$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft File: RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json) Hash identifier: 3CorSv2Mbe/hKS8lgw7zERepmQwqXAjuvzoZugxARoM= Subject key identifier: 36:0A:EA:2E:01:97:E6:F1:4E:60:3E:E9:BF:4B:87:F8:CE:55:EC:9C Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 Certificate issuer: /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Certificate serial: 0A40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft Manifest number: 0A3A Signing time: Mon 04 Aug 2025 20:00:20 +0000 Manifest this update: Mon 04 Aug 2025 20:00:19 +0000 Manifest next update: Mon 11 Aug 2025 20:00:19 +0000 Files and hashes: 1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: jvZzV6yI7HJFywBq7SM96fWuVKO9QuSG8LpQPFYv198=) 2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: L7du7ZJlcmB2nN0ANGTgn5PQ8EaqXu+Bk+I6VvNhSKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2624 (0xa40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Validity Not Before: Aug 4 20:00:19 2025 GMT Not After : Aug 11 20:00:19 2025 GMT Subject: CN=68911154-8ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:83:e6:60:a6:6d:2d:f4:7f:0c:38:8b:0a: ce:2b:61:22:bb:60:6e:e9:ae:f3:8a:2e:9d:e1:b7: 60:15:8f:a8:95:ac:5f:74:75:3b:20:97:02:0a:ee: 1c:b9:8d:1a:7e:50:94:75:58:a1:98:50:c7:cc:15: a5:e1:27:14:cf:ab:6e:ff:32:02:04:05:34:11:16: 47:91:e6:c4:2a:f0:e1:72:d3:10:84:2a:ec:5e:ec: ca:de:81:4a:34:07:da:eb:a9:e7:16:50:ec:bf:24: 0c:47:a5:26:d7:90:49:b4:8a:46:c9:b3:9f:78:18: 93:66:cc:fa:00:16:af:81:51:4f:d2:92:5a:91:a2: 6e:13:93:c9:0f:4d:8d:93:23:bb:18:c2:b5:1d:e9: 48:2d:e4:e7:f7:e6:67:9a:61:e2:01:0b:95:e6:e4: ce:45:b8:bf:77:4d:7d:18:63:d0:d1:1d:2b:81:85: b0:b4:bb:2b:23:2b:a4:9c:ec:c2:d3:08:27:59:d0: c4:cd:c0:07:1e:b9:cf:e6:d1:2b:1e:c2:e3:19:78: aa:68:6b:4e:91:67:30:7a:c7:bc:5e:81:7f:1f:11: ad:6c:44:b4:c4:87:cb:8b:90:89:94:60:bd:5c:e1: ec:64:9c:db:03:1f:41:ab:0b:50:ca:2d:54:5f:18: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0A:EA:2E:01:97:E6:F1:4E:60:3E:E9:BF:4B:87:F8:CE:55:EC:9C X509v3 Authority Key Identifier: keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:6a:df:9f:0b:4c:79:a9:82:17:53:d5:70:ef:d9:18:e2:c8: b0:17:c2:ca:c4:df:cd:9a:2f:e0:28:4d:e9:b2:35:51:32:b8: ad:b2:06:fc:77:89:10:35:42:d4:bf:7c:be:ab:0e:d3:7d:b4: a1:1a:7f:bf:cf:d6:19:22:37:2f:7f:e5:54:0e:89:ef:ce:e9: 7f:05:95:a2:36:36:e6:03:5c:88:bf:40:7d:b2:a8:60:8d:00: 16:4c:02:3c:50:3e:08:fb:60:44:14:c8:13:2a:05:bf:fe:e3: 07:1c:1f:c2:b8:f8:53:be:2a:6d:a3:5b:12:a7:b1:5f:2e:62: 8a:f3:18:27:25:9a:07:41:95:2f:67:04:a5:c6:bd:bd:dc:9a: c3:d2:85:21:0f:29:07:d0:36:7e:f3:84:0b:75:bf:75:3c:ff: 0b:59:18:81:f2:20:ba:09:83:91:cf:71:61:9e:7e:6a:a4:67: b4:5d:00:67:6c:66:4a:f7:b0:24:f9:cb:ac:c3:99:ee:f7:27: 02:4c:20:6f:0c:e5:ce:05:28:23:be:75:d6:b1:9b:e5:e5:cc: 28:c2:45:5d:af:84:01:0b:93:d9:e4:c5:b2:27:3e:d4:14:3f: ac:d7:78:02:ae:cd:3d:b2:61:c5:3c:2f:4a:18:80:d0:8b:78: cc:4d:f7:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2 QzczMUZCQTcwHhcNMjUwODA0MjAwMDE5WhcNMjUwODExMjAwMDE5WjAYMRYwFAYD VQQDEw02ODkxMTE1NC04ZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDyD5mCmbS30fww4iwrOK2Eiu2Bu6a7zii6d4bdgFY+olaxfdHU7IJcCCu4c uY0aflCUdVihmFDHzBWl4ScUz6tu/zICBAU0ERZHkebEKvDhctMQhCrsXuzK3oFK NAfa66nnFlDsvyQMR6Um15BJtIpGybOfeBiTZsz6ABavgVFP0pJakaJuE5PJD02N kyO7GMK1HelILeTn9+ZnmmHiAQuV5uTORbi/d019GGPQ0R0rgYWwtLsrIyuknOzC 0wgnWdDEzcAHHrnP5tErHsLjGXiqaGtOkWcwese8XoF/HxGtbES0xIfLi5CJlGC9 XOHsZJzbAx9BqwtQyi1UXxhWYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYK6i4B l+bxTmA+6b9Lh/jOVeycMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzat+fC0x5qYIXU9Vw79kY4siwF8LKxN/Nmi/gKE3psjVRMritsgb8 d4kQNULUv3y+qw7TfbShGn+/z9YZIjcvf+VUDonvzul/BZWiNjbmA1yIv0B9sqhg jQAWTAI8UD4I+2BEFMgTKgW//uMHHB/CuPhTvipto1sSp7FfLmKK8xgnJZoHQZUv ZwSlxr293JrD0oUhDykH0DZ+84QLdb91PP8LWRiB8iC6CYORz3Fhnn5qpGe0XQBn bGZK97Ak+cusw5nu9ycCTCBvDOXOBSgjvnXWsZvl5cwowkVdr4QBC5PZ5MWyJz7U FD+s13gCrs09smHFPC9KGIDQi3jMTffC -----END CERTIFICATE-----Generated at Wed Aug 6 07:55:15 2025 by rpki-client