$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft File: XucUYNY3KKxeq5GKVB0NcFFXfU0.mft (raw, json) Hash identifier: kwA3KwNInLYnS+8FbwQ4NYgrv4gLtHoOq4bOTNmDoGA= Subject key identifier: 09:C6:E9:6D:A2:12:81:19:1C:40:2B:D8:E6:EF:43:0A:2E:3E:53:51 Authority key identifier: 5E:E7:14:60:D6:37:28:AC:5E:AB:91:8A:54:1D:0D:70:51:57:7D:4D Certificate issuer: /CN=A91B758E/serialNumber=5EE71460D63728AC5EAB918A541D0D7051577D4D Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft Manifest number: 0115 Signing time: Sat 23 Aug 2025 05:00:42 +0000 Manifest this update: Sat 23 Aug 2025 05:00:41 +0000 Manifest next update: Sat 30 Aug 2025 05:00:41 +0000 Files and hashes: 1: XucUYNY3KKxeq5GKVB0NcFFXfU0.crl (hash: SpWtKjAYPVWJHZ7IpC83IF/dr+ucRxLg/8T4fr9BOVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.crl rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=5EE71460D63728AC5EAB918A541D0D7051577D4D Validity Not Before: Aug 23 05:00:41 2025 GMT Not After : Aug 30 05:00:41 2025 GMT Subject: CN=68a94afa-d47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:2b:5c:04:b6:88:09:79:9f:11:39:dc:5b: 18:27:f5:3d:6a:7b:e6:1e:b4:dd:c2:59:50:52:0e: 3b:1a:8c:d7:0d:7f:61:9e:07:97:f0:d1:86:14:df: d7:a9:7c:ee:75:11:dc:c6:c8:8f:5d:94:8a:c9:46: 41:99:b0:81:c2:4c:ec:75:96:cd:18:07:7e:1f:35: 2e:b4:e9:ef:a7:75:a5:a1:50:ae:ff:e2:8f:45:cc: 48:de:eb:c9:43:a4:9a:e1:1a:99:80:d5:4e:40:3f: 58:1c:75:96:db:9d:8c:9a:7d:01:f4:59:ec:2f:49: 51:7f:f4:7a:c8:8f:f6:ab:af:40:ef:53:6d:92:47: 15:2c:4f:e0:e7:8d:4d:56:97:27:86:ed:a1:c4:e3: 24:01:a6:c2:b4:74:9a:16:c0:52:71:0a:3c:09:60: 46:55:e9:63:2e:b8:a8:56:98:ce:0d:0d:33:14:13: b0:2e:b0:1f:c6:58:08:69:b3:cc:1b:91:e3:2e:f0: 3c:22:5b:6e:4e:dd:b6:34:ff:fb:0e:61:dd:5e:1e: e8:b1:7d:8d:3e:5c:3a:ed:5e:04:09:5d:11:db:b3: 15:94:10:75:69:8c:5e:9f:6c:f4:30:03:51:fe:6d: 90:c4:85:d2:2d:48:e4:66:40:45:9d:af:50:d3:1f: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C6:E9:6D:A2:12:81:19:1C:40:2B:D8:E6:EF:43:0A:2E:3E:53:51 X509v3 Authority Key Identifier: keyid:5E:E7:14:60:D6:37:28:AC:5E:AB:91:8A:54:1D:0D:70:51:57:7D:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3a:c9:7d:6b:3f:8e:fe:5b:7e:2a:7a:0f:fd:f0:65:58:a2: 17:40:57:53:7c:68:b5:1e:8e:f2:a5:a6:ca:1d:d4:9f:58:8d: d4:1f:4c:df:8f:cf:ea:b5:14:ac:12:17:cd:6f:77:2d:3e:fc: 2a:fe:9d:b1:32:7c:76:b2:66:3d:3c:36:96:0f:b7:52:f9:ea: 70:3f:8f:14:ec:72:fc:a0:78:7b:78:56:00:f5:dd:c1:6b:c1: 79:90:2a:e8:17:6e:dd:20:c3:88:45:46:3b:4c:aa:22:0b:75: 63:b5:b9:90:17:17:a2:22:e3:9d:4d:d3:05:57:2f:e7:b1:e7: 76:ca:82:8c:d3:92:57:3a:51:15:1e:9e:b0:a7:36:2c:59:1c: 31:2f:88:ef:16:b4:dd:f2:74:37:98:3a:6b:4d:f9:ae:d1:66: eb:e2:6e:dd:4b:5a:cf:b2:7e:6f:14:c6:f4:94:32:bc:61:1d: 54:3e:be:99:66:1d:68:78:e1:25:57:15:51:e3:26:c8:8f:2f: 00:c3:39:6b:f2:66:f8:d0:e7:84:b8:4e:ae:f3:11:9a:25:bc: 19:06:71:a0:15:08:e9:4d:64:65:33:87:a5:bd:1d:f1:55:bb: 41:ee:ce:b3:db:14:bf:55:69:ee:5b:2a:95:c0:60:89:d9:15: c7:fb:30:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKDVFRTcxNDYwRDYzNzI4QUM1RUFCOTE4QTU0MUQwRDcw NTE1NzdENEQwHhcNMjUwODIzMDUwMDQxWhcNMjUwODMwMDUwMDQxWjAYMRYwFAYD VQQDEw02OGE5NGFmYS1kNDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxocrXAS2iAl5nxE53FsYJ/U9anvmHrTdwllQUg47GozXDX9hngeX8NGGFN/X qXzudRHcxsiPXZSKyUZBmbCBwkzsdZbNGAd+HzUutOnvp3WloVCu/+KPRcxI3uvJ Q6Sa4RqZgNVOQD9YHHWW252Mmn0B9FnsL0lRf/R6yI/2q69A71NtkkcVLE/g541N Vpcnhu2hxOMkAabCtHSaFsBScQo8CWBGVeljLrioVpjODQ0zFBOwLrAfxlgIabPM G5HjLvA8IltuTt22NP/7DmHdXh7osX2NPlw67V4ECV0R27MVlBB1aYxen2z0MANR /m2QxIXSLUjkZkBFna9Q0x/R1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnG6W2i EoEZHEAr2ObvQwouPlNRMB8GA1UdIwQYMBaAFF7nFGDWNyisXquRilQdDXBRV31N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9FNzk5RjkyMkQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi9YdWNVWU5ZM0tLeGVxNUdLVkIwTmNGRlhm VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1Y1VZTlkzS0t4ZXE1R0tWQjBOY0ZGWGZVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9FNzk5RjkyMkQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi9YdWNVWU5ZM0tL eGVxNUdLVkIwTmNGRlhmVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbOsl9az+O/lt+KnoP/fBlWKIXQFdTfGi1Ho7ypabKHdSfWI3UH0zf j8/qtRSsEhfNb3ctPvwq/p2xMnx2smY9PDaWD7dS+epwP48U7HL8oHh7eFYA9d3B a8F5kCroF27dIMOIRUY7TKoiC3VjtbmQFxeiIuOdTdMFVy/nsed2yoKM05JXOlEV Hp6wpzYsWRwxL4jvFrTd8nQ3mDprTfmu0Wbr4m7dS1rPsn5vFMb0lDK8YR1UPr6Z Zh1oeOElVxVR4ybIjy8Awzlr8mb40OeEuE6u8xGaJbwZBnGgFQjpTWRlM4elvR3x VbtB7s6z2xS/VWnuWyqVwGCJ2RXH+zBB -----END CERTIFICATE-----Generated at Sun Aug 24 03:07:02 2025 by rpki-client