$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: +DjdJPAmX6QwWDy+y1qfIT7Xou9Ay/t8L0PoHZkQ0JI= Subject key identifier: 7B:1F:6D:FD:43:C8:57:01:42:F8:F9:78:8B:A6:9A:72:34:9E:DF:4C Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0A15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 09DF Signing time: Wed 18 Jun 2025 19:51:08 +0000 Manifest this update: Wed 18 Jun 2025 19:51:08 +0000 Manifest next update: Wed 25 Jun 2025 19:51:08 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: rKgG43xReukwDbdNESSHz4HhQH8ydriK5ptmXC07nsI=) 2: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: fT5I6I+PgWW4dacN3a4Ms0RKDB8N3MNCREMj8FDesrg=) 3: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 2Dd7cd8I4OSARGKZ0mccoyZW6iVZIc9ObRTGe4O/Dcc=) 4: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: NOfiYVkjVgVKJdndF7rjEsZWLBXmxcXaA+rDg1JFfcI=) 5: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: eb8Dxmgs1pJ56B+p/g4fWelI2bfJeXR9VvaW0O1EVCY=) 6: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Fh5T2BpUHXj8z7zvCSIDzf9GCkAnUEieH5BE04K3ZeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2581 (0xa15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Jun 18 19:51:08 2025 GMT Not After : Jun 25 19:51:08 2025 GMT Subject: CN=685318ac-1d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:43:7a:cd:ec:b6:2f:21:33:87:cc:fa:39: b2:57:1c:96:4e:3a:30:24:93:80:13:98:1d:97:6e: cf:14:6c:bc:48:df:4d:3f:c5:0c:a9:25:76:8e:b2: a8:d4:bd:cc:24:dc:f8:d2:17:bb:89:33:d9:9d:e7: ae:69:15:d0:23:09:6b:cb:25:80:2d:b1:40:64:5b: 8f:ba:37:37:ba:45:65:f4:1f:8a:4e:af:7d:aa:ee: 70:39:be:8d:d9:69:e7:c7:a5:1e:66:45:8e:12:ca: 64:48:ff:a4:73:67:13:93:3a:cd:d3:8a:fc:1d:72: 27:be:c2:27:6b:31:1b:b9:a6:87:68:c7:be:a4:ca: 1e:20:48:3c:cb:d2:3d:88:f1:20:a7:d7:48:6f:34: 2a:fd:5d:d7:1d:26:08:d6:f1:a8:8d:93:32:6e:25: e7:be:25:a1:f3:44:fd:42:96:1b:c3:8b:91:08:b7: 4e:d1:44:2a:4d:5c:1b:ae:6d:c9:3c:d4:69:fc:52: 9a:bc:fc:32:ab:72:54:e5:11:af:26:2d:71:ac:3c: db:24:1d:50:64:bd:1d:6b:97:2b:af:8e:09:77:90: 6a:32:0b:80:85:56:cd:d6:4e:42:f1:ec:ec:1c:c4: b3:9d:63:67:0d:d0:bb:d5:5e:cb:ca:25:80:16:ce: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1F:6D:FD:43:C8:57:01:42:F8:F9:78:8B:A6:9A:72:34:9E:DF:4C X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:85:25:2f:c1:54:42:13:2e:8e:ea:7e:33:45:d9:c5:1a:42: 1b:63:af:8d:4f:7e:8f:06:4d:15:ec:da:2e:43:87:74:67:4d: 78:c1:66:29:66:95:75:1d:7f:01:89:70:fb:28:4c:b0:41:57: 61:a8:32:e7:db:a9:04:dc:e2:8e:68:a8:af:0e:3c:8b:47:6d: d5:0c:6d:eb:16:97:ca:5a:21:3c:61:8f:28:88:aa:c8:31:3b: c2:13:13:f2:ef:68:69:1c:9c:dd:56:e8:ce:43:83:bf:8f:b5: 0f:93:a8:70:7e:53:1c:89:07:98:92:f1:20:89:d1:16:c5:53: 72:b6:9f:46:83:a4:b3:df:ac:7a:d4:f4:3f:01:63:1a:a6:ac: 09:04:e5:a0:9f:34:24:01:9b:3a:b6:3a:30:f1:df:ca:54:57: 25:ea:ce:1d:91:2f:b8:db:0b:e4:6b:69:65:5e:5b:4c:98:15: 68:d2:6b:15:23:e2:bd:17:88:7f:0d:c0:1d:d7:59:5c:25:4b: 15:eb:89:a9:53:34:e1:60:ec:c8:b2:03:c7:02:b1:65:1a:81: 4c:40:e3:ed:6b:ed:06:17:75:fe:50:92:de:52:3b:90:15:f2: 5f:5f:3a:03:1e:0a:9d:1d:28:09:cf:16:b9:a8:2d:08:63:ee: 18:d1:11:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjUwNjE4MTk1MTA4WhcNMjUwNjI1MTk1MTA4WjAYMRYwFAYD VQQDEw02ODUzMThhYy0xZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2hDes3sti8hM4fM+jmyVxyWTjowJJOAE5gdl27PFGy8SN9NP8UMqSV2jrKo 1L3MJNz40he7iTPZneeuaRXQIwlryyWALbFAZFuPujc3ukVl9B+KTq99qu5wOb6N 2Wnnx6UeZkWOEspkSP+kc2cTkzrN04r8HXInvsInazEbuaaHaMe+pMoeIEg8y9I9 iPEgp9dIbzQq/V3XHSYI1vGojZMybiXnviWh80T9QpYbw4uRCLdO0UQqTVwbrm3J PNRp/FKavPwyq3JU5RGvJi1xrDzbJB1QZL0da5crr44Jd5BqMguAhVbN1k5C8ezs HMSznWNnDdC71V7LyiWAFs5mwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsfbf1D yFcBQvj5eIummnI0nt9MMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANhSUvwVRCEy6O6n4zRdnFGkIbY6+NT36PBk0V7NouQ4d0Z014wWYp ZpV1HX8BiXD7KEywQVdhqDLn26kE3OKOaKivDjyLR23VDG3rFpfKWiE8YY8oiKrI MTvCExPy72hpHJzdVujOQ4O/j7UPk6hwflMciQeYkvEgidEWxVNytp9Gg6Sz36x6 1PQ/AWMapqwJBOWgnzQkAZs6tjow8d/KVFcl6s4dkS+42wvka2llXltMmBVo0msV I+K9F4h/DcAd11lcJUsV64mpUzThYOzIsgPHArFlGoFMQOPta+0GF3X+UJLeUjuQ FfJfXzoDHgqdHSgJzxa5qC0IY+4Y0REh -----END CERTIFICATE-----Generated at Fri Jun 20 02:13:36 2025 by rpki-client