$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json) Hash identifier: E5fjjSH9I2RwXEYbbb5Iki1GU7FiOSCMjhf39LI4wAA= Subject key identifier: 79:D0:FB:95:97:86:3A:FF:1A:7D:9C:02:6B:23:F8:C6:56:1C:1E:E4 Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft Manifest number: 99 Signing time: Mon 21 Jul 2025 06:30:12 +0000 Manifest this update: Mon 21 Jul 2025 06:30:12 +0000 Manifest next update: Mon 28 Jul 2025 06:30:12 +0000 Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: lZRkb/65x+MpoSl8QWKTBhv6U8br7V+peQeIsOaIITI=) 2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: aGiRG+xUGgWwAx/G6pVvTX9ourgHUuGhOXJQLlTyA9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Validity Not Before: Jul 21 06:30:12 2025 GMT Not After : Jul 28 06:30:12 2025 GMT Subject: CN=687dde74-538a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:cd:61:30:1e:f7:ea:46:9b:b8:d3:86:e3: 97:4f:2d:5c:d5:65:31:9d:a4:f0:cc:1b:57:a9:57: f9:04:5b:8d:53:75:b5:02:de:d0:e6:95:2f:26:9a: ea:90:ad:bf:91:f2:22:39:26:35:99:42:43:bf:b2: c5:14:74:61:2d:3e:82:25:85:5b:23:65:3e:68:76: ff:6f:e4:cc:fc:29:c1:1b:90:fa:46:2f:61:b6:d2: d8:76:f3:55:e5:7b:c9:30:f5:5c:49:12:bb:34:f3: 5b:93:ec:47:ed:7d:64:69:d0:97:a4:d8:07:23:f7: 86:7a:6e:74:c7:01:b5:6b:08:b1:dc:db:b8:5b:97: c2:f7:ee:be:95:90:c9:af:33:cf:0e:fa:1c:70:fa: ce:64:fb:82:13:78:8e:ac:3c:ba:0c:a2:3e:83:d2: b5:c8:10:f3:0b:9d:66:cd:b8:5b:93:b3:d6:bc:e2: 98:4e:bf:40:fe:ad:52:01:33:35:26:db:5b:be:b1: b3:c8:5e:e2:f6:95:a2:61:56:c1:3a:5f:18:03:28: b2:d1:08:d0:d1:5e:67:72:23:fc:ff:b7:03:0f:90: 76:cd:5b:62:c3:75:0b:5d:2a:eb:2f:30:17:03:6f: 5f:7b:a0:43:9c:6c:8a:bd:62:b9:76:2f:29:cd:93: de:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D0:FB:95:97:86:3A:FF:1A:7D:9C:02:6B:23:F8:C6:56:1C:1E:E4 X509v3 Authority Key Identifier: keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:f5:5d:a8:e8:25:78:85:d1:50:76:2e:e5:a2:79:64:60: be:97:a5:d7:3e:b7:06:e9:b0:7a:d5:29:de:0b:12:ac:63:d0: de:95:5a:1d:81:50:3a:85:58:2f:7f:31:b3:86:de:d3:42:b3: 34:d5:22:85:55:6e:db:d4:b2:c3:9e:98:0f:57:01:27:6f:1a: 46:fe:bb:14:23:9b:67:32:41:86:90:c6:cd:17:c7:98:ae:2b: e4:ab:4a:3a:f8:a4:ed:e3:17:13:73:2e:50:6a:6e:b1:75:bc: 3b:20:a0:d5:8b:fd:cb:a1:32:45:69:ce:bc:a6:a6:32:ec:97: 4b:cc:a4:69:ac:04:51:48:ba:66:97:3c:f0:19:7b:70:24:6a: b3:aa:37:d4:26:25:b0:7f:26:c3:18:af:3d:c8:f4:b1:82:fa: 66:58:07:bd:b6:e0:c1:61:a9:83:2c:ea:90:b1:60:af:4f:aa: 2b:27:75:e5:ab:33:f2:c6:3b:6b:cd:bb:a2:1c:90:fd:67:16: 11:0b:5e:f8:a8:3c:df:a4:36:f1:07:90:b7:bc:e1:3a:f7:03: 5e:a1:f6:3a:0f:c3:96:ff:5f:34:8b:7f:07:21:a3:4e:fa:da: ae:cb:2b:4d:af:62:79:6c:99:56:bd:48:f9:d7:86:9a:0e:94: d0:6d:7a:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNEUxMTAvBgNVBAUTKEM3MjAwMjc2N0ExMEVDMkZGMTQ1MTVBMkFBQjg2RTYx NDA5N0E3NUMwHhcNMjUwNzIxMDYzMDEyWhcNMjUwNzI4MDYzMDEyWjAYMRYwFAYD VQQDEw02ODdkZGU3NC01MzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA117NYTAe9+pGm7jThuOXTy1c1WUxnaTwzBtXqVf5BFuNU3W1At7Q5pUvJprq kK2/kfIiOSY1mUJDv7LFFHRhLT6CJYVbI2U+aHb/b+TM/CnBG5D6Ri9httLYdvNV 5XvJMPVcSRK7NPNbk+xH7X1kadCXpNgHI/eGem50xwG1awix3Nu4W5fC9+6+lZDJ rzPPDvoccPrOZPuCE3iOrDy6DKI+g9K1yBDzC51mzbhbk7PWvOKYTr9A/q1SATM1 JttbvrGzyF7i9pWiYVbBOl8YAyiy0QjQ0V5nciP8/7cDD5B2zVtiw3ULXSrrLzAX A29fe6BDnGyKvWK5di8pzZPekwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnQ+5WX hjr/Gn2cAmsj+MZWHB7kMB8GA1UdIwQYMBaAFMcgAnZ6EOwv8UUVoqq4bmFAl6dc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU0RS9EMTY1RTRBMjdC RTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5vUTdDX3hSUldpcXJodVlVQ1hw MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h5QUNkbm9RN0NfeFJSV2lxcmh1WVVDWHAxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU0RS9EMTY1RTRBMjdCRTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5vUTdD X3hSUldpcXJodVlVQ1hwMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAGvVdqOgleIXRUHYu5aJ5ZGC+l6XXPrcG6bB61SneCxKsY9DelVod gVA6hVgvfzGzht7TQrM01SKFVW7b1LLDnpgPVwEnbxpG/rsUI5tnMkGGkMbNF8eY rivkq0o6+KTt4xcTcy5Qam6xdbw7IKDVi/3LoTJFac68pqYy7JdLzKRprARRSLpm lzzwGXtwJGqzqjfUJiWwfybDGK89yPSxgvpmWAe9tuDBYamDLOqQsWCvT6orJ3Xl qzPyxjtrzbuiHJD9ZxYRC174qDzfpDbxB5C3vOE69wNeofY6D8OW/180i38HIaNO +tquyytNr2J5bJlWvUj514aaDpTQbXqz -----END CERTIFICATE-----Generated at Mon Jul 21 13:17:02 2025 by rpki-client