$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: Q45SNlGofBLKssKCqxf1FsGk1qiyyy4I4OjxhaK9paA= Subject key identifier: D9:B7:43:2E:04:8B:F4:D0:4C:AC:A0:A1:C9:47:6F:44:7B:0E:1F:E4 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 0147 Signing time: Sat 23 Aug 2025 04:52:17 +0000 Manifest this update: Sat 23 Aug 2025 04:52:16 +0000 Manifest next update: Sat 30 Aug 2025 04:52:16 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: rwTugB4m+kq6XaTC4BF2dKDLUtbLtDq8pyyccL0Bkv8=) 2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Aug 23 04:52:16 2025 GMT Not After : Aug 30 04:52:16 2025 GMT Subject: CN=68a94901-d8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b5:e3:ae:87:ba:cf:f6:d3:5f:0a:22:14:b4: b2:6f:e3:d6:2a:db:ee:b8:48:42:05:f3:d5:ce:f6: 63:5f:d3:ac:77:36:d7:de:ff:de:ac:b0:c4:3f:15: 31:57:0b:bb:6c:1c:e6:3d:86:3c:85:cd:01:4a:e9: b9:26:7e:7d:01:73:38:a2:7f:64:44:b0:3e:90:9d: d7:7b:02:e6:cc:c8:48:52:9f:ba:d8:7a:6b:59:cc: 1b:c4:6c:6f:7b:5c:27:fc:27:6a:ef:13:74:9e:79: c1:a7:6e:24:ac:7d:be:17:66:aa:3c:5d:f1:66:98: 47:04:88:4c:93:91:26:4c:8d:7b:0e:af:a3:a6:9f: 2d:56:a8:bb:3c:41:ca:2a:1f:cd:98:03:5e:2a:3b: fb:dc:d9:8b:3d:95:af:26:99:ee:3b:e6:b2:3a:3c: 67:e3:05:0d:5b:21:14:2a:99:5d:6f:0d:c2:c6:3f: cd:5d:27:68:fd:f4:bf:0c:aa:3b:ad:cd:d8:1c:e1: 8d:50:b8:91:a7:39:d2:7d:9d:d9:44:fc:2e:8b:af: 9a:c6:97:8e:12:21:5f:0f:ac:1d:8a:c4:a8:db:43: 3f:b8:aa:0f:83:53:3e:04:11:8c:e5:07:21:88:bb: a8:2c:87:56:a7:51:84:38:f8:6a:eb:2f:c4:02:da: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B7:43:2E:04:8B:F4:D0:4C:AC:A0:A1:C9:47:6F:44:7B:0E:1F:E4 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0e:c1:a2:0f:54:2f:09:68:e8:a6:da:06:bd:af:4d:16:a9: 34:03:d8:4d:45:68:36:96:cf:68:b7:b9:2e:96:43:0a:3e:0e: e0:5c:e4:36:68:1c:12:10:7f:a4:8e:71:09:bd:68:3e:e8:71: ff:1e:41:59:81:e5:5b:48:88:93:02:39:d1:70:8d:84:1d:ce: 8e:bb:d4:68:cc:31:7d:f8:c8:b8:44:58:ba:64:aa:af:f8:ae: 94:de:dc:36:ca:14:6e:83:c3:33:b3:94:07:7c:41:a7:24:02: 4e:a1:4b:e8:f1:53:90:eb:53:36:7f:ab:d6:90:44:dc:7c:e9: c5:d4:42:46:0d:c8:db:fa:64:56:12:c2:86:5a:29:1e:4c:6d: 38:46:73:31:1d:47:95:26:c2:b5:50:c6:23:94:ec:c3:52:f7: 99:22:e3:97:bf:d5:23:9a:b7:e2:bc:1f:62:de:3b:a2:50:b0: f5:57:4f:de:3d:f5:68:3f:25:01:91:02:6c:43:c4:d6:84:85: 20:ee:a9:30:5d:d8:7f:ee:81:c0:62:eb:e6:2a:b6:97:bf:36: 71:e4:12:b0:41:6a:11:af:32:5d:b6:b6:e0:b3:1a:2d:47:fb: 6b:f6:84:10:81:8e:5b:bb:5d:dc:79:d2:24:81:8e:a7:43:41: e9:51:b3:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUwODIzMDQ1MjE2WhcNMjUwODMwMDQ1MjE2WjAYMRYwFAYD VQQDEw02OGE5NDkwMS1kOGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bXjroe6z/bTXwoiFLSyb+PWKtvuuEhCBfPVzvZjX9OsdzbX3v/erLDEPxUx Vwu7bBzmPYY8hc0BSum5Jn59AXM4on9kRLA+kJ3XewLmzMhIUp+62HprWcwbxGxv e1wn/Cdq7xN0nnnBp24krH2+F2aqPF3xZphHBIhMk5EmTI17Dq+jpp8tVqi7PEHK Kh/NmANeKjv73NmLPZWvJpnuO+ayOjxn4wUNWyEUKpldbw3Cxj/NXSdo/fS/DKo7 rc3YHOGNULiRpznSfZ3ZRPwui6+axpeOEiFfD6wdisSo20M/uKoPg1M+BBGM5Qch iLuoLIdWp1GEOPhq6y/EAtrawQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNm3Qy4E i/TQTKygoclHb0R7Dh/kMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfDsGiD1QvCWjoptoGva9NFqk0A9hNRWg2ls9ot7kulkMKPg7gXOQ2 aBwSEH+kjnEJvWg+6HH/HkFZgeVbSIiTAjnRcI2EHc6Ou9RozDF9+Mi4RFi6ZKqv +K6U3tw2yhRug8Mzs5QHfEGnJAJOoUvo8VOQ61M2f6vWkETcfOnF1EJGDcjb+mRW EsKGWikeTG04RnMxHUeVJsK1UMYjlOzDUveZIuOXv9UjmrfivB9i3juiULD1V0/e PfVoPyUBkQJsQ8TWhIUg7qkwXdh/7oHAYuvmKraXvzZx5BKwQWoRrzJdtrbgsxot R/tr9oQQgY5bu13cedIkgY6nQ0HpUbO2 -----END CERTIFICATE-----Generated at Sat Aug 23 10:31:33 2025 by rpki-client