$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: YofEv1OsOuyxEkRMBHk+7yV8HAvzigbkrataTutq1S4= Subject key identifier: 47:44:C6:60:69:A7:29:37:48:8D:A4:03:7A:09:07:10:B5:4A:EC:58 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 069D Signing time: Sat 14 Jun 2025 21:57:31 +0000 Manifest this update: Sat 14 Jun 2025 21:57:31 +0000 Manifest next update: Sat 21 Jun 2025 21:57:31 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: /4VhKuF4hhKrv+GZRF9EFO1G0xppmBLeEKMF99WgE/c=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Jun 14 21:57:31 2025 GMT Not After : Jun 21 21:57:31 2025 GMT Subject: CN=684df04b-6f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f3:ba:8d:da:84:22:8c:73:92:18:da:d1:7f: 93:7a:d6:7e:a5:be:ad:08:88:cf:a4:6f:4d:99:08: c3:a7:76:fe:0f:ba:f1:1f:3c:62:0f:b1:20:f8:b4: 3d:2d:e2:19:0d:f1:b8:1d:dd:87:d9:f0:0e:7f:a4: 8c:be:2f:15:4e:a0:d4:a2:ec:bd:3f:da:3e:9c:8f: 87:f9:72:75:16:ad:14:37:9c:69:64:57:3f:44:c3: 4c:38:aa:cb:8f:ad:f4:e3:49:57:a2:79:2d:d6:d5: da:7b:d0:26:af:e1:5a:01:b8:a8:d5:cf:51:e4:60: f6:ac:cf:3f:c3:42:bf:bc:d3:db:91:1a:76:11:ee: bf:8f:16:4e:6e:54:d0:55:1d:39:c6:62:71:84:90: af:92:21:f2:3a:4a:d3:be:c0:20:e3:0b:37:f3:64: 47:e1:33:b5:ab:23:b0:10:7c:ab:d4:a3:cc:84:79: c9:b2:1b:b6:a8:a6:77:65:5d:26:7f:99:bf:19:ac: 67:79:75:3e:96:38:ac:47:41:d6:52:1e:28:fd:38: c1:3a:24:4b:98:9b:50:8c:2a:35:df:35:ae:b3:33: b5:7e:c5:28:62:4d:1d:05:20:cb:2e:9d:5c:b2:a8: e1:5c:3b:ee:f8:08:38:4c:1b:52:ec:7d:be:8f:47: cc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:44:C6:60:69:A7:29:37:48:8D:A4:03:7A:09:07:10:B5:4A:EC:58 X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6e:cc:a8:25:43:89:e2:00:05:50:48:10:86:77:3d:d4:d4: cd:63:dc:35:bd:39:f3:00:55:d7:4c:ff:54:f3:b0:7e:88:e6: 2c:22:e2:69:68:94:b1:4c:82:08:17:36:da:94:f5:08:50:3b: 44:cd:22:97:b1:be:a3:fd:f7:b0:3c:52:65:0e:11:32:a4:2a: c9:91:35:a3:78:12:69:03:41:b0:cd:c7:82:63:4c:7a:6d:32: 77:98:61:5b:f2:4c:b4:6c:bd:29:db:5e:ce:ce:55:29:92:80: 0f:72:74:01:65:ab:d5:d8:d6:f3:76:c1:14:41:68:75:7d:88: 4d:50:6d:e8:6b:4c:d3:05:0c:82:20:53:cd:a8:c4:f0:ed:ba: c4:0b:ac:98:6f:31:33:27:35:30:da:12:30:ec:76:0f:13:91: 1b:49:8e:55:2e:c6:79:f0:7c:a9:39:96:13:6c:ff:3b:0f:c0: 10:d5:e6:5c:56:65:6f:9c:a2:72:7a:fa:89:96:95:2f:c4:b1: 8a:5a:97:af:81:10:09:45:f4:5a:60:42:85:5f:b9:fb:7a:f7: e1:b0:f1:9e:99:75:c7:94:07:87:e0:e3:a2:71:93:6e:64:ca: 61:b9:6d:24:ab:a0:d0:48:b5:ec:08:e2:07:b6:83:99:80:46: a8:b5:91:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUwNjE0MjE1NzMxWhcNMjUwNjIxMjE1NzMxWjAYMRYwFAYD VQQDEw02ODRkZjA0Yi02Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vO6jdqEIoxzkhja0X+TetZ+pb6tCIjPpG9NmQjDp3b+D7rxHzxiD7Eg+LQ9 LeIZDfG4Hd2H2fAOf6SMvi8VTqDUouy9P9o+nI+H+XJ1Fq0UN5xpZFc/RMNMOKrL j63040lXonkt1tXae9Amr+FaAbio1c9R5GD2rM8/w0K/vNPbkRp2Ee6/jxZOblTQ VR05xmJxhJCvkiHyOkrTvsAg4ws382RH4TO1qyOwEHyr1KPMhHnJshu2qKZ3ZV0m f5m/GaxneXU+ljisR0HWUh4o/TjBOiRLmJtQjCo13zWuszO1fsUoYk0dBSDLLp1c sqjhXDvu+Ag4TBtS7H2+j0fMLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdExmBp pyk3SI2kA3oJBxC1SuxYMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAabsyoJUOJ4gAFUEgQhnc91NTNY9w1vTnzAFXXTP9U87B+iOYsIuJp aJSxTIIIFzbalPUIUDtEzSKXsb6j/fewPFJlDhEypCrJkTWjeBJpA0GwzceCY0x6 bTJ3mGFb8ky0bL0p217OzlUpkoAPcnQBZavV2NbzdsEUQWh1fYhNUG3oa0zTBQyC IFPNqMTw7brEC6yYbzEzJzUw2hIw7HYPE5EbSY5VLsZ58HypOZYTbP87D8AQ1eZc VmVvnKJyevqJlpUvxLGKWpevgRAJRfRaYEKFX7n7evfhsPGemXXHlAeH4OOicZNu ZMphuW0kq6DQSLXsCOIHtoOZgEaotZFK -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:01 2025 by rpki-client