$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: tixASrkDSc/WYeP4EV8h1U0LYyXAOfldlqT7YLuRgdc= Subject key identifier: 34:AA:A3:C9:62:3B:7D:46:B1:CB:19:E6:F1:E1:DF:A4:21:F6:D0:CD Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: FF Signing time: Sun 15 Jun 2025 04:16:14 +0000 Manifest this update: Sun 15 Jun 2025 04:16:14 +0000 Manifest next update: Sun 22 Jun 2025 04:16:14 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: r9Do1MiGbE4m2kfSyPtyDQ7BmrN6Ww3Ezbmm2I4qYyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Jun 15 04:16:14 2025 GMT Not After : Jun 22 04:16:14 2025 GMT Subject: CN=684e490e-a806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:b6:4a:8b:08:da:b1:b3:b6:e2:ec:30:cd: 85:5c:5b:ce:37:45:33:21:8d:7e:bd:ff:44:27:e0: 27:7b:e3:a0:79:3d:08:76:e6:38:ac:18:e4:ee:01: b1:dd:1d:e4:f9:70:14:91:e5:fa:32:28:1c:11:d2: 59:39:5a:ec:ac:fb:7d:6b:c2:ed:28:58:16:a8:ec: c8:7a:d3:e2:0a:bc:62:b3:96:ad:36:e5:b6:90:23: c8:7a:08:ad:b5:b2:42:b0:6e:a1:65:89:f2:23:bf: 22:9c:8b:3f:c8:f5:a5:28:86:e3:75:31:59:5c:0d: 45:1b:57:4a:34:21:fa:97:c9:c9:aa:95:ad:9d:60: d9:88:62:62:c6:46:12:08:58:e7:14:fa:a2:b5:ac: 3a:ea:e9:e4:8d:6b:ae:7e:e3:48:9b:e9:53:62:14: 86:42:66:11:6f:d1:79:e3:50:3f:48:53:f0:fb:0c: a1:ce:07:b2:e6:d1:e4:be:23:be:b0:99:68:7d:92: 91:5f:d6:01:ca:ee:1b:a4:13:1a:d1:0e:02:32:d0: 39:ea:f4:e5:05:57:25:39:fe:c7:79:87:44:d2:c9: ca:c8:3b:9d:f4:c4:b3:0e:42:04:2c:d4:df:43:7f: 54:6b:26:82:18:2e:7c:92:39:8c:36:2b:21:a0:74: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AA:A3:C9:62:3B:7D:46:B1:CB:19:E6:F1:E1:DF:A4:21:F6:D0:CD X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:58:7e:4e:17:31:05:1a:3d:d1:50:ad:4e:dc:e8:03:ae:30: 6f:bb:b0:d6:0f:9f:19:64:d9:92:e1:ca:68:b9:2b:b1:fd:34: c7:62:21:1e:23:8f:5f:88:74:ed:f5:ad:78:ec:08:52:7e:28: 96:ec:85:a4:04:f2:3b:84:4f:2d:89:c1:01:21:cd:05:40:2d: cf:9a:7f:f7:8f:4d:6e:ca:5d:cf:fb:a3:2b:47:08:98:6e:6f: a0:52:af:73:2a:d2:ca:dc:43:e2:3b:14:ae:1e:d2:6d:04:8f: b4:81:82:2f:d3:2f:5a:c6:6a:1d:f4:4a:a4:cf:b8:8b:04:0b: 6d:83:f2:df:32:a8:90:12:a2:91:81:26:d1:55:34:62:ed:4c: 07:29:a1:5c:8c:11:7e:99:73:fa:87:54:c1:9d:b5:fe:a8:b9: 4e:a1:f0:56:1f:c4:70:c5:a1:3c:f6:6a:e4:47:0b:b6:41:35: 0d:71:b2:1a:2c:bd:b1:aa:d8:53:1b:3f:e4:15:d8:6f:11:d5: f5:f8:d3:d2:85:1a:5f:29:c1:6a:b6:34:4e:98:76:3c:d2:f7: a3:f9:f2:c3:9a:af:5e:ed:97:83:73:57:2d:a2:63:85:a5:2c: ea:11:1f:d1:23:48:a9:ef:82:04:b7:be:d8:52:df:2e:4f:e4: 2d:4d:a8:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUwNjE1MDQxNjE0WhcNMjUwNjIyMDQxNjE0WjAYMRYwFAYD VQQDEw02ODRlNDkwZS1hODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEq2SosI2rGztuLsMM2FXFvON0UzIY1+vf9EJ+Ane+OgeT0IduY4rBjk7gGx 3R3k+XAUkeX6MigcEdJZOVrsrPt9a8LtKFgWqOzIetPiCrxis5atNuW2kCPIegit tbJCsG6hZYnyI78inIs/yPWlKIbjdTFZXA1FG1dKNCH6l8nJqpWtnWDZiGJixkYS CFjnFPqitaw66unkjWuufuNIm+lTYhSGQmYRb9F541A/SFPw+wyhzgey5tHkviO+ sJlofZKRX9YByu4bpBMa0Q4CMtA56vTlBVclOf7HeYdE0snKyDud9MSzDkIELNTf Q39UayaCGC58kjmMNishoHRoKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSqo8li O31GscsZ5vHh36Qh9tDNMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLWH5OFzEFGj3RUK1O3OgDrjBvu7DWD58ZZNmS4cpouSux/TTHYiEe I49fiHTt9a147AhSfiiW7IWkBPI7hE8ticEBIc0FQC3Pmn/3j01uyl3P+6MrRwiY bm+gUq9zKtLK3EPiOxSuHtJtBI+0gYIv0y9axmod9Eqkz7iLBAttg/LfMqiQEqKR gSbRVTRi7UwHKaFcjBF+mXP6h1TBnbX+qLlOofBWH8RwxaE89mrkRwu2QTUNcbIa LL2xqthTGz/kFdhvEdX1+NPShRpfKcFqtjROmHY80vej+fLDmq9e7ZeDc1ctomOF pSzqER/RI0ip74IEt77YUt8uT+QtTaiA -----END CERTIFICATE-----Generated at Sun Jun 15 09:50:00 2025 by rpki-client