$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft File: SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json) Hash identifier: BfaKtVze6Fes3Q4ix4VhUbqwDmfi3D+7Q91OEma8YfE= Subject key identifier: C2:C6:CB:48:9F:73:26:DD:1A:1F:D3:1C:C1:70:4F:0A:CB:AF:95:C6 Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C Certificate issuer: /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft Manifest number: 01E4 Signing time: Wed 23 Jul 2025 03:11:00 +0000 Manifest this update: Wed 23 Jul 2025 03:10:59 +0000 Manifest next update: Wed 30 Jul 2025 03:10:59 +0000 Files and hashes: 1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: 3IFc1s3+asBKEKGKMkh0PbkmZsiQ4xvEP8d9TuKFJM4=) 2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hw7fn2Uz56pW/An8KSiF7/ybzu4erny13VSakUkooRo=) 3: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: TCN1AZgzVPw/0NzN3SuEMukcZY6yAiASu/ppodIE8PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 03:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C Validity Not Before: Jul 23 03:10:59 2025 GMT Not After : Jul 30 03:10:59 2025 GMT Subject: CN=688052c3-f6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:6d:8f:19:9e:72:83:1e:64:fc:cc:88:bb: ca:07:e7:41:80:1c:d0:ca:07:a6:c5:59:1f:13:dc: 8e:c2:2c:cf:e5:9a:e7:00:f6:68:38:81:7a:77:bc: 3d:08:e3:9d:a7:57:2e:c5:43:a6:a8:c6:77:1d:40: 43:7f:80:e2:5d:5a:ac:43:52:26:ef:90:df:69:fa: ea:ba:1a:ab:e3:bb:1a:30:a8:e0:67:70:28:6c:5d: 8d:78:bf:af:a4:56:8f:d6:e4:d3:c6:25:ac:d2:63: b2:4d:22:a7:14:89:33:61:46:e4:0f:6d:87:a3:8d: 54:df:27:44:08:7c:4a:8b:8d:ed:32:a8:da:e2:06: 2c:4b:f6:70:fb:c0:95:98:21:21:5e:93:5c:22:2c: 9f:bb:ca:b7:d5:ee:c7:52:b6:f5:61:65:cd:29:4a: b2:74:74:3c:57:1a:76:c3:47:bb:26:c8:fe:e6:16: 81:3d:23:3e:29:77:46:14:a7:ca:72:b0:96:48:ab: 5d:24:0c:15:b4:38:96:26:d2:c6:4b:1c:69:aa:69: ab:c7:f8:bd:86:90:17:a8:48:6c:af:2e:66:91:76: 1a:fd:b4:37:5b:14:d4:4b:34:a2:16:a2:72:82:c9: 20:d7:39:cc:86:4c:93:2c:66:a1:2e:00:2f:16:fa: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C6:CB:48:9F:73:26:DD:1A:1F:D3:1C:C1:70:4F:0A:CB:AF:95:C6 X509v3 Authority Key Identifier: keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:13:08:5b:49:ec:b1:f2:fd:1e:57:0f:d0:0a:63:ae:5b:0d: ea:ec:4e:8c:48:02:81:56:89:41:9c:25:81:9f:72:f7:52:22: 97:db:d9:47:ed:a5:ab:b4:55:6a:81:ba:ab:d2:88:43:ce:d4: 0f:03:81:55:cb:8e:94:28:4d:93:0a:b5:4c:33:12:d7:d9:d1: ad:17:7e:00:ce:bf:9d:1b:cf:7f:d7:0a:3d:b3:bb:f9:dc:17: e4:80:13:5d:41:57:fa:ab:58:be:50:c1:1f:56:28:5c:6a:50: 93:d9:30:0f:12:76:80:7a:85:57:80:e3:05:ab:05:0f:47:05: 7a:dd:d4:75:96:4c:9a:3d:28:f0:65:4d:81:a1:7a:64:82:68: ed:86:0e:4f:ec:bc:c0:4c:c2:5e:31:a3:27:e2:10:c3:2a:f2: 9d:e4:a7:ab:94:cd:a2:8a:3e:c3:33:25:7b:91:5a:2c:ed:0c: d3:90:5f:63:31:a9:01:f8:9e:17:e3:d6:5c:04:fa:2a:58:11: b4:5c:93:7f:bf:6d:51:9a:c8:35:86:8f:a4:2a:94:08:6b:88: 18:59:91:52:21:28:77:a1:9e:ee:df:10:78:75:83:aa:f0:a0: 1f:29:b8:20:3a:22:45:b9:b8:1e:f0:9c:85:ba:71:6d:b0:75: e1:01:33:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE5QkMxMTAvBgNVBAUTKDRBQkJENzMwMUNGRjdGQjRBQ0I2QTA0QTE0RjBBMzZD Q0U4NTYxMUMwHhcNMjUwNzIzMDMxMDU5WhcNMjUwNzMwMDMxMDU5WjAYMRYwFAYD VQQDEw02ODgwNTJjMy1mNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApchtjxmecoMeZPzMiLvKB+dBgBzQygemxVkfE9yOwizP5ZrnAPZoOIF6d7w9 COOdp1cuxUOmqMZ3HUBDf4DiXVqsQ1Im75Dfafrquhqr47saMKjgZ3AobF2NeL+v pFaP1uTTxiWs0mOyTSKnFIkzYUbkD22Ho41U3ydECHxKi43tMqja4gYsS/Zw+8CV mCEhXpNcIiyfu8q31e7HUrb1YWXNKUqydHQ8Vxp2w0e7Jsj+5haBPSM+KXdGFKfK crCWSKtdJAwVtDiWJtLGSxxpqmmrx/i9hpAXqEhsry5mkXYa/bQ3WxTUSzSiFqJy gskg1znMhkyTLGahLgAvFvrQ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLGy0if cybdGh/THMFwTwrLr5XGMB8GA1UdIwQYMBaAFEq71zAc/3+0rLagShTwo2zOhWEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTlCQy9CRTJDRUZGMEIz QUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3U3N0cUJLRlBDamJNNkZZ UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NydlhNQnpfZjdTc3RxQktGUENqYk02RllSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTlCQy9CRTJDRUZGMEIzQUExMUVEQUYzMTYyM0ZDNEY5QUUwMi9TcnZYTUJ6X2Y3 U3N0cUJLRlBDamJNNkZZUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZEwhbSeyx8v0eVw/QCmOuWw3q7E6MSAKBVolBnCWBn3L3UiKX29lH 7aWrtFVqgbqr0ohDztQPA4FVy46UKE2TCrVMMxLX2dGtF34Azr+dG89/1wo9s7v5 3BfkgBNdQVf6q1i+UMEfVihcalCT2TAPEnaAeoVXgOMFqwUPRwV63dR1lkyaPSjw ZU2BoXpkgmjthg5P7LzATMJeMaMn4hDDKvKd5KerlM2iij7DMyV7kVos7QzTkF9j MakB+J4X49ZcBPoqWBG0XJN/v21Rmsg1ho+kKpQIa4gYWZFSISh3oZ7u3xB4dYOq 8KAfKbggOiJFubge8JyFunFtsHXhATOC -----END CERTIFICATE-----Generated at Wed Jul 23 12:47:16 2025 by rpki-client