$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json) Hash identifier: ovHPy2Lt1IWllDVAi48AeEixT5IP1P9nQIuvIrWr818= Subject key identifier: 99:C5:9F:E3:67:A0:7E:30:60:D7:E2:A3:61:E2:22:AD:C1:26:E5:5E Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Certificate serial: 1084 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft Manifest number: 1078 Signing time: Fri 22 Aug 2025 17:30:14 +0000 Manifest this update: Fri 22 Aug 2025 17:30:13 +0000 Manifest next update: Fri 29 Aug 2025 17:30:13 +0000 Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: f4hKLUvS/O0We2FNPLo/u6HP0dxb4SINGhkRslluSMs=) 2: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: zI34h0FmFtZZLolHCnykLI2wVD3iOXp1eKhUZqTjA48=) 3: 691023063A8311E99AF5572DC4F9AE02.roa (hash: Uy8f9hnHu5ZNhfoO9b7+eo6ci2jsbvNnSUlZAZd6nGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4228 (0x1084) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Validity Not Before: Aug 22 17:30:13 2025 GMT Not After : Aug 29 17:30:13 2025 GMT Subject: CN=68a8a925-567c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:f4:ae:0c:13:36:a3:d7:09:b2:f8:21:db: f3:ab:68:2d:9c:8a:4e:da:d6:7c:f8:e3:eb:6e:aa: 67:ce:0a:44:6c:fa:62:72:46:37:a9:ef:3f:5f:25: ef:83:95:42:d9:37:10:58:e4:df:18:ec:c1:97:2b: 25:61:38:c3:34:e7:ca:aa:e4:9e:ed:13:1a:e0:62: 62:34:5e:d0:1b:34:9c:86:d9:13:22:31:a1:b4:27: b8:97:22:0c:a1:d5:b0:59:6e:10:a3:75:9b:0a:04: 6c:5a:f1:c8:fe:68:16:81:6e:ba:dd:a3:62:77:d3: 7d:54:41:b4:ff:04:a4:39:88:6f:29:f0:70:29:d7: ac:40:6f:4e:ce:e2:6c:bc:25:e2:23:de:c4:cc:c9: 1e:6d:ec:a6:19:d1:0b:80:1a:33:f0:9f:d7:a5:2e: 8b:40:7b:38:8a:f7:5d:f7:a4:4c:8f:8a:b6:c5:51: 4c:ca:89:54:91:e2:70:ba:3e:f0:32:f6:eb:20:cb: 0c:d9:6e:39:01:83:b8:04:22:96:1c:18:3a:28:42: 79:0a:df:98:6c:e9:32:ba:cd:49:84:7b:69:10:2e: 5c:d3:9b:28:8d:a5:a0:da:a0:1c:60:88:7e:52:70: 12:28:1e:11:3b:8c:93:a8:1a:ad:17:91:ff:8d:5a: 33:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C5:9F:E3:67:A0:7E:30:60:D7:E2:A3:61:E2:22:AD:C1:26:E5:5E X509v3 Authority Key Identifier: keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:70:26:fe:dd:77:0e:57:18:ec:62:43:93:dd:22:e1:dc:7d: 2a:3a:bd:38:43:61:5d:44:12:fb:41:25:17:8f:c6:0e:76:74: 49:d0:42:8c:18:39:f6:b9:09:e5:83:70:39:4a:39:50:7c:f8: f4:06:f1:34:14:82:0e:f1:65:6c:3c:9f:4d:98:26:50:b1:31: ae:b9:0e:96:60:95:b7:be:52:34:c7:89:ff:ba:6f:ec:76:1b: 8a:5d:c4:70:1a:bc:5b:37:12:16:ba:9b:73:99:ce:64:a9:db: 1c:95:79:29:5b:a8:2b:22:97:4b:3f:2e:22:30:41:6c:ed:82: ae:23:23:ac:44:88:96:74:ad:c3:7d:b5:70:fd:81:39:95:3c: 81:ed:20:44:a2:85:3f:af:83:22:5f:ff:7f:dc:09:7d:ce:c1: 46:68:39:7d:c3:8e:20:3e:6e:07:18:ca:1f:c0:ba:5f:55:58: c5:8e:da:9f:d4:12:75:43:e3:1f:ec:8c:db:e7:a9:b2:41:83: 18:ee:f3:f7:af:30:3f:d1:43:ac:97:5e:64:cd:77:f4:8b:73: f0:05:28:6b:03:a6:69:cc:83:0a:2e:0c:b9:c5:02:78:c3:7f: 90:c3:49:08:2f:60:da:16:f5:e5:a9:91:28:65:ff:f2:f2:69: bb:3e:83:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1 MUEyMzUwQUYwHhcNMjUwODIyMTczMDEzWhcNMjUwODI5MTczMDEzWjAYMRYwFAYD VQQDEw02OGE4YTkyNS01NjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq030rgwTNqPXCbL4Idvzq2gtnIpO2tZ8+OPrbqpnzgpEbPpickY3qe8/XyXv g5VC2TcQWOTfGOzBlyslYTjDNOfKquSe7RMa4GJiNF7QGzSchtkTIjGhtCe4lyIM odWwWW4Qo3WbCgRsWvHI/mgWgW663aNid9N9VEG0/wSkOYhvKfBwKdesQG9OzuJs vCXiI97EzMkebeymGdELgBoz8J/XpS6LQHs4ivdd96RMj4q2xVFMyolUkeJwuj7w MvbrIMsM2W45AYO4BCKWHBg6KEJ5Ct+YbOkyus1JhHtpEC5c05sojaWg2qAcYIh+ UnASKB4RO4yTqBqtF5H/jVozlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnFn+Nn oH4wYNfio2HiIq3BJuVeMB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjEwQS9BNTM4QURCODNBODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1 cVIxejAyUTg2N3RSb2pVSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxcCb+3XcOVxjsYkOT3SLh3H0qOr04Q2FdRBL7QSUXj8YOdnRJ0EKM GDn2uQnlg3A5SjlQfPj0BvE0FIIO8WVsPJ9NmCZQsTGuuQ6WYJW3vlI0x4n/um/s dhuKXcRwGrxbNxIWuptzmc5kqdsclXkpW6grIpdLPy4iMEFs7YKuIyOsRIiWdK3D fbVw/YE5lTyB7SBEooU/r4MiX/9/3Al9zsFGaDl9w44gPm4HGMofwLpfVVjFjtqf 1BJ1Q+Mf7Izb56myQYMY7vP3rzA/0UOsl15kzXf0i3PwBShrA6ZpzIMKLgy5xQJ4 w3+Qw0kIL2DaFvXlqZEoZf/y8mm7PoPh -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:06 2025 by rpki-client