$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: frcjOkBifW0QCV8mUY3seLDhNuM1z4xMfPz/+rQjydU= Subject key identifier: CF:C3:D2:2D:36:6C:ED:6C:FB:7A:45:82:5D:0C:5C:DC:E1:BE:D2:31 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 016B Signing time: Sun 15 Jun 2025 03:07:49 +0000 Manifest this update: Sun 15 Jun 2025 03:07:49 +0000 Manifest next update: Sun 22 Jun 2025 03:07:49 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: YTryUDLgMlx4/yTNOeLjXcKiNbLNNh+fzfJJ+tnzd5U=) 2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=) 3: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: GgalYjkY1TSQEVBeTqrV+j4tzZy8hdDlsyXixDM61Sw=) 4: 302B59C64EEF11EFB111F530C4F9AE02.roa (hash: scffRYc0fctIE4i3P8gIvlUcNEVTHSWwJA+vVFplTH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Jun 15 03:07:49 2025 GMT Not After : Jun 22 03:07:49 2025 GMT Subject: CN=684e3905-14a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:64:71:8e:85:78:c7:50:ba:c9:c2:d4:75: d6:4e:c7:64:40:08:f6:dd:60:8a:e9:8c:42:8b:5a: e5:00:24:e2:27:00:e5:8c:cb:a8:74:b1:e4:c3:e8: af:97:35:c3:b6:20:68:00:2c:1d:94:26:a3:7c:ea: c6:0a:0d:62:bf:11:a8:e5:37:b8:07:20:06:df:25: 54:26:5b:b5:1e:61:de:56:04:a9:9c:8d:49:a2:21: 2f:e2:83:e3:72:1a:bc:73:b3:e7:6d:6a:e2:5b:af: 43:d8:14:18:dc:9b:2f:70:c3:2d:d6:a6:0d:3b:46: e2:9a:ad:2d:18:1c:68:ed:52:ca:ad:6f:e1:9c:27: 66:fa:e6:53:cf:59:4c:b3:91:47:7a:1b:26:c4:95: da:c8:89:d3:75:e9:c8:d6:3f:f8:9b:c9:d9:d1:dd: e5:3f:af:ee:29:8d:95:c3:0b:7c:0a:73:3d:7e:71: 52:24:99:30:df:8d:07:5a:3f:5c:8c:c8:af:0d:d1: 87:44:a3:65:83:20:58:85:7c:05:89:8a:bf:31:1a: 3a:15:86:af:f2:16:56:30:1d:02:c5:3b:2b:2b:2c: fd:47:d3:b3:45:c7:f5:b9:58:cb:88:d1:e5:77:4a: c8:3f:66:24:db:8d:ad:bc:ab:31:ae:e4:1d:da:22: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C3:D2:2D:36:6C:ED:6C:FB:7A:45:82:5D:0C:5C:DC:E1:BE:D2:31 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:97:de:8c:f8:fc:c1:7f:64:92:84:e6:32:05:11:91:d1:5a: 71:53:19:7b:c3:75:e4:bd:93:67:02:00:fd:05:7b:a6:46:db: f8:79:93:88:ce:c6:d4:17:b7:97:a5:cb:ef:a2:9a:d6:e7:88: 15:eb:e3:e0:07:9b:74:3d:29:ed:eb:b1:4d:19:54:5c:a7:04: b8:5d:77:84:0c:45:03:d0:02:43:0b:59:13:16:e4:cc:14:34: e1:12:e7:f9:8c:ac:58:43:8f:c7:3d:73:f0:36:aa:3b:73:bc: 9e:12:ed:2a:c8:57:1f:78:53:1b:59:ef:c7:7c:10:78:ab:ef: 24:a5:82:0c:6c:5a:3f:ca:1b:21:1d:a1:3e:d5:80:3f:68:cb: 81:8d:83:fa:b5:34:44:65:34:f9:d2:59:47:1d:11:15:47:21: a6:a0:d6:cb:0e:06:d3:cb:c6:ce:b6:b7:1d:59:3a:8b:91:42: c5:95:82:c2:0c:cf:e7:f9:f4:17:dd:7b:de:7b:94:27:3d:c9: 5c:30:f2:c3:3f:09:8a:a7:71:b3:33:df:e7:84:a0:1f:a9:94: 2d:21:43:2b:63:aa:c0:4e:3c:eb:92:88:4e:af:70:6c:4d:8e: 82:ca:17:f7:44:f9:17:7e:15:b7:7d:cd:9b:c7:54:3e:28:e6: 76:b5:13:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUwNjE1MDMwNzQ5WhcNMjUwNjIyMDMwNzQ5WjAYMRYwFAYD VQQDEw02ODRlMzkwNS0xNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro1kcY6FeMdQusnC1HXWTsdkQAj23WCK6YxCi1rlACTiJwDljMuodLHkw+iv lzXDtiBoACwdlCajfOrGCg1ivxGo5Te4ByAG3yVUJlu1HmHeVgSpnI1JoiEv4oPj chq8c7PnbWriW69D2BQY3JsvcMMt1qYNO0bimq0tGBxo7VLKrW/hnCdm+uZTz1lM s5FHehsmxJXayInTdenI1j/4m8nZ0d3lP6/uKY2Vwwt8CnM9fnFSJJkw340HWj9c jMivDdGHRKNlgyBYhXwFiYq/MRo6FYav8hZWMB0CxTsrKyz9R9OzRcf1uVjLiNHl d0rIP2Yk242tvKsxruQd2iLXmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/D0i02 bO1s+3pFgl0MXNzhvtIxMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDl96M+PzBf2SShOYyBRGR0VpxUxl7w3XkvZNnAgD9BXumRtv4eZOI zsbUF7eXpcvvoprW54gV6+PgB5t0PSnt67FNGVRcpwS4XXeEDEUD0AJDC1kTFuTM FDThEuf5jKxYQ4/HPXPwNqo7c7yeEu0qyFcfeFMbWe/HfBB4q+8kpYIMbFo/yhsh HaE+1YA/aMuBjYP6tTREZTT50llHHREVRyGmoNbLDgbTy8bOtrcdWTqLkULFlYLC DM/n+fQX3Xvee5QnPclcMPLDPwmKp3GzM9/nhKAfqZQtIUMrY6rATjzrkohOr3Bs TY6Cyhf3RPkXfhW3fc2bx1Q+KOZ2tROg -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:14 2025 by rpki-client