$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: PKvf/VNqF4WeLQu0KBrhQoK/fOpeVtom4zhVZvn4TyQ= Subject key identifier: 1B:56:45:11:6E:66:D7:00:C9:62:74:EA:58:CA:D3:62:AF:F7:B0:B5 Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 0189 Signing time: Fri 13 Jun 2025 02:38:45 +0000 Manifest this update: Fri 13 Jun 2025 02:38:45 +0000 Manifest next update: Fri 20 Jun 2025 02:38:45 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: JEYvzq1MRAqLoVCKZMdJHtCW250egT3YAQqsSr63mIU=) 2: 3474AD64FAD311ED9CEE0E29C4F9AE02.roa (hash: bZ3DvcSU67WmMaGW0gpbOJ7oihqEunDO2oztcjKXnww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Jun 13 02:38:45 2025 GMT Not After : Jun 20 02:38:45 2025 GMT Subject: CN=684b8f35-efef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:72:39:c7:0b:8a:cc:0f:8c:ed:a4:38:93: af:e5:0a:3b:ba:5e:6e:8c:be:e9:cc:45:b9:4f:2c: 8b:82:92:7c:52:67:70:29:e6:b1:2f:f8:54:26:3c: da:3b:02:91:48:04:e1:30:40:5a:da:c4:ce:81:3a: 37:71:0e:99:96:d2:a7:a8:8d:7b:ea:ba:91:a1:f6: c4:90:89:0e:b6:09:91:e8:4b:26:b9:6c:e3:23:2f: dd:69:36:6b:07:eb:52:ca:b7:48:d8:7e:cb:a7:1a: 58:0c:20:19:91:0f:ba:07:13:50:7e:dd:6b:06:97: f1:33:7d:3d:13:6b:d3:9e:14:92:e9:c3:87:d6:e5: b5:a2:aa:13:b7:0f:cc:33:95:33:33:93:b5:cc:f1: e8:8b:0e:8d:b6:76:e7:93:97:64:1b:c7:98:84:6c: 00:36:a6:36:d7:ac:09:3f:5f:65:c7:0d:d0:d3:dc: a7:26:01:50:d2:6f:6f:a3:16:72:24:f4:ab:ac:0b: b3:13:b1:62:33:6d:89:71:40:16:df:b4:2b:74:4a: f7:c6:7d:73:ae:aa:02:61:11:22:ac:a8:80:71:76: 6b:68:28:b1:31:e4:0c:36:05:8f:16:fc:ca:db:29: dc:30:04:94:fb:61:60:73:71:c0:14:7f:b4:8e:e2: d2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:56:45:11:6E:66:D7:00:C9:62:74:EA:58:CA:D3:62:AF:F7:B0:B5 X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:96:3b:85:30:19:b7:36:8e:46:c2:ce:a8:df:ac:3d:a4:b2: a1:4f:49:5a:12:a3:6a:d8:b5:ca:d3:ce:92:77:1e:69:92:60: 1e:3d:6e:a9:7f:56:9d:91:b5:92:1b:16:da:9d:df:33:d6:99: 8a:7b:14:ec:06:3e:81:da:6a:a6:aa:37:cc:38:82:59:13:9b: ff:6b:88:92:9f:8e:45:7f:13:6d:9e:af:18:35:ad:a1:65:41: 03:52:52:39:b9:3d:1d:75:6f:2a:0a:62:8c:27:3b:97:38:6c: fc:bb:6b:20:2f:c8:ef:1f:bb:48:ef:1a:f8:ce:07:36:d2:d3: 47:28:89:ec:dc:09:4f:40:ad:e1:9b:55:9d:32:6c:28:8a:40: 57:00:8c:29:20:73:cf:a3:4f:49:b6:89:eb:7b:b0:19:02:3b: 07:2f:b8:d7:9e:1d:ee:ba:2c:63:7a:be:a6:6b:fb:f0:aa:0a: b1:4e:4b:d2:fd:6a:9f:9c:52:74:f4:6e:f7:1f:cd:08:b0:dd: b2:d5:4d:37:ee:55:d3:30:e5:93:f3:62:88:64:a3:d4:54:f6: ae:ed:ea:8f:3b:5d:d0:92:c4:45:74:22:ad:15:b1:95:c0:e9: 85:18:7d:fd:50:d2:aa:36:a8:1d:49:52:e1:19:d7:b6:0f:05: 69:d7:36:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjUwNjEzMDIzODQ1WhcNMjUwNjIwMDIzODQ1WjAYMRYwFAYD VQQDEw02ODRiOGYzNS1lZmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6RyOccLiswPjO2kOJOv5Qo7ul5ujL7pzEW5TyyLgpJ8UmdwKeaxL/hUJjza OwKRSAThMEBa2sTOgTo3cQ6ZltKnqI176rqRofbEkIkOtgmR6EsmuWzjIy/daTZr B+tSyrdI2H7LpxpYDCAZkQ+6BxNQft1rBpfxM309E2vTnhSS6cOH1uW1oqoTtw/M M5UzM5O1zPHoiw6Ntnbnk5dkG8eYhGwANqY216wJP19lxw3Q09ynJgFQ0m9voxZy JPSrrAuzE7FiM22JcUAW37QrdEr3xn1zrqoCYREirKiAcXZraCixMeQMNgWPFvzK 2yncMASU+2Fgc3HAFH+0juLS+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtWRRFu ZtcAyWJ06ljK02Kv97C1MB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ljuFMBm3No5Gws6o36w9pLKhT0laEqNq2LXK086Sdx5pkmAePW6p f1adkbWSGxband8z1pmKexTsBj6B2mqmqjfMOIJZE5v/a4iSn45FfxNtnq8YNa2h ZUEDUlI5uT0ddW8qCmKMJzuXOGz8u2sgL8jvH7tI7xr4zgc20tNHKIns3AlPQK3h m1WdMmwoikBXAIwpIHPPo09Jtonre7AZAjsHL7jXnh3uuixjer6ma/vwqgqxTkvS /WqfnFJ09G73H80IsN2y1U037lXTMOWT82KIZKPUVPau7eqPO13QksRFdCKtFbGV wOmFGH39UNKqNqgdSVLhGde2DwVp1zZ5 -----END CERTIFICATE-----Generated at Sat Jun 14 18:40:41 2025 by rpki-client