$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: 7fN8ukuQCU6X3INBgtg0xbS/d6q9yXRmKxvL4odRCgk= Subject key identifier: 50:DC:A0:64:E4:6E:B7:17:1F:BA:93:14:BB:B9:23:9B:9B:86:CB:9F Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: CB Signing time: Mon 21 Jul 2025 05:53:29 +0000 Manifest this update: Mon 21 Jul 2025 05:53:28 +0000 Manifest next update: Mon 28 Jul 2025 05:53:28 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: B7+PFwuscJHqe+DfHcU3BFch+Dhe4BUAyeoLqAD6hP0=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Jul 21 05:53:28 2025 GMT Not After : Jul 28 05:53:28 2025 GMT Subject: CN=687dd5d8-7a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:16:d6:80:76:52:55:ab:5d:11:da:57:a9: 27:21:56:92:0b:3b:88:ea:42:37:6c:15:c3:f8:f2: c7:bb:b8:b8:db:42:39:a6:43:b5:94:88:b1:ec:f2: 58:2d:7c:50:ee:d6:a4:9d:35:9c:33:7a:4c:53:f9: 82:b5:ac:0b:ce:68:a3:97:88:e1:d6:33:29:1c:1a: 75:95:d9:f6:6b:22:41:3a:23:90:47:89:95:a5:9b: 46:30:a5:71:27:55:ef:93:1e:19:eb:9a:a9:bc:8a: 22:24:e4:dc:28:ec:ec:32:cb:47:5b:57:ff:f5:b8: 54:fa:b7:e6:ca:81:2d:d0:17:0a:e5:6b:ba:91:c4: 12:bb:1b:44:56:37:d1:2a:52:7a:7c:ad:01:50:52: d3:99:45:4f:22:ce:9f:d1:09:62:68:58:4f:8d:c2: 73:c9:54:8c:2a:98:93:5f:0e:83:f4:b0:4c:f6:3c: dc:be:e9:bc:f3:5f:3a:bc:12:d9:d1:32:46:16:b5: 36:da:16:94:7b:b1:06:e3:7e:89:28:52:5c:ff:1a: 51:48:8a:4f:da:7f:ff:c4:a2:7f:6b:cc:55:9f:66: b5:39:92:c3:69:45:53:55:c0:83:f3:01:ef:c3:3d: d7:ba:29:41:60:50:b6:3e:06:b9:29:d0:c7:c7:03: a0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DC:A0:64:E4:6E:B7:17:1F:BA:93:14:BB:B9:23:9B:9B:86:CB:9F X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:dc:ff:e7:da:57:9b:77:ad:f6:22:0b:65:c5:2a:af:cc:05: d8:86:57:7b:ef:9d:f1:52:a9:e1:c1:66:72:26:eb:41:4b:c0: ca:45:7c:4d:8a:53:f1:a0:ee:a5:25:7e:4b:33:5f:c3:b0:48: 01:dc:6f:91:a1:4a:a7:f1:e0:5d:27:b9:8d:cb:6c:90:f5:13: 93:19:18:9d:26:05:61:9a:e6:4c:49:b2:cb:d2:67:6b:1b:64: ce:f7:d7:93:57:36:64:45:70:7a:1a:22:00:73:8e:38:cd:a6: 76:4e:8b:82:d2:a7:94:9c:98:fe:8f:ec:9d:72:e1:e4:31:a0: 96:8e:92:21:da:86:06:45:af:8d:f3:65:11:79:e1:bd:14:48: c4:89:a3:a8:5d:f7:3a:57:04:04:08:6b:5a:59:28:5d:57:10: 5d:46:61:54:a4:d2:e8:ff:75:e7:0a:34:ff:6c:50:ec:a9:ea: 52:c2:88:21:99:bc:c2:52:13:c8:92:8f:ac:dd:7c:b4:02:53: 08:ba:dd:34:17:d2:11:2c:03:72:d0:1e:ec:03:d1:d8:df:11: 76:c2:18:29:9b:29:68:d4:2f:bd:a6:3a:ce:20:bd:52:f1:ba: 91:d5:93:d6:c1:e4:bc:5a:b8:f7:a7:40:79:f4:39:a7:e5:a2: 1c:88:be:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUwNzIxMDU1MzI4WhcNMjUwNzI4MDU1MzI4WjAYMRYwFAYD VQQDEw02ODdkZDVkOC03YTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PQW1oB2UlWrXRHaV6knIVaSCzuI6kI3bBXD+PLHu7i420I5pkO1lIix7PJY LXxQ7taknTWcM3pMU/mCtawLzmijl4jh1jMpHBp1ldn2ayJBOiOQR4mVpZtGMKVx J1Xvkx4Z65qpvIoiJOTcKOzsMstHW1f/9bhU+rfmyoEt0BcK5Wu6kcQSuxtEVjfR KlJ6fK0BUFLTmUVPIs6f0QliaFhPjcJzyVSMKpiTXw6D9LBM9jzcvum88186vBLZ 0TJGFrU22haUe7EG436JKFJc/xpRSIpP2n//xKJ/a8xVn2a1OZLDaUVTVcCD8wHv wz3XuilBYFC2Pga5KdDHxwOg9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDcoGTk brcXH7qTFLu5I5ubhsufMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL3P/n2lebd632IgtlxSqvzAXYhld7753xUqnhwWZyJutBS8DKRXxN ilPxoO6lJX5LM1/DsEgB3G+RoUqn8eBdJ7mNy2yQ9ROTGRidJgVhmuZMSbLL0mdr G2TO99eTVzZkRXB6GiIAc444zaZ2TouC0qeUnJj+j+ydcuHkMaCWjpIh2oYGRa+N 82UReeG9FEjEiaOoXfc6VwQECGtaWShdVxBdRmFUpNLo/3XnCjT/bFDsqepSwogh mbzCUhPIko+s3Xy0AlMIut00F9IRLANy0B7sA9HY3xF2whgpmylo1C+9pjrOIL1S 8bqR1ZPWweS8Wrj3p0B59Dmn5aIciL4S -----END CERTIFICATE-----Generated at Wed Jul 23 02:27:18 2025 by rpki-client