$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: TRF9uGhzvfgEOF6GjCB/TE49ZquOb4Xm2nb3XHaFWvE= Subject key identifier: 30:C7:A0:06:19:B2:63:DD:0F:D3:E8:9D:76:7E:3A:3D:50:DD:67:D8 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 0187 Signing time: Sat 09 Aug 2025 03:59:15 +0000 Manifest this update: Sat 09 Aug 2025 03:59:14 +0000 Manifest next update: Sat 16 Aug 2025 03:59:14 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: MWNVOJfyrwRyFj0x3XrfrmPpl5haZXe6LmpQTAkWNwI=) 2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=) 3: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: GgalYjkY1TSQEVBeTqrV+j4tzZy8hdDlsyXixDM61Sw=) 4: 302B59C64EEF11EFB111F530C4F9AE02.roa (hash: scffRYc0fctIE4i3P8gIvlUcNEVTHSWwJA+vVFplTH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Aug 9 03:59:14 2025 GMT Not After : Aug 16 03:59:14 2025 GMT Subject: CN=6896c793-df57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f3:00:5b:54:cd:a6:f6:69:ce:ac:6a:69:aa: 1e:c3:98:13:4f:d6:86:22:5c:f8:eb:7b:24:89:f8: 2b:51:68:a1:a9:5e:e2:f2:9f:e3:c6:49:9d:78:2b: 3d:88:03:2f:9f:17:11:e7:14:08:39:3c:18:90:2e: 1a:54:b3:e1:01:54:a0:67:6f:a8:48:ad:44:52:b2: e6:e5:dc:96:59:1f:95:98:46:a5:86:1a:a3:3b:cd: 9a:fe:b8:80:47:ec:73:df:b0:0a:65:71:63:99:bd: b5:98:53:b6:c7:28:e6:fb:75:27:9d:c3:b6:4d:6f: cc:a5:15:2e:16:b4:e6:df:5e:6b:c0:0e:7b:60:a2: 61:a5:17:65:3b:af:27:41:50:47:c1:08:8b:1b:44: 56:5a:b8:c0:0d:4b:bd:cb:57:e4:cc:89:42:b1:4f: 21:38:5e:55:e8:b3:4c:a7:00:a3:cb:88:51:ef:fb: 2d:13:c0:da:52:b5:95:eb:77:f5:cb:dc:c8:50:0d: f1:98:8c:1c:5d:0f:17:29:09:cb:cb:9d:6e:5c:ff: 96:d4:73:44:d1:3e:8d:44:eb:e7:fa:2b:92:fe:b9: a2:22:92:48:19:cb:87:c5:88:83:38:57:f8:70:7c: 7c:1a:aa:50:23:12:00:4b:05:37:1e:9c:27:30:42: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C7:A0:06:19:B2:63:DD:0F:D3:E8:9D:76:7E:3A:3D:50:DD:67:D8 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:30:6f:67:85:19:05:c9:fe:54:40:1c:6f:a4:7d:3e:7e:be: 0a:84:ef:11:ba:5e:06:c6:8a:a4:8a:4d:36:6e:02:d5:53:2a: e2:41:a3:48:55:8b:d8:4e:c0:cc:63:02:d9:9f:dc:78:d1:b8: 69:e9:5f:e3:bf:a6:30:2d:6b:5b:0a:b8:df:9e:91:ce:01:9e: 13:ea:a8:b4:9f:ae:a9:9e:83:a2:67:e3:51:2d:5a:ae:b5:9f: a6:60:90:aa:1d:3c:73:14:ab:86:b4:1b:10:37:b1:74:f3:6e: fd:3a:4f:94:c4:ee:e8:05:ef:c7:d1:81:ed:9e:48:a1:ae:d7: c1:4b:a9:a9:bd:4b:6e:84:88:2d:7b:96:80:02:a0:1c:ec:18: 76:49:54:54:32:36:ec:e3:0f:15:65:bd:14:01:79:f2:0b:8e: 28:b6:9e:2e:93:ca:47:1a:44:46:53:c9:fa:f7:84:4b:46:0e: 97:99:ad:98:70:5a:9d:01:55:3f:83:04:36:ad:70:2c:25:3e: 1c:8f:95:4d:84:be:f4:59:7f:b6:67:62:f3:17:69:df:0b:4d: f7:f7:cb:f8:a3:bf:be:c8:54:b2:41:4f:24:7d:de:fb:76:28: 45:ae:63:08:d3:44:ec:53:4e:74:70:18:c0:78:40:21:cc:9b: f3:c1:ea:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUwODA5MDM1OTE0WhcNMjUwODE2MDM1OTE0WjAYMRYwFAYD VQQDEw02ODk2Yzc5My1kZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPMAW1TNpvZpzqxqaaoew5gTT9aGIlz463skifgrUWihqV7i8p/jxkmdeCs9 iAMvnxcR5xQIOTwYkC4aVLPhAVSgZ2+oSK1EUrLm5dyWWR+VmEalhhqjO82a/riA R+xz37AKZXFjmb21mFO2xyjm+3UnncO2TW/MpRUuFrTm315rwA57YKJhpRdlO68n QVBHwQiLG0RWWrjADUu9y1fkzIlCsU8hOF5V6LNMpwCjy4hR7/stE8DaUrWV63f1 y9zIUA3xmIwcXQ8XKQnLy51uXP+W1HNE0T6NROvn+iuS/rmiIpJIGcuHxYiDOFf4 cHx8GqpQIxIASwU3HpwnMEKZaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDHoAYZ smPdD9PonXZ+Oj1Q3WfYMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEMG9nhRkFyf5UQBxvpH0+fr4KhO8Rul4Gxoqkik02bgLVUyriQaNI VYvYTsDMYwLZn9x40bhp6V/jv6YwLWtbCrjfnpHOAZ4T6qi0n66pnoOiZ+NRLVqu tZ+mYJCqHTxzFKuGtBsQN7F08279Ok+UxO7oBe/H0YHtnkihrtfBS6mpvUtuhIgt e5aAAqAc7Bh2SVRUMjbs4w8VZb0UAXnyC44otp4uk8pHGkRGU8n694RLRg6Xma2Y cFqdAVU/gwQ2rXAsJT4cj5VNhL70WX+2Z2LzF2nfC03398v4o7++yFSyQU8kfd77 dihFrmMI00TsU050cBjAeEAhzJvzweqG -----END CERTIFICATE-----Generated at Sun Aug 10 16:13:21 2025 by rpki-client