$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: AHojSRGuMGRaxqXvvbICFFnPCj0BWoMygLMan+HyF0k= Subject key identifier: E0:DB:01:77:C7:DE:88:47:9A:6D:E9:51:88:AA:14:3A:10:16:D3:60 Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 255C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 254C Signing time: Fri 22 Aug 2025 15:43:43 +0000 Manifest this update: Fri 22 Aug 2025 15:43:42 +0000 Manifest next update: Fri 29 Aug 2025 15:43:42 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: iDwFo8rjIJVeYQkA4swlweOUoMhqlhZRvIo2I5JgdWY=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: xnMX5X2YJrVvWA8Z+ilrknMulrMIGU6wGg57HKZlkt0=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: f2BKC0SfvfCVZzewNCyKNQgaDwalvIHM6ibs4HCHEDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9564 (0x255c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: Aug 22 15:43:42 2025 GMT Not After : Aug 29 15:43:42 2025 GMT Subject: CN=68a8902f-df7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:ea:33:6b:f3:96:3c:f3:51:dd:5c:df:06: 97:f5:b7:4a:b4:9f:41:39:69:fd:5c:0d:ed:ac:dd: ca:b0:42:3f:ec:ce:11:49:f2:30:24:df:f8:64:cd: d1:a9:cf:ac:87:01:9f:6e:9b:1b:82:47:1e:04:89: 36:43:4c:d2:45:eb:92:1f:c3:ba:e7:4d:38:5b:c9: a8:dc:8a:e2:7f:0b:b8:6b:06:82:5c:fb:7f:e1:68: 99:c8:5b:e7:b6:ec:e6:0d:ec:96:29:d8:fd:57:7c: 32:fc:ce:cb:23:ac:f7:57:ce:2a:eb:e4:b8:cc:61: 26:f7:fb:9e:c2:a9:3e:3f:66:79:05:28:ed:0f:1d: 48:47:3a:9e:66:83:8c:26:84:d6:e2:a1:85:18:39: 80:e3:4d:4c:80:d9:d4:0f:4b:fd:27:21:2f:a5:33: 21:20:58:e5:94:57:f0:a1:31:44:a3:04:78:c1:44: a7:d6:7f:56:9e:a2:7f:d1:20:26:6b:e4:f1:3c:06: da:9f:ac:33:5a:c0:ca:d4:37:8d:98:f4:65:9d:98: b4:69:cc:61:fd:45:60:b3:33:ea:81:cc:e6:dc:b9: ea:42:58:be:78:b7:1b:4a:5e:2f:8b:fe:5a:0a:dd: 6f:36:d9:5d:1f:1e:86:a0:76:e4:ff:3a:df:ef:73: 02:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DB:01:77:C7:DE:88:47:9A:6D:E9:51:88:AA:14:3A:10:16:D3:60 X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:2b:2a:1e:8d:38:e0:eb:f2:e3:b0:b3:50:1d:68:bb:ce:9a: 12:0f:29:5c:fc:f4:7a:73:88:3e:e0:49:cc:53:50:63:dc:53: f7:71:90:c4:ab:b9:bb:a8:6e:bf:d1:e1:44:f2:01:27:e2:d8: c9:34:5d:97:21:db:d7:f4:5b:21:31:b6:e8:0f:30:72:2f:e0: c1:4e:95:ea:4e:4c:68:e1:aa:b1:7b:f4:f9:4f:78:f2:26:d1: e7:67:89:45:eb:82:8b:8b:1f:12:ef:c2:f1:6d:2e:ad:0f:b7: 20:9e:ee:dd:6b:b3:e2:c8:d7:e7:f5:dd:d3:47:06:3e:fc:d5: 58:2e:a7:4f:65:49:02:f6:7d:1c:75:82:d7:7b:02:47:89:2b: 62:ce:65:7e:88:f8:7f:57:8c:e5:6a:96:6d:b6:8d:05:9d:39: 10:72:06:2e:42:26:5f:60:cb:13:f5:01:82:36:51:c1:49:bf: c3:7c:a8:6e:3d:26:49:25:e2:54:0a:f7:9c:aa:58:ac:9c:bb: 9f:21:b4:92:f3:14:f7:4b:d0:01:18:4d:f7:94:fe:fa:ca:38: 89:d6:53:bf:bc:a6:9b:a9:32:78:80:53:07:8b:9d:05:65:7f: fd:6f:80:47:88:ae:b2:d7:03:a6:63:8a:f2:b4:e6:65:53:76: 11:1d:46:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUwODIyMTU0MzQyWhcNMjUwODI5MTU0MzQyWjAYMRYwFAYD VQQDEw02OGE4OTAyZi1kZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjLqM2vzljzzUd1c3waX9bdKtJ9BOWn9XA3trN3KsEI/7M4RSfIwJN/4ZM3R qc+shwGfbpsbgkceBIk2Q0zSReuSH8O65004W8mo3Irifwu4awaCXPt/4WiZyFvn tuzmDeyWKdj9V3wy/M7LI6z3V84q6+S4zGEm9/uewqk+P2Z5BSjtDx1IRzqeZoOM JoTW4qGFGDmA401MgNnUD0v9JyEvpTMhIFjllFfwoTFEowR4wUSn1n9WnqJ/0SAm a+TxPAban6wzWsDK1DeNmPRlnZi0acxh/UVgszPqgczm3LnqQli+eLcbSl4vi/5a Ct1vNtldHx6GoHbk/zrf73MCaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODbAXfH 3ohHmm3pUYiqFDoQFtNgMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXKyoejTjg6/LjsLNQHWi7zpoSDylc/PR6c4g+4EnMU1Bj3FP3cZDE q7m7qG6/0eFE8gEn4tjJNF2XIdvX9FshMbboDzByL+DBTpXqTkxo4aqxe/T5T3jy JtHnZ4lF64KLix8S78LxbS6tD7cgnu7da7PiyNfn9d3TRwY+/NVYLqdPZUkC9n0c dYLXewJHiStizmV+iPh/V4zlapZtto0FnTkQcgYuQiZfYMsT9QGCNlHBSb/DfKhu PSZJJeJUCvecqlisnLufIbSS8xT3S9ABGE33lP76yjiJ1lO/vKabqTJ4gFMHi50F ZX/9b4BHiK6y1wOmY4rytOZlU3YRHUbC -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:03 2025 by rpki-client