$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: a8R5+bLEn4EQedNehK3WAo7LZ3AwihP1MTB8pn4nS24= Subject key identifier: 9F:21:3F:29:23:BA:CE:3D:70:BF:1E:7C:5B:A5:85:C7:D1:B5:8A:55 Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 0479 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 046D Signing time: Thu 12 Jun 2025 23:41:55 +0000 Manifest this update: Thu 12 Jun 2025 23:41:55 +0000 Manifest next update: Thu 19 Jun 2025 23:41:54 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: QlqOlBcwQyTa18fdVV9x1CuzkwR9yDjzhvb2ymF0ryU=) 2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: EUhD1CogfYx019LqOHk5ZADPXKjO2pURWvfLLk3fqG8=) 3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: 0C7V986gHLfF3RPO5trmAPFLdLtlvzlCJ3+47YeVJHU=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: CMOccFw4JW9T0ieBo3En9p6kBriebw6aKjGeEamJ19Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1145 (0x479) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Jun 12 23:41:55 2025 GMT Not After : Jun 19 23:41:54 2025 GMT Subject: CN=684b65c3-4eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:61:bd:8a:93:d5:e5:83:fd:db:e7:8e:dc:28: 4d:f4:64:46:a3:92:fa:4e:32:45:39:e7:85:58:1d: 37:8a:d9:aa:83:69:6b:b4:32:2f:40:d2:c3:c6:7b: 92:ba:81:dd:99:5f:da:14:e8:c1:90:3f:59:14:5b: 3d:c7:87:ce:54:c5:28:27:b9:6a:78:00:15:2c:45: 01:0f:66:55:0a:f6:b7:05:c5:2f:83:b7:0f:ff:24: f5:2c:60:ca:e8:14:e2:27:fa:5f:84:3a:25:74:09: 55:52:ad:26:e3:4c:bb:b6:3e:ae:4c:00:3a:86:08: 70:0b:67:3d:73:a8:18:e3:5b:5f:17:65:b4:db:9e: 10:ee:aa:73:24:5b:ae:dc:8b:df:57:17:6e:17:59: 3c:bc:5b:58:ec:ee:b5:17:e3:f6:ee:35:e8:22:63: bc:1d:8d:fe:51:3b:a7:8b:70:6b:50:f8:94:02:a9: c4:8d:1c:21:b5:09:e9:3e:71:65:d3:cd:e0:ea:73: 99:f5:33:4f:32:dc:9f:a8:0c:7b:b6:68:ae:0e:d3: 32:2b:34:dd:f0:6f:98:ab:f0:7c:53:a5:76:01:99: e6:55:80:61:58:01:50:65:e3:55:89:02:5c:e9:41: 95:b5:1b:e3:57:26:25:5f:96:e3:43:42:a2:03:12: 56:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:21:3F:29:23:BA:CE:3D:70:BF:1E:7C:5B:A5:85:C7:D1:B5:8A:55 X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fa:32:2e:b9:87:51:64:f3:f5:f9:33:d3:39:ea:2d:7a:f8: b2:b3:87:59:38:27:78:ba:7c:61:7f:17:2e:d7:0c:2f:14:86: 30:b8:00:7a:52:52:38:f8:5d:81:ca:5a:e7:da:a7:b5:64:fb: e2:bc:a9:79:88:ed:aa:1e:e3:81:84:19:17:46:14:1f:7c:d5: 2e:d9:5e:e7:8e:50:38:2d:c7:cf:dd:2f:fc:10:e3:55:10:2e: 5d:0d:1a:80:b1:12:8f:ec:1a:6e:b1:13:30:b2:ca:09:74:d7: b0:67:d2:2e:75:6a:8b:10:28:66:58:20:a1:fb:98:04:72:57: c0:82:b1:f2:7d:f2:4d:f3:1d:1f:41:71:b9:5f:f1:c8:25:70: 58:a6:55:0d:2a:c5:49:79:b1:55:7e:f3:66:b3:0f:d2:0c:30: 01:6b:ac:fc:79:c0:21:ce:b6:4d:ae:2e:9f:97:6b:c0:bf:81: fd:89:c9:04:b6:ce:d4:0e:08:fd:53:ce:6c:78:74:3e:67:ca: e2:68:df:8c:35:bc:6a:1f:2f:d1:0b:64:9a:30:cf:8b:e6:35: ac:40:72:64:08:1c:59:e0:aa:f3:af:4d:64:3c:cc:c5:7c:3e: 61:89:12:38:e8:7f:8c:67:72:4f:e5:19:d2:bf:ee:e7:bf:89: dc:2d:b0:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjUwNjEyMjM0MTU1WhcNMjUwNjE5MjM0MTU0WjAYMRYwFAYD VQQDEw02ODRiNjVjMy00ZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8WG9ipPV5YP92+eO3ChN9GRGo5L6TjJFOeeFWB03itmqg2lrtDIvQNLDxnuS uoHdmV/aFOjBkD9ZFFs9x4fOVMUoJ7lqeAAVLEUBD2ZVCva3BcUvg7cP/yT1LGDK 6BTiJ/pfhDoldAlVUq0m40y7tj6uTAA6hghwC2c9c6gY41tfF2W0254Q7qpzJFuu 3IvfVxduF1k8vFtY7O61F+P27jXoImO8HY3+UTuni3BrUPiUAqnEjRwhtQnpPnFl 083g6nOZ9TNPMtyfqAx7tmiuDtMyKzTd8G+Yq/B8U6V2AZnmVYBhWAFQZeNViQJc 6UGVtRvjVyYlX5bjQ0KiAxJWVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8hPykj us49cL8efFulhcfRtYpVMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq+jIuuYdRZPP1+TPTOeoteviys4dZOCd4unxhfxcu1wwvFIYwuAB6 UlI4+F2Bylrn2qe1ZPvivKl5iO2qHuOBhBkXRhQffNUu2V7njlA4LcfP3S/8EONV EC5dDRqAsRKP7BpusRMwssoJdNewZ9IudWqLEChmWCCh+5gEclfAgrHyffJN8x0f QXG5X/HIJXBYplUNKsVJebFVfvNmsw/SDDABa6z8ecAhzrZNri6fl2vAv4H9ickE ts7UDgj9U85seHQ+Z8riaN+MNbxqHy/RC2SaMM+L5jWsQHJkCBxZ4Krzr01kPMzF fD5hiRI46H+MZ3JP5RnSv+7nv4ncLbAS -----END CERTIFICATE-----Generated at Sat Jun 14 17:15:06 2025 by rpki-client