$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft File: 10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json) Hash identifier: NZ88BejtISvTCyvfvVkd1WiCdj3ic9YeIQjm1nYDz3s= Subject key identifier: BF:BC:6A:79:F1:62:57:76:E1:4D:F0:7C:E5:19:67:9F:94:2C:DF:28 Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft Manifest number: 016F Signing time: Mon 21 Jul 2025 03:57:08 +0000 Manifest this update: Mon 21 Jul 2025 03:57:07 +0000 Manifest next update: Mon 28 Jul 2025 03:57:07 +0000 Files and hashes: 1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: P8mBqhmNOLLtIePZ147hLfm+GAKoWHXRIieWlP2gG6E=) 2: 12DD779467A211EEA8239268C4F9AE02.roa (hash: tXyHZWiyLccCa4dm7RkGGfRei0ZIky7sg5whsG/aUrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Validity Not Before: Jul 21 03:57:07 2025 GMT Not After : Jul 28 03:57:07 2025 GMT Subject: CN=687dba94-bbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:37:ab:46:90:b8:16:4c:86:08:ff:dd:32:1d: c9:f3:2d:ee:e8:f1:01:8c:69:7b:aa:f0:98:9c:32: ba:d7:d8:c6:0c:68:62:6d:a2:91:5f:0d:25:f1:ce: a6:9b:1a:99:da:18:87:13:7c:30:8f:8f:81:27:ed: 61:d3:34:dc:66:8d:7b:08:96:e4:d6:4a:f5:37:37: 9b:c4:4e:69:e6:ed:21:b5:50:1e:66:2b:32:e9:05: fc:42:3d:39:ba:0f:9b:c6:5e:c3:c3:23:fc:2f:ae: f5:c0:d8:2e:e2:74:a1:65:24:40:24:f5:ce:d5:40: 5d:56:3c:f9:1a:8c:1e:51:be:00:bd:d1:97:8c:ca: 86:c3:16:8d:d6:52:90:ee:be:02:7a:45:3b:9c:99: 23:dd:ff:37:46:4e:de:1e:63:8f:84:b6:28:b9:78: b8:6b:45:db:dd:bb:d9:5b:08:4e:f5:99:af:b2:6b: f3:86:9b:63:a2:82:49:9f:73:fa:8b:db:78:5f:08: f3:1d:f5:b8:45:0c:a4:c4:c6:87:66:96:c0:dd:d0: 2a:16:dd:d3:a7:d4:d9:63:1b:c8:06:75:88:1d:2e: 61:05:e9:ff:b2:07:f8:6d:6c:e2:3c:b8:81:20:a4: 66:09:d7:5e:8b:06:81:39:ea:43:84:19:77:6a:bd: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BC:6A:79:F1:62:57:76:E1:4D:F0:7C:E5:19:67:9F:94:2C:DF:28 X509v3 Authority Key Identifier: keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c1:24:ea:2f:aa:c0:ca:3c:63:38:b1:07:4e:80:14:1c:ad: f8:b3:f3:f4:d1:e3:68:9d:0c:a4:db:02:ff:f1:39:ee:b9:07: 07:2e:dd:0f:78:48:40:23:cc:d6:49:7d:6b:8d:eb:4b:69:ee: dc:1a:03:b7:49:95:c1:4c:d7:14:bc:71:ce:5b:0c:ae:83:de: b4:6c:9b:a7:c7:03:7d:8a:06:b2:03:e2:ce:76:2a:e6:8e:5d: 27:f6:e3:0a:a7:c3:aa:60:07:d9:a8:f9:15:b9:1d:3b:c8:b8: f6:e5:50:d6:ef:ed:4d:2e:70:cf:28:cd:4a:fa:2e:01:7c:61: 08:41:a3:6d:b0:12:6b:1a:8a:12:e3:5c:15:21:93:fa:85:c5: 10:ba:6d:11:7e:07:3f:47:2c:4a:6d:bf:4a:6f:0b:a2:b6:25: 0d:6e:39:2d:2b:99:7e:48:fa:c8:b8:d6:9d:ff:df:2a:a1:b5: 53:48:e1:6d:d3:04:2a:3e:1d:90:eb:77:a2:1d:09:45:d1:23: 7e:86:77:d3:e9:6c:6b:23:4b:b7:e3:94:a4:fc:39:8b:ca:d5: 6f:79:cc:07:0c:ab:86:14:c4:ab:40:e6:2e:6b:a0:a1:54:15: de:f6:4d:7f:8b:f0:b4:65:d2:e9:b4:0d:31:f8:d8:36:c7:2c: 0f:72:13:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3QzQxMTAvBgNVBAUTKEQ3NDVFMUM4NkIxODE4RjdEMDU2M0Y5MEU4QkExMkJF OEIxQUUzNzgwHhcNMjUwNzIxMDM1NzA3WhcNMjUwNzI4MDM1NzA3WjAYMRYwFAYD VQQDEw02ODdkYmE5NC1iYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zerRpC4FkyGCP/dMh3J8y3u6PEBjGl7qvCYnDK619jGDGhibaKRXw0l8c6m mxqZ2hiHE3wwj4+BJ+1h0zTcZo17CJbk1kr1NzebxE5p5u0htVAeZisy6QX8Qj05 ug+bxl7DwyP8L671wNgu4nShZSRAJPXO1UBdVjz5GoweUb4AvdGXjMqGwxaN1lKQ 7r4CekU7nJkj3f83Rk7eHmOPhLYouXi4a0Xb3bvZWwhO9ZmvsmvzhptjooJJn3P6 i9t4XwjzHfW4RQykxMaHZpbA3dAqFt3Tp9TZYxvIBnWIHS5hBen/sgf4bWziPLiB IKRmCddeiwaBOepDhBl3ar1TuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+8annx Yld24U3wfOUZZ5+ULN8oMB8GA1UdIwQYMBaAFNdF4chrGBj30FY/kOi6Er6LGuN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTdDNC9DNjNERjIwMDND NjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQZlFWai1RNkxvU3Zvc2E0 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwWGh5R3NZR1BmUVZqLVE2TG9Tdm9zYTQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTdDNC9DNjNERjIwMDNDNjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQ ZlFWai1RNkxvU3Zvc2E0M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqwSTqL6rAyjxjOLEHToAUHK34s/P00eNonQyk2wL/8TnuuQcHLt0P eEhAI8zWSX1rjetLae7cGgO3SZXBTNcUvHHOWwyug960bJunxwN9igayA+LOdirm jl0n9uMKp8OqYAfZqPkVuR07yLj25VDW7+1NLnDPKM1K+i4BfGEIQaNtsBJrGooS 41wVIZP6hcUQum0Rfgc/RyxKbb9KbwuitiUNbjktK5l+SPrIuNad/98qobVTSOFt 0wQqPh2Q63eiHQlF0SN+hnfT6WxrI0u345Sk/DmLytVvecwHDKuGFMSrQOYua6Ch VBXe9k1/i/C0ZdLptA0x+Ng2xywPchPD -----END CERTIFICATE-----Generated at Mon Jul 21 05:54:30 2025 by rpki-client