$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: QiOKQe/J1a72akOkVbWswQel/fg2jlJ9eN2OnJbb/6E= Subject key identifier: 86:CC:83:83:CE:33:A8:13:90:F0:C6:09:A2:96:F7:4B:6C:0D:7F:72 Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: 65 Signing time: Thu 19 Jun 2025 05:24:21 +0000 Manifest this update: Thu 19 Jun 2025 05:24:21 +0000 Manifest next update: Thu 26 Jun 2025 05:24:21 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: ErY8dyJr4/JrV2vmZksy+7Vir5RHFlSKWXztx6Y/B2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Jun 19 05:24:21 2025 GMT Not After : Jun 26 05:24:21 2025 GMT Subject: CN=68539f05-ab59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:af:df:c5:9e:c6:cb:49:ab:d3:45:27:21: 51:80:b0:e7:7e:6f:65:df:0a:33:3f:d6:51:6d:d6: e8:e3:91:4f:c8:a8:c9:21:e5:52:ce:86:78:63:8f: 37:e6:df:8b:e7:39:cf:d6:93:42:b1:b7:6f:33:db: 4a:88:5a:0d:94:0c:b2:36:20:7a:6c:62:5e:4d:40: 5a:70:7e:8e:90:8f:d6:a9:02:4e:80:3a:bd:91:dd: c9:80:41:d1:1b:a9:57:04:e5:eb:13:21:69:0f:4d: 0f:76:4f:c1:94:d6:58:54:c1:dc:5f:50:36:34:51: e6:bf:cf:94:ad:86:41:96:ca:42:07:da:c5:41:bb: df:57:38:1c:41:54:a0:7c:36:d2:71:a5:50:ab:9b: 6c:59:c7:81:06:a3:b3:d0:3a:3e:73:e1:90:fe:db: e3:82:e3:ed:72:77:84:53:44:73:db:55:bd:ca:c0: c6:40:85:96:94:ae:e1:cf:2c:be:bf:94:77:53:b5: 1a:5b:cc:57:c4:5f:6c:69:84:b3:3b:8c:f8:0a:d0: c7:ef:94:fe:ba:20:02:47:77:ad:53:19:0d:8b:71: 59:64:e1:36:04:6b:fc:c3:80:2d:f2:74:ba:c1:4d: 5b:8d:97:bd:f2:0a:87:14:76:d3:cb:35:c3:2b:e0: 92:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CC:83:83:CE:33:A8:13:90:F0:C6:09:A2:96:F7:4B:6C:0D:7F:72 X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:64:38:d2:ea:93:14:43:42:47:85:f8:ea:d2:6c:39:b6:d8: ed:4c:5b:39:2d:8c:14:f1:d1:07:b5:39:e1:c0:b7:dc:90:07: 7a:55:65:c5:40:f9:81:b3:86:72:06:76:c2:0c:d2:eb:fc:7a: 94:71:14:d1:90:a1:4e:0f:2c:2c:f6:50:94:be:f0:1a:ba:3a: f4:85:a4:8c:29:ae:3a:03:35:20:39:71:3b:66:72:9d:ba:9c: f7:bd:fc:de:cf:cb:65:e3:fc:41:f8:d2:a0:0e:ea:c8:3f:44: c4:13:f6:f1:69:f8:ce:b1:91:83:94:0b:a1:c6:61:80:57:e0: f0:b0:ea:a0:05:35:a0:65:36:55:7b:47:81:14:5f:c6:1c:b5: 9b:c8:93:f6:95:96:f4:96:54:65:a2:c0:a3:1e:1e:0c:c7:9f: a8:09:95:e8:12:c2:72:98:0e:66:e4:ad:8c:4b:71:b8:e6:44: dc:8f:fb:cf:5c:76:9e:43:1e:11:e7:e6:13:54:f4:b6:80:01: 29:31:68:d5:72:01:66:a0:9e:cb:43:8e:9f:4c:5e:25:2a:5e: 8b:1c:fe:74:9b:df:cb:e7:f5:f2:13:7a:a9:4b:88:bb:61:ec: 55:2f:89:51:ab:05:fa:dc:07:7c:38:a8:4c:cc:31:b3:11:f3: 5b:8c:4b:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDg1NTExMC8GA1UEBRMoNUVGNUUxQTU4NUM0OEUyQkM0NTBCQTcyRjRDMzEzNDY4 MEU1MkIwRDAeFw0yNTA2MTkwNTI0MjFaFw0yNTA2MjYwNTI0MjFaMBgxFjAUBgNV BAMTDTY4NTM5ZjA1LWFiNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8L6/fxZ7Gy0mr00UnIVGAsOd+b2XfCjM/1lFt1ujjkU/IqMkh5VLOhnhjjzfm 34vnOc/Wk0Kxt28z20qIWg2UDLI2IHpsYl5NQFpwfo6Qj9apAk6AOr2R3cmAQdEb qVcE5esTIWkPTQ92T8GU1lhUwdxfUDY0Uea/z5SthkGWykIH2sVBu99XOBxBVKB8 NtJxpVCrm2xZx4EGo7PQOj5z4ZD+2+OC4+1yd4RTRHPbVb3KwMZAhZaUruHPLL6/ lHdTtRpbzFfEX2xphLM7jPgK0MfvlP66IAJHd61TGQ2LcVlk4TYEa/zDgC3ydLrB TVuNl73yCocUdtPLNcMr4JI3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhsyDg84z qBOQ8MYJopb3S2wNf3IwHwYDVR0jBBgwFoAUXvXhpYXEjivEULpy9MMTRoDlKw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwODU1L0UxQUU1NDdDQjEz ODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHZYaHBZWEVqaXZFVUxweTlNTVRSb0RsS3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw ODU1L0UxQUU1NDdDQjEzODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2 RVVMcHk5TU1UUm9EbEt3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI5kONLqkxRDQkeF+OrSbDm22O1MWzktjBTx0Qe1OeHAt9yQB3pVZcVA +YGzhnIGdsIM0uv8epRxFNGQoU4PLCz2UJS+8Bq6OvSFpIwprjoDNSA5cTtmcp26 nPe9/N7Py2Xj/EH40qAO6sg/RMQT9vFp+M6xkYOUC6HGYYBX4PCw6qAFNaBlNlV7 R4EUX8YctZvIk/aVlvSWVGWiwKMeHgzHn6gJlegSwnKYDmbkrYxLcbjmRNyP+89c dp5DHhHn5hNU9LaAASkxaNVyAWagnstDjp9MXiUqXosc/nSb38vn9fITeqlLiLth 7FUviVGrBfrcB3w4qEzMMbMR81uMS5Y= -----END CERTIFICATE-----Generated at Fri Jun 20 16:16:02 2025 by rpki-client