$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft File: XUofz1MBwCdZyE7qVZFeJcFxpz8.mft (raw, json) Hash identifier: RnWgPUoHbcsiqZLgwkYPrrp2k97TAXo5Ey2/2rjmPnA= Subject key identifier: 05:F5:A8:77:6A:15:7F:4D:AB:65:44:A0:95:5A:7C:0F:F6:E2:4A:43 Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft Manifest number: 02B9 Signing time: Sat 23 Aug 2025 01:43:07 +0000 Manifest this update: Sat 23 Aug 2025 01:43:07 +0000 Manifest next update: Sat 30 Aug 2025 01:43:07 +0000 Files and hashes: 1: XUofz1MBwCdZyE7qVZFeJcFxpz8.crl (hash: q4mYfWurBEx8kYHWoPP50gbfA0z430OPuNXSNVYlfLw=) 2: 388802BC067711EDA1DEB529C4F9AE02.roa (hash: jv+C3MRRv1S8VzgzhjdRwbO8r25GoT/B3n+TeYBfeTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Validity Not Before: Aug 23 01:43:07 2025 GMT Not After : Aug 30 01:43:07 2025 GMT Subject: CN=68a91cab-13f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:f7:b9:e2:36:09:37:ed:0c:95:86:2a:20: 2d:ea:a7:d4:c1:db:01:2e:86:65:94:eb:40:5d:35: 2c:c4:7e:81:5d:16:46:e4:83:d8:a2:e8:2c:a7:57: 58:6a:d2:d1:d3:20:5c:1c:73:35:b7:85:be:04:da: 52:03:54:ab:80:cc:4d:32:b9:03:06:42:31:1b:15: 37:aa:18:ec:f8:01:f6:b1:0a:4e:4f:45:e8:8f:5e: fb:94:da:07:29:63:11:5c:7e:a2:6a:bd:9b:8e:47: c4:aa:34:ba:0e:0a:a5:c5:f3:85:1e:1c:6c:87:cc: 33:b4:92:50:67:13:63:7b:16:2a:7b:95:8a:7a:7f: 1f:34:6e:7c:12:62:41:40:6b:55:6c:ed:6e:22:9d: b3:02:48:f2:4d:52:3c:fb:24:96:92:c7:fe:a9:62: 61:64:92:51:1a:9e:a5:89:2d:55:d4:51:4a:62:2e: ca:a0:29:95:8c:c5:c0:85:d2:76:38:fb:c7:c7:87: 26:51:e3:23:fa:0c:be:4d:fb:5e:dd:06:88:d6:a5: 46:69:b9:a3:ad:76:eb:02:9b:21:3a:6c:20:61:a6: 6e:7b:8f:da:39:10:68:a5:ed:75:a5:57:73:6c:74: f1:cd:04:9b:da:75:e9:92:0c:a2:a3:e8:36:cf:04: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F5:A8:77:6A:15:7F:4D:AB:65:44:A0:95:5A:7C:0F:F6:E2:4A:43 X509v3 Authority Key Identifier: keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b6:61:71:7f:65:08:dc:56:13:97:a0:d8:7f:2d:37:c6:32: 9f:b2:cc:3f:7a:9a:85:2a:21:71:12:39:e5:83:fa:79:f5:07: c2:ad:18:54:c6:d9:3e:71:b0:83:9f:b8:04:34:ee:57:81:88: 1e:f7:fc:88:14:46:0c:44:ed:ce:24:f4:14:83:8d:3e:33:74: 03:4c:97:fb:0d:8e:3d:6c:8f:87:bf:b0:f7:b9:b5:61:ac:31: 99:fe:06:77:ee:67:f4:e1:3e:53:e9:c0:d2:ae:25:cd:52:0c: b3:59:c4:f0:24:b0:ac:5f:67:46:e1:00:2c:43:27:b6:88:bf: be:8f:14:4e:ad:0d:52:e0:16:09:f3:ef:9d:7c:01:03:d8:28: b4:c0:f5:5c:06:2b:89:b5:70:61:d7:d1:4b:65:c1:19:f9:e0: c3:be:d7:52:44:b5:f0:43:77:74:0f:09:eb:3b:14:0d:61:0f: 32:4e:48:8b:e6:34:c4:8f:43:06:52:7c:cb:83:b8:30:fc:a2: 4a:13:0f:84:af:21:36:d4:d5:e4:b4:18:99:e4:37:cf:7e:ee: 4d:05:b7:73:86:b0:e9:ec:be:5f:bc:78:1e:12:11:be:87:1a: bf:50:3e:85:40:dd:49:b4:88:e9:a2:4a:5d:14:51:82:11:be: f6:83:d7:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0RTkxMTAvBgNVBAUTKDVENEExRkNGNTMwMUMwMjc1OUM4NEVFQTU1OTE1RTI1 QzE3MUE3M0YwHhcNMjUwODIzMDE0MzA3WhcNMjUwODMwMDE0MzA3WjAYMRYwFAYD VQQDEw02OGE5MWNhYi0xM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLb3ueI2CTftDJWGKiAt6qfUwdsBLoZllOtAXTUsxH6BXRZG5IPYougsp1dY atLR0yBcHHM1t4W+BNpSA1SrgMxNMrkDBkIxGxU3qhjs+AH2sQpOT0Xoj177lNoH KWMRXH6iar2bjkfEqjS6DgqlxfOFHhxsh8wztJJQZxNjexYqe5WKen8fNG58EmJB QGtVbO1uIp2zAkjyTVI8+ySWksf+qWJhZJJRGp6liS1V1FFKYi7KoCmVjMXAhdJ2 OPvHx4cmUeMj+gy+Tfte3QaI1qVGabmjrXbrApshOmwgYaZue4/aORBope11pVdz bHTxzQSb2nXpkgyio+g2zwSa+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAX1qHdq FX9Nq2VEoJVafA/24kpDMB8GA1UdIwQYMBaAFF1KH89TAcAnWchO6lWRXiXBcac/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTRFOS9DNUQ1RTRDQTA2 NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndDZFp5RTdxVlpGZUpjRnhw ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVb2Z6MU1Cd0NkWnlFN3FWWkZlSmNGeHB6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTRFOS9DNUQ1RTRDQTA2NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndD ZFp5RTdxVlpGZUpjRnhwejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOtmFxf2UI3FYTl6DYfy03xjKfssw/epqFKiFxEjnlg/p59QfCrRhU xtk+cbCDn7gENO5XgYge9/yIFEYMRO3OJPQUg40+M3QDTJf7DY49bI+Hv7D3ubVh rDGZ/gZ37mf04T5T6cDSriXNUgyzWcTwJLCsX2dG4QAsQye2iL++jxROrQ1S4BYJ 8++dfAED2Ci0wPVcBiuJtXBh19FLZcEZ+eDDvtdSRLXwQ3d0DwnrOxQNYQ8yTkiL 5jTEj0MGUnzLg7gw/KJKEw+EryE21NXktBiZ5DfPfu5NBbdzhrDp7L5fvHgeEhG+ hxq/UD6FQN1JtIjpokpdFFGCEb72g9c1 -----END CERTIFICATE-----Generated at Sat Aug 23 20:19:23 2025 by rpki-client