$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json) Hash identifier: 3Vqql29088TNUkIkmxXAw0j07DX7RCAsMwAkLwAl37w= Subject key identifier: 21:F2:C0:CF:09:1F:D9:70:15:37:64:1B:FB:67:C7:7D:06:57:2E:50 Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft Manifest number: 010F Signing time: Sat 23 Aug 2025 05:04:43 +0000 Manifest this update: Sat 23 Aug 2025 05:04:43 +0000 Manifest next update: Sat 30 Aug 2025 05:04:43 +0000 Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: bup08l0RlWkx91a2lq+Hyam3FJpBYL0OSLeWWksb794=) 2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: osmG47ejUnqAfJKuMkDqKj8NyV5CxVCxx93M/mU6AGU=) 3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: tXFOS4K6NP0mWp2yqDrG4Mk0xH2TKVaPDDMjLQ6peHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Validity Not Before: Aug 23 05:04:43 2025 GMT Not After : Aug 30 05:04:43 2025 GMT Subject: CN=68a94beb-2d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:7b:89:92:f6:d0:be:ad:5e:08:6d:8e:8c: ff:f6:c1:44:f9:4e:f5:78:f2:2e:40:87:cb:3e:9c: 50:a5:0c:94:3b:6f:d9:e5:79:47:2c:80:36:44:41: 6a:5d:be:1d:94:7b:bd:e5:6c:2d:1f:08:19:82:f0: 46:c7:0c:3d:3f:f4:85:0a:9a:b8:7b:9f:4d:63:81: a8:05:a9:da:ed:6d:30:0e:51:18:d3:83:5c:84:23: 69:31:08:60:be:b7:ed:8b:5c:c4:a8:a5:b3:8c:65: f9:78:dc:4c:52:62:4c:78:ca:86:62:94:ee:3d:63: be:56:76:84:a3:81:b6:49:ff:52:d0:08:ed:fe:88: 8f:57:17:ad:31:a0:62:77:05:2c:cd:aa:48:0f:7b: 1e:6b:d4:2f:ca:6b:3b:37:f9:a9:8d:10:4e:68:1c: df:f4:f5:87:f9:09:ed:cd:10:3e:96:7f:99:91:88: db:30:50:08:08:2e:51:a0:cb:28:ed:1c:c8:0e:ad: b3:e5:c5:09:6c:cc:16:b1:e1:93:fd:f2:af:88:bd: 37:f8:0a:e3:95:4b:38:8d:21:40:04:d4:2e:e0:d2: e3:57:b0:91:42:9b:4c:40:3a:b7:d6:15:42:cf:57: 53:02:85:02:0a:3a:59:74:ea:49:b1:b0:fb:c0:8e: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F2:C0:CF:09:1F:D9:70:15:37:64:1B:FB:67:C7:7D:06:57:2E:50 X509v3 Authority Key Identifier: keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:1c:cc:d7:3c:86:c0:13:cf:f0:b8:7e:d1:65:c7:43:48:46: 0b:31:36:57:67:58:31:ff:35:6f:64:0b:3a:12:92:b5:79:fd: 13:02:11:95:9d:ca:4a:3f:6a:f3:13:bb:22:ce:8b:4d:d4:6a: d4:b0:68:cb:e2:b4:dd:9d:06:4f:b7:81:d5:49:ae:ed:93:4a: c9:0a:33:1e:aa:12:24:be:d1:1a:9d:ee:5b:13:99:e1:db:42: 0a:cc:37:20:3d:26:11:45:e0:ba:5a:13:83:9c:7a:7c:fa:c9: 21:6e:2f:da:29:91:f5:e5:27:07:56:34:ba:3c:44:b5:42:a8: 23:0c:60:a0:f8:a4:d1:08:f1:eb:64:7e:19:85:db:66:34:82: e9:1c:82:e5:2d:26:92:71:f1:0d:4c:52:98:10:b7:10:45:8e: d6:25:d8:00:ed:77:7b:d6:4e:53:e4:ad:6b:f7:81:88:c8:cf: 14:f9:cc:26:e2:83:54:c4:1f:99:6e:cb:71:7b:fe:80:d7:37: bc:b9:a2:9d:f7:99:c4:d0:42:48:5d:ec:22:ab:0f:4e:58:7f: 9f:68:e7:57:1b:7b:db:d5:61:47:83:3c:e1:1b:11:6b:0d:d8: 22:7d:3d:c8:52:12:80:87:84:a2:0b:f4:3a:0e:45:24:5f:c7: 2f:61:da:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy OTFDNDdCQUYwHhcNMjUwODIzMDUwNDQzWhcNMjUwODMwMDUwNDQzWjAYMRYwFAYD VQQDEw02OGE5NGJlYi0yZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukN7iZL20L6tXghtjoz/9sFE+U71ePIuQIfLPpxQpQyUO2/Z5XlHLIA2REFq Xb4dlHu95WwtHwgZgvBGxww9P/SFCpq4e59NY4GoBana7W0wDlEY04NchCNpMQhg vrfti1zEqKWzjGX5eNxMUmJMeMqGYpTuPWO+VnaEo4G2Sf9S0Ajt/oiPVxetMaBi dwUszapID3sea9Qvyms7N/mpjRBOaBzf9PWH+QntzRA+ln+ZkYjbMFAICC5RoMso 7RzIDq2z5cUJbMwWseGT/fKviL03+ArjlUs4jSFABNQu4NLjV7CRQptMQDq31hVC z1dTAoUCCjpZdOpJsbD7wI5RTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHywM8J H9lwFTdkG/tnx30GVy5QMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACHMzXPIbAE8/wuH7RZcdDSEYLMTZXZ1gx/zVvZAs6EpK1ef0TAhGV ncpKP2rzE7sizotN1GrUsGjL4rTdnQZPt4HVSa7tk0rJCjMeqhIkvtEane5bE5nh 20IKzDcgPSYRReC6WhODnHp8+skhbi/aKZH15ScHVjS6PES1QqgjDGCg+KTRCPHr ZH4ZhdtmNILpHILlLSaScfENTFKYELcQRY7WJdgA7Xd71k5T5K1r94GIyM8U+cwm 4oNUxB+Zbstxe/6A1ze8uaKd95nE0EJIXewiqw9OWH+faOdXG3vb1WFHgzzhGxFr DdgifT3IUhKAh4SiC/Q6DkUkX8cvYdoc -----END CERTIFICATE-----Generated at Sat Aug 23 23:58:29 2025 by rpki-client