$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft File: XRhbcS2TBWvydLi3qJjGklTruYM.mft (raw, json) Hash identifier: 5Uov+L2P+ujdnQT5cggOF/ZI72jIVwq2Z2dD1UUcv7E= Subject key identifier: 0A:F8:71:F7:01:29:2B:62:0C:74:82:1B:36:BC:4F:77:74:E2:63:4C Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83 Certificate issuer: /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft Manifest number: 012B Signing time: Tue 17 Jun 2025 03:53:15 +0000 Manifest this update: Tue 17 Jun 2025 03:53:15 +0000 Manifest next update: Tue 24 Jun 2025 03:53:15 +0000 Files and hashes: 1: XRhbcS2TBWvydLi3qJjGklTruYM.crl (hash: WV7X80B7vLUGclv2NxFTW8bf6fJ7OigZDoJwNcXL/O4=) 2: C863991849FA11F0B806FE48C4F9AE02.roa (hash: hkLckuw5otkBSXdsjVbPLtt1WgA/Ric4lgUGja07WIw=) 3: DCCEA912A3EB11EE8049E335C4F9AE02.roa (hash: mJeqjVOv7jvR5HIjSJKMtiF4WeNSaF9wcOpOHqbk62w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE972, serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983 Validity Not Before: Jun 17 03:53:15 2025 GMT Not After : Jun 24 03:53:15 2025 GMT Subject: CN=6850e6ab-b85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:41:22:93:79:1c:e6:48:91:71:09:17:f1: a4:b8:e1:6c:e4:b5:93:27:be:58:7f:84:98:ba:9b: 17:0a:d5:9b:10:8a:0f:08:ec:98:d6:bf:5d:bc:49: 52:ed:1b:78:d9:c6:5f:8f:d0:3e:c0:a4:04:5a:3a: 70:57:07:f5:8a:21:f3:a3:e5:9a:e0:36:d1:f8:7c: ec:b9:ad:39:00:e6:18:e7:cd:05:de:ca:1d:fe:59: ab:2f:c2:ff:a0:8f:4b:7d:e4:e7:13:5c:39:16:2a: c5:b8:4a:0c:16:5c:e9:75:7d:75:95:1d:a6:0e:b9: 78:c8:73:1a:2d:18:81:b2:b2:af:8f:d7:21:f3:b9: 97:76:4f:0f:c8:86:25:d2:1d:e6:50:36:b2:ac:97: e7:5a:26:7f:5a:7c:e0:da:3d:b7:08:81:59:fe:69: 44:7e:7a:e1:0b:72:25:ca:a2:02:4a:db:9c:7b:b5: bd:fa:a1:cb:db:81:9f:00:ea:19:00:80:43:fd:4c: 56:d3:2c:a1:49:8a:30:e5:c8:b6:c0:eb:b9:d7:04: 08:ac:ec:d4:49:4d:05:3e:df:d8:6e:79:f3:e7:dd: 4b:96:bf:a5:ec:0a:66:cc:5a:22:7f:11:1b:fc:ec: 8b:37:05:ba:d9:43:70:d2:01:84:26:46:3a:19:a5: fe:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F8:71:F7:01:29:2B:62:0C:74:82:1B:36:BC:4F:77:74:E2:63:4C X509v3 Authority Key Identifier: keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:04:a9:5e:65:dd:77:6e:52:a0:fd:f2:c0:3c:df:f1:d8:c0: b9:d0:e5:78:d8:3e:b5:3d:b4:33:68:8b:3f:9f:8b:fb:f7:50: 