$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft File: XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft (raw, json) Hash identifier: o8Iq3fet0WkPph9e7CaFSQCR23EObx1xAm/00dzXFNI= Subject key identifier: EC:45:9C:4B:0D:5F:ED:93:A4:D5:77:F7:3D:92:D9:0D:42:60:7A:CD Authority key identifier: 5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 Certificate issuer: /CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Certificate serial: 0A07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft Manifest number: 09FA Signing time: Fri 22 Aug 2025 20:00:55 +0000 Manifest this update: Fri 22 Aug 2025 20:00:55 +0000 Manifest next update: Fri 29 Aug 2025 20:00:55 +0000 Files and hashes: 1: XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl (hash: KZy5nvGc0S+mhQ01h2x3FXpE19T5j4+EkU/KQYIfFUY=) 2: 97E61FE46F2111EB85D19531C4F9AE02.roa (hash: QT/K5tGfOd7GalxXyOBi4xKWLa0cvDIyEyK/W9LM+Pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2567 (0xa07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B34, serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Validity Not Before: Aug 22 20:00:55 2025 GMT Not After : Aug 29 20:00:55 2025 GMT Subject: CN=68a8cc77-760b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:49:9b:bc:0f:f6:82:46:b1:0c:71:18:b6:78: 27:18:12:46:52:f4:d4:ab:8d:f2:9a:02:6a:ec:0c: 09:1a:32:65:39:35:67:f8:61:0d:73:c5:a9:6a:63: 71:40:db:76:39:f5:aa:44:e1:0b:e3:8e:7a:9e:63: 3f:8a:e2:3d:fa:62:ca:8c:93:cc:ef:90:79:94:61: a2:ba:04:10:63:07:d3:e1:50:ae:5d:b6:2e:ee:b3: db:69:de:99:3a:07:9a:ef:77:f8:35:6c:3c:fb:57: 8a:18:18:01:a1:71:22:5a:53:da:a1:b9:94:1f:b9: 98:e3:f1:4e:bd:87:5e:eb:a3:b7:f5:96:13:91:37: 21:ea:5a:13:8a:00:c5:8e:22:2d:3b:f9:2a:5d:4e: 93:9c:4c:dd:4d:1e:bc:bd:b8:b1:fe:fc:4e:4a:be: 12:59:ca:fc:f7:b2:5f:37:78:e8:a8:20:cb:f3:23: b2:63:90:74:92:93:05:c6:f5:f9:26:39:04:b1:85: 23:2c:7d:aa:02:c9:88:cd:b3:e0:d2:eb:d8:e0:e0: 62:8d:ed:27:08:ea:b7:66:b7:b6:fa:b8:c8:4f:8c: 16:88:92:48:ab:d7:23:a0:0a:1c:3b:4a:8d:9a:a4: 48:b6:23:17:8d:15:db:ce:b3:0b:34:32:4b:fb:34: 05:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:45:9C:4B:0D:5F:ED:93:A4:D5:77:F7:3D:92:D9:0D:42:60:7A:CD X509v3 Authority Key Identifier: keyid:5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4e:f5:61:20:f6:38:fd:3a:c3:be:b0:ce:f2:cf:7f:f5:76: b2:ad:96:70:bb:7f:4d:df:2b:09:e9:e3:53:4c:2e:10:9f:a3: 85:ed:7b:61:38:c0:7a:a6:17:35:67:c3:36:50:93:75:db:1f: 46:9d:75:07:73:64:17:33:47:ea:1a:69:6d:ab:1f:c7:ee:8b: 86:64:02:b9:66:68:6c:96:03:92:0e:e8:38:fd:78:83:00:07: b8:6e:04:87:01:10:24:92:34:70:66:68:51:46:9b:4d:fe:50: d0:10:bb:df:c6:99:c8:b6:cd:d4:09:7d:10:69:21:8f:04:6f: ed:4e:5a:78:bd:54:b6:e3:5b:21:21:fa:c7:1d:96:17:17:df: 96:ab:2d:11:25:7a:40:0d:79:dd:e2:e3:dd:e7:d4:e0:48:2f: 7b:19:51:31:40:4a:47:52:2b:54:97:4f:f2:09:e8:bd:0f:0b: 37:ed:ae:2f:a0:5a:5f:d2:27:35:0f:88:1b:51:01:58:1d:7b: 74:f8:9a:ec:35:13:52:a5:90:09:e4:b5:55:30:88:09:14:17: 4e:b0:fd:6c:cf:f6:e5:b6:49:c6:13:72:89:6b:1e:ba:cf:f2: c5:ff:07:72:ce:cd:e5:4e:8e:15:1e:4e:3f:1d:96:8a:12:e1: 6d:b6:48:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMzQxMTAvBgNVBAUTKDVERjEwMkUyQTVFNzM2NzcyMUMxMThEQkVDREE2MDJB ODAyOUVFOTQwHhcNMjUwODIyMjAwMDU1WhcNMjUwODI5MjAwMDU1WjAYMRYwFAYD VQQDEw02OGE4Y2M3Ny03NjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10mbvA/2gkaxDHEYtngnGBJGUvTUq43ymgJq7AwJGjJlOTVn+GENc8WpamNx QNt2OfWqROEL4456nmM/iuI9+mLKjJPM75B5lGGiugQQYwfT4VCuXbYu7rPbad6Z Ogea73f4NWw8+1eKGBgBoXEiWlPaobmUH7mY4/FOvYde66O39ZYTkTch6loTigDF jiItO/kqXU6TnEzdTR68vbix/vxOSr4SWcr897JfN3joqCDL8yOyY5B0kpMFxvX5 JjkEsYUjLH2qAsmIzbPg0uvY4OBije0nCOq3Zre2+rjIT4wWiJJIq9cjoAocO0qN mqRItiMXjRXbzrMLNDJL+zQFwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxFnEsN X+2TpNV39z2S2Q1CYHrNMB8GA1UdIwQYMBaAFF3xAuKl5zZ3IcEY2+zaYCqAKe6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIzNC82MDM3RDVEQzgy QTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5uY2h3UmpiN05wZ0tvQXA3 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmRUM0cVhuTm5jaHdSamI3TnBnS29BcDdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIzNC82MDM3RDVEQzgyQTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5u Y2h3UmpiN05wZ0tvQXA3cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiTvVhIPY4/TrDvrDO8s9/9XayrZZwu39N3ysJ6eNTTC4Qn6OF7Xth OMB6phc1Z8M2UJN12x9GnXUHc2QXM0fqGmltqx/H7ouGZAK5ZmhslgOSDug4/XiD AAe4bgSHARAkkjRwZmhRRptN/lDQELvfxpnIts3UCX0QaSGPBG/tTlp4vVS241sh IfrHHZYXF9+Wqy0RJXpADXnd4uPd59TgSC97GVExQEpHUitUl0/yCei9Dws37a4v oFpf0ic1D4gbUQFYHXt0+JrsNRNSpZAJ5LVVMIgJFBdOsP1sz/bltknGE3KJax66 z/LF/wdyzs3lTo4VHk4/HZaKEuFttkhZ -----END CERTIFICATE-----Generated at Sun Aug 24 06:34:46 2025 by rpki-client