$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft File: 10XhyGsYGPfQVj-Q6LoSvosa43g.mft (raw, json) Hash identifier: ZGQ1Xm16gZGiEQPJ60qL1sXe77Fy4aBCUM8VhQ+L6+c= Subject key identifier: D1:56:07:1D:5E:A6:C5:B5:00:9D:29:10:43:B5:E9:59:0F:01:FA:96 Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 Certificate issuer: /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft Manifest number: 015C Signing time: Tue 17 Jun 2025 03:08:28 +0000 Manifest this update: Tue 17 Jun 2025 03:08:28 +0000 Manifest next update: Tue 24 Jun 2025 03:08:28 +0000 Files and hashes: 1: 10XhyGsYGPfQVj-Q6LoSvosa43g.crl (hash: qoCsTQG+XbSmxNchhPVD4kWWdBm3tqGq3XBEFJY8YHk=) 2: 12DD779467A211EEA8239268C4F9AE02.roa (hash: 7lqdZ2FcePrtK+ORkGuFUebt7bprHrcQU1BOkcrtW3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378 Validity Not Before: Jun 17 03:08:28 2025 GMT Not After : Jun 24 03:08:28 2025 GMT Subject: CN=6850dc2c-afbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:56:2f:9b:c8:95:cc:24:61:73:3f:59:cb:e4: b5:8f:c3:ae:16:21:5b:2d:66:b5:5b:8d:58:05:c6: 42:a1:4b:68:f5:eb:49:6a:10:d0:7f:56:ce:39:71: b7:dd:49:b4:d3:50:ee:7f:4a:88:c7:7a:d1:f6:23: 24:58:ef:f6:58:4d:47:bf:ab:5d:bc:c2:cc:cd:73: fe:7d:73:c2:38:a1:d1:64:b2:4f:72:c7:c8:36:37: 57:bf:e7:92:b2:3c:4a:4f:04:3e:90:e6:ba:d7:47: 1f:e4:dd:0e:98:10:a1:fe:8b:be:f4:e3:f9:e2:d7: bc:c9:c5:82:9d:bd:40:89:fc:45:9b:9b:88:69:c0: 7a:e8:66:f9:03:9d:35:7f:73:7b:93:e9:d4:e8:48: 82:1c:1c:f6:27:09:29:ac:3a:2d:d6:09:44:b5:3d: 7a:25:38:7e:ba:aa:0f:14:45:67:58:b4:75:c9:a2: 35:90:74:af:bc:51:1a:dc:c3:9e:7f:a1:42:c2:7b: 56:6f:5b:9b:04:e1:41:69:a3:c6:84:91:a2:cc:cb: 33:6f:5f:35:36:e0:e0:d0:20:63:a0:82:62:fe:e4: 08:c1:5d:d6:e8:df:31:9b:10:6c:cf:7d:af:fc:bc: 3f:9d:9e:26:cc:61:40:b3:6f:0c:e6:a8:58:9c:68: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:07:1D:5E:A6:C5:B5:00:9D:29:10:43:B5:E9:59:0F:01:FA:96 X509v3 Authority Key Identifier: keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4e:1d:35:d3:70:fa:9a:03:d9:85:12:f9:4e:44:69:9f:8c: 86:75:cd:ec:73:fb:05:02:f7:2c:fc:5c:1d:25:2c:57:cf:a1: 6d:fa:8d:3b:be:31:23:5e:31:b3:44:55:b1:b9:aa:5b:75:e4: ea:26:72:86:14:c9:05:b8:8e:dd:eb:23:be:b2:85:90:69:dd: ff:d4:65:e1:3c:ce:08:99:da:3a:45:63:7e:94:97:ba:3b:3e: 70:43:37:df:7c:2c:58:7a:c4:50:9a:00:5e:e3:a0:99:1a:96: 2d:67:a8:c3:57:fe:d5:fa:cd:fa:49:58:01:c5:51:08:62:99: 1d:f6:a7:d6:ad:d8:b9:ac:85:48:f9:e7:cc:cd:d3:d0:4e:a3: e2:96:cc:9b:0f:10:b4:98:fc:b7:13:96:c0:4f:d9:61:9f:1d: 1e:56:88:ab:3e:78:ac:64:bc:30:55:ce:09:90:b5:db:73:94: 94:f4:f6:89:66:28:96:ea:89:3d:10:88:47:37:53:f6:f4:23: 8d:e9:d5:1b:d8:93:1d:8e:76:cd:d5:9c:9e:5f:20:17:38:f9: c3:37:31:d2:e5:dd:84:b1:45:27:fa:93:b2:83:07:3e:44:05: 29:4a:34:d0:68:c0:f4:5c:57:45:1f:78:6c:50:53:e3:5b:7c: 59:a3:95:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3QzQxMTAvBgNVBAUTKEQ3NDVFMUM4NkIxODE4RjdEMDU2M0Y5MEU4QkExMkJF OEIxQUUzNzgwHhcNMjUwNjE3MDMwODI4WhcNMjUwNjI0MDMwODI4WjAYMRYwFAYD VQQDEw02ODUwZGMyYy1hZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1Yvm8iVzCRhcz9Zy+S1j8OuFiFbLWa1W41YBcZCoUto9etJahDQf1bOOXG3 3Um001Duf0qIx3rR9iMkWO/2WE1Hv6tdvMLMzXP+fXPCOKHRZLJPcsfINjdXv+eS sjxKTwQ+kOa610cf5N0OmBCh/ou+9OP54te8ycWCnb1AifxFm5uIacB66Gb5A501 f3N7k+nU6EiCHBz2JwkprDot1glEtT16JTh+uqoPFEVnWLR1yaI1kHSvvFEa3MOe f6FCwntWb1ubBOFBaaPGhJGizMszb181NuDg0CBjoIJi/uQIwV3W6N8xmxBsz32v /Lw/nZ4mzGFAs28M5qhYnGiXAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFWBx1e psW1AJ0pEEO16VkPAfqWMB8GA1UdIwQYMBaAFNdF4chrGBj30FY/kOi6Er6LGuN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTdDNC9DNjNERjIwMDND NjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQZlFWai1RNkxvU3Zvc2E0 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwWGh5R3NZR1BmUVZqLVE2TG9Tdm9zYTQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTdDNC9DNjNERjIwMDNDNjQxMUVFQkNBQzUxNzBDNEY5QUUwMi8xMFhoeUdzWUdQ ZlFWai1RNkxvU3Zvc2E0M2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOTh0103D6mgPZhRL5TkRpn4yGdc3sc/sFAvcs/FwdJSxXz6Ft+o07 vjEjXjGzRFWxuapbdeTqJnKGFMkFuI7d6yO+soWQad3/1GXhPM4Imdo6RWN+lJe6 Oz5wQzfffCxYesRQmgBe46CZGpYtZ6jDV/7V+s36SVgBxVEIYpkd9qfWrdi5rIVI +efMzdPQTqPilsybDxC0mPy3E5bAT9lhnx0eVoirPnisZLwwVc4JkLXbc5SU9PaJ ZiiW6ok9EIhHN1P29CON6dUb2JMdjnbN1ZyeXyAXOPnDNzHS5d2EsUUn+pOygwc+ RAUpSjTQaMD0XFdFH3hsUFPjW3xZo5XN -----END CERTIFICATE-----Generated at Tue Jun 17 10:29:00 2025 by rpki-client