$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: /u74D5gi620dCBOm7GsdBQusVFWCnut7B7n+ZKsV3eI= Subject key identifier: 89:85:A1:DC:8E:0A:8A:47:36:56:04:3B:38:61:A4:D1:24:93:4D:E1 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 234B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2319 Signing time: Fri 22 Aug 2025 15:53:38 +0000 Manifest this update: Fri 22 Aug 2025 15:53:38 +0000 Manifest next update: Fri 29 Aug 2025 15:53:38 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: /IWZmXtVrPfRa325s99AqBpwh7guYAsBeldn9EUY38s=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ceQW0pBKYX0iNvGIXu+d5odgS50V86e35zycTc8Ud5M=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9035 (0x234b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Aug 22 15:53:38 2025 GMT Not After : Aug 29 15:53:38 2025 GMT Subject: CN=68a89282-2759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:32:b3:20:f6:a7:45:04:c6:79:ff:19:26:94: 9d:5c:e3:82:a2:af:c8:1c:f9:d6:bc:c4:bb:ab:10: 58:d8:81:0c:9c:8a:a8:19:69:cd:16:ca:2b:db:aa: 51:a5:f4:3d:d5:06:9a:08:4d:64:85:22:98:3b:ea: 35:d2:9d:bc:ba:96:00:6e:68:e1:b0:3a:1b:b3:16: f6:da:af:3b:d5:5d:71:eb:49:26:42:d1:75:2e:15: e3:11:b0:91:87:62:eb:d7:9f:10:06:6c:f0:6b:41: 04:51:32:27:0b:aa:78:43:f0:97:97:dc:02:32:3f: b4:e1:ba:2f:c7:8e:02:77:b5:79:2a:33:0a:b3:c6: f4:3f:1b:8d:8f:8b:38:21:56:93:21:b9:fa:65:5d: 97:a9:33:00:69:da:33:f3:da:d0:8f:99:3f:7d:7b: 03:8d:3a:c7:fa:5b:62:6d:b8:34:5f:e3:a3:95:09: 67:34:cf:00:45:2a:f6:eb:ad:d0:9d:7a:ca:ff:bf: 14:05:95:b8:d8:80:ff:da:2e:f8:c2:bf:62:01:14: 7e:f0:e6:69:c8:ce:aa:da:3b:c2:de:79:77:43:72: c2:3f:7e:da:ce:95:eb:2e:0c:69:03:e3:31:86:61: ac:5a:af:8e:5d:b3:3e:90:54:ec:0b:4c:7e:77:f8: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:85:A1:DC:8E:0A:8A:47:36:56:04:3B:38:61:A4:D1:24:93:4D:E1 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c0:83:fe:0e:03:10:c2:6c:1d:6c:d4:fe:56:1e:bb:6a:87: c0:ea:62:8a:7a:e6:72:1d:bf:c6:27:a6:bc:ee:a6:a5:c5:82: 40:f9:2c:b7:d7:d4:ef:3c:16:45:12:b4:02:56:59:e7:5e:cf: 96:61:33:4d:9f:21:7d:85:d0:e8:db:0e:83:b3:6e:1d:6a:41: d2:da:5f:dc:90:6a:9e:2e:b4:1d:da:67:69:a1:f0:28:b1:89: 73:55:6c:b7:74:c4:cf:31:e7:97:20:c2:b9:34:44:7a:33:e9: 38:25:80:a0:9a:56:95:e7:40:95:64:cd:8b:e5:f5:58:45:2c: 90:9f:38:3d:91:d6:6f:75:d7:bc:e0:77:91:cb:ba:44:d5:d9: b6:96:b7:5f:05:b0:fc:9d:af:b4:f1:82:34:e6:d7:f1:69:ea: 72:4c:b1:1c:5e:e0:62:2b:5f:f4:1c:7d:0d:1e:f9:be:02:71: 93:89:77:c0:5e:a5:3b:67:59:95:f2:26:3a:73:3e:da:74:78: e7:55:a2:a0:50:0b:c4:7f:c6:fe:fa:96:07:90:f7:cf:ba:7e: a4:a3:f2:10:b1:4b:0d:d6:4b:46:91:bd:f2:64:e9:2e:81:9e: 81:40:5e:38:7c:5f:98:39:9b:d0:67:2b:07:34:a0:48:33:41: 95:95:a7:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjUwODIyMTU1MzM4WhcNMjUwODI5MTU1MzM4WjAYMRYwFAYD VQQDEw02OGE4OTI4Mi0yNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zKzIPanRQTGef8ZJpSdXOOCoq/IHPnWvMS7qxBY2IEMnIqoGWnNFsor26pR pfQ91QaaCE1khSKYO+o10p28upYAbmjhsDobsxb22q871V1x60kmQtF1LhXjEbCR h2Lr158QBmzwa0EEUTInC6p4Q/CXl9wCMj+04bovx44Cd7V5KjMKs8b0PxuNj4s4 IVaTIbn6ZV2XqTMAadoz89rQj5k/fXsDjTrH+ltibbg0X+OjlQlnNM8ARSr2663Q nXrK/78UBZW42ID/2i74wr9iARR+8OZpyM6q2jvC3nl3Q3LCP37azpXrLgxpA+Mx hmGsWq+OXbM+kFTsC0x+d/ih+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImFodyO CopHNlYEOzhhpNEkk03hMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHwIP+DgMQwmwdbNT+Vh67aofA6mKKeuZyHb/GJ6a87qalxYJA+Sy3 19TvPBZFErQCVlnnXs+WYTNNnyF9hdDo2w6Ds24dakHS2l/ckGqeLrQd2mdpofAo sYlzVWy3dMTPMeeXIMK5NER6M+k4JYCgmlaV50CVZM2L5fVYRSyQnzg9kdZvdde8 4HeRy7pE1dm2lrdfBbD8na+08YI05tfxaepyTLEcXuBiK1/0HH0NHvm+AnGTiXfA XqU7Z1mV8iY6cz7adHjnVaKgUAvEf8b++pYHkPfPun6ko/IQsUsN1ktGkb3yZOku gZ6BQF44fF+YOZvQZysHNKBIM0GVlafa -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:11 2025 by rpki-client