$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: 6NYOcTRrj1kKnSYmRiaeVdo2fYYqtizT2NC03dLN3mI= Subject key identifier: DA:41:3A:FD:91:A3:B5:6D:C2:99:C0:AD:18:74:E5:13:7E:DB:37:6B Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 0480 Signing time: Mon 21 Jul 2025 00:17:08 +0000 Manifest this update: Mon 21 Jul 2025 00:17:07 +0000 Manifest next update: Mon 28 Jul 2025 00:17:07 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: TUGh6nyHuAYLcfViF9AzC9toETR61SCU73t8kI61i5k=) 2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: EUhD1CogfYx019LqOHk5ZADPXKjO2pURWvfLLk3fqG8=) 3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: 0C7V986gHLfF3RPO5trmAPFLdLtlvzlCJ3+47YeVJHU=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: CMOccFw4JW9T0ieBo3En9p6kBriebw6aKjGeEamJ19Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Jul 21 00:17:07 2025 GMT Not After : Jul 28 00:17:07 2025 GMT Subject: CN=687d8704-4cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:2b:e0:70:84:8b:06:16:d8:94:58:da:dd: 4b:15:d8:98:c6:af:40:f9:e8:09:72:13:a0:3a:ed: 37:12:9c:26:a0:d7:f5:cf:74:5e:56:7a:54:98:5e: 7c:2f:34:ab:58:7c:d4:15:40:5b:8c:29:6c:07:04: 74:49:f9:27:f9:c3:de:11:26:70:eb:aa:60:d0:4b: 42:bb:e3:89:03:5b:34:36:2c:39:f4:47:21:31:f3: 41:fa:0d:ff:e9:12:90:49:3b:ce:6b:b6:28:fb:40: 62:48:50:c0:51:63:e9:48:73:e4:0e:02:9f:0a:65: 8f:e2:04:6d:e9:c1:3f:b1:82:21:80:7c:55:20:d8: f3:25:ce:6a:f6:93:99:f7:c5:28:5e:3e:ba:bd:8a: a7:e6:d6:2a:50:f3:17:02:f5:9f:84:79:b6:54:2c: 23:dd:e2:69:2a:3a:ce:ab:53:f9:3f:7b:63:4d:40: 18:96:94:2b:9e:ff:df:08:e9:44:cd:27:7f:8b:c8: e0:2c:70:82:03:b7:95:ff:8d:c5:d9:21:a2:e2:e5: 98:de:53:96:39:42:7b:9e:71:82:a7:66:b8:84:d8: 34:da:be:c1:10:ea:de:55:cc:64:f2:71:40:61:a0: bf:a9:ac:8a:93:53:df:c6:f6:37:80:30:c1:de:fa: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:41:3A:FD:91:A3:B5:6D:C2:99:C0:AD:18:74:E5:13:7E:DB:37:6B X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:9a:87:57:34:24:ca:9f:fa:ff:b5:cb:7a:1d:f7:5b:aa:47: f3:3e:d1:a8:31:71:b7:13:a9:ef:58:bb:38:6b:14:01:79:da: 79:d6:19:7b:6b:52:c7:3b:26:a8:4b:41:ff:95:a6:e9:fd:25: 7a:b1:5b:f2:39:fd:07:1c:ab:da:35:7e:3b:e3:b9:f3:69:69: cc:8c:f1:5a:9f:21:cf:d9:8d:a0:57:dc:78:bc:8e:6d:1a:7b: 73:40:95:a8:16:c3:65:98:e7:f6:dd:4c:bc:22:54:08:44:1a: 75:a9:cd:09:35:6a:01:e4:e1:61:13:8a:44:83:6d:f6:4d:41: fb:de:25:38:1c:38:f0:3a:3f:bb:09:ba:e6:a6:9b:9c:57:74: 9d:8f:a5:22:f2:e2:36:2a:d2:35:cc:dd:44:8f:41:fd:2a:fa: 54:f7:5a:b8:b2:ab:e1:b6:eb:7d:3c:2e:8e:6b:fa:a5:2e:ea: 9f:7b:7a:8b:8b:54:4e:ff:d2:4c:92:ce:13:04:dd:a9:27:30: 4b:ea:c8:a8:2c:47:ba:ce:ee:f2:9e:08:5d:82:91:5f:ca:4e: 02:3d:bd:38:ba:d1:05:ec:3d:8e:22:d1:33:44:e3:02:31:b0: c9:62:48:6e:bb:3b:69:2d:93:5c:34:62:8f:fb:4f:a3:b3:70: 5f:93:2b:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjUwNzIxMDAxNzA3WhcNMjUwNzI4MDAxNzA3WjAYMRYwFAYD VQQDEw02ODdkODcwNC00Y2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowor4HCEiwYW2JRY2t1LFdiYxq9A+egJchOgOu03EpwmoNf1z3ReVnpUmF58 LzSrWHzUFUBbjClsBwR0Sfkn+cPeESZw66pg0EtCu+OJA1s0Niw59EchMfNB+g3/ 6RKQSTvOa7Yo+0BiSFDAUWPpSHPkDgKfCmWP4gRt6cE/sYIhgHxVINjzJc5q9pOZ 98UoXj66vYqn5tYqUPMXAvWfhHm2VCwj3eJpKjrOq1P5P3tjTUAYlpQrnv/fCOlE zSd/i8jgLHCCA7eV/43F2SGi4uWY3lOWOUJ7nnGCp2a4hNg02r7BEOreVcxk8nFA YaC/qayKk1PfxvY3gDDB3vpQ2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpBOv2R o7VtwpnArRh05RN+2zdrMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACmodXNCTKn/r/tct6HfdbqkfzPtGoMXG3E6nvWLs4axQBedp51hl7 a1LHOyaoS0H/labp/SV6sVvyOf0HHKvaNX4747nzaWnMjPFanyHP2Y2gV9x4vI5t GntzQJWoFsNlmOf23Uy8IlQIRBp1qc0JNWoB5OFhE4pEg232TUH73iU4HDjwOj+7 CbrmppucV3Sdj6Ui8uI2KtI1zN1Ej0H9KvpU91q4sqvhtut9PC6Oa/qlLuqfe3qL i1RO/9JMks4TBN2pJzBL6sioLEe6zu7ynghdgpFfyk4CPb04utEF7D2OItEzROMC MbDJYkhuuztpLZNcNGKP+0+js3Bfkytb -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:57 2025 by rpki-client