$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json) Hash identifier: G8wZOm7GF76xh9PGbf9ik87YV96lpYTHj5MLc1Wi5m0= Subject key identifier: 9D:CF:35:3E:66:3E:18:5C:54:91:56:AC:4A:6F:D3:81:AC:0C:F3:F1 Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Certificate serial: 0771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft Manifest number: 0767 Signing time: Fri 22 Aug 2025 21:46:11 +0000 Manifest this update: Fri 22 Aug 2025 21:46:11 +0000 Manifest next update: Fri 29 Aug 2025 21:46:11 +0000 Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: v1SHFDgBAFHGCI7FUQnC76uSWDGNuMN7dkP5i3ekbsg=) 2: 4D12DEAE2E9311EBB9FC5259C4F9AE02.roa (hash: 7nAwvijUmnaIMOxevk905gWR2HOoFSC7V0ZEJzsRaVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Validity Not Before: Aug 22 21:46:11 2025 GMT Not After : Aug 29 21:46:11 2025 GMT Subject: CN=68a8e523-3a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:d6:76:51:19:75:75:6c:a5:31:51:ae:39: b3:d2:b6:a3:b2:cc:f5:f3:18:6d:ef:51:3f:1f:a9: fe:58:8d:ef:b3:f3:28:37:de:ac:33:ad:d9:76:83: 2a:f3:33:bc:68:db:ba:95:e8:f5:61:ba:c3:e6:c7: ad:71:73:11:9c:04:1c:f3:24:a5:53:83:f9:87:af: 65:67:7e:49:fe:b8:6d:d0:7c:92:06:ee:74:33:88: fa:de:91:45:d3:c4:af:d4:2b:0d:45:dc:fb:1d:a9: 4c:94:2e:4d:fb:61:8a:c9:72:cc:00:9e:9d:02:df: 00:71:b3:ea:ab:80:b0:2c:8c:16:20:75:18:9c:b6: 2f:79:38:9d:2d:1e:94:58:dc:79:49:f4:24:64:c2: dd:94:1a:77:37:79:56:f0:12:4d:97:f7:92:d3:8c: 73:f8:98:84:cf:0b:c2:7c:ca:94:4e:d9:79:4d:1d: 4f:ca:30:69:45:f4:ba:16:d0:42:cf:08:a8:74:83: f0:24:2f:28:99:ad:c6:64:d5:36:91:47:51:76:c6: d4:5b:15:9f:f4:0b:f3:7e:d8:01:bf:ed:3a:ce:e3: a0:11:a7:12:63:84:99:10:45:c2:a4:a5:47:bf:d6: 6a:6c:cb:1b:74:f0:f5:b1:c8:96:4d:6f:a3:4b:c3: 42:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CF:35:3E:66:3E:18:5C:54:91:56:AC:4A:6F:D3:81:AC:0C:F3:F1 X509v3 Authority Key Identifier: keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:3b:bc:0d:f6:4c:46:45:5c:a0:36:04:42:e9:13:0d:5f:0d: 3a:99:ad:b9:c7:c7:e3:48:15:41:c2:45:35:0c:c4:46:a0:df: 60:13:40:c0:2c:0e:55:55:7b:4a:91:85:3e:a1:17:50:21:8e: 5d:9e:de:c6:69:39:f7:7a:23:c9:06:79:7a:93:12:ef:0b:3e: b4:75:3e:25:fd:b2:c4:46:24:4b:af:90:55:3d:e8:f4:9f:c2: 32:5a:91:c2:1a:fa:ab:92:0d:d5:3f:66:74:fa:ab:c4:cb:6b: 0d:51:45:1a:e8:bd:d1:89:73:09:33:ad:4e:5e:6e:73:43:d4: 4a:b6:83:dc:f4:4a:63:f5:bd:61:8d:c5:06:7c:8c:40:02:28: e3:5e:f5:c4:43:25:6c:5a:6c:34:f4:ae:d9:a9:75:9f:64:86: 8b:db:21:44:dd:44:bc:a1:87:ca:39:b0:b7:54:b6:f3:ea:eb: 45:76:7f:61:09:88:8c:b2:b6:f1:42:f6:27:d9:d2:b3:63:a0: 54:22:16:d4:81:d8:f7:41:b4:26:23:a0:f7:40:79:59:01:ce: 1c:7f:d8:ad:08:0c:f6:2d:f5:ee:80:21:54:b6:56:2b:94:ff: b4:55:5c:fb:a2:bd:19:48:38:27:19:cd:90:08:15:4b:78:b1: b3:db:8d:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD MjdDNDA0MDcwHhcNMjUwODIyMjE0NjExWhcNMjUwODI5MjE0NjExWjAYMRYwFAYD VQQDEw02OGE4ZTUyMy0zYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvObWdlEZdXVspTFRrjmz0rajssz18xht71E/H6n+WI3vs/MoN96sM63ZdoMq 8zO8aNu6lej1YbrD5setcXMRnAQc8ySlU4P5h69lZ35J/rht0HySBu50M4j63pFF 08Sv1CsNRdz7HalMlC5N+2GKyXLMAJ6dAt8AcbPqq4CwLIwWIHUYnLYveTidLR6U WNx5SfQkZMLdlBp3N3lW8BJNl/eS04xz+JiEzwvCfMqUTtl5TR1PyjBpRfS6FtBC zwiodIPwJC8oma3GZNU2kUdRdsbUWxWf9AvzftgBv+06zuOgEacSY4SZEEXCpKVH v9ZqbMsbdPD1sciWTW+jS8NChwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3PNT5m PhhcVJFWrEpv04GsDPPxMB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1O7wN9kxGRVygNgRC6RMNXw06ma25x8fjSBVBwkU1DMRGoN9gE0DA LA5VVXtKkYU+oRdQIY5dnt7GaTn3eiPJBnl6kxLvCz60dT4l/bLERiRLr5BVPej0 n8IyWpHCGvqrkg3VP2Z0+qvEy2sNUUUa6L3RiXMJM61OXm5zQ9RKtoPc9Epj9b1h jcUGfIxAAijjXvXEQyVsWmw09K7ZqXWfZIaL2yFE3US8oYfKObC3VLbz6utFdn9h CYiMsrbxQvYn2dKzY6BUIhbUgdj3QbQmI6D3QHlZAc4cf9itCAz2LfXugCFUtlYr lP+0VVz7or0ZSDgnGc2QCBVLeLGz242S -----END CERTIFICATE-----Generated at Sat Aug 23 13:47:58 2025 by rpki-client