$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: yTZXl4I7yxgTNXJyCCPzLD7NyBK5tiaGYm4YkNqlZZo= Subject key identifier: 74:AE:FD:B7:8A:BA:A1:FB:DD:02:DF:92:5F:1B:E8:5A:00:A1:D8:D3 Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0AF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0ACA Signing time: Fri 18 Jul 2025 19:45:41 +0000 Manifest this update: Fri 18 Jul 2025 19:45:40 +0000 Manifest next update: Fri 25 Jul 2025 19:45:40 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: qEBDaCIptZ1RxjqkG5XFFmYh1g9Bxyn0M0isWG6mN78=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Jul 18 19:45:40 2025 GMT Not After : Jul 25 19:45:40 2025 GMT Subject: CN=687aa465-3409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d1:fb:08:d0:11:17:ec:59:f3:c9:da:c9:b0: c8:47:f1:9d:68:13:f9:9a:62:65:ab:71:26:79:7a: 38:35:9a:cc:02:a9:68:a0:cb:c8:f5:d9:52:a6:a0: 7e:1d:33:27:01:54:94:bb:5f:47:ba:b0:2b:43:8d: df:52:d9:02:97:29:61:17:f9:e8:e9:dd:32:ac:c1: 54:ec:4e:ce:93:57:24:16:d2:8d:2a:30:12:a1:56: bc:77:80:9b:a2:48:19:ff:f6:79:dc:de:d9:6a:3e: a6:ca:9d:ff:33:27:9b:a3:f6:d9:af:c6:75:b8:57: 26:05:ec:c1:c5:7a:a2:04:d9:db:43:a9:fd:ce:99: 67:51:9d:bd:16:4f:9e:1b:42:58:10:b4:6e:ab:f2: 95:bd:4e:16:42:48:ce:a6:d0:ac:c6:bd:8a:70:ec: 14:43:56:80:63:3c:c1:d9:c0:fb:93:7e:39:e8:df: b8:72:a6:09:ad:ff:7f:bd:05:ba:aa:9e:27:43:ad: 57:47:33:e2:93:f2:72:9a:62:19:4f:ab:96:f7:56: 0a:b7:05:77:d4:d8:11:7f:3e:5a:39:a7:7d:44:ac: d5:f0:a4:83:2e:e0:9e:a4:e6:e7:94:2b:f6:8d:ca: 4a:89:73:5c:56:59:b2:da:d9:4c:1b:75:d3:93:a4: b3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AE:FD:B7:8A:BA:A1:FB:DD:02:DF:92:5F:1B:E8:5A:00:A1:D8:D3 X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:06:63:a9:73:c7:9d:a6:33:3c:26:1a:64:70:ff:d1:18:6d: b3:e4:dd:d5:1f:98:65:69:53:37:d6:d2:81:da:09:6f:f9:48: 7a:08:e5:a5:29:fa:77:4e:ce:38:b1:0d:cd:28:80:d9:5b:6c: 42:21:4f:54:e2:45:31:ff:e5:ca:08:84:1a:4d:ee:16:62:2e: e3:f1:8a:ac:0a:f8:c4:14:2f:79:dd:7f:c2:eb:ce:e6:27:40: 97:56:30:57:e2:16:cd:bb:18:fb:8c:b2:07:27:22:9a:39:75: 38:b3:1a:0e:de:b5:ef:7c:c9:64:b9:ff:7a:bf:f8:20:07:eb: cc:2c:58:f4:25:9d:89:51:b3:a3:b2:86:5b:67:1c:9d:47:a6: 8f:92:a8:f4:de:8c:d7:42:5f:fb:98:6a:ed:02:b9:ae:b7:56: 9a:58:e3:b4:6e:73:04:00:71:38:dd:26:e8:b3:b1:79:d7:be: 6c:25:67:cd:d7:7d:e8:ab:fc:74:cc:98:6d:26:20:ef:12:b8: bc:a6:0f:f2:17:44:04:0e:3f:24:8b:ed:12:b0:5f:d5:6c:10: a4:34:b5:b0:53:f1:b2:fc:ee:38:e9:41:ce:37:59:e5:e2:82: 56:57:a7:e3:55:05:3b:e1:d6:fc:6f:60:5e:8b:14:33:4d:27: 94:6f:3e:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjUwNzE4MTk0NTQwWhcNMjUwNzI1MTk0NTQwWjAYMRYwFAYD VQQDEw02ODdhYTQ2NS0zNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39H7CNARF+xZ88naybDIR/GdaBP5mmJlq3EmeXo4NZrMAqlooMvI9dlSpqB+ HTMnAVSUu19HurArQ43fUtkClylhF/no6d0yrMFU7E7Ok1ckFtKNKjASoVa8d4Cb okgZ//Z53N7Zaj6myp3/Myebo/bZr8Z1uFcmBezBxXqiBNnbQ6n9zplnUZ29Fk+e G0JYELRuq/KVvU4WQkjOptCsxr2KcOwUQ1aAYzzB2cD7k3456N+4cqYJrf9/vQW6 qp4nQ61XRzPik/JymmIZT6uW91YKtwV31NgRfz5aOad9RKzV8KSDLuCepObnlCv2 jcpKiXNcVlmy2tlMG3XTk6SzsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSu/beK uqH73QLfkl8b6FoAodjTMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNBmOpc8edpjM8JhpkcP/RGG2z5N3VH5hlaVM31tKB2glv+Uh6COWl Kfp3Ts44sQ3NKIDZW2xCIU9U4kUx/+XKCIQaTe4WYi7j8YqsCvjEFC953X/C687m J0CXVjBX4hbNuxj7jLIHJyKaOXU4sxoO3rXvfMlkuf96v/ggB+vMLFj0JZ2JUbOj soZbZxydR6aPkqj03ozXQl/7mGrtArmut1aaWOO0bnMEAHE43Sbos7F5175sJWfN 133oq/x0zJhtJiDvEri8pg/yF0QEDj8ki+0SsF/VbBCkNLWwU/Gy/O446UHON1nl 4oJWV6fjVQU74db8b2BeixQzTSeUbz4X -----END CERTIFICATE-----Generated at Sun Jul 20 03:33:57 2025 by rpki-client