$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: EBzW7qJA8L3J3mH72z3DJJuFB+PWYKUWgkG7v20FYMg= Subject key identifier: BF:AD:89:88:8A:BA:D5:6C:9E:2D:5B:94:1C:C8:C0:5B:92:20:00:DD Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 1D Signing time: Sat 19 Jul 2025 08:11:23 +0000 Manifest this update: Sat 19 Jul 2025 08:11:23 +0000 Manifest next update: Sat 26 Jul 2025 08:11:23 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: pJO0hwA9Obx3Zm0nPFVkDYsLOlKCTNW2Pj2Skf7Vd+4=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GaxzV7+DkMGpd57xnNkPMderTpqjXPXFd/uGzJlcq9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Jul 19 08:11:23 2025 GMT Not After : Jul 26 08:11:23 2025 GMT Subject: CN=687b532b-cd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a9:dc:c8:ea:94:8e:cb:ed:e4:73:8d:24:24: 42:ea:12:ab:d6:8f:4a:c7:dd:fe:1d:67:05:92:b6: f6:b2:43:70:48:eb:d5:88:f7:d6:ae:4e:91:6b:ee: d7:54:0c:09:aa:54:f8:3c:08:52:ec:d1:84:df:b4: 12:88:c1:a7:16:9f:89:12:0a:69:ca:2c:71:00:e2: 6c:5e:c1:6f:2f:eb:42:8c:8a:40:7b:a2:b7:58:9c: b1:33:74:25:24:40:ab:b2:85:91:a7:c0:e9:fb:09: 21:09:0b:5c:41:a9:e2:91:65:ce:e0:6a:d1:16:55: 6e:4d:31:8d:41:91:4f:7d:17:3d:f6:74:b9:1f:58: d7:8d:b8:1b:3d:aa:90:29:25:5c:56:f6:1e:26:11: 1a:89:02:bc:c7:9b:5e:8b:fc:26:ac:e0:71:ab:4f: 51:3f:11:6b:c2:fc:ca:67:dc:0a:95:db:39:50:13: 48:4f:c5:45:a3:99:39:35:c9:4a:a0:f8:8c:5d:39: 30:3e:a1:9d:a4:b0:04:f7:c5:00:e8:ea:40:09:ba: 61:a7:02:2d:7c:a8:66:b6:48:08:99:ac:c2:52:60: e4:46:0f:38:f7:4b:0f:c2:83:7c:f0:2c:80:b5:0b: 3d:81:b5:d6:49:f6:75:8a:29:c3:bf:da:cf:7e:6e: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AD:89:88:8A:BA:D5:6C:9E:2D:5B:94:1C:C8:C0:5B:92:20:00:DD X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c2:21:4a:3f:47:40:ef:50:b4:55:70:70:b2:d4:43:a9:f9: 07:a9:c6:96:70:38:bc:97:e5:4d:9f:e8:39:df:c6:71:f7:c4: d2:b5:a3:7a:64:ed:9b:1a:bf:4d:cd:da:ce:bc:4d:c4:34:47: 4e:da:83:6e:35:76:66:c9:0c:50:e9:fd:17:aa:a8:b9:06:02: 4a:50:db:b6:01:fc:a0:ff:07:6e:1b:34:7d:a4:6a:f1:00:75: 79:6e:b1:c9:56:e8:ee:2b:a3:2e:1e:81:67:0a:68:b5:94:9d: d8:02:fa:74:2a:c1:78:24:61:eb:d8:ac:d0:ca:8c:80:13:66: a1:9f:03:e8:e5:df:52:01:76:6e:75:d1:40:42:0a:51:0c:d5: e8:b2:ea:2d:ad:03:ac:c0:e2:64:d0:30:1a:95:f4:de:f2:aa: 4d:96:e6:23:b1:60:ab:66:39:a7:fd:2b:3f:d9:d8:96:6a:1a: e7:c7:67:07:7a:62:2a:7a:bf:cd:17:bb:6b:e1:36:0d:84:ae: 94:21:a3:2d:3d:d3:bb:9d:93:fc:c0:8d:f4:6e:a0:2d:72:c1: f2:7e:b8:68:d1:67:7e:2d:c4:0e:3c:01:c4:fc:0f:6a:7c:af: 2a:59:b7:5b:2f:49:c0:73:8d:66:cd:50:89:2a:35:a0:72:b5: 72:b3:b4:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTA3MTkwODExMjNaFw0yNTA3MjYwODExMjNaMBgxFjAUBgNV BAMTDTY4N2I1MzJiLWNkN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkqdzI6pSOy+3kc40kJELqEqvWj0rH3f4dZwWStvayQ3BI69WI99auTpFr7tdU DAmqVPg8CFLs0YTftBKIwacWn4kSCmnKLHEA4mxewW8v60KMikB7ordYnLEzdCUk QKuyhZGnwOn7CSEJC1xBqeKRZc7gatEWVW5NMY1BkU99Fz32dLkfWNeNuBs9qpAp JVxW9h4mERqJArzHm16L/Cas4HGrT1E/EWvC/Mpn3AqV2zlQE0hPxUWjmTk1yUqg +IxdOTA+oZ2ksAT3xQDo6kAJumGnAi18qGa2SAiZrMJSYORGDzj3Sw/Cg3zwLIC1 Cz2BtdZJ9nWKKcO/2s9+bvOXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv62JiIq6 1WyeLVuUHMjAW5IgAN0wHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKXCIUo/R0DvULRVcHCy1EOp+QepxpZwOLyX5U2f6DnfxnH3xNK1o3pk 7Zsav03N2s68TcQ0R07ag241dmbJDFDp/ReqqLkGAkpQ27YB/KD/B24bNH2kavEA dXlusclW6O4roy4egWcKaLWUndgC+nQqwXgkYevYrNDKjIATZqGfA+jl31IBdm51 0UBCClEM1eiy6i2tA6zA4mTQMBqV9N7yqk2W5iOxYKtmOaf9Kz/Z2JZqGufHZwd6 Yip6v80Xu2vhNg2ErpQhoy0907udk/zAjfRuoC1ywfJ+uGjRZ34txA48AcT8D2p8 rypZt1svScBzjWbNUIkqNaBytXKztAk= -----END CERTIFICATE-----Generated at Mon Jul 21 03:05:23 2025 by rpki-client