$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: hmWBIrZcUG8lLlVBg7V0eaRQYckir+LyKm+4xzn4P/w= Subject key identifier: C1:50:B0:08:C3:43:A3:ED:EE:B2:52:D9:6C:D9:3E:98:3D:02:5A:81 Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 09EF Signing time: Sun 20 Jul 2025 20:04:02 +0000 Manifest this update: Sun 20 Jul 2025 20:04:01 +0000 Manifest next update: Sun 27 Jul 2025 20:04:01 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: FUZqRx9F0fktzMmF5KKpB+SeRY8zVeJt/3n1deZu9O4=) 2: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: fT5I6I+PgWW4dacN3a4Ms0RKDB8N3MNCREMj8FDesrg=) 3: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 2Dd7cd8I4OSARGKZ0mccoyZW6iVZIc9ObRTGe4O/Dcc=) 4: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: NOfiYVkjVgVKJdndF7rjEsZWLBXmxcXaA+rDg1JFfcI=) 5: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: eb8Dxmgs1pJ56B+p/g4fWelI2bfJeXR9VvaW0O1EVCY=) 6: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Fh5T2BpUHXj8z7zvCSIDzf9GCkAnUEieH5BE04K3ZeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2597 (0xa25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Jul 20 20:04:01 2025 GMT Not After : Jul 27 20:04:01 2025 GMT Subject: CN=687d4bb1-8550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:9d:80:87:7a:26:50:37:20:0f:33:f6:63: 93:59:83:21:43:ec:4a:f2:8b:23:45:76:0b:40:3f: 0f:d0:b6:e6:30:c3:02:d8:b4:8d:0c:96:27:db:7e: 2b:0a:e6:cd:99:6c:e9:b0:23:b4:dc:08:dd:ff:a5: b3:f9:a1:12:ca:86:ab:95:b4:f5:9c:b3:24:1d:e5: 91:b5:59:cb:69:f6:36:15:18:20:7d:d0:a0:7a:ac: 6c:12:c3:3f:74:60:17:56:a8:5e:d6:65:22:da:42: 2d:a9:ce:73:cb:d3:1a:d9:bd:fd:41:40:24:ae:e8: 95:a6:d3:09:52:38:25:e3:a1:ce:ed:92:82:f8:18: d2:d5:20:83:ec:2e:9c:d2:ea:4d:de:24:bd:ee:4b: 90:50:88:0b:49:cf:33:27:70:28:7e:eb:3c:8a:dd: 68:0f:a3:38:ac:58:ca:34:19:1f:7a:37:b9:55:e3: 51:b2:1e:ea:da:b6:ba:0e:27:cb:dc:9d:d5:d7:cb: 6b:e1:f4:f7:b2:08:42:0d:17:bd:f1:7d:af:f7:c8: 38:a6:e9:61:a0:13:8a:31:83:ed:43:37:3a:b6:83: f2:b4:66:2b:93:23:ae:0a:70:29:dd:cf:e4:d7:ce: a3:8e:0a:d3:9f:7a:bb:0d:98:ab:d0:4b:7b:9f:73: b3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:50:B0:08:C3:43:A3:ED:EE:B2:52:D9:6C:D9:3E:98:3D:02:5A:81 X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c0:e8:d4:d9:6f:54:68:37:e1:d4:14:d6:50:14:cc:2d:6f: 40:a1:dd:20:4a:c5:b2:5f:2f:45:9a:68:8b:68:b1:ed:77:11: 1f:61:a0:5a:da:68:0f:65:35:db:04:5c:e3:ad:47:c4:cb:09: ac:7e:db:4c:8f:7a:af:20:85:18:9d:3c:2c:4a:be:57:86:f8: b7:19:cf:50:1b:9d:54:d3:1e:bd:79:43:23:5d:71:df:e4:e5: df:64:60:be:79:14:92:03:07:aa:b1:e1:6e:bc:6a:25:a8:90: e1:50:dd:4b:dd:e8:43:1c:77:64:18:d4:d7:88:65:84:50:b2: ef:0b:1d:a3:cb:5e:5a:59:58:a1:ab:0a:ef:88:61:ce:54:c2: 4d:56:5d:df:f3:88:bd:f5:82:87:62:47:6a:a1:58:78:19:b3: 6f:60:5b:00:60:82:4f:97:d1:6e:79:47:ae:18:bd:2b:de:69: 0c:bd:66:b2:aa:69:08:b0:b4:27:a3:f7:f3:9d:6f:ca:86:25: 94:04:2e:d0:e1:6f:f3:db:47:09:2e:13:d7:24:61:b1:0f:f4: c5:8e:cf:ed:19:d7:dd:cd:7e:3a:5f:b4:4a:e4:e7:0c:34:69: b6:e7:b2:92:79:a0:0e:65:76:80:b6:cd:3b:63:71:d4:32:8f: 51:fe:74:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjUwNzIwMjAwNDAxWhcNMjUwNzI3MjAwNDAxWjAYMRYwFAYD VQQDEw02ODdkNGJiMS04NTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2medgId6JlA3IA8z9mOTWYMhQ+xK8osjRXYLQD8P0LbmMMMC2LSNDJYn234r CubNmWzpsCO03Ajd/6Wz+aESyoarlbT1nLMkHeWRtVnLafY2FRggfdCgeqxsEsM/ dGAXVqhe1mUi2kItqc5zy9Ma2b39QUAkruiVptMJUjgl46HO7ZKC+BjS1SCD7C6c 0upN3iS97kuQUIgLSc8zJ3Aofus8it1oD6M4rFjKNBkfeje5VeNRsh7q2ra6DifL 3J3V18tr4fT3sghCDRe98X2v98g4pulhoBOKMYPtQzc6toPytGYrkyOuCnAp3c/k 186jjgrTn3q7DZir0Et7n3OzMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFQsAjD Q6Pt7rJS2WzZPpg9AlqBMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNwOjU2W9UaDfh1BTWUBTMLW9Aod0gSsWyXy9FmmiLaLHtdxEfYaBa 2mgPZTXbBFzjrUfEywmsfttMj3qvIIUYnTwsSr5Xhvi3Gc9QG51U0x69eUMjXXHf 5OXfZGC+eRSSAweqseFuvGolqJDhUN1L3ehDHHdkGNTXiGWEULLvCx2jy15aWVih qwrviGHOVMJNVl3f84i99YKHYkdqoVh4GbNvYFsAYIJPl9FueUeuGL0r3mkMvWay qmkIsLQno/fznW/KhiWUBC7Q4W/z20cJLhPXJGGxD/TFjs/tGdfdzX46X7RK5OcM NGm257KSeaAOZXaAts07Y3HUMo9R/nTp -----END CERTIFICATE-----Generated at Tue Jul 22 05:51:31 2025 by rpki-client