$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: Joerk6b8z7Ry60UovkHTgaD8TVTKR+yBNX5YEwDy8Wk= Subject key identifier: D1:73:32:95:1F:85:1B:35:DE:2A:0C:41:72:8E:4A:79:89:87:D3:E0 Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 01C4 Signing time: Sat 23 Aug 2025 03:04:55 +0000 Manifest this update: Sat 23 Aug 2025 03:04:55 +0000 Manifest next update: Sat 30 Aug 2025 03:04:55 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: WldrYMTLqdiXtF8CvhjQY35jgfRQ/s0S87XZN1ksHIs=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Aug 23 03:04:55 2025 GMT Not After : Aug 30 03:04:55 2025 GMT Subject: CN=68a92fd7-7b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a0:f3:6a:2a:3e:31:69:e1:fc:0b:71:ef:1a: d7:7a:da:01:a3:76:c2:1a:a0:9a:9a:20:fe:68:69: 9c:d7:60:0d:2c:08:c3:ba:3a:da:65:8d:a3:51:b9: 48:f2:aa:dd:e2:28:1a:58:2d:f3:97:74:3e:e7:d4: 3e:dd:5f:82:5f:86:49:de:98:47:d3:d9:fe:66:c2: 54:cb:39:80:b1:ef:fa:06:88:72:30:cb:86:45:b9: af:f4:c9:61:84:74:16:69:9e:75:d7:83:ec:44:c9: df:76:94:91:df:49:a7:ed:78:87:bc:25:97:a9:73: a5:2d:79:64:66:25:40:3f:86:22:64:30:08:28:89: 87:e6:5c:4e:d2:80:01:8b:3f:8a:07:b1:56:f1:fa: 98:94:08:29:21:73:46:f7:59:8e:97:ae:ba:46:27: 84:f1:ee:a8:f2:aa:2c:11:fc:7f:16:dd:a5:d7:83: c3:22:5d:f6:19:96:64:f5:11:47:40:ee:34:18:8d: f9:d4:9e:9b:c0:d2:61:e3:cf:1a:15:b9:c3:5d:9d: 64:42:d3:a2:83:f7:ba:85:e6:22:2e:ca:05:cd:c9: 17:fe:55:f4:d3:bc:ad:74:50:fb:dd:e1:51:99:07: 53:bf:95:12:61:6c:61:14:6e:96:b4:cd:25:8f:97: ac:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:73:32:95:1F:85:1B:35:DE:2A:0C:41:72:8E:4A:79:89:87:D3:E0 X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:32:3f:1b:78:af:2c:2b:03:d8:1b:ef:17:5b:89:e8:f0:16: 9a:9e:07:14:af:5f:03:b9:f6:99:65:20:91:82:de:3b:ae:2f: c1:99:09:92:33:ee:38:b4:da:a8:65:9a:87:4d:a4:1d:37:bd: 60:f2:0b:61:34:1b:c5:be:03:37:8b:64:74:4c:b8:67:ab:3e: 65:4c:94:bb:93:f5:60:36:a8:75:53:57:63:6d:d6:7a:2d:95: 0c:bc:83:17:44:93:51:59:b4:68:86:fc:75:65:1d:1d:77:88: 16:24:24:e7:98:f8:0d:b4:69:43:5a:0f:07:39:7c:1f:10:69: 09:85:6f:11:92:44:dc:5d:b3:d1:7e:90:e0:70:d9:3c:86:31: b1:0d:93:19:72:dd:d0:a2:15:a0:3b:74:14:93:19:1b:f3:18: 71:df:d1:99:54:6c:90:7d:82:9c:cb:8f:d9:d7:e8:2b:a8:26: 08:7d:97:4e:e1:0c:ba:64:4f:e7:8a:67:76:d2:90:d0:ca:13: ca:21:cc:56:25:f5:23:21:27:55:c8:2f:01:40:85:37:49:f5: fd:92:39:46:ef:7b:4c:5e:3c:6c:2f:b5:f7:d1:d3:cb:9b:55: 0e:5e:e6:d2:51:59:0a:38:0e:34:87:26:8c:79:3e:03:8f:4e: 5a:7a:0c:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjUwODIzMDMwNDU1WhcNMjUwODMwMDMwNDU1WjAYMRYwFAYD VQQDEw02OGE5MmZkNy03YjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+6Dzaio+MWnh/Atx7xrXetoBo3bCGqCamiD+aGmc12ANLAjDujraZY2jUblI 8qrd4igaWC3zl3Q+59Q+3V+CX4ZJ3phH09n+ZsJUyzmAse/6BohyMMuGRbmv9Mlh hHQWaZ5114PsRMnfdpSR30mn7XiHvCWXqXOlLXlkZiVAP4YiZDAIKImH5lxO0oAB iz+KB7FW8fqYlAgpIXNG91mOl666RieE8e6o8qosEfx/Ft2l14PDIl32GZZk9RFH QO40GI351J6bwNJh488aFbnDXZ1kQtOig/e6heYiLsoFzckX/lX007ytdFD73eFR mQdTv5USYWxhFG6WtM0lj5esuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFzMpUf hRs13ioMQXKOSnmJh9PgMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKMj8beK8sKwPYG+8XW4no8BaangcUr18DufaZZSCRgt47ri/BmQmS M+44tNqoZZqHTaQdN71g8gthNBvFvgM3i2R0TLhnqz5lTJS7k/VgNqh1U1djbdZ6 LZUMvIMXRJNRWbRohvx1ZR0dd4gWJCTnmPgNtGlDWg8HOXwfEGkJhW8RkkTcXbPR fpDgcNk8hjGxDZMZct3QohWgO3QUkxkb8xhx39GZVGyQfYKcy4/Z1+grqCYIfZdO 4Qy6ZE/nimd20pDQyhPKIcxWJfUjISdVyC8BQIU3SfX9kjlG73tMXjxsL7X30dPL m1UOXubSUVkKOA40hyaMeT4Dj05aegyp -----END CERTIFICATE-----Generated at Sun Aug 24 07:04:12 2025 by rpki-client