$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft File: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json) Hash identifier: Yppd9dM9kYzPBNV4UplfpnjvnGd0/1RVkI9t2jD47ag= Subject key identifier: 7D:25:F9:05:BF:5C:0B:E7:42:A5:2C:7F:98:DA:AA:7B:0F:91:3A:0B Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C Certificate issuer: /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft Manifest number: 06AE Signing time: Fri 22 Aug 2025 22:18:29 +0000 Manifest this update: Fri 22 Aug 2025 22:18:28 +0000 Manifest next update: Fri 29 Aug 2025 22:18:28 +0000 Files and hashes: 1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: Fk8kMUt02/wwwaNsGI8mQlWs4+JTK8s7SAJK+o4gUpQ=) 2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: 53zKcN6L7abJ9zpJ1rsGk1CMb4hTUDymJuK8BDIQ0eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91569FB, serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Validity Not Before: Aug 22 22:18:28 2025 GMT Not After : Aug 29 22:18:28 2025 GMT Subject: CN=68a8ecb5-a3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:dd:d1:89:fe:eb:47:3d:5a:f7:d4:78:2e: 68:00:08:9d:08:1c:9e:03:b8:b7:9e:f5:10:66:bb: 0e:48:4d:e2:c9:94:43:76:16:99:de:bb:ae:bd:90: 2f:ce:82:d6:07:e1:72:97:1b:07:b0:1b:fb:95:8f: a4:a9:37:36:a3:5d:49:f9:59:14:9f:49:87:3d:73: a2:78:c0:d8:fc:31:cb:2b:46:9a:3b:14:40:50:36: 78:9d:87:ee:22:db:73:75:b8:5e:0f:e2:24:54:c8: 34:63:7d:dd:b3:0d:db:3c:bb:d7:19:3e:31:de:2c: 1f:8f:96:4b:92:0d:56:50:7e:9a:f3:de:1b:1b:97: 04:5d:75:2e:75:1f:01:ea:df:37:32:56:ce:8c:56: 28:6c:b1:14:aa:ca:b2:8b:82:24:d1:5c:a0:a4:f5: c3:cd:5b:1e:fb:36:86:dd:e5:49:04:b8:fc:57:af: 66:3f:38:e5:ba:10:f9:5a:51:d9:82:e1:c4:43:73: 8c:3b:43:95:39:36:e3:8d:07:9f:38:31:12:d7:d3: 4b:35:ae:29:5d:cb:68:7e:c4:8d:63:8e:c4:7c:50: 68:0e:75:63:fa:2d:35:45:d6:f5:bd:49:1e:9b:b6: 9e:23:04:ae:2d:fb:8c:18:f2:9d:80:5a:bf:23:be: 89:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:25:F9:05:BF:5C:0B:E7:42:A5:2C:7F:98:DA:AA:7B:0F:91:3A:0B X509v3 Authority Key Identifier: keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e8:57:06:c4:7a:8c:67:e8:84:7d:f2:2a:62:c6:af:a5:71: 85:96:2d:c4:02:e0:5c:78:fc:65:10:42:87:0a:5b:5c:26:94: 6d:0e:02:d0:0f:e8:6b:a0:28:a1:aa:8d:f6:50:e4:81:fb:20: 56:f5:5f:39:8f:26:61:80:a3:65:5f:4d:a6:92:3a:be:a1:00: 12:b0:9a:aa:d9:2a:55:cd:89:2c:bc:4c:72:eb:a2:e4:7b:ce: 3b:d8:db:0e:37:7a:7f:98:f9:c1:a7:3d:69:8a:95:2d:ff:96: eb:38:11:40:f7:bb:98:22:f6:ed:71:58:fb:97:56:30:c0:93: 1d:f2:47:61:87:27:dd:97:2d:b3:a2:d2:93:f5:22:e9:a4:f7: c1:83:c7:48:ef:26:d9:69:9b:02:01:fa:39:88:69:54:98:2e: f6:36:39:55:d5:eb:93:dc:ff:02:74:49:2b:8f:be:f7:16:48: b5:c6:da:dc:31:b4:25:dd:1c:f8:e6:9c:86:b2:1a:59:cb:98: 3c:20:0a:aa:89:a7:40:7a:4d:c0:7f:30:5b:c6:c6:89:78:7c: 1f:41:22:93:78:3e:ae:2a:94:5f:ec:b4:f3:fb:b0:01:fb:74: b5:d1:8e:09:87:97:01:8c:e5:72:70:41:23:ea:af:4c:48:3f: 9f:8c:57:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5RkIxMTAvBgNVBAUTKDVERUUxNkVGODVBMkJGODREQUQ4ODc2NjY3NTlCMUVD MTVEMUI5NEMwHhcNMjUwODIyMjIxODI4WhcNMjUwODI5MjIxODI4WjAYMRYwFAYD VQQDEw02OGE4ZWNiNS1hM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSfd0Yn+60c9WvfUeC5oAAidCByeA7i3nvUQZrsOSE3iyZRDdhaZ3ruuvZAv zoLWB+FylxsHsBv7lY+kqTc2o11J+VkUn0mHPXOieMDY/DHLK0aaOxRAUDZ4nYfu IttzdbheD+IkVMg0Y33dsw3bPLvXGT4x3iwfj5ZLkg1WUH6a894bG5cEXXUudR8B 6t83MlbOjFYobLEUqsqyi4Ik0VygpPXDzVse+zaG3eVJBLj8V69mPzjluhD5WlHZ guHEQ3OMO0OVOTbjjQefODES19NLNa4pXctofsSNY47EfFBoDnVj+i01Rdb1vUke m7aeIwSuLfuMGPKdgFq/I76J3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0l+QW/ XAvnQqUsf5jaqnsPkToLMB8GA1UdIwQYMBaAFF3uFu+For+E2tiHZmdZsewV0blM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjlGQi84REUxRENEQTc2 MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0VGEySWRtWjFteDdCWFJ1 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlNFc3NFdpdjRUYTJJZG1aMW14N0JYUnVVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjlGQi84REUxRENEQTc2MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0 VGEySWRtWjFteDdCWFJ1VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw6FcGxHqMZ+iEffIqYsavpXGFli3EAuBcePxlEEKHCltcJpRtDgLQ D+hroCihqo32UOSB+yBW9V85jyZhgKNlX02mkjq+oQASsJqq2SpVzYksvExy66Lk e8472NsON3p/mPnBpz1pipUt/5brOBFA97uYIvbtcVj7l1YwwJMd8kdhhyfdly2z otKT9SLppPfBg8dI7ybZaZsCAfo5iGlUmC72NjlV1euT3P8CdEkrj773Fki1xtrc MbQl3Rz45pyGshpZy5g8IAqqiadAek3AfzBbxsaJeHwfQSKTeD6uKpRf7LTz+7AB +3S10Y4Jh5cBjOVycEEj6q9MSD+fjFeD -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:40 2025 by rpki-client