$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json) Hash identifier: Ea7Jzs8ubX3DqiXGgnmmd4HtMA+fGzAn+RtDIdl9KPA= Subject key identifier: 55:47:DA:69:83:6D:6A:A9:C8:94:A6:29:80:5C:C7:21:90:F9:61:1B Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft Manifest number: 0C1B Signing time: Sun 20 Jul 2025 19:25:36 +0000 Manifest this update: Sun 20 Jul 2025 19:25:35 +0000 Manifest next update: Sun 27 Jul 2025 19:25:35 +0000 Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: LlWF6gKIsoj/d42z74w/HJ+jY++CBgx9cpob+PyvW4Y=) 2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: aDdJ1zHHJM2Pp/llY4+TjUByw8VD+3beZi6B31AyTJ8=) 3: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: fNb48r4M+gfLXajaKFGp8VWXxugH32v0si+d8iboCho=) 4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: EO+r4YCRXrWQGjZoJ/CD1KsxdVzlBHVNlbdYh39PLSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Validity Not Before: Jul 20 19:25:35 2025 GMT Not After : Jul 27 19:25:35 2025 GMT Subject: CN=687d42b0-7342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c0:54:dc:18:3f:b7:d3:62:6a:b5:9a:ac:74: 7e:c5:ec:e5:02:ed:43:6d:b5:f8:a9:60:f0:9c:fb: 23:37:f6:99:cb:cc:02:c1:02:fe:e8:86:23:b4:fb: 88:8b:ec:12:5b:41:a5:a3:6d:d0:da:54:7a:f0:33: 59:9d:2b:eb:5b:41:b8:5a:79:00:2c:a5:dc:bf:da: e3:ba:49:54:3d:8a:de:7f:01:22:97:e6:c1:54:1a: 0d:cb:dd:85:d1:22:0a:df:c9:27:ea:d3:63:b3:c2: ab:90:71:38:5f:88:ce:38:41:8e:47:cb:85:89:b2: 8d:7e:9e:6d:42:79:af:c6:44:13:ed:44:0c:a7:d2: 95:8e:a0:db:cd:3d:0a:01:e5:d9:68:a0:a1:57:86: b2:43:5b:a6:aa:41:12:28:b3:bb:21:00:55:d0:22: 31:ab:20:b5:7f:50:22:94:27:55:35:3a:bd:57:be: a8:d5:0b:d9:c2:ca:d7:9b:19:e9:ff:ea:03:ab:11: 6d:8d:00:44:56:b0:bb:b1:f6:4d:32:71:dc:b3:78: 6f:ee:50:29:f5:a0:fe:94:cd:94:5b:28:47:19:aa: 20:ad:1e:1e:30:6b:fd:c1:65:00:5d:e1:01:e4:10: 71:1c:e8:52:08:c6:4a:6b:f4:eb:49:b8:ae:ed:e3: 86:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:47:DA:69:83:6D:6A:A9:C8:94:A6:29:80:5C:C7:21:90:F9:61:1B X509v3 Authority Key Identifier: keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e8:d9:c3:be:a0:c7:a4:f8:0f:ac:72:4e:12:ef:c8:81:5f: 47:12:41:17:da:2d:68:1b:6a:32:10:29:95:be:e6:85:52:1f: 03:56:74:10:9e:9e:28:f0:0b:90:c6:c4:ae:34:01:40:40:9b: 51:e6:2c:39:32:9a:31:be:f4:f8:99:f2:ae:0a:a4:43:a9:3f: 9a:d2:be:4d:1d:84:62:0a:ae:4e:5a:f3:de:6b:b7:8a:9e:70: b0:4a:33:82:b8:ef:71:aa:c3:87:de:85:9d:f8:b9:0d:b0:32: 5d:7d:30:5c:31:30:2a:3b:95:39:d6:90:58:cb:f6:64:74:70: da:a0:5d:9f:3d:7a:97:3d:44:83:aa:30:ff:2e:a0:e6:13:4d: 95:9d:e4:2a:25:fb:32:75:d2:d3:fb:ee:bc:80:23:73:30:ce: 2a:6d:15:36:af:66:d6:85:ac:56:d3:34:c0:32:dc:61:d0:d0: 28:f2:70:cd:ae:a2:bc:77:7e:85:f8:34:0b:bf:01:83:7a:2d: 94:c8:35:32:a0:80:ee:4f:6f:31:9d:36:09:37:b8:0b:f4:fd: 77:07:b6:69:03:94:ec:18:c3:ab:28:bb:3d:8a:39:f7:26:d2: e9:b8:58:2c:c9:5e:91:41:91:42:d5:07:8a:e7:e8:46:12:8f: 72:61:c0:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFGNEIxMTAvBgNVBAUTKEFENzFERUMxMzg5QjE0QTAxMjAwMTA3Njk5MUY1OUFC RTJDQUIxRTYwHhcNMjUwNzIwMTkyNTM1WhcNMjUwNzI3MTkyNTM1WjAYMRYwFAYD VQQDEw02ODdkNDJiMC03MzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMBU3Bg/t9NiarWarHR+xezlAu1DbbX4qWDwnPsjN/aZy8wCwQL+6IYjtPuI i+wSW0Glo23Q2lR68DNZnSvrW0G4WnkALKXcv9rjuklUPYrefwEil+bBVBoNy92F 0SIK38kn6tNjs8KrkHE4X4jOOEGOR8uFibKNfp5tQnmvxkQT7UQMp9KVjqDbzT0K AeXZaKChV4ayQ1umqkESKLO7IQBV0CIxqyC1f1AilCdVNTq9V76o1QvZwsrXmxnp /+oDqxFtjQBEVrC7sfZNMnHcs3hv7lAp9aD+lM2UWyhHGaogrR4eMGv9wWUAXeEB 5BBxHOhSCMZKa/TrSbiu7eOGzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVH2mmD bWqpyJSmKYBcxyGQ+WEbMB8GA1UdIwQYMBaAFK1x3sE4mxSgEgAQdpkfWaviyrHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3 MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZLQVNBQkIybVI5WnEtTEtz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYSGV3VGliRktBU0FCQjJtUjlacS1MS3NlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUY0Qi84NDg1OEY2QTQ3MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZL QVNBQkIybVI5WnEtTEtzZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR6NnDvqDHpPgPrHJOEu/IgV9HEkEX2i1oG2oyECmVvuaFUh8DVnQQ np4o8AuQxsSuNAFAQJtR5iw5MpoxvvT4mfKuCqRDqT+a0r5NHYRiCq5OWvPea7eK nnCwSjOCuO9xqsOH3oWd+LkNsDJdfTBcMTAqO5U51pBYy/ZkdHDaoF2fPXqXPUSD qjD/LqDmE02VneQqJfsyddLT++68gCNzMM4qbRU2r2bWhaxW0zTAMtxh0NAo8nDN rqK8d36F+DQLvwGDei2UyDUyoIDuT28xnTYJN7gL9P13B7ZpA5TsGMOrKLs9ijn3 JtLpuFgsyV6RQZFC1QeK5+hGEo9yYcCz -----END CERTIFICATE-----Generated at Mon Jul 21 07:03:25 2025 by rpki-client