQciPfNQPObN0raf7wfmx8.mft (raw, json) Hash identifier: nocu0xoCbD2HvPoMF1WnKe6tzXprf6pcGsxgkWbzXtM= Subject key identifier: 86:89:25:84:E9:81:FF:3C:64:66:0F:0A:68:54:3D:6C:BE:E7:8D:21 Authority key identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F Certificate issuer: /CN=A91D824A/serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft Manifest number: B2 Signing time: Sat 19 Jul 2025 06:16:19 +0000 Manifest this update: Sat 19 Jul 2025 06:16:18 +0000 Manifest next update: Sat 26 Jul 2025 06:16:18 +0000 Files and hashes: 1: XHIqJhQciPfNQPObN0raf7wfmx8.crl (hash: 2h/U/OtnQfuS2z/6h2cRi9zhUW8gDDwiXJEKpH5ll5Y=) 2: D69C342850E311F098697E1BC4F9AE02.roa (hash: BsgTCGS6ZY9wo4DRbXqJWgsBM56PxcgPxCxnw/1lRZA=) 3: EA438F3050E311F08CF2971BC4F9AE02.roa (hash: IjL6cu6bZiACksELIxEiXf/UtBVghk3xr9SoGwHtz+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D824A, serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Validity Not Before: Jul 19 06:16:18 2025 GMT Not After : Jul 26 06:16:18 2025 GMT Subject: CN=687b3832-9541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:e8:85:ba:07:66:7f:b4:59:35:47:96:1b: 80:59:e0:97:12:a5:2b:28:49:37:d4:25:43:ce:4d: f2:00:2c:a6:19:a3:47:8d:8d:25:42:0b:5d:29:6c: 56:ee:2a:be:63:87:82:fa:ae:e8:6e:62:7d:03:a5: 0c:11:4f:d4:78:66:d5:aa:50:83:bc:df:26:79:00: 5a:bd:5d:0c:fb:8f:b5:10:6f:03:ac:8b:d7:ef:bc: 75:4b:bb:52:e1:28:be:9b:37:11:dd:b2:ef:44:f9: 6f:5a:c6:38:3b:ee:e5:b8:8c:63:af:e9:cb:54:bc: ad:9d:78:99:48:79:7c:f7:75:88:c0:79:9f:2b:21: d9:7d:b9:16:1c:88:a1:dd:c5:4d:b2:c4:14:c2:0b: 29:7a:a3:47:a3:f8:c5:c0:7d:26:8b:b3:b6:cd:80: d4:ba:bf:2f:ce:e3:29:0a:fd:77:15:cc:ff:02:e7: c9:06:74:9f:63:e6:11:59:8d:b3:e4:a1:27:dc:c0: 5e:ab:e6:4b:31:fc:f4:d7:f0:1b:e5:93:5b:18:8a: 27:a2:40:55:8a:61:74:c0:fc:82:02:32:b9:84:75: 6b:6b:23:6a:8f:b9:2c:7f:66:48:ff:2f:01:ff:5a: aa:ef:e5:43:53:66:04:63:b0:3e:81:b7:76:4e:9a: 0c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:89:25:84:E9:81:FF:3C:64:66:0F:0A:68:54:3D:6C:BE:E7:8D:21 X509v3 Authority Key Identifier: keyid:5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:22:99:32:cd:f8:50:67:6d:54:0c:6f:93:dc:3f:f2:03:b9: a1:24:ec:2c:8d:dd:69:0a:db:fa:d0:65:d2:22:ea:aa:4d:f3: c1:98:cd:20:35:b4:3c:38:f5:ab:15:55:6a:2f:1b:33:5b:c2: 0b:e3:93:84:3d:b4:db:63:6b:a8:16:e7:aa:b7:f2:15:81:cd: a3:b9:e7:36:1a:6e:43:42:0b:ca:74:74:25:62:95:16:fe:15: 78:9b:6f:60:32:02:af:6b:58:8c:a1:0b:e8:02:42:6d:96:08: 94:b9:45:6d:b2:56:22:9a:10:49:c1:46:19:f9:5e:65:fc:ab: 45:b7:02:32:09:f6:c8:72:da:2a:e7:93:a9:ab:f9:4f:76:3a: ea:0b:31:fa:e9:ba:26:3d:29:c7:a4:c3:53:e9:88:62:58:3a: d6:f3:54:c7:af:88:b5:1d:4d:30:c8:3f:02:10:ae:00:2e:73: f6:5d:6a:27:f4:62:73:78:fd:38:21:6e:1c:c2:57:84:79:68: a7:c5:f5:81:01:66:88:07:e8:5f:35:d5:3c:bc:12:8c:7b:57: 57:2e:00:e4:44:2c:fa:95:c0:a7:36:c8:0b:db:d1:f5:4d:b8: 1a:10:75:49:a8:41:46:d1:13:c6:49:97:8f:5f:5a:a9:ff:68: 9e:1e:2f:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyNEExMTAvBgNVBAUTKDVDNzIyQTI2MTQxQzg4RjdDRDQwRjM5QjM3NEFEQTdG QkMxRjlCMUYwHhcNMjUwNzE5MDYxNjE4WhcNMjUwNzI2MDYxNjE4WjAYMRYwFAYD VQQDEw02ODdiMzgzMi05NTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhLohboHZn+0WTVHlhuAWeCXEqUrKEk31CVDzk3yACymGaNHjY0lQgtdKWxW 7iq+Y4eC+q7obmJ9A6UMEU/UeGbVqlCDvN8meQBavV0M+4+1EG8DrIvX77x1S7tS 4Si+mzcR3bLvRPlvWsY4O+7luIxjr+nLVLytnXiZSHl893WIwHmfKyHZfbkWHIih 3cVNssQUwgspeqNHo/jFwH0mi7O2zYDUur8vzuMpCv13Fcz/AufJBnSfY+YRWY2z 5KEn3MBeq+ZLMfz01/Ab5ZNbGIonokBVimF0wPyCAjK5hHVrayNqj7ksf2ZI/y8B /1qq7+VDU2YEY7A+gbd2TpoMqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIaJJYTp gf88ZGYPCmhUPWy+540hMB8GA1UdIwQYMBaAFFxyKiYUHIj3zUDzmzdK2n+8H5sf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODI0QS80QURGMzNGQzVC OUExMUVGODMwN0Y1NDBDNEY5QUUwMi9YSElxSmhRY2lQZk5RUE9iTjByYWY3d2Zt eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hISXFKaFFjaVBmTlFQT2JOMHJhZjd3Zm14OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODI0QS80QURGMzNGQzVCOUExMUVGODMwN0Y1NDBDNEY5QUUwMi9YSElxSmhRY2lQ Zk5RUE9iTjByYWY3d2ZteDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVIpkyzfhQZ21UDG+T3D/yA7mhJOwsjd1pCtv60GXSIuqqTfPBmM0g NbQ8OPWrFVVqLxszW8IL45OEPbTbY2uoFueqt/IVgc2juec2Gm5DQgvKdHQlYpUW /hV4m29gMgKva1iMoQvoAkJtlgiUuUVtslYimhBJwUYZ+V5l/KtFtwIyCfbIctoq 55Opq/lPdjrqCzH66bomPSnHpMNT6YhiWDrW81THr4i1HU0wyD8CEK4ALnP2XWon 9GJzeP04IW4cwleEeWinxfWBAWaIB+hfNdU8vBKMe1dXLgDkRCz6lcCnNsgL29H1 TbgaEHVJqEFG0RPGSZePX1qp/2ieHi9m -----END CERTIFICATE-----Generated at Sun Jul 20 14:26:25 2025 by rpki-client