$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft File: XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json) Hash identifier: VnyXPGyIsKZc3LJ2IyhOu72RJUhpxfc281poMZjkElk= Subject key identifier: 18:69:8F:AF:AF:FC:F6:42:E7:E1:57:1B:9E:DE:E3:69:29:50:BB:03 Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F Certificate issuer: /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft Manifest number: 02CA Signing time: Fri 13 Jun 2025 00:55:36 +0000 Manifest this update: Fri 13 Jun 2025 00:55:35 +0000 Manifest next update: Fri 20 Jun 2025 00:55:35 +0000 Files and hashes: 1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: 2QeizWJMGpg2wHf5GybtAVbTmQ/C+cy+Dc14ZT/Wso4=) 2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: cUJGyZcVowcCyXH2QiojzhWnaBYy0l9+HvH8D9IR1zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Validity Not Before: Jun 13 00:55:35 2025 GMT Not After : Jun 20 00:55:35 2025 GMT Subject: CN=684b7707-eb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:ba:4b:c9:78:db:2f:09:55:08:66:27:1a: b1:e9:52:dd:ac:0d:41:da:cd:a4:d1:b8:8b:48:fb: cb:36:54:8a:53:d1:e2:8d:2a:67:d7:6d:4e:60:2a: c5:cf:eb:97:95:3f:4f:cc:75:31:d8:cb:03:78:82: ee:2f:23:e8:b5:89:99:72:0d:37:62:00:3b:aa:b2: 3b:45:d8:ae:ef:d7:e5:f1:1f:e7:48:d9:2d:4c:f5: 2a:fa:68:9b:b1:22:82:9f:a3:9d:88:b3:82:a9:db: 96:44:39:eb:bb:f9:ab:1a:fc:e0:76:02:8b:17:8a: 93:5a:2a:05:db:81:f0:db:84:b2:19:c7:ab:1b:6b: 0b:47:12:f8:97:c2:c8:5b:b2:ef:43:3c:09:fc:b4: 60:ef:0e:ac:71:4b:ca:a7:8d:bc:53:29:c9:98:22: b9:30:a4:97:fe:15:54:ac:39:09:f6:8e:d7:f7:47: 98:de:03:76:8e:2a:01:58:55:09:ed:a5:73:8a:ca: 9d:4d:06:9c:50:ef:8c:00:b6:ff:1f:7a:ab:09:c8: e2:64:30:54:b1:58:a2:03:1d:5d:83:29:a2:fa:ca: fa:19:50:b1:b8:5e:ab:2d:30:8e:ba:8f:d4:82:fa: f8:f2:f7:11:c8:4f:bf:df:6d:fc:03:e9:60:7a:f9: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:69:8F:AF:AF:FC:F6:42:E7:E1:57:1B:9E:DE:E3:69:29:50:BB:03 X509v3 Authority Key Identifier: keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f6:6f:0c:16:6b:f1:64:a2:bd:a3:4d:92:7d:65:74:d4:ed: db:8f:dd:70:fb:2d:ff:be:1c:45:7a:98:c5:dc:30:6b:57:4c: d4:65:e2:2b:30:0c:20:3c:87:a3:4a:67:4f:64:8a:a2:4f:67: 36:8b:79:38:11:06:b8:4e:ec:63:7f:ed:1b:73:d9:06:78:27: 74:d4:b7:0e:fa:de:2a:c0:2f:64:27:36:d6:97:e0:9c:58:6f: 05:15:d8:21:91:28:0f:4f:a4:b1:76:7b:f9:8a:55:a9:57:5e: cb:fa:c4:bd:a5:50:45:fb:12:20:8b:00:b6:89:8d:c4:99:12: 38:cd:2a:93:1d:8c:da:b3:72:27:d2:92:56:a6:4d:f6:2c:63: 67:78:fc:bd:45:15:95:41:57:02:47:97:37:b2:e9:1c:4e:cb: 87:b4:1b:1f:86:d1:90:90:34:50:bc:22:51:6c:b6:50:72:9e: 5e:d3:4c:8c:9b:32:6f:88:02:dd:8c:09:77:e3:2e:a2:7e:a7: 2b:d2:cc:e3:e5:c4:82:58:28:d9:45:6b:bb:c1:1e:ef:1d:14: 2c:f5:f6:ef:33:85:80:d5:be:5e:1c:15:62:b7:42:e5:1e:c9: e4:65:49:12:5b:1f:e0:8f:87:1a:5b:c4:c9:8b:8a:63:b6:c4: 83:b4:8c:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNzMxMTAvBgNVBAUTKDVFNzA5OTQ5QkFBNDBBN0Q0N0Q0NEQyMTE2OTBCMzc3 RTA1MUM0NUYwHhcNMjUwNjEzMDA1NTM1WhcNMjUwNjIwMDA1NTM1WjAYMRYwFAYD VQQDEw02ODRiNzcwNy1lYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvi6S8l42y8JVQhmJxqx6VLdrA1B2s2k0biLSPvLNlSKU9HijSpn121OYCrF z+uXlT9PzHUx2MsDeILuLyPotYmZcg03YgA7qrI7Rdiu79fl8R/nSNktTPUq+mib sSKCn6OdiLOCqduWRDnru/mrGvzgdgKLF4qTWioF24Hw24SyGcerG2sLRxL4l8LI W7LvQzwJ/LRg7w6scUvKp428UynJmCK5MKSX/hVUrDkJ9o7X90eY3gN2jioBWFUJ 7aVzisqdTQacUO+MALb/H3qrCcjiZDBUsViiAx1dgymi+sr6GVCxuF6rLTCOuo/U gvr48vcRyE+/3238A+lgevmNyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhpj6+v /PZC5+FXG57e42kpULsDMB8GA1UdIwQYMBaAFF5wmUm6pAp9R9RNIRaQs3fgUcRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM3My84MjE0NTdEMkYx MzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0NuMUgxRTBoRnBDemQtQlJ4 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huQ1pTYnFrQ24xSDFFMGhGcEN6ZC1CUnhGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM3My84MjE0NTdEMkYxMzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0Nu MUgxRTBoRnBDemQtQlJ4RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL9m8MFmvxZKK9o02SfWV01O3bj91w+y3/vhxFepjF3DBrV0zUZeIr MAwgPIejSmdPZIqiT2c2i3k4EQa4Tuxjf+0bc9kGeCd01LcO+t4qwC9kJzbWl+Cc WG8FFdghkSgPT6Sxdnv5ilWpV17L+sS9pVBF+xIgiwC2iY3EmRI4zSqTHYzas3In 0pJWpk32LGNnePy9RRWVQVcCR5c3sukcTsuHtBsfhtGQkDRQvCJRbLZQcp5e00yM mzJviALdjAl34y6ifqcr0szj5cSCWCjZRWu7wR7vHRQs9fbvM4WA1b5eHBVit0Ll HsnkZUkSWx/gj4caW8TJi4pjtsSDtIzm -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:05 2025 by rpki-client