$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: SdAdO8ZdElzeRpk7et+hROkMxgsowaypgyZmt1T+PTk= Subject key identifier: B5:C8:91:38:52:A7:DC:EF:56:50:62:16:42:13:66:C5:B6:EE:E3:57 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 06EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 06DF Signing time: Fri 22 Aug 2025 22:11:27 +0000 Manifest this update: Fri 22 Aug 2025 22:11:26 +0000 Manifest next update: Fri 29 Aug 2025 22:11:26 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: x/5p7ea21rHNVSgIgSFzm1DxHqbXuTxyw9F74bRrwr4=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1774 (0x6ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Aug 22 22:11:26 2025 GMT Not After : Aug 29 22:11:26 2025 GMT Subject: CN=68a8eb0e-7208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bd:1b:b0:83:39:7c:76:67:d0:2c:f2:2d:da: 89:76:fb:5e:18:eb:d8:0c:92:51:30:7b:4e:0d:c3: 5e:3b:b2:98:63:18:2b:51:74:f8:19:14:26:77:9f: 4e:bf:0b:f6:f7:e6:32:de:b9:20:f9:86:5c:b6:0d: 26:59:be:81:42:07:54:47:a7:df:07:d7:28:1a:62: 1f:0a:14:4a:5c:f2:e8:69:ef:e8:9b:da:6d:a0:80: 60:a4:2e:ae:06:fc:bd:9c:fc:4c:2f:91:22:4c:30: 4f:f7:c8:89:89:22:6c:30:77:94:ef:1c:1b:e2:0e: d4:ea:a8:84:11:16:48:86:4a:cf:3a:6f:31:69:f3: de:09:d6:8b:74:3a:63:6b:7f:56:e5:23:e9:bf:1d: 90:a1:44:08:b2:0b:40:6d:29:fc:46:de:4f:57:c2: 26:bd:74:d6:5e:01:c2:b0:e1:fb:e2:bb:a1:6b:54: cc:87:a3:df:79:97:8c:7f:36:d5:20:86:83:56:22: 01:f3:fb:00:ad:2a:e2:b3:38:3d:c5:d2:60:13:3d: 5e:89:18:5d:7d:e8:69:13:60:e3:d9:1e:ee:48:c4: f7:13:eb:20:13:49:57:55:96:98:fa:2c:39:f4:06: 3a:75:1c:65:18:63:f8:95:f5:3c:52:ad:3e:22:16: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C8:91:38:52:A7:DC:EF:56:50:62:16:42:13:66:C5:B6:EE:E3:57 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:dd:05:98:ae:61:d0:2e:49:76:a8:08:42:f3:27:88:fb:d5: c6:f1:93:06:6a:a3:97:1e:ea:7c:be:30:c1:b7:4f:bd:74:c6: 9b:9d:e8:75:36:55:52:7d:08:e1:53:50:c6:07:72:39:72:36: 0c:2b:19:ee:02:b1:33:d5:b5:63:c5:96:0f:e2:25:a9:91:82: 25:0d:14:12:05:45:92:a7:e8:b6:3c:49:2c:8c:29:d5:25:cc: 6c:98:89:dc:99:4b:e2:f0:71:b5:29:f4:9a:00:43:8b:50:6b: 0c:68:e9:74:e0:5c:63:41:2d:f2:e4:7e:9d:e7:ae:b9:80:3d: f9:02:41:c0:ac:d5:4d:c8:eb:4b:88:2d:f0:d0:69:d4:c7:76: 95:47:9d:00:a5:af:6e:27:84:12:9c:12:2f:be:d4:23:e7:54: 80:ac:74:ff:66:34:25:cc:c6:6d:cd:77:74:28:a3:fb:0e:58: ed:b4:16:99:d5:0a:17:60:03:e2:6c:2c:a4:34:34:e1:aa:48: 2d:4a:0f:bb:57:50:98:5a:ee:cd:cb:0b:e9:01:26:fd:2a:49: df:02:37:c9:0c:d2:10:5a:a0:a1:81:5f:c1:eb:26:a5:ed:1f: 0b:c8:3d:f6:d5:e7:20:be:dd:c8:9d:db:77:0c:b3:06:0e:1b: 27:82:9e:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjUwODIyMjIxMTI2WhcNMjUwODI5MjIxMTI2WjAYMRYwFAYD VQQDEw02OGE4ZWIwZS03MjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA270bsIM5fHZn0CzyLdqJdvteGOvYDJJRMHtODcNeO7KYYxgrUXT4GRQmd59O vwv29+Yy3rkg+YZctg0mWb6BQgdUR6ffB9coGmIfChRKXPLoae/om9ptoIBgpC6u Bvy9nPxML5EiTDBP98iJiSJsMHeU7xwb4g7U6qiEERZIhkrPOm8xafPeCdaLdDpj a39W5SPpvx2QoUQIsgtAbSn8Rt5PV8ImvXTWXgHCsOH74ruha1TMh6PfeZeMfzbV IIaDViIB8/sArSriszg9xdJgEz1eiRhdfehpE2Dj2R7uSMT3E+sgE0lXVZaY+iw5 9AY6dRxlGGP4lfU8Uq0+IhZ79wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXIkThS p9zvVlBiFkITZsW27uNXMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC53QWYrmHQLkl2qAhC8yeI+9XG8ZMGaqOXHup8vjDBt0+9dMabneh1 NlVSfQjhU1DGB3I5cjYMKxnuArEz1bVjxZYP4iWpkYIlDRQSBUWSp+i2PEksjCnV JcxsmIncmUvi8HG1KfSaAEOLUGsMaOl04FxjQS3y5H6d5665gD35AkHArNVNyOtL iC3w0GnUx3aVR50Apa9uJ4QSnBIvvtQj51SArHT/ZjQlzMZtzXd0KKP7DljttBaZ 1QoXYAPibCykNDThqkgtSg+7V1CYWu7NywvpASb9KknfAjfJDNIQWqChgV/B6yal 7R8LyD321ecgvt3Indt3DLMGDhsngp4s -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:48 2025 by rpki-client