$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: mJFql0v6Wbul0ZAp07rhSoF+7it2oKcQj3BlLKB9yzg= Subject key identifier: 9D:04:D2:12:8A:64:AA:0C:CB:EB:50:85:61:49:44:0B:CB:41:2B:3D Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 06C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 06C0 Signing time: Fri 22 Aug 2025 22:16:22 +0000 Manifest this update: Fri 22 Aug 2025 22:16:21 +0000 Manifest next update: Fri 29 Aug 2025 22:16:21 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: bzwgKc/MWMbtfgxL73E1stZFdFzkH7Vi7aVnWQl0YIM=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Aug 22 22:16:21 2025 GMT Not After : Aug 29 22:16:21 2025 GMT Subject: CN=68a8ec36-0b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:45:c7:32:dd:cc:94:e4:30:9c:43:99:86: fa:0a:cc:b6:1e:da:59:a8:71:e5:26:ba:b4:5b:2d: 98:b6:1d:f8:99:fb:4d:3f:8b:56:86:38:98:16:f4: 89:63:2c:b1:b1:fa:a7:69:4a:81:38:d4:43:ed:a5: 1d:ad:8d:a1:48:1f:44:84:c4:2a:1c:e6:f9:72:39: b5:a1:96:82:bb:d9:0f:7a:d8:56:ae:a1:6e:3a:c9: a9:4a:dc:2e:67:86:f7:92:40:ca:ec:2b:fc:4c:9b: ec:72:c4:cf:b7:4a:95:df:46:5c:c6:4b:d6:31:89: a6:5b:b8:02:de:58:6d:c7:4a:21:40:e7:92:16:93: 14:db:b9:7a:08:e3:9f:46:c2:75:7f:67:aa:05:e1: 83:8a:98:2a:a8:00:3a:cc:00:68:7e:6f:40:95:3e: a6:c9:d6:ec:87:60:dd:1f:e7:9e:32:16:c0:c6:de: b3:03:58:5f:8e:8e:a9:75:1f:0e:10:0c:a9:ff:36: bf:7d:8e:f5:14:5c:e9:21:86:ee:33:34:6d:1e:9d: 53:b2:fb:5d:46:0f:ea:48:1e:3e:64:bb:de:19:5b: a4:57:5d:66:6f:18:2b:70:82:19:41:c0:af:70:2c: 5e:f2:93:4a:19:24:f1:d9:f9:fd:4a:41:fa:3f:2d: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:04:D2:12:8A:64:AA:0C:CB:EB:50:85:61:49:44:0B:CB:41:2B:3D X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:fa:bd:70:b3:9e:07:6d:cf:b3:9e:22:55:8d:95:c9:19:4f: 77:3b:8a:7f:b9:a4:af:8c:2e:08:f3:0b:33:ab:41:f2:07:1f: f9:e0:49:2f:49:a1:79:2b:da:08:7b:95:b5:33:92:f4:0e:41: 4b:d1:16:27:18:d7:30:ef:38:50:3d:d1:0f:5f:46:94:9a:af: 39:3c:6d:3c:40:37:0c:08:40:2a:dc:e8:1b:05:a9:13:23:67: 16:b2:1f:ce:cc:6e:50:65:fd:da:f3:ff:d8:5c:7c:c5:13:45: c1:ae:dd:45:30:51:59:34:33:a8:2a:ad:da:0d:46:25:1d:ee: 78:5e:9c:db:59:e7:1a:d7:e5:c0:0e:a8:e4:6d:c6:a5:e1:18: af:cb:77:53:26:b3:5a:08:4a:02:3e:28:56:12:a1:5d:28:04: 64:b5:4f:64:c2:3a:67:c6:b0:59:45:7f:55:21:ea:91:28:70: 07:05:a8:79:d2:8b:ac:bc:9d:f5:35:32:91:58:18:3c:5a:b1: a8:01:b5:b2:71:fb:ee:8d:f6:a8:b3:4d:c6:a3:8a:fe:07:9c: c9:73:fc:05:c9:f8:24:7a:d7:9e:38:11:cf:62:64:21:1b:39: 8a:81:8e:20:75:9f:5a:e4:36:5b:92:2a:87:37:b4:9f:72:29: 01:e4:87:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUwODIyMjIxNjIxWhcNMjUwODI5MjIxNjIxWjAYMRYwFAYD VQQDEw02OGE4ZWMzNi0wYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJdFxzLdzJTkMJxDmYb6Csy2HtpZqHHlJrq0Wy2Yth34mftNP4tWhjiYFvSJ YyyxsfqnaUqBONRD7aUdrY2hSB9EhMQqHOb5cjm1oZaCu9kPethWrqFuOsmpStwu Z4b3kkDK7Cv8TJvscsTPt0qV30ZcxkvWMYmmW7gC3lhtx0ohQOeSFpMU27l6COOf RsJ1f2eqBeGDipgqqAA6zABofm9AlT6mydbsh2DdH+eeMhbAxt6zA1hfjo6pdR8O EAyp/za/fY71FFzpIYbuMzRtHp1TsvtdRg/qSB4+ZLveGVukV11mbxgrcIIZQcCv cCxe8pNKGSTx2fn9SkH6Py0McQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0E0hKK ZKoMy+tQhWFJRAvLQSs9MB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG+r1ws54Hbc+zniJVjZXJGU93O4p/uaSvjC4I8wszq0HyBx/54Ekv SaF5K9oIe5W1M5L0DkFL0RYnGNcw7zhQPdEPX0aUmq85PG08QDcMCEAq3OgbBakT I2cWsh/OzG5QZf3a8//YXHzFE0XBrt1FMFFZNDOoKq3aDUYlHe54XpzbWeca1+XA Dqjkbcal4Rivy3dTJrNaCEoCPihWEqFdKARktU9kwjpnxrBZRX9VIeqRKHAHBah5 0ousvJ31NTKRWBg8WrGoAbWycfvujfaos03Go4r+B5zJc/wFyfgketeeOBHPYmQh GzmKgY4gdZ9a5DZbkiqHN7SfcikB5IcX -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:45 2025 by rpki-client