$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json) Hash identifier: QruCFjTVpg9/0YAWWmvYG5UB/rbxUoZfhfkMgQudMyo= Subject key identifier: 6F:8C:E9:4F:A7:78:E0:11:EB:87:29:FC:92:B0:35:06:94:C5:E2:CF Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft Manifest number: 0171 Signing time: Sat 23 Aug 2025 03:56:13 +0000 Manifest this update: Sat 23 Aug 2025 03:56:12 +0000 Manifest next update: Sat 30 Aug 2025 03:56:12 +0000 Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: vAsrHztFlDncXJDlBeNRMep57EOFEiQxO5LQtpz7LtM=) 2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: yfGsvyhYqLz0xE6IXfI7E9U3FSonAVaSuKA3zKUE4Zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Validity Not Before: Aug 23 03:56:12 2025 GMT Not After : Aug 30 03:56:12 2025 GMT Subject: CN=68a93bdc-e5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:9e:d0:2c:fb:8a:07:0e:9e:26:8d:bb:45: b8:1d:2c:2e:46:8a:df:70:db:28:e9:84:48:18:46: ee:8a:f7:d4:63:91:0a:4a:00:25:6d:4e:84:4b:2d: 95:c1:e8:eb:df:07:fc:26:1c:0c:8d:50:bd:cc:68: 11:df:4b:a6:95:47:05:a4:01:64:76:90:07:18:42: 11:9c:80:10:a7:18:a2:23:7c:4d:28:7a:31:07:7f: 54:1f:82:62:00:dd:5b:a8:7a:ee:75:6c:eb:71:25: 50:d3:7b:d6:e2:9a:5d:12:53:32:34:37:15:78:75: cc:4f:9a:b7:49:e8:e4:59:c2:fd:5f:f7:72:79:b9: b3:7b:45:de:6e:65:4c:e6:63:61:b3:e3:7d:3d:43: e2:9f:b8:6b:07:e8:fe:8a:ef:1e:db:4a:69:15:b8: fa:1d:ae:ae:9e:6e:f7:8f:ea:b8:0a:f6:df:03:d4: e6:a9:83:cd:40:09:87:93:9b:c3:6e:63:e7:3c:64: c8:02:93:05:83:7e:df:45:d0:e3:86:e9:6a:57:35: ad:7e:c0:10:29:d2:92:7b:ea:9a:ab:c0:d3:93:02: 35:81:4e:59:f5:2d:6b:98:58:1b:a7:7e:d4:e8:91: ca:90:ba:a8:fc:78:4f:af:cf:10:d1:12:60:83:54: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8C:E9:4F:A7:78:E0:11:EB:87:29:FC:92:B0:35:06:94:C5:E2:CF X509v3 Authority Key Identifier: keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c7:4c:e0:49:73:84:05:2f:48:04:54:4f:51:52:92:24:54: 56:26:cd:0c:2a:17:8a:60:cf:57:ff:d3:37:80:78:23:a9:5f: 59:7f:a9:f0:c3:5f:f9:8e:97:c1:10:05:c3:8b:81:0a:21:9e: 2e:24:f0:f0:88:98:49:6d:1a:e6:db:6f:1e:af:d4:7e:bc:4f: dc:d9:49:0e:0b:b9:a8:63:13:8e:9a:28:52:9d:c9:2f:10:8e: 98:48:54:77:09:1a:8c:84:d6:72:ef:f0:23:58:56:02:23:14: 0b:a7:f0:0c:a1:19:da:b7:1d:52:af:86:5f:f4:89:e1:03:b8: 5b:cf:1d:02:e2:53:2a:11:4a:78:3b:2b:03:63:22:4d:7c:f7: 2c:ea:e4:22:fd:79:9d:f3:68:7b:17:39:22:7b:6e:0e:a8:7f: ec:16:a6:6e:73:af:f1:b5:f2:e7:20:dc:e1:8a:b8:8a:4b:ff: bb:bd:cf:63:85:c1:28:f3:19:56:98:d0:23:53:85:53:5c:82: 0c:f8:8b:71:9e:81:a6:23:08:b5:f2:0d:13:16:7e:6b:f2:98: 7c:55:f5:53:51:c6:7a:79:fb:e5:98:26:cb:72:f2:fc:29:db: 62:0e:bd:b9:27:e9:fe:08:6d:53:c2:c0:e8:90:2b:13:dc:a2: 22:a3:93:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC MDU5MTFCOUMwHhcNMjUwODIzMDM1NjEyWhcNMjUwODMwMDM1NjEyWjAYMRYwFAYD VQQDEw02OGE5M2JkYy1lNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gye0Cz7igcOniaNu0W4HSwuRorfcNso6YRIGEbuivfUY5EKSgAlbU6ESy2V wejr3wf8JhwMjVC9zGgR30umlUcFpAFkdpAHGEIRnIAQpxiiI3xNKHoxB39UH4Ji AN1bqHrudWzrcSVQ03vW4ppdElMyNDcVeHXMT5q3SejkWcL9X/dyebmze0XebmVM 5mNhs+N9PUPin7hrB+j+iu8e20ppFbj6Ha6unm73j+q4CvbfA9TmqYPNQAmHk5vD bmPnPGTIApMFg37fRdDjhulqVzWtfsAQKdKSe+qaq8DTkwI1gU5Z9S1rmFgbp37U 6JHKkLqo/HhPr88Q0RJgg1SejwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+M6U+n eOAR64cp/JKwNQaUxeLPMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6 NnAzWmRRTzhuU2l3V1JHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIx0zgSXOEBS9IBFRPUVKSJFRWJs0MKheKYM9X/9M3gHgjqV9Zf6nw w1/5jpfBEAXDi4EKIZ4uJPDwiJhJbRrm228er9R+vE/c2UkOC7moYxOOmihSnckv EI6YSFR3CRqMhNZy7/AjWFYCIxQLp/AMoRnatx1Sr4Zf9InhA7hbzx0C4lMqEUp4 OysDYyJNfPcs6uQi/Xmd82h7Fzkie24OqH/sFqZuc6/xtfLnINzhiriKS/+7vc9j hcEo8xlWmNAjU4VTXIIM+ItxnoGmIwi18g0TFn5r8ph8VfVTUcZ6efvlmCbLcvL8 KdtiDr25J+n+CG1TwsDokCsT3KIio5Ms -----END CERTIFICATE-----Generated at Sat Aug 23 22:42:01 2025 by rpki-client