$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: GNVMPmayW/YAF07JtdQsK++fm3/PSmKbQcUjjy5Ruyo= Subject key identifier: 06:BC:51:91:90:C7:EA:A5:A9:AB:13:35:39:37:75:FC:67:BF:3B:2C Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 2F Signing time: Sat 23 Aug 2025 07:56:07 +0000 Manifest this update: Sat 23 Aug 2025 07:56:07 +0000 Manifest next update: Sat 30 Aug 2025 07:56:07 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: 2CPZuR5z23/czQjb6K/E7o/wU9b2eFwVQ/XX2RAjz/I=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GaxzV7+DkMGpd57xnNkPMderTpqjXPXFd/uGzJlcq9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Aug 23 07:56:07 2025 GMT Not After : Aug 30 07:56:07 2025 GMT Subject: CN=68a97417-299c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8e:e3:69:ad:ed:42:92:f1:d3:65:ae:a7:77: 49:e2:61:85:bd:5d:b6:76:72:86:54:d9:d5:fb:a1: ea:e5:1e:0a:18:c4:a8:dd:f2:19:b4:78:69:69:2f: d1:38:5d:1f:02:48:01:35:5a:9f:fd:da:92:c2:1c: 2b:bf:46:fd:97:38:3e:4e:35:b0:75:43:e1:d4:f0: 7a:56:5e:5e:ac:63:95:6d:a1:59:a5:71:60:aa:91: eb:20:ae:3d:5f:b4:32:57:fd:f3:05:f2:ca:17:d2: 7d:9b:21:e2:2e:35:fb:79:88:38:61:86:07:93:ad: af:1a:e6:7b:d1:de:59:60:af:e8:78:af:b2:f4:5e: d2:af:a7:7c:e2:21:46:1e:ed:df:15:a6:ab:3b:50: e7:f3:f4:79:9c:54:08:99:82:dd:bd:28:9b:0a:ab: 1b:b9:b0:36:a9:d2:e2:e7:45:23:94:40:0e:0b:eb: 7d:1e:62:81:13:d4:1b:e5:70:8f:b7:17:2b:fd:be: a2:df:0b:95:d2:28:fa:4d:4f:7c:b8:ab:39:3a:c3: f5:c8:37:a2:af:4a:cf:01:f5:a0:d5:76:f8:e2:09: 0b:58:f3:15:53:b5:3f:8f:c4:7e:4b:a4:80:e1:0a: 1b:6d:64:13:2e:b2:fe:f8:db:b7:87:5f:a6:59:7f: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BC:51:91:90:C7:EA:A5:A9:AB:13:35:39:37:75:FC:67:BF:3B:2C X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:92:1c:df:5d:e9:f5:34:cd:19:ae:43:0a:be:01:59:65:8a: 62:f0:13:35:98:e7:3e:0d:ec:c7:7d:b8:5e:59:b5:43:ac:44: 8b:ce:82:2b:46:1d:65:d7:61:f4:88:3c:e9:ed:e3:17:93:eb: 07:ca:d8:7f:c8:d3:4c:7e:d8:47:ca:43:af:b5:b8:00:1c:da: 04:a4:85:a8:51:a1:59:ec:0d:15:b3:f8:5f:d1:83:5a:4b:4b: 7b:81:19:a7:6e:48:ae:d6:6b:3c:39:72:cd:d0:e7:5b:39:68: 78:44:f2:22:49:2b:62:cf:94:78:41:90:2b:18:77:e8:17:5a: ae:35:59:31:9e:2d:d9:2c:66:7e:db:5b:55:20:66:e4:ee:ea: 61:00:06:b3:16:30:20:77:8f:06:67:54:68:27:7a:b1:73:af: 35:b8:a0:7e:dc:52:b2:b8:16:a6:a9:cb:58:57:b3:92:ca:11: ce:9a:64:46:02:a8:a3:7c:33:ac:a9:d7:4c:4a:4c:26:2d:ee: d7:f7:1a:df:14:e9:78:56:dc:1e:a3:4f:a9:09:2f:8c:f8:54: e8:84:88:61:19:f5:b4:9e:ea:87:29:23:4e:6e:f3:ab:ad:64: f0:71:e5:ae:d2:6a:9b:1c:36:ec:0b:28:0d:86:fd:e1:3e:05: 6c:eb:23:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTA4MjMwNzU2MDdaFw0yNTA4MzAwNzU2MDdaMBgxFjAUBgNV BAMTDTY4YTk3NDE3LTI5OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUjuNpre1CkvHTZa6nd0niYYW9XbZ2coZU2dX7oerlHgoYxKjd8hm0eGlpL9E4 XR8CSAE1Wp/92pLCHCu/Rv2XOD5ONbB1Q+HU8HpWXl6sY5VtoVmlcWCqkesgrj1f tDJX/fMF8soX0n2bIeIuNft5iDhhhgeTra8a5nvR3llgr+h4r7L0XtKvp3ziIUYe 7d8Vpqs7UOfz9HmcVAiZgt29KJsKqxu5sDap0uLnRSOUQA4L630eYoET1BvlcI+3 Fyv9vqLfC5XSKPpNT3y4qzk6w/XIN6KvSs8B9aDVdvjiCQtY8xVTtT+PxH5LpIDh ChttZBMusv7427eHX6ZZf8C1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBrxRkZDH 6qWpqxM1OTd1/Ge/OywwHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJqSHN9d6fU0zRmuQwq+AVllimLwEzWY5z4N7Md9uF5ZtUOsRIvOgitG HWXXYfSIPOnt4xeT6wfK2H/I00x+2EfKQ6+1uAAc2gSkhahRoVnsDRWz+F/Rg1pL S3uBGaduSK7Wazw5cs3Q51s5aHhE8iJJK2LPlHhBkCsYd+gXWq41WTGeLdksZn7b W1UgZuTu6mEABrMWMCB3jwZnVGgnerFzrzW4oH7cUrK4Fqapy1hXs5LKEc6aZEYC qKN8M6yp10xKTCYt7tf3Gt8U6XhW3B6jT6kJL4z4VOiEiGEZ9bSe6ocpI05u86ut ZPBx5a7SapscNuwLKA2G/eE+BWzrI/A= -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:23 2025 by rpki-client