$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: MJeTSt+/mefMRzV7EgvBMg2CckSOnIt5BRNX04X+CCk= Subject key identifier: 7B:68:A0:E3:26:D2:76:D6:88:16:41:D1:61:EA:B0:26:EC:AE:F0:0E Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 0881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 087B Signing time: Sun 20 Jul 2025 20:44:52 +0000 Manifest this update: Sun 20 Jul 2025 20:44:51 +0000 Manifest next update: Sun 27 Jul 2025 20:44:51 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: 7kKfFr/g/iP4UR7b3zvvtyqkKhleXSYqnYkhpxJ0Rw8=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: 04/HwV26/Fx1bZoGuRdSyRLiYV06aFK5mycaJ+/tqsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Jul 20 20:44:51 2025 GMT Not After : Jul 27 20:44:51 2025 GMT Subject: CN=687d5544-8f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:e7:d8:4a:4b:b8:f2:b3:15:e1:a8:19:9c: da:2e:24:d6:cb:a0:70:ea:89:ca:46:46:c6:ec:fb: 06:d5:96:69:26:53:34:a7:9e:eb:09:64:b7:21:ed: 35:53:12:ff:9f:85:37:c6:72:8a:1f:9e:cb:4d:dd: 6d:c9:45:5c:4a:5b:c7:6d:f8:87:9f:ee:41:95:8d: 94:d7:c3:d9:ec:8a:6f:9b:52:be:18:d0:84:0c:3a: a1:95:ba:96:f3:8a:d8:2a:52:c3:4f:40:a2:65:57: 7d:65:fe:71:24:0f:f5:ab:ed:ca:d8:24:cd:ba:b1: ca:82:1d:b2:69:06:6d:24:38:b4:d6:6d:f3:ad:01: 41:f5:74:cd:53:50:c3:4f:ac:d3:31:1f:00:fc:95: c3:15:07:f7:9c:56:a8:50:f3:1b:20:9f:ca:5a:c0: cd:35:00:82:9e:7d:2e:b2:2f:64:8a:00:40:7f:da: c3:4c:7f:06:99:38:8a:c6:34:5b:3e:aa:ad:14:a9: 7c:c0:da:f1:d7:7d:53:35:e3:ed:fd:dc:8e:da:9b: 9c:70:53:b3:08:08:68:fd:f3:fd:10:00:83:83:0e: 20:b9:2d:9b:b4:01:6e:e7:36:fe:54:80:01:78:cb: d2:d2:96:d9:aa:84:54:94:90:80:ae:3f:d3:59:9e: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:68:A0:E3:26:D2:76:D6:88:16:41:D1:61:EA:B0:26:EC:AE:F0:0E X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:5d:2b:a6:e5:48:ae:c0:6d:ba:d1:b8:9d:3a:ae:f7:8d:53: ee:e7:83:e1:03:a0:b1:cc:e5:75:17:55:e9:97:74:d8:31:65: 72:97:a4:52:49:18:4e:69:25:e8:0c:3c:1f:7d:98:da:94:fa: 1e:3f:7f:87:2f:50:fc:18:56:fa:1d:ec:52:de:90:1b:ad:ef: f7:85:c0:ed:bc:2d:65:c9:a0:ad:e4:6f:14:df:2b:c5:57:9d: 3f:11:9e:f8:f3:ef:b8:c6:4e:95:0b:1e:27:3f:7e:49:d4:16: 86:66:36:96:04:4d:ba:33:eb:b0:a0:30:8d:24:ac:1e:f8:fb: 69:fb:d8:81:9f:3e:1f:1e:68:2f:77:06:e2:24:22:ae:2c:76: 47:bd:67:dd:db:8f:bb:da:61:df:ba:8b:45:40:63:95:4d:fc: 3e:a7:7e:89:05:ac:88:fb:ee:24:b3:49:39:5d:b7:f3:d6:dc: 53:6e:7a:a2:76:50:31:79:6a:83:43:0d:17:ed:54:2a:71:21: 6f:2e:0d:3e:ba:fc:ac:78:4d:5e:ff:c3:17:e0:76:a8:86:2c: 59:34:b1:65:cd:86:84:0b:1c:d3:b0:41:af:1c:bc:a5:f6:92: 99:59:57:6f:47:29:6b:44:94:ce:44:82:03:82:80:5a:f6:ab: 29:2e:43:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjUwNzIwMjA0NDUxWhcNMjUwNzI3MjA0NDUxWjAYMRYwFAYD VQQDEw02ODdkNTU0NC04ZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8Hn2EpLuPKzFeGoGZzaLiTWy6Bw6onKRkbG7PsG1ZZpJlM0p57rCWS3Ie01 UxL/n4U3xnKKH57LTd1tyUVcSlvHbfiHn+5BlY2U18PZ7Ipvm1K+GNCEDDqhlbqW 84rYKlLDT0CiZVd9Zf5xJA/1q+3K2CTNurHKgh2yaQZtJDi01m3zrQFB9XTNU1DD T6zTMR8A/JXDFQf3nFaoUPMbIJ/KWsDNNQCCnn0usi9kigBAf9rDTH8GmTiKxjRb PqqtFKl8wNrx131TNePt/dyO2puccFOzCAho/fP9EACDgw4guS2btAFu5zb+VIAB eMvS0pbZqoRUlJCArj/TWZ5t/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtooOMm 0nbWiBZB0WHqsCbsrvAOMB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgXSum5UiuwG260bidOq73jVPu54PhA6CxzOV1F1Xpl3TYMWVyl6RS SRhOaSXoDDwffZjalPoeP3+HL1D8GFb6HexS3pAbre/3hcDtvC1lyaCt5G8U3yvF V50/EZ748++4xk6VCx4nP35J1BaGZjaWBE26M+uwoDCNJKwe+Ptp+9iBnz4fHmgv dwbiJCKuLHZHvWfd24+72mHfuotFQGOVTfw+p36JBayI++4ks0k5Xbfz1txTbnqi dlAxeWqDQw0X7VQqcSFvLg0+uvyseE1e/8MX4HaohixZNLFlzYaECxzTsEGvHLyl 9pKZWVdvRylrRJTORIIDgoBa9qspLkPx -----END CERTIFICATE-----Generated at Mon Jul 21 07:16:07 2025 by rpki-client