$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft File: xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json) Hash identifier: Ap01bNl5p0BzkBdoRJg3Td/+12BZu6tEVMva3AsdAg0= Subject key identifier: 1E:CF:BF:7E:58:D9:AA:D1:FA:14:50:95:4C:36:E2:4A:87:04:93:62 Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 Certificate issuer: /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft Manifest number: 04D7 Signing time: Sat 23 Aug 2025 00:01:53 +0000 Manifest this update: Sat 23 Aug 2025 00:01:52 +0000 Manifest next update: Sat 30 Aug 2025 00:01:52 +0000 Files and hashes: 1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: 7aRwWrtl8JboZFgVisworu3slfJBS9+tcsbDRGDDt8s=) 2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: NBcgBUuRK2Oc31nKRp+BExXYFoPfjJAOt1Hb95kMeP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7740, serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Validity Not Before: Aug 23 00:01:52 2025 GMT Not After : Aug 30 00:01:52 2025 GMT Subject: CN=68a904f0-ed94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:29:e4:37:ff:47:de:c2:f3:19:82:62:ce:6c: 83:15:4c:4d:34:b2:be:58:a1:ee:60:9b:67:ea:14: 29:11:d1:61:e3:a1:20:76:24:e7:ba:68:9d:86:94: a2:b1:3e:5c:35:53:5d:f7:90:db:a6:c1:4f:d3:22: cd:c5:46:f1:08:08:ea:21:6f:c0:15:b2:52:29:76: 37:8e:b9:bb:59:9b:79:65:9b:2a:0c:8b:28:88:9b: 31:13:c0:3a:a5:ec:c8:9c:03:ea:6f:8c:35:f9:d8: 39:e9:23:6c:91:69:ef:81:a1:ad:f9:15:61:c7:e2: 40:1d:7a:67:b3:9e:0d:dd:42:39:79:dc:71:2d:85: 10:47:ce:06:c4:6e:a8:85:b6:b1:3a:2c:85:a9:1b: 29:17:ee:27:1a:52:ee:43:bb:46:c9:e3:8b:69:fb: 8e:7e:d9:d3:f4:00:16:97:7c:f2:f2:9b:14:08:62: db:79:f1:79:b7:32:a8:53:35:9b:3c:4c:07:e9:84: c0:47:b9:0c:94:dc:83:bc:f2:81:1a:19:a3:3e:d4: 4c:81:90:b3:bc:e7:ce:2d:7d:62:dd:ae:93:48:c2: 72:e9:6b:d0:6b:70:c6:2d:be:7c:7d:77:8f:0c:9c: 55:1d:10:43:15:cc:36:51:33:e2:ae:28:e3:e8:c7: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CF:BF:7E:58:D9:AA:D1:FA:14:50:95:4C:36:E2:4A:87:04:93:62 X509v3 Authority Key Identifier: keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:30:34:07:07:2d:0a:c9:5e:53:a8:67:e4:28:48:f6:f1:d0: 51:c0:b1:44:d6:48:e0:63:a4:b3:d8:4f:03:cb:7d:1f:35:ab: ce:c8:10:b6:b5:11:35:d5:d3:c3:fa:c6:ef:11:65:e1:9b:e2: 71:ab:4d:3f:64:6c:83:03:b3:b2:d0:33:11:12:c1:3e:67:21: 72:fa:b4:90:09:7c:ac:b6:bc:6f:ed:33:9c:23:1a:25:69:5e: 6d:16:00:e0:34:8c:a9:64:84:1e:9c:b2:d0:51:6f:17:03:6a: ef:e2:6c:59:92:fa:75:dc:fe:98:97:05:37:93:00:13:cc:58: 5f:bd:cb:fe:18:2e:10:d7:71:dd:90:04:a3:3b:02:26:9f:8d: 24:ea:aa:d1:78:34:a4:2f:f1:63:4a:c9:92:66:be:33:76:c9: b7:55:c0:da:aa:3b:59:7d:3a:7e:86:f6:2e:26:04:3e:17:ad: 73:9d:45:20:9b:bb:70:09:6d:c9:4e:71:bb:f8:59:9a:65:e7: c4:47:f0:39:2d:f2:c2:4f:b2:8a:5f:39:e6:6c:b3:3a:55:d5: c5:26:7d:50:f9:e5:3d:53:15:cd:b3:00:06:b1:33:7a:35:c7: 5a:41:1d:05:8b:b7:08:75:b4:22:ed:7f:47:2b:c2:ac:bb:c6: 86:a0:be:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NDAxMTAvBgNVBAUTKEM0MkExOEMyQjdCNzI1MUYyNTA2RjVGQTI3OEExNjJF ODQ0NDREQTYwHhcNMjUwODIzMDAwMTUyWhcNMjUwODMwMDAwMTUyWjAYMRYwFAYD VQQDEw02OGE5MDRmMC1lZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CnkN/9H3sLzGYJizmyDFUxNNLK+WKHuYJtn6hQpEdFh46EgdiTnumidhpSi sT5cNVNd95DbpsFP0yLNxUbxCAjqIW/AFbJSKXY3jrm7WZt5ZZsqDIsoiJsxE8A6 pezInAPqb4w1+dg56SNskWnvgaGt+RVhx+JAHXpns54N3UI5edxxLYUQR84GxG6o hbaxOiyFqRspF+4nGlLuQ7tGyeOLafuOftnT9AAWl3zy8psUCGLbefF5tzKoUzWb PEwH6YTAR7kMlNyDvPKBGhmjPtRMgZCzvOfOLX1i3a6TSMJy6WvQa3DGLb58fXeP DJxVHRBDFcw2UTPirijj6Mc49QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7Pv35Y 2arR+hRQlUw24kqHBJNiMB8GA1UdIwQYMBaAFMQqGMK3tyUfJQb1+ieKFi6ERE2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc0MC9GM0E3MTlERTMy MzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pSOGxCdlg2SjRvV0xvUkVU YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDb1l3cmUzSlI4bEJ2WDZKNG9XTG9SRVRhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc0MC9GM0E3MTlERTMyMzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pS OGxCdlg2SjRvV0xvUkVUYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6MDQHBy0KyV5TqGfkKEj28dBRwLFE1kjgY6Sz2E8Dy30fNavOyBC2 tRE11dPD+sbvEWXhm+Jxq00/ZGyDA7Oy0DMREsE+ZyFy+rSQCXystrxv7TOcIxol aV5tFgDgNIypZIQenLLQUW8XA2rv4mxZkvp13P6YlwU3kwATzFhfvcv+GC4Q13Hd kASjOwImn40k6qrReDSkL/FjSsmSZr4zdsm3VcDaqjtZfTp+hvYuJgQ+F61znUUg m7twCW3JTnG7+FmaZefER/A5LfLCT7KKXznmbLM6VdXFJn1Q+eU9UxXNswAGsTN6 NcdaQR0Fi7cIdbQi7X9HK8Ksu8aGoL6u -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:17 2025 by rpki-client