$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: QEK900O10LY/F8EDbN4aYuFjPbNY8oFB8yB5cs4SORE= Subject key identifier: 10:87:71:67:C8:A3:C4:E0:32:DD:4C:72:59:33:FB:EA:0F:02:B2:E8 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 03B2 Signing time: Sat 23 Aug 2025 00:58:45 +0000 Manifest this update: Sat 23 Aug 2025 00:58:44 +0000 Manifest next update: Sat 30 Aug 2025 00:58:44 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: tSOvj8Oou7BMkMlHH2/PcZD2/6NEDe34ODNpjRB/Mns=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: DbGKbMecwcykqDAfU21+x6Kvm9Z6g5WTzg4SdqXRisc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Aug 23 00:58:44 2025 GMT Not After : Aug 30 00:58:44 2025 GMT Subject: CN=68a91245-a90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ed:95:ba:ca:d8:11:62:16:38:e3:f4:b7:6f: 23:d8:4f:3c:da:10:ff:65:8e:eb:53:e1:13:ec:07: 5d:e8:44:ff:32:44:87:5c:6a:eb:90:b1:76:d0:dc: fd:9d:cf:98:c7:d9:da:1a:1a:b8:eb:8d:05:96:aa: c3:80:16:57:df:19:45:cd:56:ee:f1:af:2e:e5:6a: 9d:77:ed:fc:ef:96:ed:71:d0:d0:26:34:c9:4e:27: da:fd:48:17:02:e7:a6:9c:d3:bc:8a:4f:2f:30:de: fc:ef:fc:c4:df:56:ec:a0:9d:b8:b3:fa:6f:72:ef: dd:30:dc:d4:a4:88:74:93:b9:7d:7f:2b:ce:5f:88: f8:b7:3f:5e:f3:50:65:d1:39:24:ec:ab:de:4a:5a: 58:b7:cf:54:9c:b6:e1:5e:01:e3:e0:e8:6e:55:62: fe:01:ab:11:05:e0:7b:f1:66:89:5f:f3:3c:6d:ca: 31:2b:97:33:a5:8c:2e:b5:b9:0e:2a:f6:21:44:7a: 8d:35:22:66:e9:0b:78:43:ef:a3:c4:31:33:2e:99: 29:3f:45:c3:73:2d:32:8c:87:dc:0d:fa:0d:59:f8: 4a:85:b5:ed:64:43:a4:ea:3a:5c:15:89:a1:f5:b9: db:7d:51:28:ca:20:49:30:a5:3c:96:ac:f2:70:9a: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:87:71:67:C8:A3:C4:E0:32:DD:4C:72:59:33:FB:EA:0F:02:B2:E8 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1f:f1:28:8b:3f:2a:67:84:d5:af:0c:36:df:bd:88:5d:e1: 2e:f7:fc:23:4e:17:e8:2b:e1:22:c0:af:a8:4e:2a:14:5c:57: 73:c6:5e:b7:93:f7:75:bc:18:af:65:fd:7e:21:13:d0:4c:40: 0e:28:51:2d:df:01:2e:ed:26:50:37:bf:b2:25:fe:34:28:34: ef:80:8a:20:07:6a:a9:22:d9:ec:e4:7c:97:39:50:7a:15:51: 6e:e3:2f:75:1c:2d:b7:c0:e3:d2:6c:2d:42:24:b7:f9:8a:d0: 28:1f:2c:73:3c:4c:62:9f:66:b7:cc:82:35:a6:34:fd:80:19: fe:da:ea:ca:a0:f6:53:9f:cf:d1:ae:0b:e5:0f:61:a2:9e:8d: a2:04:25:46:99:d1:20:4b:06:c9:8e:98:93:66:eb:06:6a:aa: 07:f4:a8:7a:06:07:59:ed:01:3c:8a:d6:ec:63:67:2c:ce:b4: 96:6b:b6:a6:de:8d:6c:d6:9d:88:48:f8:c8:82:40:1d:3a:0b: fd:84:66:ff:c5:7c:9f:74:82:9d:0c:b3:8f:98:de:8c:81:b0: ec:fa:3e:5d:03:76:23:e8:47:28:3a:ce:ea:32:62:77:cb:cf: e5:ef:43:a1:f6:6f:dc:0b:d1:0c:49:ce:dd:7c:53:3c:3f:1a: 03:5a:8e:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjUwODIzMDA1ODQ0WhcNMjUwODMwMDA1ODQ0WjAYMRYwFAYD VQQDEw02OGE5MTI0NS1hOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2O2VusrYEWIWOOP0t28j2E882hD/ZY7rU+ET7Add6ET/MkSHXGrrkLF20Nz9 nc+Yx9naGhq4640FlqrDgBZX3xlFzVbu8a8u5Wqdd+3875btcdDQJjTJTifa/UgX AuemnNO8ik8vMN787/zE31bsoJ24s/pvcu/dMNzUpIh0k7l9fyvOX4j4tz9e81Bl 0Tkk7KveSlpYt89UnLbhXgHj4OhuVWL+AasRBeB78WaJX/M8bcoxK5czpYwutbkO KvYhRHqNNSJm6Qt4Q++jxDEzLpkpP0XDcy0yjIfcDfoNWfhKhbXtZEOk6jpcFYmh 9bnbfVEoyiBJMKU8lqzycJqwUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCHcWfI o8TgMt1Mclkz++oPArLoMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6H/Eoiz8qZ4TVrww2372IXeEu9/wjThfoK+EiwK+oTioUXFdzxl63 k/d1vBivZf1+IRPQTEAOKFEt3wEu7SZQN7+yJf40KDTvgIogB2qpItns5HyXOVB6 FVFu4y91HC23wOPSbC1CJLf5itAoHyxzPExin2a3zII1pjT9gBn+2urKoPZTn8/R rgvlD2Gino2iBCVGmdEgSwbJjpiTZusGaqoH9Kh6BgdZ7QE8itbsY2cszrSWa7am 3o1s1p2ISPjIgkAdOgv9hGb/xXyfdIKdDLOPmN6MgbDs+j5dA3Yj6EcoOs7qMmJ3 y8/l70Oh9m/cC9EMSc7dfFM8PxoDWo5w -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:23 2025 by rpki-client