$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: XLqVirFTPpjND1+FCZvOzShhQF/Z6LoGC7eH4/kpncY= Subject key identifier: 99:82:44:3E:B1:F6:8D:CE:81:8B:DD:C8:FC:5F:CA:99:D8:F4:86:90 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 018E Signing time: Sat 23 Aug 2025 03:39:32 +0000 Manifest this update: Sat 23 Aug 2025 03:39:31 +0000 Manifest next update: Sat 30 Aug 2025 03:39:31 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: bzLHvYxsfGwAGSI136VH6NHUlJGjiMC5fZK2bnDrDrM=) 2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=) 3: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: GgalYjkY1TSQEVBeTqrV+j4tzZy8hdDlsyXixDM61Sw=) 4: 302B59C64EEF11EFB111F530C4F9AE02.roa (hash: scffRYc0fctIE4i3P8gIvlUcNEVTHSWwJA+vVFplTH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Aug 23 03:39:31 2025 GMT Not After : Aug 30 03:39:31 2025 GMT Subject: CN=68a937f3-208f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:d3:81:a8:bb:a8:c5:6e:dc:8f:d9:16:3f: 53:7e:35:d5:a9:2e:c8:5f:a7:f8:c9:af:bd:95:c2: 2d:38:81:7e:9a:30:9a:f1:fa:0c:cd:62:18:81:df: 26:3f:20:9d:67:ab:ec:43:83:c1:69:67:27:a3:95: d2:0f:2f:c1:93:c1:ba:af:8b:e6:d2:a1:2a:9e:dd: da:aa:f9:50:64:8b:aa:02:63:96:83:99:fb:02:af: 00:49:f5:b1:c7:c8:8f:29:8d:e8:fd:5b:2f:7f:9b: f2:de:04:8a:d5:80:3a:d4:4b:7a:46:57:33:6d:9a: ac:11:ac:9c:ae:01:c5:3f:ac:3e:ed:08:aa:0e:94: fc:cf:a1:a7:8f:f4:da:33:25:db:22:77:cd:ac:9d: 18:45:46:88:bf:ea:8a:c1:fa:6d:a2:38:2b:0f:e4: 8d:29:90:6b:51:96:ad:3e:d0:37:17:3c:24:53:c8: 77:94:b6:7e:6b:cb:aa:30:47:15:02:6d:ab:a4:09: 52:15:5e:0c:b7:a9:c3:fb:dc:74:cd:3b:96:a2:68: 65:73:be:ba:11:45:dc:84:70:5a:8e:e9:32:f0:60: 20:12:67:12:e3:e0:a2:61:2d:a0:75:58:25:20:aa: 93:f8:a6:71:1f:1a:c3:ef:f4:f5:3e:9b:17:14:b7: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:82:44:3E:B1:F6:8D:CE:81:8B:DD:C8:FC:5F:CA:99:D8:F4:86:90 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:e3:3f:78:f3:9b:f9:f7:f2:af:75:78:85:5c:05:62:11:6d: bd:f4:b9:2d:41:ff:5e:d6:7a:4d:85:fa:a5:85:00:25:aa:f9: 9b:92:32:45:57:ec:78:7c:df:42:6b:2c:11:3a:15:1f:d2:03: 9a:b9:fb:0a:68:59:68:de:42:54:90:79:bf:50:ce:b7:a3:a2: cb:98:13:4a:3b:93:2d:77:58:fe:d2:9a:50:f5:04:bb:64:31: ae:02:05:7b:ec:8d:eb:87:93:4a:66:99:de:b6:7d:e9:0a:c1: 3c:11:05:4e:64:10:be:97:bf:47:28:29:65:84:08:5b:d6:34: 5a:2a:47:59:09:79:bb:2c:5a:b8:51:0e:1b:68:59:91:68:23: 73:01:a8:d7:40:d3:88:52:13:72:98:67:75:30:04:39:11:87: 6a:1c:70:34:f7:26:15:79:52:e8:47:47:aa:bb:e4:c5:af:01: 19:f3:0d:52:8d:1e:98:44:47:2f:13:7a:1a:00:0f:f9:69:5f: 83:70:04:56:91:d7:1c:4d:01:2d:a6:5d:0e:5a:39:bd:e5:6b: 7c:14:79:98:a1:09:50:2b:66:14:78:e8:d5:ac:68:e0:51:35: a8:83:95:b9:2e:35:1e:72:36:ee:29:e1:ed:0d:d2:e1:51:63: e0:cb:49:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUwODIzMDMzOTMxWhcNMjUwODMwMDMzOTMxWjAYMRYwFAYD VQQDEw02OGE5MzdmMy0yMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR/Tgai7qMVu3I/ZFj9TfjXVqS7IX6f4ya+9lcItOIF+mjCa8foMzWIYgd8m PyCdZ6vsQ4PBaWcno5XSDy/Bk8G6r4vm0qEqnt3aqvlQZIuqAmOWg5n7Aq8ASfWx x8iPKY3o/Vsvf5vy3gSK1YA61Et6RlczbZqsEaycrgHFP6w+7QiqDpT8z6Gnj/Ta MyXbInfNrJ0YRUaIv+qKwfptojgrD+SNKZBrUZatPtA3FzwkU8h3lLZ+a8uqMEcV Am2rpAlSFV4Mt6nD+9x0zTuWomhlc766EUXchHBajuky8GAgEmcS4+CiYS2gdVgl IKqT+KZxHxrD7/T1PpsXFLdwJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmCRD6x 9o3OgYvdyPxfypnY9IaQMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW4z9485v59/KvdXiFXAViEW299LktQf9e1npNhfqlhQAlqvmbkjJF V+x4fN9CaywROhUf0gOaufsKaFlo3kJUkHm/UM63o6LLmBNKO5Mtd1j+0ppQ9QS7 ZDGuAgV77I3rh5NKZpnetn3pCsE8EQVOZBC+l79HKCllhAhb1jRaKkdZCXm7LFq4 UQ4baFmRaCNzAajXQNOIUhNymGd1MAQ5EYdqHHA09yYVeVLoR0equ+TFrwEZ8w1S jR6YREcvE3oaAA/5aV+DcARWkdccTQEtpl0OWjm95Wt8FHmYoQlQK2YUeOjVrGjg UTWog5W5LjUecjbuKeHtDdLhUWPgy0mz -----END CERTIFICATE-----Generated at Sat Aug 23 10:42:29 2025 by rpki-client