$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json) Hash identifier: IxBi4YIo5IKTi7OeZ7bC79a4DEdo0yat8v31HBtQ1Ac= Subject key identifier: A4:83:72:05:85:6F:1E:75:FC:E4:F6:7F:45:83:1C:84:C3:8C:87:12 Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Certificate serial: 051C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft Manifest number: 0515 Signing time: Thu 07 Aug 2025 00:06:33 +0000 Manifest this update: Thu 07 Aug 2025 00:06:32 +0000 Manifest next update: Thu 14 Aug 2025 00:06:32 +0000 Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: qAp4gpMphVEzldBQp7Ojbp+AZPbys5GcmoQQyxbTo0U=) 2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: UZdEVBj/lgoItLYURJapVrEERSSdanijwOdvoutuuW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1308 (0x51c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F60, serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Validity Not Before: Aug 7 00:06:32 2025 GMT Not After : Aug 14 00:06:32 2025 GMT Subject: CN=6893ee09-a4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:03:47:29:61:3d:f9:e3:fe:ec:87:a6:0f: 3a:f6:46:b5:5e:b7:fe:37:58:08:f7:1f:ef:78:3c: e4:27:72:62:54:0e:49:d7:34:19:04:45:0b:11:d8: 58:7d:1a:33:0e:82:bc:0f:e9:bc:8b:cf:3e:e4:1b: 46:70:e1:36:64:8d:dd:0b:17:03:36:86:9f:91:dd: 0e:59:c3:74:11:64:52:e5:ac:cf:32:d6:0c:73:1e: e3:56:40:6b:ac:4a:c4:de:88:e1:65:c1:54:bf:45: f9:02:fc:11:f8:9c:f6:c5:40:61:50:6b:e8:1d:28: 87:bd:3f:a8:fc:f1:25:a3:bd:25:f0:63:9d:87:42: 49:5a:57:28:48:ce:1c:07:83:91:f6:44:70:2d:9b: 56:ec:68:94:eb:25:ae:7e:ae:1c:1f:03:1b:81:2c: ce:dd:31:c7:30:eb:23:7a:42:ff:35:fa:2c:c9:68: cd:db:e0:e1:a1:df:91:a9:9e:40:2e:6a:3e:da:0d: 09:cb:64:48:35:09:27:e6:a0:55:25:01:95:6f:ea: 92:01:ac:c0:a2:82:23:d2:d4:a0:47:80:44:65:80: ee:fe:b9:e0:0f:2c:07:5c:7b:11:d0:89:62:b2:08: c4:65:f1:63:ad:0d:6a:5b:10:b5:73:6a:5a:6f:b9: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:83:72:05:85:6F:1E:75:FC:E4:F6:7F:45:83:1C:84:C3:8C:87:12 X509v3 Authority Key Identifier: keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:5d:29:5b:41:96:66:a2:80:ab:0c:b9:b0:d9:2f:43:df:2e: bd:c6:7b:46:e1:ac:40:87:ef:a4:25:ee:03:ef:c7:59:7d:2b: 91:89:7a:34:db:3e:cb:4d:45:3d:41:c2:9d:a9:45:9f:e3:c7: 03:9c:48:92:8b:d5:c8:40:ad:b4:8a:99:8c:04:47:d8:37:a1: c9:a2:12:0d:85:a2:3f:1c:ef:fe:ef:c9:12:3c:8c:1b:72:c3: da:10:28:da:a9:84:d4:2f:ec:8f:63:e1:25:5a:bc:62:a3:b2: ed:96:c7:e4:44:24:94:b8:af:0f:8c:f7:92:3b:c5:e8:9c:96: d0:79:d6:83:2c:b4:8d:16:05:61:85:6a:b1:2a:3c:c5:26:c1: 91:77:68:57:6b:d4:22:c6:f2:60:03:20:67:3e:87:c9:15:02: f3:a1:92:58:2d:79:9f:22:7b:8b:6e:c5:ef:b3:23:6f:ab:92: c4:89:b6:b6:db:f6:2b:7e:fb:21:3e:1c:79:0b:3f:57:9c:aa: b8:03:95:6c:fc:38:59:e8:c6:54:2b:2b:3a:ea:66:b2:bd:ee: 1d:20:39:7c:e8:60:75:16:96:d3:11:09:68:eb:49:b6:c1:d0: 07:3a:83:de:c6:21:eb:e2:c6:86:0d:72:a9:d7:d0:d8:e0:f2: f5:58:a4:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNjAxMTAvBgNVBAUTKEM0MTFDMkQ3MjQwMUY1M0VDQTAxNjM1Nzg4OUQ3RUJB M0JDQ0ZEQ0QwHhcNMjUwODA3MDAwNjMyWhcNMjUwODE0MDAwNjMyWjAYMRYwFAYD VQQDEw02ODkzZWUwOS1hNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWwDRylhPfnj/uyHpg869ka1Xrf+N1gI9x/veDzkJ3JiVA5J1zQZBEULEdhY fRozDoK8D+m8i88+5BtGcOE2ZI3dCxcDNoafkd0OWcN0EWRS5azPMtYMcx7jVkBr rErE3ojhZcFUv0X5AvwR+Jz2xUBhUGvoHSiHvT+o/PElo70l8GOdh0JJWlcoSM4c B4OR9kRwLZtW7GiU6yWufq4cHwMbgSzO3THHMOsjekL/NfosyWjN2+Dhod+RqZ5A Lmo+2g0Jy2RINQkn5qBVJQGVb+qSAazAooIj0tSgR4BEZYDu/rngDywHXHsR0Ili sgjEZfFjrQ1qWxC1c2pab7lWkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSDcgWF bx51/OT2f0WDHITDjIcSMB8GA1UdIwQYMBaAFMQRwtckAfU+ygFjV4idfro7zP3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY2MC85NDkzMkJFQzE1 MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlUN0tBV05YaUoxLXVqdk1f YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCSEMxeVFCOVQ3S0FXTlhpSjEtdWp2TV9jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY2MC85NDkzMkJFQzE1MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlU N0tBV05YaUoxLXVqdk1fYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMXSlbQZZmooCrDLmw2S9D3y69xntG4axAh++kJe4D78dZfSuRiXo0 2z7LTUU9QcKdqUWf48cDnEiSi9XIQK20ipmMBEfYN6HJohINhaI/HO/+78kSPIwb csPaECjaqYTUL+yPY+ElWrxio7LtlsfkRCSUuK8PjPeSO8XonJbQedaDLLSNFgVh hWqxKjzFJsGRd2hXa9QixvJgAyBnPofJFQLzoZJYLXmfInuLbsXvsyNvq5LEiba2 2/YrfvshPhx5Cz9XnKq4A5Vs/DhZ6MZUKys66mayve4dIDl86GB1FpbTEQlo60m2 wdAHOoPexiHr4saGDXKp19DY4PL1WKTC -----END CERTIFICATE-----Generated at Thu Aug 7 03:52:20 2025 by rpki-client