$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: OqkK1Iwt/pQgWS6qpZFVfzIWOg/WCf/CuXygBfG33yg= Subject key identifier: 73:9A:92:AB:32:EE:44:C1:04:E7:3B:C3:9E:3A:46:B5:7B:E3:90:31 Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 34AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 34AA Signing time: Fri 22 Aug 2025 15:11:08 +0000 Manifest this update: Fri 22 Aug 2025 15:11:07 +0000 Manifest next update: Fri 29 Aug 2025 15:11:07 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: lzh63vImDvvamTR/RirKUMG1WpSQ0o5zBSt4whzGcdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13484 (0x34ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Aug 22 15:11:07 2025 GMT Not After : Aug 29 15:11:07 2025 GMT Subject: CN=68a8888b-ecf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:f8:26:fb:4e:9b:f2:90:70:fa:b8:21:c3: cd:96:75:75:be:ae:76:9b:05:5b:6c:26:fc:c3:87: a9:5a:cb:12:9d:5a:e0:f6:9d:84:57:7c:02:ef:ff: 75:21:11:3b:31:ce:3b:a2:13:ae:4e:d4:76:4f:9b: bb:9a:f6:22:26:92:2b:73:ef:b5:82:66:2c:d2:7d: 57:ac:98:39:41:0f:b6:d9:ec:e6:a8:17:d0:b3:15: b8:ca:64:af:6b:3f:a8:97:07:16:71:9f:13:ed:0e: 19:04:36:3b:86:9c:55:d8:dc:76:3f:1b:e4:d8:4a: c0:90:a7:ca:5d:15:a1:b1:38:30:e4:77:3f:38:9f: 69:4c:d2:40:bc:72:33:94:23:1b:c2:5a:2e:46:57: 64:37:ef:19:b1:2e:d8:22:e1:77:dd:95:ce:c8:95: bb:03:d2:6c:15:5e:1e:b1:35:c6:98:24:e6:f6:e0: 46:57:6e:e2:a1:bf:f6:04:f3:37:d6:5a:59:65:77: 11:08:17:59:7e:c9:c9:d3:12:62:bd:7d:a1:e4:36: 55:42:27:c3:1b:0c:91:63:f9:5c:63:de:82:43:c6: 18:1c:fe:49:7a:2e:87:b7:3e:c6:b6:f2:88:df:99: c1:9f:d6:c2:95:d9:87:3f:76:57:bc:55:9c:a1:35: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9A:92:AB:32:EE:44:C1:04:E7:3B:C3:9E:3A:46:B5:7B:E3:90:31 X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:33:1a:85:d7:de:96:8c:8c:b5:f1:e4:4b:d2:c1:ec:b7:e4: a1:a3:49:4e:7a:38:16:5b:a7:39:d0:6f:0e:66:d2:d8:d3:c7: 3d:dc:e2:c5:1c:69:d8:9d:2c:01:97:97:38:ca:53:7c:cf:cf: dd:8a:fc:c0:a6:79:6f:a3:02:4d:27:85:43:82:d5:c9:ff:3e: 85:b4:67:ea:2f:3e:02:39:6d:3a:92:33:77:34:f1:46:4f:d4: 69:05:aa:a7:70:dd:6a:36:8c:f3:51:6e:1f:1a:2a:b6:d7:0f: d0:d2:40:21:1f:9b:f1:42:9d:82:75:56:56:89:66:c7:e9:a4: 3b:63:34:b3:0f:22:a4:40:13:d5:e6:f0:8b:b1:c3:9b:70:33: 7a:f0:32:1d:83:4c:d6:b2:94:64:c6:f2:80:0c:4b:83:9b:94: d4:9e:70:1f:b4:75:23:f8:19:99:02:60:af:0d:4f:3b:5a:ba: d5:db:c3:af:38:33:ce:ba:e7:45:03:48:e3:ae:03:5d:b3:64: 1b:69:49:38:48:fe:f2:cc:11:23:b4:4e:ee:42:e7:96:54:b5: 9c:f0:18:8f:6b:90:f1:63:f3:b2:e6:d1:e3:47:eb:0e:af:1d: 03:a9:51:57:d2:29:07:51:ea:47:c3:39:9e:6c:d8:e8:1b:6f: c2:ba:1b:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjUwODIyMTUxMTA3WhcNMjUwODI5MTUxMTA3WjAYMRYwFAYD VQQDEw02OGE4ODg4Yi1lY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaH4JvtOm/KQcPq4IcPNlnV1vq52mwVbbCb8w4epWssSnVrg9p2EV3wC7/91 IRE7Mc47ohOuTtR2T5u7mvYiJpIrc++1gmYs0n1XrJg5QQ+22ezmqBfQsxW4ymSv az+olwcWcZ8T7Q4ZBDY7hpxV2Nx2Pxvk2ErAkKfKXRWhsTgw5Hc/OJ9pTNJAvHIz lCMbwlouRldkN+8ZsS7YIuF33ZXOyJW7A9JsFV4esTXGmCTm9uBGV27iob/2BPM3 1lpZZXcRCBdZfsnJ0xJivX2h5DZVQifDGwyRY/lcY96CQ8YYHP5Jei6Htz7GtvKI 35nBn9bCldmHP3ZXvFWcoTW5GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOakqsy 7kTBBOc7w546RrV745AxMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcMxqF196WjIy18eRL0sHst+Sho0lOejgWW6c50G8OZtLY08c93OLF HGnYnSwBl5c4ylN8z8/divzApnlvowJNJ4VDgtXJ/z6FtGfqLz4COW06kjN3NPFG T9RpBaqncN1qNozzUW4fGiq21w/Q0kAhH5vxQp2CdVZWiWbH6aQ7YzSzDyKkQBPV 5vCLscObcDN68DIdg0zWspRkxvKADEuDm5TUnnAftHUj+BmZAmCvDU87WrrV28Ov ODPOuudFA0jjrgNds2QbaUk4SP7yzBEjtE7uQueWVLWc8BiPa5DxY/Oy5tHjR+sO rx0DqVFX0ikHUepHwzmebNjoG2/CuhuR -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:02 2025 by rpki-client