$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json) Hash identifier: /XWaKkGYTNWisNwShjZckbfxm9xxqAoNU+lIrq0xspw= Subject key identifier: C3:F0:06:E5:42:60:10:48:80:71:71:D2:96:9D:C7:35:96:E4:B2:E5 Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 25AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft Manifest number: 2594 Signing time: Sun 08 Jun 2025 15:40:36 +0000 Manifest this update: Sun 08 Jun 2025 15:40:36 +0000 Manifest next update: Sun 15 Jun 2025 15:40:36 +0000 Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: IeLSUmflDFfXuCiUjjpwdXoMfwUNIKSUbl5d3EF/ZSQ=) 2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: pVWyhrhr52dDPOhFrnd0oPU2DOTP+1UBjUuKhhhwO0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 15:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9645 (0x25ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: Jun 8 15:40:36 2025 GMT Not After : Jun 15 15:40:36 2025 GMT Subject: CN=6845aef4-77ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:c9:f7:5b:6d:03:0d:12:4f:26:5c:36:78: 52:b5:9f:97:fa:ab:d7:a4:a8:84:85:75:20:4b:18: 75:43:58:cc:ea:4e:7f:f4:b6:5b:c5:7e:3f:09:5b: 32:7f:bd:27:a9:27:06:fa:a6:c5:8c:5d:d8:ab:ab: 36:b0:a2:6d:6c:ae:ad:97:09:c3:65:a4:bc:f0:eb: 65:51:3f:0a:a0:0e:e0:63:0b:c6:6f:06:0e:c6:ea: d2:5c:fd:33:8c:c8:4c:65:04:fd:81:7c:73:f2:38: a8:2b:46:fc:32:0e:1e:f8:62:c5:cd:67:ce:84:7a: 40:2d:28:a5:b4:6d:19:4d:1a:6b:4f:7e:14:cd:ba: 65:f5:f6:7a:1e:2a:a8:a3:5f:78:27:77:06:c9:9d: fd:72:82:5f:fa:40:b5:d4:3e:21:63:c7:5b:44:fc: 18:39:bc:f8:db:41:1b:82:55:18:70:b4:7b:1c:8e: 42:15:3c:74:12:41:32:22:03:8e:8d:df:dd:d3:b2: 49:d1:54:eb:02:dc:8d:ea:42:9a:96:ba:7a:96:9d: 18:a0:a4:71:75:1f:de:6e:e0:17:9c:68:8e:d4:61: a6:ea:55:4f:15:08:29:55:9e:13:24:58:20:e8:8a: 9d:92:af:c1:7d:ac:a0:fc:3b:78:97:a5:66:5f:df: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F0:06:E5:42:60:10:48:80:71:71:D2:96:9D:C7:35:96:E4:B2:E5 X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:11:be:39:06:53:b8:09:af:72:d8:a8:24:cb:58:59:20:76: 25:47:45:ae:ab:2f:b7:47:94:25:12:56:6a:1c:0d:7e:dd:fe: 4b:e7:01:5b:3b:28:22:39:d8:6d:86:90:18:46:fd:45:36:7f: 24:31:10:cd:5f:bd:0b:be:08:9c:8c:ce:41:23:09:fc:87:5b: 66:6a:93:94:ef:22:96:7f:6f:51:b2:ab:58:78:ad:ef:ae:a4: 5f:c5:51:44:05:3a:16:8c:11:c7:70:b5:a4:66:79:8a:da:b2: de:26:52:3b:f2:af:7d:b6:31:25:48:c3:12:29:69:bd:fd:91: d2:18:d2:ea:9e:05:51:ba:e1:b4:e5:ad:f5:21:7e:5f:54:ff: 3a:ea:78:b1:53:a6:33:91:e0:1d:54:23:c2:2c:07:d0:09:9d: 9a:9c:f0:be:70:d7:89:8f:45:74:2f:d9:97:57:bc:c4:24:f2: 2f:b5:c4:07:14:8a:e8:15:ab:eb:34:70:40:5f:93:31:9d:6a: 39:29:51:a5:3b:56:76:d3:38:3c:ea:2b:79:3c:8d:f3:0d:17: 4d:65:e8:f5:f2:0f:87:b3:9c:8a:f9:55:0d:97:f3:40:fa:88: 77:98:4f:01:03:5c:e2:e2:b3:e3:57:fa:1c:b2:23:e7:47:27: ef:8d:88:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjUwNjA4MTU0MDM2WhcNMjUwNjE1MTU0MDM2WjAYMRYwFAYD VQQDEw02ODQ1YWVmNC03N2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16LJ91ttAw0STyZcNnhStZ+X+qvXpKiEhXUgSxh1Q1jM6k5/9LZbxX4/CVsy f70nqScG+qbFjF3Yq6s2sKJtbK6tlwnDZaS88OtlUT8KoA7gYwvGbwYOxurSXP0z jMhMZQT9gXxz8jioK0b8Mg4e+GLFzWfOhHpALSiltG0ZTRprT34Uzbpl9fZ6Hiqo o194J3cGyZ39coJf+kC11D4hY8dbRPwYObz420EbglUYcLR7HI5CFTx0EkEyIgOO jd/d07JJ0VTrAtyN6kKalrp6lp0YoKRxdR/ebuAXnGiO1GGm6lVPFQgpVZ4TJFgg 6Iqdkq/Bfayg/Dt4l6VmX9//ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPwBuVC YBBIgHFx0padxzWW5LLlMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly Mklia0M5cVNmMVhjYl9QbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtEb45BlO4Ca9y2Kgky1hZIHYlR0Wuqy+3R5QlElZqHA1+3f5L5wFb OygiOdhthpAYRv1FNn8kMRDNX70LvgicjM5BIwn8h1tmapOU7yKWf29RsqtYeK3v rqRfxVFEBToWjBHHcLWkZnmK2rLeJlI78q99tjElSMMSKWm9/ZHSGNLqngVRuuG0 5a31IX5fVP866nixU6YzkeAdVCPCLAfQCZ2anPC+cNeJj0V0L9mXV7zEJPIvtcQH FIroFavrNHBAX5MxnWo5KVGlO1Z20zg86it5PI3zDRdNZej18g+Hs5yK+VUNl/NA +oh3mE8BA1zi4rPjV/ocsiPnRyfvjYjf -----END CERTIFICATE-----Generated at Mon Jun 9 06:13:19 2025 by rpki-client