$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json) Hash identifier: dqpclVbhgXoGiWcTIkNfqz//FfTmTPmjE/QGO6Nxgls= Subject key identifier: 8A:DA:43:EE:7C:D7:B5:C7:56:33:39:FC:D0:22:D6:8F:BF:61:9C:BD Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft Manifest number: 029E Signing time: Mon 09 Jun 2025 01:07:05 +0000 Manifest this update: Mon 09 Jun 2025 01:07:05 +0000 Manifest next update: Mon 16 Jun 2025 01:07:05 +0000 Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: 8UvtTFLmfCNIsCbrMkzCdp3AKFEgFoMdVbL+x57AmX8=) 2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: 5ddtdaIVi4uZX5Kvh4OHCGdOxyTvl3WbsBWufhivC2Q=) 3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ELuUl8jYoHQdUknrof/L+Xlspg+bgQj1KmK60+o/Jfs=) 4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: KuSwuFXT3RlQeIGfpEWkiu/ifBNFInANnuYBrAg51Cc=) 5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: cMcwlHYnO9+mh5veotjRirRXB4y0F0TlStRvvkDezXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 01:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Validity Not Before: Jun 9 01:07:05 2025 GMT Not After : Jun 16 01:07:05 2025 GMT Subject: CN=684633b9-62f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:22:fe:b9:2f:a7:e1:5e:d2:9d:3e:3a:2d: 45:e9:24:b6:b3:1e:ae:6c:15:00:74:f9:48:4e:61: e2:9f:5c:59:a3:50:11:0d:e9:b9:6b:11:21:a2:d2: 08:20:b2:6c:13:bf:77:39:a8:8d:e6:50:85:ee:94: 0d:05:cc:a8:55:5c:3f:cf:73:c1:cb:f1:ba:ff:ef: 35:89:11:5c:c1:0b:6f:91:1c:f8:a3:be:bc:82:4f: ce:11:58:96:cc:74:67:12:78:5f:37:5a:1b:b2:bb: bd:81:fc:03:ba:a1:b8:f3:ac:63:a8:00:b1:cc:32: c8:f3:d1:3d:fb:2d:aa:11:ba:89:e5:1e:1f:04:d3: 10:6e:56:9b:ef:4d:75:4c:b4:f1:0b:62:c0:06:b8: db:63:bc:86:71:71:40:fd:d5:63:6f:64:6c:d6:08: 63:ab:2b:87:22:57:f1:4a:b6:cb:e7:fb:6e:ef:13: 9c:48:25:45:19:da:3c:d5:95:3f:e2:78:82:5c:63: e3:97:c8:e8:22:52:96:31:20:22:b4:02:c7:fc:5f: 48:31:7c:4e:7e:cb:63:5a:75:a9:a3:2c:f9:80:bc: 87:ab:a2:4b:e8:39:2e:8a:1c:d0:a5:f9:f6:2a:72: 50:73:1b:14:13:36:9d:9e:5a:78:b8:b0:7d:b5:e0: 7d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DA:43:EE:7C:D7:B5:C7:56:33:39:FC:D0:22:D6:8F:BF:61:9C:BD X509v3 Authority Key Identifier: keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:26:f6:bc:8f:9a:7c:38:fa:86:0b:0e:92:95:cd:f7:1a:c5: 0f:d5:32:d3:fc:4f:43:de:fc:32:3a:c6:48:c1:0e:59:89:90: d0:66:d7:26:a9:77:39:5a:46:c6:1c:f5:b0:26:4d:fa:db:b9: 30:d3:e8:45:11:08:45:c8:d5:b1:97:1b:4c:d4:b0:7d:98:ce: 28:5a:7b:39:25:70:3d:1d:d5:17:8c:7c:98:d3:1d:c0:89:e1: 95:5c:66:3e:e9:c4:52:51:61:2f:55:05:d5:56:02:e5:d5:49: d7:25:32:c0:c4:8d:ba:ec:8b:20:8d:1b:0c:0a:e1:90:55:b0: 1d:4c:aa:05:9c:46:96:76:b6:a4:e6:4c:ab:36:40:f4:89:5b: 1a:0c:94:b1:8d:3f:48:46:48:12:51:30:47:da:be:87:4c:67: d1:2b:b9:68:4b:66:79:e0:1a:12:10:ff:d7:c1:11:28:78:f0: fb:96:20:9e:b4:50:dd:ae:f8:30:71:e2:72:11:b3:51:78:a4: 3e:66:21:c7:11:d3:82:1e:48:5b:8f:c7:6c:53:39:62:b3:30: 77:06:1c:ea:39:fe:3d:09:1a:7e:fa:a0:88:d5:47:49:79:c5: 69:63:75:d8:a2:67:bf:de:7d:9c:9f:c3:45:21:1e:f2:0f:2c: 99:da:8d:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE MzUxRDIzMkYwHhcNMjUwNjA5MDEwNzA1WhcNMjUwNjE2MDEwNzA1WjAYMRYwFAYD VQQDEw02ODQ2MzNiOS02MmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSci/rkvp+Fe0p0+Oi1F6SS2sx6ubBUAdPlITmHin1xZo1ARDem5axEhotII ILJsE793OaiN5lCF7pQNBcyoVVw/z3PBy/G6/+81iRFcwQtvkRz4o768gk/OEViW zHRnEnhfN1obsru9gfwDuqG486xjqACxzDLI89E9+y2qEbqJ5R4fBNMQblab7011 TLTxC2LABrjbY7yGcXFA/dVjb2Rs1ghjqyuHIlfxSrbL5/tu7xOcSCVFGdo81ZU/ 4niCXGPjl8joIlKWMSAitALH/F9IMXxOfstjWnWpoyz5gLyHq6JL6DkuihzQpfn2 KnJQcxsUEzadnlp4uLB9teB9XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIraQ+58 17XHVjM5/NAi1o+/YZy9MB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU3Ny85MDNFNEM3ODAzMTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmho RXh2TV9xSDN0NnZUVWRJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEJva8j5p8OPqGCw6Slc33GsUP1TLT/E9D3vwyOsZIwQ5ZiZDQZtcm qXc5WkbGHPWwJk3627kw0+hFEQhFyNWxlxtM1LB9mM4oWns5JXA9HdUXjHyY0x3A ieGVXGY+6cRSUWEvVQXVVgLl1UnXJTLAxI267IsgjRsMCuGQVbAdTKoFnEaWdrak 5kyrNkD0iVsaDJSxjT9IRkgSUTBH2r6HTGfRK7loS2Z54BoSEP/XwREoePD7liCe tFDdrvgwceJyEbNReKQ+ZiHHEdOCHkhbj8dsUzliszB3BhzqOf49CRp++qCI1UdJ ecVpY3XYome/3n2cn8NFIR7yDyyZ2o01 -----END CERTIFICATE-----Generated at Mon Jun 9 20:11:11 2025 by rpki-client