$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft File: XK9B9ks3Umh5jipdqgwUAADNdHM.mft (raw, json) Hash identifier: lSAFw7Yx5Y+jgPhz5Ppxn4OxF4SlSjPKpB3Fb9Z/pxw= Subject key identifier: F3:70:6B:86:90:76:FD:29:9A:EF:1D:9D:5B:37:B1:62:4A:58:B5:99 Authority key identifier: 5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73 Certificate issuer: /CN=A91ED73E/serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473 Certificate serial: 13FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft Manifest number: 13F1 Signing time: Thu 24 Jul 2025 17:03:34 +0000 Manifest this update: Thu 24 Jul 2025 17:03:34 +0000 Manifest next update: Thu 31 Jul 2025 17:03:34 +0000 Files and hashes: 1: XK9B9ks3Umh5jipdqgwUAADNdHM.crl (hash: wsHA+N3uFOYcNNSTnmPuz5DhgjxHPFTGJ+0XlQ7g9ko=) 2: 1983150A3BB911EEB0CA4809C4F9AE02.roa (hash: dlJ7zH1d3oXPs3S0YirZQi1hSZzUrfDhpzP6MZkDSDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5116 (0x13fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED73E, serialNumber=5CAF41F64B375268798E2A5DAA0C140000CD7473 Validity Not Before: Jul 24 17:03:34 2025 GMT Not After : Jul 31 17:03:34 2025 GMT Subject: CN=68826766-79b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:45:1e:76:03:20:c9:c3:a7:24:7b:b2:f0: 02:c3:30:de:39:13:d2:03:cd:89:e0:6e:c6:ac:f0: 1a:a4:31:b3:f6:e4:fd:04:9a:1a:40:e7:cb:6a:77: 6a:81:a1:67:fe:6a:07:a5:db:f3:81:8f:63:dd:ed: 2f:fe:0e:c4:bc:90:23:ca:c5:88:47:a3:bc:5a:b0: ed:23:dd:e6:42:25:46:c4:e2:aa:ef:ea:40:8b:ad: 14:70:8b:94:9a:56:88:47:eb:94:b3:d5:68:f6:ed: f7:84:56:2f:2a:3e:cd:53:49:75:9a:fb:b1:35:c0: c3:7b:2d:ee:11:fe:78:bc:65:95:33:0e:02:5b:d0: 5e:62:54:69:2a:2f:14:ee:65:39:a3:08:15:17:19: af:53:23:87:2f:39:bc:20:16:3e:ed:8a:63:15:74: 19:32:32:18:66:91:3a:ec:0b:05:f4:f8:8a:85:74: 13:91:6e:a4:b2:06:78:36:b1:ae:05:ae:89:ab:25: da:6e:52:b4:b3:ff:23:d4:fb:f7:c4:b0:83:8d:68: 61:0e:b1:7f:ce:cb:ff:dc:4e:a3:4d:48:e9:6e:31: 02:19:cc:e1:e4:26:e0:df:57:4a:42:27:82:64:24: ae:fc:47:67:8d:43:c4:e1:c8:d8:1f:46:9d:a3:e3: 6a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:70:6B:86:90:76:FD:29:9A:EF:1D:9D:5B:37:B1:62:4A:58:B5:99 X509v3 Authority Key Identifier: keyid:5C:AF:41:F6:4B:37:52:68:79:8E:2A:5D:AA:0C:14:00:00:CD:74:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK9B9ks3Umh5jipdqgwUAADNdHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED73E/01B8210A898911E8B98BEC3AC4F9AE02/XK9B9ks3Umh5jipdqgwUAADNdHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ed:ef:6a:eb:a0:7f:77:52:ef:b1:4a:34:ac:3d:bb:44:81: