$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft File: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft (raw, json) Hash identifier: /1DR1kl4kj+FxM5s7lSym7ErbD0mG413CEi4Bw4ZAaA= Subject key identifier: EB:41:90:77:FE:6C:B8:E6:F1:A3:9C:29:80:0F:B8:61:35:A0:DC:5B Authority key identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 Certificate issuer: /CN=A91B4F01/serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft Manifest number: 0491 Signing time: Sat 23 Aug 2025 00:13:12 +0000 Manifest this update: Sat 23 Aug 2025 00:13:11 +0000 Manifest next update: Sat 30 Aug 2025 00:13:11 +0000 Files and hashes: 1: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl (hash: lzbPhXCxThfU1eioBHf2wisEZRIoJq2qnTnMCQYgkPA=) 2: BD115AB24B7C11ECA63C0038C4F9AE02.roa (hash: IcEuGPt4GTNEbPQpjAanlaif3gO8wRzi48eufGxQr4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F01, serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Validity Not Before: Aug 23 00:13:11 2025 GMT Not After : Aug 30 00:13:11 2025 GMT Subject: CN=68a90797-bc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:4c:f9:17:ca:55:52:05:3c:84:03:ac:52: 13:fe:ea:9d:96:01:fe:03:a3:27:48:a7:0f:32:7a: 77:2b:29:a7:b9:c2:ce:ab:e2:a5:e4:24:bc:10:4b: 70:c7:99:14:09:a1:96:91:f9:d8:4d:d0:c8:db:36: 92:2e:d5:4b:1a:39:62:7e:b5:9b:a2:8e:c0:76:6d: f9:87:48:8a:36:33:0b:8e:f5:87:57:a4:2b:46:ac: 2b:8f:8c:af:cc:0d:24:5f:96:b9:85:37:e0:58:db: 5f:46:33:a9:f1:1a:e9:f5:de:05:ff:6f:5b:b8:2a: ed:73:0c:e4:14:9c:f2:37:8a:da:a2:a6:43:7e:86: 8c:36:c9:95:b2:8b:b1:54:6f:8f:a2:bb:90:d2:bf: f6:74:95:20:9d:c2:69:8b:91:d4:c6:68:46:76:23: 8d:b6:d1:68:c0:8b:d3:9b:30:e8:e0:03:8f:63:e3: e1:5c:2a:68:e2:60:4a:86:4c:d0:bc:f2:67:c6:45: 7d:f7:01:9e:64:10:e6:fd:ab:41:fe:0b:ed:a6:6e: 80:84:f3:96:0a:c5:7f:dc:1f:0d:57:16:a7:ce:ec: 12:5a:04:2e:48:df:26:c6:ff:31:a8:b2:fc:06:00: 41:d9:30:a0:53:29:9b:41:80:35:5d:d7:b5:64:4a: 82:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:41:90:77:FE:6C:B8:E6:F1:A3:9C:29:80:0F:B8:61:35:A0:DC:5B X509v3 Authority Key Identifier: keyid:5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fc:54:da:ef:ae:b2:df:f2:4c:df:ef:bd:be:50:0e:34:84: 6c:20:c0:19:9a:de:25:17:4b:11:94:e9:1f:27:fd:60:5c:d2: a0:22:4c:1e:c3:db:fa:0d:a0:7c:d2:7c:a4:56:36:83:dc:f9: 00:dc:a0:1b:b6:d2:54:22:f4:6e:3a:18:2e:0c:0c:65:aa:bd: 88:40:25:7c:0f:29:2c:e0:83:a9:17:05:4a:dd:14:39:75:9e: de:9f:ef:c5:ab:c2:23:9a:20:5f:5c:e5:a3:db:1a:c3:1c:84: 10:dc:f5:22:f4:09:30:8b:f4:bc:60:de:29:57:03:8c:79:d2: 49:2c:fb:62:36:5c:f0:f2:55:4c:d1:06:91:71:4a:d1:66:19: a2:3c:39:a3:01:c0:b2:cd:88:be:8b:4b:43:d1:3f:ca:8d:eb: 63:46:44:6d:88:ad:3d:96:e4:47:82:5d:cb:89:e6:85:77:74: e0:be:15:03:7c:bd:6f:00:30:74:32:f1:07:49:dd:af:5a:06: 3c:ea:97:c5:d4:7d:d4:62:2d:7d:ba:d6:a4:8d:05:93:dd:79: 9d:31:f0:48:d5:c6:8a:ac:09:5f:db:14:ba:ae:ca:93:83:7d: 0e:72:55:58:80:b0:71:70:15:79:2f:b3:fa:7d:a1:7d:22:4d: c9:04:10:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGMDExMTAvBgNVBAUTKDVFQkRBN0ZBQTgwMUM1QTI3NERDMjNEMTcxRjg4QjQ2 QTExRTQxNTQwHhcNMjUwODIzMDAxMzExWhcNMjUwODMwMDAxMzExWjAYMRYwFAYD VQQDEw02OGE5MDc5Ny1iYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TBM+RfKVVIFPIQDrFIT/uqdlgH+A6MnSKcPMnp3KymnucLOq+Kl5CS8EEtw x5kUCaGWkfnYTdDI2zaSLtVLGjlifrWboo7Adm35h0iKNjMLjvWHV6QrRqwrj4yv zA0kX5a5hTfgWNtfRjOp8Rrp9d4F/29buCrtcwzkFJzyN4raoqZDfoaMNsmVsoux VG+PoruQ0r/2dJUgncJpi5HUxmhGdiONttFowIvTmzDo4AOPY+PhXCpo4mBKhkzQ vPJnxkV99wGeZBDm/atB/gvtpm6AhPOWCsV/3B8NVxanzuwSWgQuSN8mxv8xqLL8 BgBB2TCgUymbQYA1Xde1ZEqCeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtBkHf+ bLjm8aOcKYAPuGE1oNxbMB8GA1UdIwQYMBaAFF69p/qoAcWidNwj0XH4i0ahHkFU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYwMS9BNzAwQTg0NDRC NzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhhSjAzQ1BSY2ZpTFJxRWVR VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyMm4tcWdCeGFKMDNDUFJjZmlMUnFFZVFWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYwMS9BNzAwQTg0NDRCNzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhh SjAzQ1BSY2ZpTFJxRWVRVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM/FTa766y3/JM3++9vlAONIRsIMAZmt4lF0sRlOkfJ/1gXNKgIkwe w9v6DaB80nykVjaD3PkA3KAbttJUIvRuOhguDAxlqr2IQCV8Dyks4IOpFwVK3RQ5 dZ7en+/Fq8IjmiBfXOWj2xrDHIQQ3PUi9Akwi/S8YN4pVwOMedJJLPtiNlzw8lVM 0QaRcUrRZhmiPDmjAcCyzYi+i0tD0T/KjetjRkRtiK09luRHgl3LieaFd3TgvhUD fL1vADB0MvEHSd2vWgY86pfF1H3UYi19utakjQWT3XmdMfBI1caKrAlf2xS6rsqT g30OclVYgLBxcBV5L7P6faF9Ik3JBBAb -----END CERTIFICATE-----Generated at Sun Aug 24 06:16:06 2025 by rpki-client