$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json) Hash identifier: mFWEbTB93KWumcUyxTKrlSyBlv0wuP+l5WRlrbm4S9k= Subject key identifier: D3:C4:B5:C1:20:D6:02:78:19:EA:62:E4:41:CF:D8:22:03:51:DC:66 Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49 Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft Manifest number: 61 Signing time: Mon 21 Jul 2025 07:14:39 +0000 Manifest this update: Mon 21 Jul 2025 07:14:38 +0000 Manifest next update: Mon 28 Jul 2025 07:14:38 +0000 Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: pprcZQTlJ5b8d8PtWXi4lbnh4ChPVxoOu6slxG7Hh+U=) 2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 8Wzv5veel/E+M5qspAlwBsfA0pAvjm21LyceiyRo5cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449 Validity Not Before: Jul 21 07:14:38 2025 GMT Not After : Jul 28 07:14:38 2025 GMT Subject: CN=687de8de-9745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:1b:6e:89:e3:b3:41:a9:42:61:e7:69:b4: df:73:e3:64:dc:cf:93:e4:f0:05:f6:52:42:13:bf: 54:8e:1d:de:0a:b8:b6:ed:0e:06:aa:91:f3:93:91: 22:93:b0:6f:c7:b4:c7:9d:fb:69:08:71:9c:f0:65: f1:e9:e0:a2:2f:f2:f0:7c:05:85:10:23:60:b0:1c: 74:3d:db:a9:f1:b6:4b:22:03:37:23:fb:d7:af:bc: 3c:3c:34:d1:9a:b2:02:36:e9:e9:09:68:c7:9a:47: 4e:74:f9:8d:c5:29:5c:f9:85:14:a8:83:4f:f4:f5: 8f:0a:33:89:37:87:93:e4:13:9b:2e:70:39:2a:f0: e9:86:74:d3:11:91:9f:49:95:24:56:49:0f:af:70: 5b:0c:40:de:85:dc:d0:19:a8:3f:0b:b4:8c:e6:7e: b1:49:87:bc:6d:32:e2:95:6e:68:eb:81:91:ab:00: b2:89:70:62:0e:78:d2:9c:77:6b:03:3c:08:b4:54: e2:8c:02:90:72:57:50:d5:e7:aa:9a:6c:d1:c1:0b: 71:a2:f6:e9:3f:69:18:16:49:71:59:08:20:a7:2b: 80:7d:3f:70:d4:e0:75:56:d4:b0:7e:97:d7:ba:d9: 96:76:ab:bb:ea:63:08:a9:1c:ff:10:61:a2:19:81: cf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C4:B5:C1:20:D6:02:78:19:EA:62:E4:41:CF:D8:22:03:51:DC:66 X509v3 Authority Key Identifier: keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:67:b8:3f:72:ff:19:6e:03:61:15:bc:60:ab:1e:80:72:ff: ec:ef:5d:6c:c7:e6:9d:99:89:aa:af:7a:ca:ea:bf:a5:0e:32: 6b:cc:35:bf:e7:e7:3c:57:5f:7b:db:52:91:6d:cc:67:3f:01: 38:c9:98:c9:13:bf:86:48:f0:cc:04:bd:92:e2:9e:48:1f:c8: 1f:3d:f0:27:09:83:54:4a:04:da:29:19:80:f7:7e:2f:64:54: 2b:68:7a:5f:d1:fe:39:6d:af:8d:0d:c7:7e:e4:e1:b2:38:e0: 23:a9:94:80:12:ca:e2:74:d2:3e:29:3d:03:3a:b4:75:30:4b: c9:d5:b8:16:ef:30:18:16:02:63:49:d5:a0:41:02:a7:d3:4e: c1:e6:5d:90:02:8e:61:6b:9d:f9:14:3d:33:05:53:84:b6:df: 93:64:66:82:c3:10:4f:99:60:59:3c:89:52:b4:d9:4b:a4:29: c9:5c:cd:f0:e7:9d:56:0e:b1:b3:a5:5f:33:6e:1b:d1:30:db: 1a:e3:3a:94:9e:5b:cd:ed:5c:b5:23:41:6e:be:cf:5c:f8:af: 40:79:92:e2:0b:01:16:d9:0e:ca:81:ed:05:99:57:b8:7b:74: f3:54:f4:68:3b:ab:b2:52:7b:f3:6a:ed:84:25:dc:3f:f4:bf: e3:56:38:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODZDMjExMC8GA1UEBRMoQzYyNjU4MzI5ODU3OEQxRDRBRjcyNzNFQkQ3OTFDNzIz MEEzNzQ0OTAeFw0yNTA3MjEwNzE0MzhaFw0yNTA3MjgwNzE0MzhaMBgxFjAUBgNV BAMTDTY4N2RlOGRlLTk3NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0tRtuieOzQalCYedptN9z42Tcz5Pk8AX2UkITv1SOHd4KuLbtDgaqkfOTkSKT sG/HtMed+2kIcZzwZfHp4KIv8vB8BYUQI2CwHHQ926nxtksiAzcj+9evvDw8NNGa sgI26ekJaMeaR050+Y3FKVz5hRSog0/09Y8KM4k3h5PkE5sucDkq8OmGdNMRkZ9J lSRWSQ+vcFsMQN6F3NAZqD8LtIzmfrFJh7xtMuKVbmjrgZGrALKJcGIOeNKcd2sD PAi0VOKMApByV1DV56qabNHBC3Gi9uk/aRgWSXFZCCCnK4B9P3DU4HVW1LB+l9e6 2ZZ2q7vqYwipHP8QYaIZgc/bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU08S1wSDW AngZ6mLkQc/YIgNR3GYwHwYDVR0jBBgwFoAUxiZYMphXjR1K9yc+vXkccjCjdEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NkMyLzFEMkYwNzI0RDE3 RjExRUZCMzg0NjkyOEM0RjlBRTAyL3hpWllNcGhYalIxSzl5Yy12WGtjY2pDamRF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGlaWU1waFhqUjFLOXljLXZYa2NjakNqZEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 NkMyLzFEMkYwNzI0RDE3RjExRUZCMzg0NjkyOEM0RjlBRTAyL3hpWllNcGhYalIx Szl5Yy12WGtjY2pDamRFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM5nuD9y/xluA2EVvGCrHoBy/+zvXWzH5p2Ziaqvesrqv6UOMmvMNb/n 5zxXX3vbUpFtzGc/ATjJmMkTv4ZI8MwEvZLinkgfyB898CcJg1RKBNopGYD3fi9k VCtoel/R/jltr40Nx37k4bI44COplIASyuJ00j4pPQM6tHUwS8nVuBbvMBgWAmNJ 1aBBAqfTTsHmXZACjmFrnfkUPTMFU4S235NkZoLDEE+ZYFk8iVK02UukKclczfDn nVYOsbOlXzNuG9Ew2xrjOpSeW83tXLUjQW6+z1z4r0B5kuILARbZDsqB7QWZV7h7 dPNU9Gg7q7JSe/Nq7YQl3D/0v+NWOIg= -----END CERTIFICATE-----Generated at Mon Jul 21 12:46:16 2025 by rpki-client