$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json) Hash identifier: qi89ZfqAjz6OW1LzcnuU46usWG/thaA+lIVSVOKE70I= Subject key identifier: EE:17:C2:D9:E6:3B:32:9A:D5:48:BF:73:26:42:9E:A2:EF:3A:71:B9 Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Certificate serial: 1064 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft Manifest number: 1058 Signing time: Fri 20 Jun 2025 17:23:34 +0000 Manifest this update: Fri 20 Jun 2025 17:23:34 +0000 Manifest next update: Fri 27 Jun 2025 17:23:34 +0000 Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: zoUr/E/NRDHnMoDVbvZ+1xA1iNGXYYtMvaJ1plZFU24=) 2: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: zI34h0FmFtZZLolHCnykLI2wVD3iOXp1eKhUZqTjA48=) 3: 691023063A8311E99AF5572DC4F9AE02.roa (hash: Uy8f9hnHu5ZNhfoO9b7+eo6ci2jsbvNnSUlZAZd6nGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 17:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4196 (0x1064) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Validity Not Before: Jun 20 17:23:34 2025 GMT Not After : Jun 27 17:23:34 2025 GMT Subject: CN=68559916-4916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:46:73:d3:05:57:33:fd:a5:3e:37:f7:97:f7: 45:6e:75:83:59:fe:75:66:f0:27:cf:41:96:14:76: 0b:88:89:f4:06:3c:a9:94:0e:01:4f:64:79:2c:b7: 1d:99:36:12:05:b4:9e:2d:61:75:81:5b:95:de:ed: de:8d:53:78:aa:09:c1:a9:d9:f0:50:0d:3c:4c:bc: e8:fd:16:20:fe:8c:91:4e:54:ce:20:7c:d3:ea:19: cd:2a:a2:47:0f:56:06:18:85:b1:93:1f:64:07:10: b4:5b:7f:f7:12:03:0e:0f:92:ee:2e:93:d3:35:3b: 9a:4c:28:ce:eb:5a:42:6d:95:e9:86:3b:29:00:fc: f8:c4:bf:37:bc:38:d7:cb:98:34:0a:ac:f5:6b:2f: 56:b0:32:9a:35:dc:e8:63:b1:03:6a:ff:f0:51:d9: b7:68:0e:65:fc:a6:2f:2a:d8:e8:84:45:e2:ac:4c: d2:1e:90:9e:30:36:84:79:92:45:c6:b3:b2:ec:0c: bb:bf:a2:26:b0:26:c2:3c:84:de:46:a9:17:45:24: cf:15:9e:29:79:ab:af:23:e1:0f:34:2f:85:24:22: 1d:b0:e8:29:a6:67:2a:f5:c7:8b:d5:bb:f2:1e:f1: 5f:9b:8e:ef:44:51:f6:3d:7f:a7:9f:6d:fd:2f:34: b0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:17:C2:D9:E6:3B:32:9A:D5:48:BF:73:26:42:9E:A2:EF:3A:71:B9 X509v3 Authority Key Identifier: keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bc:24:69:c4:99:16:4d:ed:6f:f0:f1:19:1b:ed:43:00:2d: 40:30:a9:5c:06:f8:45:16:39:87:b6:8d:1e:c4:c0:63:26:44: 87:28:f6:b8:62:fc:4c:8b:cf:cf:12:f1:b4:b2:bb:de:b5:7a: 8e:8f:06:1d:7b:45:9f:c4:da:7a:0c:a9:7f:b1:23:e9:31:6a: 4e:b0:b8:42:62:af:4a:80:f6:96:3b:1c:86:86:bb:d4:89:95: ec:f1:00:1e:db:43:73:c5:0a:14:1d:e9:54:12:c0:c1:ac:05: f7:c9:62:13:18:28:5a:54:76:f7:e5:ad:80:5d:c5:6b:d8:71: b1:aa:25:2d:81:85:db:0d:fc:2c:5d:91:f1:29:40:30:23:fe: 75:41:5d:0b:3c:f1:3e:e6:fe:d1:d5:40:ca:76:f8:2a:02:f2: 6d:eb:ea:f7:4c:bd:cb:62:fb:29:6d:38:f6:e5:fe:61:33:c7: 1a:10:16:67:c9:7f:cb:ec:ee:53:ca:ae:fb:a1:3c:71:3d:84: 6a:d3:95:ec:51:3e:b1:65:54:a5:84:76:83:09:41:fc:52:45: 36:0c:fa:f7:ac:cf:2e:ea:3e:ff:6d:13:a2:bc:7b:03:8a:53: b6:88:ab:a5:bf:20:91:23:71:6e:40:98:64:61:83:8b:9c:57: f7:1e:8e:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1 MUEyMzUwQUYwHhcNMjUwNjIwMTcyMzM0WhcNMjUwNjI3MTcyMzM0WjAYMRYwFAYD VQQDEw02ODU1OTkxNi00OTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0Zz0wVXM/2lPjf3l/dFbnWDWf51ZvAnz0GWFHYLiIn0BjyplA4BT2R5LLcd mTYSBbSeLWF1gVuV3u3ejVN4qgnBqdnwUA08TLzo/RYg/oyRTlTOIHzT6hnNKqJH D1YGGIWxkx9kBxC0W3/3EgMOD5LuLpPTNTuaTCjO61pCbZXphjspAPz4xL83vDjX y5g0Cqz1ay9WsDKaNdzoY7EDav/wUdm3aA5l/KYvKtjohEXirEzSHpCeMDaEeZJF xrOy7Ay7v6ImsCbCPITeRqkXRSTPFZ4peauvI+EPNC+FJCIdsOgppmcq9ceL1bvy HvFfm47vRFH2PX+nn239LzSwIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4Xwtnm OzKa1Ui/cyZCnqLvOnG5MB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjEwQS9BNTM4QURCODNBODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1 cVIxejAyUTg2N3RSb2pVSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNvCRpxJkWTe1v8PEZG+1DAC1AMKlcBvhFFjmHto0exMBjJkSHKPa4 YvxMi8/PEvG0srvetXqOjwYde0WfxNp6DKl/sSPpMWpOsLhCYq9KgPaWOxyGhrvU iZXs8QAe20NzxQoUHelUEsDBrAX3yWITGChaVHb35a2AXcVr2HGxqiUtgYXbDfws XZHxKUAwI/51QV0LPPE+5v7R1UDKdvgqAvJt6+r3TL3LYvspbTj25f5hM8caEBZn yX/L7O5Tyq77oTxxPYRq05XsUT6xZVSlhHaDCUH8UkU2DPr3rM8u6j7/bROivHsD ilO2iKulvyCRI3FuQJhkYYOLnFf3Ho4D -----END CERTIFICATE-----Generated at Sat Jun 21 02:02:17 2025 by rpki-client