9a:67:27:69:1d:f3:aa:1b:b7:0f:bb:68:7a:cf:92:83:88:68: 43:49:be:37:86:e8:8d:f4:21:01:de:79:c7:77:f5:7e:44:2a: 05:20:1d:ba:22:9b:80:4f:3a:68:f2:9d:ca:26:5f:87:fd:4f: a6:52:dc:44:3c:c0:11:e8:27:9e:0c:98:4b:92:48:8c:f8:f6: 9a:11:9a:88:c6:e7:a1:56:cc:e0:d9:a8:11:01:23:86:4d:7a: f8:ec:e7:f8:80:e9:a0:c9:4f:7d:1e:06:28:b6:0e:a4:ff:ed: 6a:80:58:f4:50:a8:cb:a4:32:75:75:c7:88:d8:9e:60:07:ad: 31:51:80:30:9f:47:a2:06:33:e4:26:fd:ec:c0:d7:05:36:2f: 65:63:f9:b3:88:e4:82:9d:b6:ef:5e:d7:c4:aa:b2:50:f9:5e: 43:c1:bf:ef:49:ef:e3:5e:91:51:db:46:3c:3c:bc:09:9e:50: 3e:18:b9:dd:c2:51:06:fe:5b:81:43:3c:41:11:a9:37:14:7b: e6:66:93:4b:ea:63:66:fa:1e:88:92:b0:bc:15:74:59:26:3a: 6c:24:b2:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5NzIxMTAvBgNVBAUTKDVEMTg1QjcxMkQ5MzA1NkJGMjc0QjhCN0E4OThDNjky NTRFQkI5ODMwHhcNMjUwNjE3MDM1MzE1WhcNMjUwNjI0MDM1MzE1WjAYMRYwFAYD VQQDEw02ODUwZTZhYi1iODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/NBIpN5HOZIkXEJF/GkuOFs5LWTJ75Yf4SYupsXCtWbEIoPCOyY1r9dvElS 7Rt42cZfj9A+wKQEWjpwVwf1iiHzo+Wa4DbR+Hzsua05AOYY580F3sod/lmrL8L/ oI9LfeTnE1w5FirFuEoMFlzpdX11lR2mDrl4yHMaLRiBsrKvj9ch87mXdk8PyIYl 0h3mUDayrJfnWiZ/Wnzg2j23CIFZ/mlEfnrhC3IlyqICStuce7W9+qHL24GfAOoZ AIBD/UxW0yyhSYow5ci2wOu51wQIrOzUSU0FPt/Ybnnz591Llr+l7ApmzFoifxEb /OyLNwW62UNw0gGEJkY6GaX+XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAr4cfcB KStiDHSCGza8T3d04mNMMB8GA1UdIwQYMBaAFF0YW3EtkwVr8nS4t6iYxpJU67mD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk3Mi8yNDVCM0REQ0Ez RTYxMUVFQURGOTQ4NTVDNEY5QUUwMi9YUmhiY1MyVEJXdnlkTGkzcUpqR2tsVHJ1 WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSaGJjUzJUQld2eWRMaTNxSmpHa2xUcnVZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk3Mi8yNDVCM0REQ0EzRTYxMUVFQURGOTQ4NTVDNEY5QUUwMi9YUmhiY1MyVEJX dnlkTGkzcUpqR2tsVHJ1WU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwBKleZd13blKg/fLAPN/x2MC50OV42D61PbQzaIs/n4v791CaZydp HfOqG7cPu2h6z5KDiGhDSb43huiN9CEB3nnHd/V+RCoFIB26IpuATzpo8p3KJl+H /U+mUtxEPMAR6CeeDJhLkkiM+PaaEZqIxuehVszg2agRASOGTXr47Of4gOmgyU99 HgYotg6k/+1qgFj0UKjLpDJ1dceI2J5gB60xUYAwn0eiBjPkJv3swNcFNi9lY/mz iOSCnbbvXtfEqrJQ+V5Dwb/vSe/jXpFR20Y8PLwJnlA+GLndwlEG/luBQzxBEak3 FHvmZpNL6mNm+h6IkrC8FXRZJjpsJLIX -----END CERTIFICATE-----Generated at Wed Jun 18 06:38:26 2025 by rpki-client