$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: 1YGLVaQv9wdT2IX4FOVaJfcqNY46fKwHdt2JVPUYgVY= Subject key identifier: 54:C6:FF:D8:DE:46:7F:CC:16:0A:E9:4F:5D:D3:AE:8C:2F:52:CD:AB Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 086E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 0868 Signing time: Thu 12 Jun 2025 20:25:17 +0000 Manifest this update: Thu 12 Jun 2025 20:25:17 +0000 Manifest next update: Thu 19 Jun 2025 20:25:17 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: AQD8GUts+Nrzy8J0xCRt5xFrHetFHB75RuOctkzjnUo=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: 04/HwV26/Fx1bZoGuRdSyRLiYV06aFK5mycaJ+/tqsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Jun 12 20:25:17 2025 GMT Not After : Jun 19 20:25:17 2025 GMT Subject: CN=684b37ad-193a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:93:ea:60:0e:34:1f:ac:95:f5:49:94:eb: 7d:39:e4:2d:17:81:18:0a:24:ca:aa:f6:ce:e5:bc: d0:27:60:72:77:f3:5b:e2:d9:8d:92:40:5d:0f:58: 52:3f:12:cd:74:37:74:47:5b:87:de:d3:ab:40:e0: fd:b3:6d:06:3e:e0:9c:f7:72:b4:13:76:2e:88:0f: 40:4e:e3:df:ae:fb:30:9f:19:4c:6a:1d:1f:7b:db: 29:bd:a0:18:ab:3c:70:cf:6f:8c:b3:57:1e:27:b1: 44:80:fe:f3:ef:fc:05:af:ee:aa:1b:71:7d:95:be: 89:6e:4b:3c:75:c1:09:07:f3:17:61:65:7a:be:8c: 1e:43:a2:17:78:63:55:da:52:e5:8a:a1:aa:22:13: d6:7f:ab:38:d5:85:50:d1:78:0a:e8:13:cc:af:1f: 66:d3:d6:52:41:fd:8b:88:c1:b0:23:39:3d:cf:3d: 92:c1:a4:7c:70:d2:e9:75:fa:a1:73:4b:08:2a:5f: 4d:49:72:39:f6:16:9f:0f:00:c0:26:5b:7a:37:80: 80:b9:ca:7c:26:eb:55:5f:a5:b7:29:f2:16:49:9f: 2b:63:e9:89:0a:20:91:2b:2b:55:fd:c0:38:f5:3d: 3f:e5:aa:d9:7a:d4:bc:7c:0d:07:6b:3d:25:29:35: 4e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C6:FF:D8:DE:46:7F:CC:16:0A:E9:4F:5D:D3:AE:8C:2F:52:CD:AB X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:86:3c:88:58:12:41:12:38:5c:b6:4f:d9:4d:4b:1e:aa:2d: de:4b:99:58:23:e4:c7:8c:39:ba:62:d0:9c:64:8e:04:ed:b4: fd:06:02:34:83:72:c6:34:dc:e3:13:42:83:e7:0d:2d:da:6a: a1:01:99:71:eb:b7:1f:3f:e4:88:d7:c1:d4:45:27:34:9d:57: 18:79:88:9f:e9:80:99:75:b0:22:1e:57:f9:7c:bb:6c:52:ff: 66:30:3a:3a:7c:50:84:c7:1a:d9:f0:64:87:ec:17:61:ac:f2: 6d:05:a3:0c:c5:7b:e8:c6:9c:56:3f:d7:3d:35:c5:c9:b5:27: 91:a9:60:1a:b0:1a:37:54:dc:fb:d1:0f:f3:7a:18:65:e0:ee: 8f:b8:e5:95:36:d9:47:c3:14:54:25:9b:20:b4:c0:7b:30:ba: f5:d2:5d:3d:24:e5:ec:a6:15:f9:22:21:41:30:5d:29:53:39: d3:13:2c:8f:51:02:67:56:a5:fe:31:38:08:bb:f1:16:2f:2c: ec:57:72:61:ba:63:82:d7:28:19:a2:5d:34:0f:3c:76:4e:04: b1:42:6e:20:35:38:c3:be:c5:9f:97:3b:ef:e7:3c:a0:54:4c: f9:40:46:ad:88:71:2f:94:3d:47:35:bd:97:f6:7f:b4:c7:c7: 91:e1:b1:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjUwNjEyMjAyNTE3WhcNMjUwNjE5MjAyNTE3WjAYMRYwFAYD VQQDEw02ODRiMzdhZC0xOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GCT6mAONB+slfVJlOt9OeQtF4EYCiTKqvbO5bzQJ2Byd/Nb4tmNkkBdD1hS PxLNdDd0R1uH3tOrQOD9s20GPuCc93K0E3YuiA9ATuPfrvswnxlMah0fe9spvaAY qzxwz2+Ms1ceJ7FEgP7z7/wFr+6qG3F9lb6Jbks8dcEJB/MXYWV6voweQ6IXeGNV 2lLliqGqIhPWf6s41YVQ0XgK6BPMrx9m09ZSQf2LiMGwIzk9zz2SwaR8cNLpdfqh c0sIKl9NSXI59hafDwDAJlt6N4CAucp8JutVX6W3KfIWSZ8rY+mJCiCRKytV/cA4 9T0/5arZetS8fA0Haz0lKTVOZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTG/9je Rn/MFgrpT13TrowvUs2rMB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBThjyIWBJBEjhctk/ZTUseqi3eS5lYI+THjDm6YtCcZI4E7bT9BgI0 g3LGNNzjE0KD5w0t2mqhAZlx67cfP+SI18HURSc0nVcYeYif6YCZdbAiHlf5fLts Uv9mMDo6fFCExxrZ8GSH7BdhrPJtBaMMxXvoxpxWP9c9NcXJtSeRqWAasBo3VNz7 0Q/zehhl4O6PuOWVNtlHwxRUJZsgtMB7MLr10l09JOXsphX5IiFBMF0pUznTEyyP UQJnVqX+MTgIu/EWLyzsV3JhumOC1ygZol00Dzx2TgSxQm4gNTjDvsWflzvv5zyg VEz5QEatiHEvlD1HNb2X9n+0x8eR4bEm -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:58 2025 by rpki-client