$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft File: XozcAfwJtFN0mgHuUjmzXt4kvmw.mft (raw, json) Hash identifier: B3H3HoxfW3W4L16bjyQrfMMP/MmVLIBTKwu7BNE3ehc= Subject key identifier: FC:3E:07:42:14:86:3A:DC:4C:31:65:36:38:F2:A4:69:E5:67:31:AA Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C Certificate serial: 0740 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft Manifest number: 073A Signing time: Thu 12 Jun 2025 21:26:15 +0000 Manifest this update: Thu 12 Jun 2025 21:26:15 +0000 Manifest next update: Thu 19 Jun 2025 21:26:15 +0000 Files and hashes: 1: XozcAfwJtFN0mgHuUjmzXt4kvmw.crl (hash: 7clzvUZuLzG0nCGic1r0NvPBgF1JvDmWCeEnO+S9frw=) 2: A5D573E4305A11EB921D6332C4F9AE02.roa (hash: YBEc7X7y2zLa5OdEGOrRlwoEuxYs7fU2wrxzm81YklQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C Validity Not Before: Jun 12 21:26:15 2025 GMT Not After : Jun 19 21:26:15 2025 GMT Subject: CN=684b45f7-81d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:29:6a:fd:12:05:1a:72:e8:50:7b:55:1a:d9: f3:da:8d:fe:07:72:56:32:f4:e0:52:5c:55:b3:f5: 24:dc:ce:5d:15:94:10:7f:9c:05:0c:77:26:4f:47: 97:89:7e:82:2a:e8:bd:07:c6:d6:73:b6:c9:e3:24: af:8a:c9:33:c9:68:56:20:a9:bd:e1:e7:23:35:3f: cd:77:5c:59:3a:59:62:50:b1:b5:54:89:06:a5:a6: c6:4a:a5:06:67:65:4e:b3:2a:11:11:64:cf:66:65: d6:30:42:36:8d:91:51:75:cf:01:47:a1:04:1f:8e: 13:9c:64:df:b7:72:bd:f5:33:76:24:aa:4e:71:a9: cb:d4:1b:1e:10:90:9c:69:f7:15:bb:f4:f1:75:90: 90:ee:8b:cf:a1:1f:96:e7:da:41:eb:22:17:f1:8e: 5d:02:43:a8:41:47:8b:78:fc:a5:4f:4f:c9:16:1a: 28:01:71:0d:c4:da:6f:c6:b0:90:5c:51:c5:f0:66: e1:e6:8d:2f:cc:14:43:75:3a:c3:da:a3:ba:0e:0e: 40:3b:5e:48:ae:c1:d1:05:89:af:0b:e9:96:4e:66: ec:79:b3:3b:64:db:e2:5f:83:bb:e6:1b:61:0e:b4: 0e:4a:b6:8a:98:91:24:b5:e7:87:d4:50:7c:ed:66: 11:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3E:07:42:14:86:3A:DC:4C:31:65:36:38:F2:A4:69:E5:67:31:AA X509v3 Authority Key Identifier: keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:76:da:6b:7c:af:6b:bc:f7:4e:43:7a:fb:de:a5:ae:e5:e9: ad:b8:e4:2f:3c:a3:d5:4b:d4:87:f9:2e:ea:5c:9a:6b:57:61: 80:37:6c:5c:01:c5:d7:28:68:52:e0:97:2d:a4:1f:1c:49:53: 27:d2:08:d8:49:a9:9b:e2:5c:88:85:84:fb:10:32:17:fd:e2: 3b:40:5e:49:ae:43:58:82:1d:fe:03:07:a4:43:59:a0:d7:62: a8:af:fd:4a:fa:54:23:88:52:61:41:7a:c0:58:e6:60:9a:b1: 0a:22:65:3e:fd:bc:20:2c:c4:ab:7e:35:ff:d2:1c:c0:44:7a: 43:9a:37:dd:92:d8:75:56:95:87:2c:ce:81:25:42:96:53:84: cb:2c:78:5d:62:e1:ff:b0:81:ea:99:bc:9c:73:fe:e5:98:8c: 76:e2:48:3b:64:8d:bb:94:bb:6d:4d:18:55:2a:c5:93:98:ce: 6e:37:50:ad:35:44:b5:d2:e8:10:0d:8a:6b:c6:d6:4f:c3:ea: ba:53:01:70:88:f2:15:8b:ed:a4:a7:db:fa:d7:48:a5:17:be: 4e:eb:57:bf:39:3d:59:ec:c7:03:ff:08:cd:33:e1:50:a9:93: 01:5c:c6:02:ea:ca:1e:a2:8d:3e:b7:76:ac:eb:60:44:18:e5: 9d:36:d5:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDRkExMTAvBgNVBAUTKDVFOENEQzAxRkMwOUI0NTM3NDlBMDFFRTUyMzlCMzVF REUyNEJFNkMwHhcNMjUwNjEyMjEyNjE1WhcNMjUwNjE5MjEyNjE1WjAYMRYwFAYD VQQDEw02ODRiNDVmNy04MWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ilq/RIFGnLoUHtVGtnz2o3+B3JWMvTgUlxVs/Uk3M5dFZQQf5wFDHcmT0eX iX6CKui9B8bWc7bJ4ySviskzyWhWIKm94ecjNT/Nd1xZOlliULG1VIkGpabGSqUG Z2VOsyoREWTPZmXWMEI2jZFRdc8BR6EEH44TnGTft3K99TN2JKpOcanL1BseEJCc afcVu/TxdZCQ7ovPoR+W59pB6yIX8Y5dAkOoQUeLePylT0/JFhooAXENxNpvxrCQ XFHF8Gbh5o0vzBRDdTrD2qO6Dg5AO15IrsHRBYmvC+mWTmbsebM7ZNviX4O75hth DrQOSraKmJEkteeH1FB87WYRFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPw+B0IU hjrcTDFlNjjypGnlZzGqMB8GA1UdIwQYMBaAFF6M3AH8CbRTdJoB7lI5s17eJL5s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNENGQS8xQzJGQUIyRTMw NTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRGTjBtZ0h1VWptelh0NGt2 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvemNBZndKdEZOMG1nSHVVam16WHQ0a3Ztdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NENGQS8xQzJGQUIyRTMwNTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRG TjBtZ0h1VWptelh0NGt2bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBadtprfK9rvPdOQ3r73qWu5emtuOQvPKPVS9SH+S7qXJprV2GAN2xc AcXXKGhS4JctpB8cSVMn0gjYSamb4lyIhYT7EDIX/eI7QF5JrkNYgh3+AwekQ1mg 12Kor/1K+lQjiFJhQXrAWOZgmrEKImU+/bwgLMSrfjX/0hzARHpDmjfdkth1VpWH LM6BJUKWU4TLLHhdYuH/sIHqmbycc/7lmIx24kg7ZI27lLttTRhVKsWTmM5uN1Ct NUS10ugQDYprxtZPw+q6UwFwiPIVi+2kp9v610ilF75O61e/OT1Z7McD/wjNM+FQ qZMBXMYC6soeoo0+t3as62BEGOWdNtVv -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:24 2025 by rpki-client