$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json) Hash identifier: whhw8sFmR9YPc6WWvmuHMTIjWzgDueNvFpUtk6n4xCc= Subject key identifier: 9C:A4:AE:C1:09:F4:BB:1D:16:8C:57:FF:C9:C6:0D:51:64:AA:2D:4B Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft Manifest number: 012E Signing time: Sat 23 Aug 2025 04:51:20 +0000 Manifest this update: Sat 23 Aug 2025 04:51:20 +0000 Manifest next update: Sat 30 Aug 2025 04:51:20 +0000 Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: gPIgnuPGSwcOZ95NHvUarctYYli6TMD4E8Pu5b9G3jc=) 2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: rFJbuDYL88Z9KeNowFp3y8pDODtibJ7P1KjjzQ7u73o=) 3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: qHX8rwWLzYwQ68AYEwJa6sYGgUw03regWlERxMTMTs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Validity Not Before: Aug 23 04:51:20 2025 GMT Not After : Aug 30 04:51:20 2025 GMT Subject: CN=68a948c8-e805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:f4:17:4d:79:48:95:ae:18:ed:67:d7:0a: 3d:ad:05:e8:91:84:b6:27:24:50:ff:30:25:16:65: 9c:ee:5a:22:22:a5:15:3d:df:26:7f:87:76:50:3f: 98:b9:a5:7c:af:78:d6:e9:54:ff:df:9d:ad:84:ab: e4:f9:03:4a:dc:e5:f7:e8:9e:cb:fb:71:47:71:e5: db:04:3c:99:8c:d2:4e:dd:9e:a2:82:d8:5d:c4:2c: f0:21:a8:a5:07:51:aa:fb:85:80:8f:99:cc:55:6b: 19:e7:d0:0b:74:ad:ef:04:6f:0d:c9:7a:fe:95:4f: 24:cd:b7:4d:55:b0:4c:3a:e4:4b:02:b3:b4:3c:e2: 7c:5c:87:2c:5c:b8:b5:e4:cd:3e:1f:23:78:8e:44: 56:c4:65:25:e4:6d:19:f6:8d:bc:c2:69:b7:3f:3a: 5c:95:cb:64:46:f4:ee:3c:1b:e7:0c:45:06:fa:97: 82:23:bb:65:74:e1:fd:60:cc:25:bb:73:6f:38:bb: be:87:4f:8d:d3:84:4f:7c:9c:47:ad:a7:67:0a:c1: b3:9a:5b:ee:c3:48:33:c5:cc:67:7c:64:79:de:f2: 1e:5b:63:ab:ec:53:ea:6b:f6:ca:9b:e0:af:6a:96: fc:24:00:8d:5e:70:ac:14:9b:22:96:83:24:d1:fb: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A4:AE:C1:09:F4:BB:1D:16:8C:57:FF:C9:C6:0D:51:64:AA:2D:4B X509v3 Authority Key Identifier: keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:48:96:07:74:1d:e1:13:80:22:1b:32:23:8e:6e:b7:da:b0: 48:88:54:37:c4:d7:7c:58:6b:9a:1c:05:d4:47:f1:80:53:22: 46:d6:bc:fe:2a:cd:9f:8b:99:d7:83:82:a1:0d:0a:da:d1:e7: c1:70:32:3f:27:df:17:2c:5c:c6:a2:b8:81:da:d7:0a:50:59: a0:46:3b:a5:0f:21:95:ad:7a:e1:09:97:94:fb:46:c6:b1:a0: 54:d5:ad:6d:15:4b:ad:9a:33:f4:4d:b2:6b:f1:0e:ef:74:1f: e3:a0:63:c9:1f:93:e5:af:1b:03:ee:1e:50:fc:c6:f5:4c:8d: c2:b9:a7:75:66:d2:dd:65:bb:85:0c:17:c2:69:50:9a:b3:96: eb:8b:8f:b5:d7:b8:5c:d4:56:46:d7:d0:c7:4c:b3:13:05:a4: 72:60:66:47:e2:f7:57:22:8f:7c:77:47:4c:cb:04:08:b1:a8: cf:f1:d8:5a:6f:eb:52:e4:3d:3a:bf:94:31:f7:54:57:a2:66: 42:51:25:6d:df:a1:69:49:0e:12:01:59:24:58:84:27:77:c1: 03:ad:63:df:a4:c1:12:fd:b8:a4:db:83:8c:14:36:bc:4e:9a: 0e:43:6d:1f:f7:b8:b3:a8:61:61:9f:71:6f:cc:3e:db:cb:e1: b4:f7:9a:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF OENFNzg4QTcwHhcNMjUwODIzMDQ1MTIwWhcNMjUwODMwMDQ1MTIwWjAYMRYwFAYD VQQDEw02OGE5NDhjOC1lODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4/0F015SJWuGO1n1wo9rQXokYS2JyRQ/zAlFmWc7loiIqUVPd8mf4d2UD+Y uaV8r3jW6VT/352thKvk+QNK3OX36J7L+3FHceXbBDyZjNJO3Z6igthdxCzwIail B1Gq+4WAj5nMVWsZ59ALdK3vBG8NyXr+lU8kzbdNVbBMOuRLArO0POJ8XIcsXLi1 5M0+HyN4jkRWxGUl5G0Z9o28wmm3PzpclctkRvTuPBvnDEUG+peCI7tldOH9YMwl u3NvOLu+h0+N04RPfJxHradnCsGzmlvuw0gzxcxnfGR53vIeW2Or7FPqa/bKm+Cv apb8JACNXnCsFJsiloMk0fuBYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJykrsEJ 9LsdFoxX/8nGDVFkqi1LMB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNBNi84MDc5NEM5QUMwOEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0 a21JcjViZTR2dV9vem5pS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBSJYHdB3hE4AiGzIjjm632rBIiFQ3xNd8WGuaHAXUR/GAUyJG1rz+ Ks2fi5nXg4KhDQra0efBcDI/J98XLFzGoriB2tcKUFmgRjulDyGVrXrhCZeU+0bG saBU1a1tFUutmjP0TbJr8Q7vdB/joGPJH5PlrxsD7h5Q/Mb1TI3Cuad1ZtLdZbuF DBfCaVCas5bri4+117hc1FZG19DHTLMTBaRyYGZH4vdXIo98d0dMywQIsajP8dha b+tS5D06v5Qx91RXomZCUSVt36FpSQ4SAVkkWIQnd8EDrWPfpMES/bik24OMFDa8 TpoOQ20f97izqGFhn3FvzD7by+G095oL -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:47 2025 by rpki-client