$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft File: sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json) Hash identifier: t9llPToJh3qwyi/l3b6yskYCdwnC+3qdxU+OSEtvG/M= Subject key identifier: D9:FD:E9:EF:0F:79:00:70:04:12:51:8E:02:CF:8A:9A:C0:E7:AE:58 Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85 Certificate issuer: /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft Manifest number: 62 Signing time: Wed 23 Jul 2025 07:38:54 +0000 Manifest this update: Wed 23 Jul 2025 07:38:54 +0000 Manifest next update: Wed 30 Jul 2025 07:38:54 +0000 Files and hashes: 1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: 7t3u8CCCJZ0NJfMsSNP9b0e+LoH1W6ArrJE73GQ2DlM=) 2: 000A7CE25A5911F0948C6D20C4F9AE02.roa (hash: GWfp52D5q+ZWDIE0kYIw+TpLPvEGwRDdK6mh7QUL+8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785 Validity Not Before: Jul 23 07:38:54 2025 GMT Not After : Jul 30 07:38:54 2025 GMT Subject: CN=6880918e-fd5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:ab:91:d9:91:c4:b2:1d:03:7a:47:c1:f3: 4c:e6:94:d5:bf:6d:ba:5b:5a:eb:e2:44:d6:37:b3: 4c:b8:af:32:77:3d:5e:28:f8:b5:a2:1c:d9:74:7d: 7e:dc:10:8e:c4:1c:f9:24:cf:4f:ef:f3:3e:23:df: aa:e9:2b:60:61:ce:70:b4:70:0a:cc:70:ff:90:c5: 76:7d:1e:99:bc:88:ec:b9:a8:06:6a:26:10:fb:d5: 88:8b:23:11:e4:98:52:7f:87:09:3d:19:72:f1:23: f1:9c:12:91:bf:47:ae:b3:26:8f:51:41:62:b9:7c: 54:26:06:3a:3c:7a:44:df:5b:7e:14:53:ad:6b:ab: c7:91:c0:30:ba:af:c4:b6:d6:94:0a:05:c9:34:93: 42:60:5f:26:50:7e:44:87:95:eb:a8:c1:8a:19:2e: 5e:76:bf:97:49:53:aa:ef:31:28:58:bc:7d:85:04: ae:b5:cf:b6:c8:b4:f1:f9:e1:a9:13:d5:01:55:78: b8:14:89:34:62:aa:5b:08:44:a9:a3:e3:63:e9:4c: 9e:bd:66:3f:99:48:2a:40:f5:e1:5b:7c:d4:93:c9: ef:05:50:1b:4d:73:ea:e0:b5:27:e9:8a:ed:18:cd: bc:1f:82:6d:26:8c:70:3d:60:34:0a:2d:47:70:eb: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FD:E9:EF:0F:79:00:70:04:12:51:8E:02:CF:8A:9A:C0:E7:AE:58 X509v3 Authority Key Identifier: keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:28:7b:21:6d:41:eb:38:48:86:fc:9e:aa:97:88:14:d4:d0: 12:69:55:31:74:0a:c6:f5:26:e2:0d:10:ee:d4:f2:c8:e2:fa: 7a:c4:1b:82:fc:6e:08:5d:a8:6e:d9:fa:7a:2b:b6:e3:4c:e6: fd:92:6d:93:61:76:b2:b2:cf:f3:d0:54:63:46:84:53:d3:51: 41:1e:5d:63:12:2f:15:f8:7c:57:9f:e7:38:d5:f8:96:22:22: e4:d8:48:1c:c9:e5:57:e5:fc:f0:ce:84:19:db:5f:74:09:34: 78:39:fc:99:2a:fe:b2:db:37:66:4f:eb:a1:90:2a:50:18:45: f6:af:e2:a7:9a:68:d6:9a:eb:ce:75:d1:96:b6:c2:f4:1a:da: bb:95:92:2e:0e:9f:eb:fc:ca:37:61:63:25:19:29:1d:9b:71: 13:e9:b6:03:2e:d4:f2:3d:6b:03:19:ac:d6:2d:c8:bd:ae:5c: 77:8d:6c:43:43:ce:d7:d3:8e:30:8c:85:f1:de:26:5a:b2:29: 66:46:b7:39:9e:ab:4c:bd:b3:68:a7:c8:9c:96:fd:fe:6f:8f: a1:d2:3f:b4:49:6a:7a:9d:b7:96:16:c2:06:49:18:d5:83:f1: 5e:f3:53:a3:da:6d:7d:13:8e:33:99:05:25:98:ed:fb:e0:24: 0e:20:ed:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkM4OTExMC8GA1UEBRMoQjE3NEEzRDRCQTlCNDc2RTJCMzFFNDdDNzJBMjk4RDA0 NEQ5ODc4NTAeFw0yNTA3MjMwNzM4NTRaFw0yNTA3MzAwNzM4NTRaMBgxFjAUBgNV BAMTDTY4ODA5MThlLWZkNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzv6uR2ZHEsh0DekfB80zmlNW/bbpbWuviRNY3s0y4rzJ3PV4o+LWiHNl0fX7c EI7EHPkkz0/v8z4j36rpK2BhznC0cArMcP+QxXZ9Hpm8iOy5qAZqJhD71YiLIxHk mFJ/hwk9GXLxI/GcEpG/R66zJo9RQWK5fFQmBjo8ekTfW34UU61rq8eRwDC6r8S2 1pQKBck0k0JgXyZQfkSHleuowYoZLl52v5dJU6rvMShYvH2FBK61z7bItPH54akT 1QFVeLgUiTRiqlsIRKmj42PpTJ69Zj+ZSCpA9eFbfNSTye8FUBtNc+rgtSfpiu0Y zbwfgm0mjHA9YDQKLUdw66I5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2f3p7w95 AHAEElGOAs+KmsDnrlgwHwYDVR0jBBgwFoAUsXSj1LqbR24rMeR8cqKY0ETZh4Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCQzg5LzlFNzI2MkJFRUZD RTExRUY4OTNGRjcwRUM0RjlBRTAyL3NYU2oxTHFiUjI0ck1lUjhjcUtZMEVUWmg0 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1hTajFMcWJSMjRyTWVSOGNxS1kwRVRaaDRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC Qzg5LzlFNzI2MkJFRUZDRTExRUY4OTNGRjcwRUM0RjlBRTAyL3NYU2oxTHFiUjI0 ck1lUjhjcUtZMEVUWmg0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEUoeyFtQes4SIb8nqqXiBTU0BJpVTF0Csb1JuINEO7U8sji+nrEG4L8 bghdqG7Z+nortuNM5v2SbZNhdrKyz/PQVGNGhFPTUUEeXWMSLxX4fFef5zjV+JYi IuTYSBzJ5Vfl/PDOhBnbX3QJNHg5/Jkq/rLbN2ZP66GQKlAYRfav4qeaaNaa6851 0Za2wvQa2ruVki4On+v8yjdhYyUZKR2bcRPptgMu1PI9awMZrNYtyL2uXHeNbEND ztfTjjCMhfHeJlqyKWZGtzmeq0y9s2inyJyW/f5vj6HSP7RJanqdt5YWwgZJGNWD 8V7zU6PabX0TjjOZBSWY7fvgJA4g7VI= -----END CERTIFICATE-----Generated at Wed Jul 23 12:06:12 2025 by rpki-client