$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: QERqR7JMifQNPVGM8GeqCGbDUjS6ILe4dDu2ghHh1Ig= Subject key identifier: 64:A0:E7:DD:FF:B9:F1:A3:16:E1:FA:37:BC:A2:0B:7B:70:BC:5D:DC Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 0333 Signing time: Sat 19 Jul 2025 01:34:27 +0000 Manifest this update: Sat 19 Jul 2025 01:34:26 +0000 Manifest next update: Sat 26 Jul 2025 01:34:26 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: HquwL6RKPzN7aAb2XDJn5Howo7uVRw9hoCjrqpDzUK4=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: +2b/qGdWsAWR/BKJskTGfjOIk8WF3Jjfuxvh9LPPuaA=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: QkUOxUdOqeDJq40oU7W9ZvA1XabLukGzl2cHkw2yMIw=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 6J35YVUmzZ1s4Ice2keaYAnPdVe/zMmpQD23cIxvFqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Jul 19 01:34:26 2025 GMT Not After : Jul 26 01:34:26 2025 GMT Subject: CN=687af623-9c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c4:b0:8b:a7:b4:23:dc:76:63:f2:51:42:e2: 65:30:0b:f7:4a:4a:78:57:2d:44:b6:30:51:92:46: 98:4b:26:8f:29:eb:cb:f9:91:d1:99:df:31:47:e2: 2c:b1:79:db:c6:70:30:f8:a3:1f:30:da:f1:a2:37: ae:c0:0f:9e:01:4c:7e:ba:01:e8:87:90:5a:7d:37: 65:1f:98:d6:02:90:0c:0c:4c:ba:0c:d6:f9:ea:1f: 5e:1d:b6:70:f2:79:4b:2b:24:38:b9:08:d5:84:d0: 18:d3:00:bf:f0:58:b6:d0:f3:d0:3b:ab:bc:34:52: d1:fa:50:8a:f6:ea:c4:ae:88:c2:28:3b:c8:66:15: f7:ed:46:c2:99:90:ab:a7:a9:99:80:ec:16:70:e5: 12:37:f6:3b:9c:21:51:34:87:34:00:0c:df:e5:cd: 38:fe:2a:e1:52:b8:62:8a:ba:c2:f6:66:ea:75:e2: 49:c8:f4:a8:3c:8e:24:dc:95:af:e1:37:81:27:06: 0c:e0:4d:03:37:96:11:ad:e8:9f:47:79:88:aa:9e: 03:54:0a:bb:0d:a8:b6:d5:03:66:2f:9c:d9:34:c6: c3:11:71:67:5a:f6:49:c1:a9:38:7a:84:ef:c6:be: 23:8a:f9:4b:30:19:02:03:68:6b:dd:e8:90:6f:cd: ba:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A0:E7:DD:FF:B9:F1:A3:16:E1:FA:37:BC:A2:0B:7B:70:BC:5D:DC X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:5b:a9:59:c6:f4:99:bc:10:57:73:ec:6d:7a:ee:08:60:ca: 71:59:49:19:18:50:8c:43:62:0c:21:0a:c5:da:38:d2:7b:40: 11:0b:76:6e:ce:0e:40:43:cf:c0:42:9c:2e:a7:6a:e3:90:3b: 03:60:79:47:31:01:88:3c:2b:f2:c5:e7:1a:e0:ec:49:a5:d1: f5:00:14:14:c8:00:c2:aa:8d:7e:db:83:a9:21:ec:fe:80:f7: 89:e7:ec:4d:d3:43:6f:d2:1b:09:ab:40:01:ee:d9:d1:e7:24: ec:6c:3b:c8:4f:5f:03:78:36:59:a7:c9:ec:1d:96:ec:c9:1c: 84:a3:3f:e2:d1:f4:f2:a1:3e:2d:c1:dc:62:94:e4:9a:ea:48: de:3d:62:2f:58:39:b2:dc:2a:0c:cf:3c:bb:73:fa:c2:bd:93: 77:aa:83:d5:b7:54:94:5b:49:e0:4f:44:63:2d:4c:35:ca:f2: 16:54:f7:c3:6f:0f:7d:8c:d5:a2:18:70:63:6c:78:d9:cf:86: d1:21:cf:75:a7:5d:df:bf:e3:c7:32:4e:5c:2c:f1:8f:84:3b: 4f:1f:8b:23:39:05:ed:aa:8d:30:94:e1:c3:5d:f7:7a:6e:65: ac:2d:f6:aa:15:a8:51:69:ab:f0:50:ff:c0:db:3c:6b:f1:d4: 30:6b:31:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjUwNzE5MDEzNDI2WhcNMjUwNzI2MDEzNDI2WjAYMRYwFAYD VQQDEw02ODdhZjYyMy05Yzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sSwi6e0I9x2Y/JRQuJlMAv3Skp4Vy1EtjBRkkaYSyaPKevL+ZHRmd8xR+Is sXnbxnAw+KMfMNrxojeuwA+eAUx+ugHoh5BafTdlH5jWApAMDEy6DNb56h9eHbZw 8nlLKyQ4uQjVhNAY0wC/8Fi20PPQO6u8NFLR+lCK9urErojCKDvIZhX37UbCmZCr p6mZgOwWcOUSN/Y7nCFRNIc0AAzf5c04/irhUrhiirrC9mbqdeJJyPSoPI4k3JWv 4TeBJwYM4E0DN5YRreifR3mIqp4DVAq7Dai21QNmL5zZNMbDEXFnWvZJwak4eoTv xr4jivlLMBkCA2hr3eiQb8263wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSg593/ ufGjFuH6N7yiC3twvF3cMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxW6lZxvSZvBBXc+xteu4IYMpxWUkZGFCMQ2IMIQrF2jjSe0ARC3Zu zg5AQ8/AQpwup2rjkDsDYHlHMQGIPCvyxeca4OxJpdH1ABQUyADCqo1+24OpIez+ gPeJ5+xN00Nv0hsJq0AB7tnR5yTsbDvIT18DeDZZp8nsHZbsyRyEoz/i0fTyoT4t wdxilOSa6kjePWIvWDmy3CoMzzy7c/rCvZN3qoPVt1SUW0ngT0RjLUw1yvIWVPfD bw99jNWiGHBjbHjZz4bRIc91p13fv+PHMk5cLPGPhDtPH4sjOQXtqo0wlOHDXfd6 bmWsLfaqFahRaavwUP/A2zxr8dQwazH9 -----END CERTIFICATE-----Generated at Sun Jul 20 06:14:56 2025 by rpki-client