$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: xC3yEAd05Swz4uCzWOinuU+ldC2sbFKo8rQyZGoIXU0= Subject key identifier: 5B:DE:A0:59:F6:2E:96:76:49:2E:3D:2A:8A:1B:B4:BA:D1:91:F3:E5 Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 0405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 03F8 Signing time: Thu 19 Jun 2025 00:19:34 +0000 Manifest this update: Thu 19 Jun 2025 00:19:34 +0000 Manifest next update: Thu 26 Jun 2025 00:19:34 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: ZEjlSbr5CrokItxTvkZqnkMNRjvEGxRMN/g0Qin0JbQ=) 2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1029 (0x405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Jun 19 00:19:34 2025 GMT Not After : Jun 26 00:19:34 2025 GMT Subject: CN=68535796-e6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:26:0c:8e:bb:60:2f:ba:6d:27:b0:f2:b9: 64:4b:7d:c3:9a:a1:b4:9c:d2:c1:2b:2d:97:59:55: ea:72:d0:50:63:1d:c3:13:ae:dd:36:74:11:9c:89: 71:66:97:3f:9e:63:75:9e:cb:41:59:41:0b:2d:10: 3e:ee:d0:9c:a0:73:16:26:7c:ab:96:11:0b:a1:b8: bc:c2:1f:0d:ed:c2:bc:dd:ee:a5:4f:44:b6:4b:78: e0:00:d7:07:bd:ad:e1:e7:80:41:27:94:39:84:54: 44:e8:ae:f5:c2:29:1e:44:d2:ef:0b:b4:8d:87:cd: 95:ad:a4:94:a6:b8:1f:31:20:c8:13:84:7a:12:fa: b6:f7:52:14:99:8c:5d:b5:4c:6a:c0:10:e9:e7:70: fd:34:c9:e4:95:19:45:f8:77:46:b8:77:14:4a:8e: a7:2f:40:22:e4:b0:04:34:68:e5:ba:cf:ea:6d:5b: 23:1f:d9:ed:36:29:3d:5c:56:9c:e4:39:33:f9:22: 09:bc:3d:bc:93:37:8b:f1:19:fa:5d:35:30:47:c8: 99:95:52:bb:ac:4b:c8:fd:3c:b2:37:21:0f:19:a9: 56:c3:cd:69:20:af:51:1f:3d:d2:2d:55:8e:2e:df: cd:e9:79:f2:83:c2:ba:f3:f2:5a:63:6e:75:ba:07: 55:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DE:A0:59:F6:2E:96:76:49:2E:3D:2A:8A:1B:B4:BA:D1:91:F3:E5 X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cd:cc:80:ed:18:50:df:55:a2:4a:19:f0:38:03:9e:21:c6: bb:0c:46:ab:34:5a:3e:26:83:f1:c2:3b:83:3d:c5:68:66:ac: 32:ac:66:9b:94:1c:43:c8:2e:7c:02:bb:48:c6:a4:b7:74:83: 33:f7:a2:12:ed:e0:bf:ef:3c:ec:68:ad:7f:73:d8:76:ce:26: cf:dd:6a:7a:46:d2:ab:0c:0d:80:45:77:0c:78:8e:11:72:5e: 15:8b:5f:fd:b5:55:45:1d:30:d3:c2:84:20:e5:16:6c:e0:5a: f7:cd:6f:54:33:22:9b:fe:de:25:a7:97:78:29:b9:c6:b2:26: 22:c9:8d:4e:a3:60:f1:bf:6c:87:67:0f:68:1a:5d:a0:86:18: db:fa:b9:1c:43:55:2a:df:4c:c7:46:44:c1:a2:9f:31:69:30: 5a:7e:8f:e0:d3:c1:ce:48:91:75:8d:05:b0:4e:f3:1b:58:b1: c0:a0:ef:76:87:29:bf:a1:25:09:bc:ec:12:74:0d:3b:ea:ee: b3:c5:ce:41:fd:ff:03:b3:d5:44:5d:27:6b:44:e0:c5:fd:d1: d4:4a:1c:9d:53:9f:cb:05:6f:f3:18:05:1d:9f:98:18:bd:fe: bd:71:88:43:ba:cb:d3:be:a4:49:89:7a:e3:a8:51:eb:e3:15: 57:c7:dd:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjUwNjE5MDAxOTM0WhcNMjUwNjI2MDAxOTM0WjAYMRYwFAYD VQQDEw02ODUzNTc5Ni1lNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNgmDI67YC+6bSew8rlkS33DmqG0nNLBKy2XWVXqctBQYx3DE67dNnQRnIlx Zpc/nmN1nstBWUELLRA+7tCcoHMWJnyrlhELobi8wh8N7cK83e6lT0S2S3jgANcH va3h54BBJ5Q5hFRE6K71wikeRNLvC7SNh82VraSUprgfMSDIE4R6Evq291IUmYxd tUxqwBDp53D9NMnklRlF+HdGuHcUSo6nL0Ai5LAENGjlus/qbVsjH9ntNik9XFac 5Dkz+SIJvD28kzeL8Rn6XTUwR8iZlVK7rEvI/TyyNyEPGalWw81pIK9RHz3SLVWO Lt/N6Xnyg8K68/JaY251ugdVaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFveoFn2 LpZ2SS49KoobtLrRkfPlMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOzcyA7RhQ31WiShnwOAOeIca7DEarNFo+JoPxwjuDPcVoZqwyrGab lBxDyC58ArtIxqS3dIMz96IS7eC/7zzsaK1/c9h2zibP3Wp6RtKrDA2ARXcMeI4R cl4Vi1/9tVVFHTDTwoQg5RZs4Fr3zW9UMyKb/t4lp5d4KbnGsiYiyY1Oo2Dxv2yH Zw9oGl2ghhjb+rkcQ1Uq30zHRkTBop8xaTBafo/g08HOSJF1jQWwTvMbWLHAoO92 hym/oSUJvOwSdA076u6zxc5B/f8Ds9VEXSdrRODF/dHUShydU5/LBW/zGAUdn5gY vf69cYhDusvTvqRJiXrjqFHr4xVXx91q -----END CERTIFICATE-----Generated at Thu Jun 19 20:03:06 2025 by rpki-client