$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json) Hash identifier: rKpABT+jupw3oWdOvnvtrDDa0d63k6VbOcYJhmh2ZXs= Subject key identifier: D1:92:57:EF:09:C1:C2:13:A6:AC:DD:0C:B4:E9:4E:BE:5E:57:45:2E Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 12E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft Manifest number: 47D1 Signing time: Tue 12 Aug 2025 14:21:15 +0000 Manifest this update: Tue 12 Aug 2025 14:21:15 +0000 Manifest next update: Tue 19 Aug 2025 14:21:15 +0000 Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: ibdMSXLxwz+/GCFLd4pI2xf0hr/wLfCZ3CgWKiVTJ3U=) 2: C5FA430E179711EDB9008D18C4F9AE02.roa (hash: y0CRNa7V0TgYNmJJlENwmVgI1Qa7VZV0yF0dM9ke4Fc=) 3: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: hei/cgFAUZIGCHaatDAW34u7WoWx8+SizsC0TsbKAW0=) 4: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: GOy9OboZpKQbKQnVi7OFhab7NMhnYhuV2h2uNtdNUpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 14:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4840 (0x12e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Aug 12 14:21:15 2025 GMT Not After : Aug 19 14:21:15 2025 GMT Subject: CN=689b4ddb-56ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:17:8e:25:b6:48:87:47:72:82:6b:e8:ac: c0:6f:60:a1:a2:14:52:43:ce:36:43:22:0d:79:d8: 09:bd:2a:17:3a:62:41:f4:02:9e:b1:71:39:13:16: 69:2a:c8:79:4e:4d:21:5a:58:81:eb:59:9b:07:3e: 8c:e7:67:b7:44:e7:85:33:c9:90:92:ff:2b:81:5e: 1e:80:df:27:1c:dd:50:63:aa:9c:ba:53:d8:d7:c2: 6e:b1:9a:34:9f:8d:c9:85:85:c2:ab:e7:3a:17:b2: 54:58:89:c9:56:44:f0:36:58:90:1c:6c:3b:76:dd: 72:f3:08:91:3e:1a:f6:c6:ae:a8:f9:80:d3:6f:ca: bf:36:a2:e1:2e:47:34:5f:3e:5b:42:7f:f0:59:84: 0b:2e:9e:1d:e3:06:18:b6:c9:df:a3:d9:18:4c:06: e5:ad:30:f7:ed:8e:3f:f4:f5:e7:f0:23:3d:65:94: 20:53:4a:e8:fc:ec:c3:36:6e:5e:bd:2f:15:d9:8e: 7e:09:cb:6d:1e:3b:13:e9:73:69:1c:25:7d:e4:6f: 33:28:76:a1:22:18:12:41:0b:57:54:a2:9e:be:0e: f3:9d:83:13:e9:f7:8a:69:bd:17:ee:d5:ab:77:59: 4e:ab:f7:3a:47:52:3d:f2:d1:fc:f2:7a:24:d7:2d: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:92:57:EF:09:C1:C2:13:A6:AC:DD:0C:B4:E9:4E:BE:5E:57:45:2E X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:8a:81:10:ca:67:11:85:6b:25:64:df:ae:3c:64:49:8d:74: d8:91:58:bd:48:81:e9:e9:7f:2b:39:f6:8f:2a:3a:13:1a:92: 50:89:6e:fd:d4:c6:14:61:d7:67:a6:ea:2e:d5:15:ae:17:14: 9c:c6:38:be:18:16:5c:af:a0:b4:54:2a:74:0d:b4:73:31:15: 2e:98:f9:de:4a:88:47:f4:9b:aa:35:75:e4:97:8b:4e:85:9b: 2a:19:9f:fb:ad:01:b2:a6:50:af:02:07:43:10:81:38:cc:ec: ba:5a:d3:eb:29:f2:41:43:7d:e2:16:2f:7a:2e:04:cb:76:3d: f9:b9:87:0f:2f:bc:b9:5b:17:fd:48:15:e1:9f:1f:e2:89:48: 01:ba:78:55:14:94:81:d2:b5:d3:57:3a:8b:31:e9:1d:4d:ab: b5:1c:bc:d1:f1:d5:9a:4d:52:8e:87:a2:36:5c:dd:b7:fc:60: 16:ee:35:59:bc:5b:b5:09:04:dd:e9:83:41:da:74:52:81:7b: 39:c5:c7:a6:8e:89:35:94:89:17:25:43:6a:e4:fa:4e:77:c2: 3b:2b:4d:8e:6d:b2:12:0f:49:81:a0:fb:de:43:a6:d2:7d:d7: 42:26:85:6a:1b:f7:8a:88:c1:e9:d1:6f:37:63:af:95:a9:bf: 61:25:0c:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjUwODEyMTQyMTE1WhcNMjUwODE5MTQyMTE1WjAYMRYwFAYD VQQDEw02ODliNGRkYi01NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycgXjiW2SIdHcoJr6KzAb2ChohRSQ842QyINedgJvSoXOmJB9AKesXE5ExZp Ksh5Tk0hWliB61mbBz6M52e3ROeFM8mQkv8rgV4egN8nHN1QY6qculPY18JusZo0 n43JhYXCq+c6F7JUWInJVkTwNliQHGw7dt1y8wiRPhr2xq6o+YDTb8q/NqLhLkc0 Xz5bQn/wWYQLLp4d4wYYtsnfo9kYTAblrTD37Y4/9PXn8CM9ZZQgU0ro/OzDNm5e vS8V2Y5+CcttHjsT6XNpHCV95G8zKHahIhgSQQtXVKKevg7znYMT6feKab0X7tWr d1lOq/c6R1I98tH88nok1y2slwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGSV+8J wcITpqzdDLTpTr5eV0UuMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB eTc0T1ExbW5lQnBHSkxuODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATioEQymcRhWslZN+uPGRJjXTYkVi9SIHp6X8rOfaPKjoTGpJQiW79 1MYUYddnpuou1RWuFxScxji+GBZcr6C0VCp0DbRzMRUumPneSohH9JuqNXXkl4tO hZsqGZ/7rQGyplCvAgdDEIE4zOy6WtPrKfJBQ33iFi96LgTLdj35uYcPL7y5Wxf9 SBXhnx/iiUgBunhVFJSB0rXTVzqLMekdTau1HLzR8dWaTVKOh6I2XN23/GAW7jVZ vFu1CQTd6YNB2nRSgXs5xcemjok1lIkXJUNq5PpOd8I7K02ObbISD0mBoPveQ6bS fddCJoVqG/eKiMHp0W83Y6+Vqb9hJQwY -----END CERTIFICATE-----Generated at Wed Aug 13 05:33:49 2025 by rpki-client