$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json) Hash identifier: LR5UAKPxRQbTgSj1bVNf5p6OCxcSLxOnbBd+NwNwagY= Subject key identifier: 7F:9A:8D:15:55:CA:19:EA:59:61:D5:18:9F:E4:B5:71:54:91:6F:3F Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 16C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft Manifest number: 16B9 Signing time: Fri 22 Aug 2025 16:46:31 +0000 Manifest this update: Fri 22 Aug 2025 16:46:31 +0000 Manifest next update: Fri 29 Aug 2025 16:46:31 +0000 Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: mA1mxcEx1jsk6m41zENpCPp1+ejxyht6yhJnPQrjYN8=) 2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: gDuc8ZWgCrliQXLxnNcUvIObZ9Jrt4XfymfNcicc4pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5830 (0x16c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: Aug 22 16:46:31 2025 GMT Not After : Aug 29 16:46:31 2025 GMT Subject: CN=68a89ee7-ed8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:5d:7a:52:38:5a:66:b9:73:81:23:e0:2a: 9c:e7:10:d8:79:3d:c3:ae:4b:07:f9:1f:c8:8c:4f: 4c:45:43:56:4b:11:ea:d9:6a:59:64:28:50:25:a7: 93:d5:a9:21:1c:b5:55:c5:5c:e5:65:e7:76:0b:57: c7:9e:3e:8e:af:bf:bd:c8:12:79:cc:2f:6a:cb:c0: 63:60:f1:66:34:f6:8c:fa:7b:e8:9d:bf:d8:81:9d: f7:24:5f:c8:cb:a7:0e:88:b9:5f:19:ea:4a:4f:52: 2a:30:6b:9a:de:e9:ca:22:34:d8:5b:5e:95:c0:08: 66:e8:0d:37:b9:ad:55:d4:ab:ce:79:84:ce:a0:8f: 1d:37:0b:f1:98:2e:81:06:f3:1e:cc:a9:b1:a1:7b: e8:6e:27:e1:2a:e4:a0:2d:e8:ae:67:54:ae:e2:8a: ab:ab:55:0e:b6:6b:57:55:5c:84:cc:79:ea:82:c2: 16:86:de:15:e0:71:ab:61:11:7d:48:2c:38:5e:5a: 40:06:f1:c8:31:af:f2:97:48:dd:16:92:69:49:8a: cb:38:60:f8:75:ad:f2:24:90:b4:50:86:63:2f:64: 8a:78:8f:ba:f9:f3:27:00:97:b4:31:1c:49:03:f3: 77:cb:20:52:bd:30:9a:4b:30:e2:d7:11:5a:5b:72: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9A:8D:15:55:CA:19:EA:59:61:D5:18:9F:E4:B5:71:54:91:6F:3F X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:97:ac:cd:b2:8e:b0:3b:77:10:ed:f4:3a:1e:27:21:c2:fb: 49:9c:2f:dc:96:9b:72:e0:2d:e6:ca:8f:66:e1:a1:21:9d:9e: 73:2c:27:f2:71:09:f2:11:99:84:02:4f:84:86:28:0c:63:21: ca:18:62:38:b1:70:1b:30:a1:d1:f8:73:6d:f5:f3:7f:47:80: af:56:ba:c3:92:66:e8:8e:ef:34:83:91:1f:d3:33:90:b0:ac: a5:19:cb:c7:20:33:97:2f:c7:28:5d:b7:5c:57:68:e0:51:2f: 19:a6:f4:e6:e1:7a:a2:16:a1:5c:91:63:67:e9:e7:46:43:bd: dc:43:2e:a1:ba:c1:f9:c4:4a:1f:14:b2:cc:10:3b:a0:4f:ac: 67:1e:b2:76:40:7a:69:a6:48:78:c8:9b:e9:6e:2a:ed:ac:8a: 97:47:e5:64:3a:89:90:22:87:22:bf:19:0b:7b:52:6b:bd:ab: e8:af:4f:bb:7e:f7:bf:6a:13:62:4c:e1:2e:59:1f:7b:67:0c: 6e:87:79:d5:c8:94:9b:e3:39:4c:9c:97:b9:c8:97:47:65:a7: a7:8e:3b:9b:78:c3:7f:83:c2:4f:cb:cf:49:3f:ed:0d:65:2c: 19:52:d5:94:c9:5b:1a:b9:f5:04:ce:59:75:cd:39:ac:8c:c6: 82:ee:4c:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjUwODIyMTY0NjMxWhcNMjUwODI5MTY0NjMxWjAYMRYwFAYD VQQDEw02OGE4OWVlNy1lZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/VdelI4Wma5c4Ej4Cqc5xDYeT3DrksH+R/IjE9MRUNWSxHq2WpZZChQJaeT 1akhHLVVxVzlZed2C1fHnj6Or7+9yBJ5zC9qy8BjYPFmNPaM+nvonb/YgZ33JF/I y6cOiLlfGepKT1IqMGua3unKIjTYW16VwAhm6A03ua1V1KvOeYTOoI8dNwvxmC6B BvMezKmxoXvobifhKuSgLeiuZ1Su4oqrq1UOtmtXVVyEzHnqgsIWht4V4HGrYRF9 SCw4XlpABvHIMa/yl0jdFpJpSYrLOGD4da3yJJC0UIZjL2SKeI+6+fMnAJe0MRxJ A/N3yyBSvTCaSzDi1xFaW3LZcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+ajRVV yhnqWWHVGJ/ktXFUkW8/MB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzVFQS8xOURENDY3MDAwQUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZt NzFYdHF3NTBQX0JtdWZxR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByl6zNso6wO3cQ7fQ6HichwvtJnC/clpty4C3myo9m4aEhnZ5zLCfy cQnyEZmEAk+EhigMYyHKGGI4sXAbMKHR+HNt9fN/R4CvVrrDkmboju80g5Ef0zOQ sKylGcvHIDOXL8coXbdcV2jgUS8ZpvTm4XqiFqFckWNn6edGQ73cQy6husH5xEof FLLMEDugT6xnHrJ2QHpppkh4yJvpbirtrIqXR+VkOomQIocivxkLe1Jrvavor0+7 fve/ahNiTOEuWR97Zwxuh3nVyJSb4zlMnJe5yJdHZaenjjubeMN/g8JPy89JP+0N ZSwZUtWUyVsaufUEzll1zTmsjMaC7kxs -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:59 2025 by rpki-client