$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: rYXqOnhF5KnZzVmTtkM1Qa2EmbVNRF9G0AMknmBho6E= Subject key identifier: 4B:A4:68:1C:80:2D:27:47:EA:3E:72:BF:44:A8:D8:47:BF:52:C2:74 Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 0701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 06FC Signing time: Fri 22 Aug 2025 22:04:58 +0000 Manifest this update: Fri 22 Aug 2025 22:04:57 +0000 Manifest next update: Fri 29 Aug 2025 22:04:57 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: Mrgij+UMQjoyMw1i/hZikLsLGY1ebCSD8WRXY2MgUgU=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: +cH8RmJhdymM82G2tjdg2T5wIUQwcB/rD1A615a7HRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: Aug 22 22:04:57 2025 GMT Not After : Aug 29 22:04:57 2025 GMT Subject: CN=68a8e989-6471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ca:6b:5c:74:26:34:ce:d3:86:df:98:3e:e9: 9c:aa:48:28:e2:ea:52:71:df:92:05:b5:ff:7a:2e: ce:f5:48:7e:16:73:cb:d8:e8:72:03:bb:e4:60:88: 9d:59:91:71:56:ee:54:e1:d0:48:92:ff:10:02:2c: ed:7b:4a:ff:88:f4:52:ca:48:01:09:75:7b:c8:1d: de:8a:b8:a8:2d:2c:1a:f8:43:d8:b8:9c:f7:b1:44: 2d:80:23:ca:40:be:28:16:d9:e4:4e:51:64:5d:f5: 13:49:d9:0a:84:ad:47:2f:7e:21:ef:52:51:a1:7b: 6b:0d:3b:c7:40:36:c4:3a:76:02:a7:95:92:cd:67: a9:9a:f8:cc:21:36:ee:2a:50:b5:85:08:c5:d8:34: 9e:0e:39:8c:0a:06:e2:fc:7f:16:54:ad:a1:e7:c3: 24:97:81:b6:ae:4e:0f:a7:89:6f:39:7e:c7:40:2e: 62:67:56:de:b7:93:09:5f:2f:7f:00:da:eb:97:2e: 45:a7:ea:bf:ef:93:2d:f6:65:5f:72:b6:d1:38:62: 59:6c:55:04:12:b9:0e:5b:9d:c2:1d:be:ff:fd:73: c2:dd:4c:7b:c7:a5:e7:78:13:c3:e7:d2:6d:87:c5: 97:36:8b:59:2b:e7:e3:5c:b6:cd:05:2d:5e:74:0b: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A4:68:1C:80:2D:27:47:EA:3E:72:BF:44:A8:D8:47:BF:52:C2:74 X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:77:5b:f9:0a:9a:cb:0a:8c:74:bd:e5:f5:9e:1b:ed:a3:25: 07:58:85:12:85:97:55:bf:26:e2:29:46:d7:28:fd:08:6c:27: f5:9d:04:27:69:3c:08:05:95:c5:37:ee:4c:7e:bf:bb:2a:14: 29:9e:ed:d7:9d:25:eb:05:7b:d1:36:6f:d3:d7:b9:fa:3a:38: 04:96:f6:1a:4f:1b:de:5e:77:72:5f:a7:94:6d:43:93:34:49: 42:66:82:c1:54:36:0d:63:54:1c:0e:43:27:ce:df:69:cd:f1: dc:1e:34:bc:ae:e4:19:33:57:e5:34:10:65:7e:55:bf:aa:04: 81:0b:a1:a3:2c:bf:d2:47:06:bc:14:1d:45:bc:7e:ef:5f:f7: 37:66:d2:d3:01:b5:65:94:45:19:93:fc:14:ed:1c:54:16:d0: c1:90:cb:7f:16:a3:93:43:da:7b:5c:cf:fb:1d:d2:c0:8d:31: 5b:18:76:6f:dc:45:9f:39:ae:a7:cf:17:7d:39:05:09:53:f6: 74:cd:1b:ee:ff:a2:16:dc:3d:c2:6f:0e:e3:db:2b:f9:8f:2d: cc:f7:0b:39:1e:5d:b8:a1:63:4f:f1:84:fa:fc:a7:9c:37:dc: 67:38:40:5a:ce:71:4f:93:71:0b:44:1c:a5:40:09:df:b7:88: 4f:2c:2e:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjUwODIyMjIwNDU3WhcNMjUwODI5MjIwNDU3WjAYMRYwFAYD VQQDEw02OGE4ZTk4OS02NDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cprXHQmNM7Tht+YPumcqkgo4upScd+SBbX/ei7O9Uh+FnPL2OhyA7vkYIid WZFxVu5U4dBIkv8QAizte0r/iPRSykgBCXV7yB3eirioLSwa+EPYuJz3sUQtgCPK QL4oFtnkTlFkXfUTSdkKhK1HL34h71JRoXtrDTvHQDbEOnYCp5WSzWepmvjMITbu KlC1hQjF2DSeDjmMCgbi/H8WVK2h58Mkl4G2rk4Pp4lvOX7HQC5iZ1bet5MJXy9/ ANrrly5Fp+q/75Mt9mVfcrbROGJZbFUEErkOW53CHb7//XPC3Ux7x6XneBPD59Jt h8WXNotZK+fjXLbNBS1edAsKIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEukaByA LSdH6j5yv0So2Ee/UsJ0MB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUd1v5CprLCox0veX1nhvtoyUHWIUShZdVvybiKUbXKP0IbCf1nQQn aTwIBZXFN+5Mfr+7KhQpnu3XnSXrBXvRNm/T17n6OjgElvYaTxveXndyX6eUbUOT NElCZoLBVDYNY1QcDkMnzt9pzfHcHjS8ruQZM1flNBBlflW/qgSBC6GjLL/SRwa8 FB1FvH7vX/c3ZtLTAbVllEUZk/wU7RxUFtDBkMt/FqOTQ9p7XM/7HdLAjTFbGHZv 3EWfOa6nzxd9OQUJU/Z0zRvu/6IW3D3Cbw7j2yv5jy3M9ws5Hl24oWNP8YT6/Kec N9xnOEBaznFPk3ELRBylQAnft4hPLC55 -----END CERTIFICATE-----Generated at Sun Aug 24 03:06:10 2025 by rpki-client