ef:eb:f9:f3:c0:f0:e6:57:c1:99:6e:5d:2c:d9:b7:74:3a:d6: ca:4f:39:48:c7:1e:72:46:c4:0b:64:a3:9d:ce:28:21:6f:05: 85:53:96:50:90:85:1d:29:a0:7b:52:93:aa:0f:95:a9:04:94: 6d:0b:05:eb:4b:2c:d2:bd:8a:38:55:44:75:30:d9:f4:b3:17: 5d:6d:1b:4d:e1:f7:fb:2e:8c:60:fd:f3:dd:bb:7c:a7:5e:84: cb:a8:65:13:93:25:09:9d:21:ac:da:f7:20:cf:bc:4e:64:c7: 2a:d7:cd:8a:c3:7e:53:d3:13:42:03:30:a7:95:b9:1c:32:c6: ed:6e:2d:c1:8d:00:4a:4c:1d:99:b9:97:a0:36:8f:dd:e9:d1: f4:75:98:8f:df:7f:3d:b1:da:1c:bd:8e:19:0c:5a:70:f3:0f: 29:54:c5:3a:9d:f0:1f:67:9b:a1:ea:8c:dc:e5:3a:b4:fd:72: eb:dc:c8:8f:35:16:30:ec:79:81:a0:b7:27:c0:b3:30:e4:66: e4:1e:88:11:48:c6:af:de:c8:05:ef:a3:7c:a0:44:ad:e2:62: a2:62:71:67:09:b8:5b:3e:ca:a5:60:9f:a6:4b:3e:d7:79:ae: 65:78:82:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ3M0UxMTAvBgNVBAUTKDVDQUY0MUY2NEIzNzUyNjg3OThFMkE1REFBMEMxNDAw MDBDRDc0NzMwHhcNMjUwNzI0MTcwMzM0WhcNMjUwNzMxMTcwMzM0WjAYMRYwFAYD VQQDEw02ODgyNjc2Ni03OWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQhFHnYDIMnDpyR7svACwzDeORPSA82J4G7GrPAapDGz9uT9BJoaQOfLandq gaFn/moHpdvzgY9j3e0v/g7EvJAjysWIR6O8WrDtI93mQiVGxOKq7+pAi60UcIuU mlaIR+uUs9Vo9u33hFYvKj7NU0l1mvuxNcDDey3uEf54vGWVMw4CW9BeYlRpKi8U 7mU5owgVFxmvUyOHLzm8IBY+7YpjFXQZMjIYZpE67AsF9PiKhXQTkW6ksgZ4NrGu Ba6JqyXablK0s/8j1Pv3xLCDjWhhDrF/zsv/3E6jTUjpbjECGczh5Cbg31dKQieC ZCSu/EdnjUPE4cjYH0ado+Nq2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNwa4aQ dv0pmu8dnVs3sWJKWLWZMB8GA1UdIwQYMBaAFFyvQfZLN1JoeY4qXaoMFAAAzXRz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDczRS8wMUI4MjEwQTg5 ODkxMUU4Qjk4QkVDM0FDNEY5QUUwMi9YSzlCOWtzM1VtaDVqaXBkcWd3VUFBRE5k SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLOUI5a3MzVW1oNWppcGRxZ3dVQUFETmRITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDczRS8wMUI4MjEwQTg5ODkxMUU4Qjk4QkVDM0FDNEY5QUUwMi9YSzlCOWtzM1Vt aDVqaXBkcWd3VUFBRE5kSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/7e9q66B/d1LvsUo0rD27RIHv6/nzwPDmV8GZbl0s2bd0OtbKTzlI xx5yRsQLZKOdzighbwWFU5ZQkIUdKaB7UpOqD5WpBJRtCwXrSyzSvYo4VUR1MNn0 sxddbRtN4ff7Loxg/fPdu3ynXoTLqGUTkyUJnSGs2vcgz7xOZMcq182Kw35T0xNC AzCnlbkcMsbtbi3BjQBKTB2ZuZegNo/d6dH0dZiP3389sdocvY4ZDFpw8w8pVMU6 nfAfZ5uh6ozc5Tq0/XLr3MiPNRYw7HmBoLcnwLMw5GbkHogRSMav3sgF76N8oESt 4mKiYnFnCbhbPsqlYJ+mSz7Xea5leIJ4 -----END CERTIFICATE-----Generated at Sat Jul 26 09:33:13 2025 by rpki-client