$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json) Hash identifier: b+YCFRN+uth+SwtAzfuC6G40QlURB4bx4lULnIORFsk= Subject key identifier: 28:33:08:A2:88:9B:F4:A4:A3:DF:96:D5:2B:C6:36:31:A0:52:E0:50 Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft Manifest number: 0668 Signing time: Fri 22 Aug 2025 22:41:58 +0000 Manifest this update: Fri 22 Aug 2025 22:41:57 +0000 Manifest next update: Fri 29 Aug 2025 22:41:57 +0000 Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: cenlIDNL7+lvmZ6Mm1nXsAqROVlJhyQ+e37zp8xM5Sc=) 2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: NSWzyjE2HPsrPxuhTouX2YNe98sTsio9BMgnAVmwnyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: Aug 22 22:41:57 2025 GMT Not After : Aug 29 22:41:57 2025 GMT Subject: CN=68a8f235-d4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:9d:22:4b:89:4c:ef:17:ea:fc:c3:c6:05: 46:f6:5d:51:5a:22:70:e5:6f:91:81:d1:95:df:56: 58:a9:cd:7a:8f:d2:35:69:4b:8d:41:8e:7f:9c:75: e8:60:b5:75:8a:14:61:72:44:e8:75:04:6d:01:0a: 98:3f:90:8c:fa:97:cd:3c:c3:d6:8d:41:72:c5:7c: 36:92:a4:80:b6:bf:f1:58:d4:1a:e6:ff:cb:35:b8: 59:e2:14:0f:25:0b:ba:0d:bc:2c:98:e5:bd:cd:9e: 25:87:75:06:2d:10:ee:12:26:de:d1:18:9c:19:f8: c2:57:d5:15:51:86:ef:46:1e:83:2f:ca:c0:ea:70: 60:ba:66:81:1e:49:4e:62:bc:16:ab:06:cc:70:87: 71:ca:82:3d:38:39:ac:c0:83:5a:1c:a7:42:85:8d: 34:55:ef:e7:61:84:8b:f6:99:71:15:07:ea:aa:33: 15:17:46:b0:81:e6:2f:29:28:86:07:5a:55:d5:1c: 2b:99:19:4d:45:64:78:26:e5:7a:2c:0f:9e:de:00: a8:c9:2b:f4:34:68:5b:b8:3a:05:48:0e:d0:95:a3: c9:d0:8a:3d:b8:87:4c:c3:8b:b6:3c:34:ee:07:9f: 43:a1:d7:df:f9:47:5f:ff:13:e6:be:dd:19:56:a3: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:33:08:A2:88:9B:F4:A4:A3:DF:96:D5:2B:C6:36:31:A0:52:E0:50 X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:aa:40:ab:3a:05:be:4c:f6:f5:3f:4d:7c:52:05:b2:dc:61: 60:5a:51:d2:88:b0:63:15:a0:59:d4:c1:47:ae:4d:19:41:9e: 55:01:20:25:92:8c:81:06:67:1d:90:6d:9c:cf:d9:3f:d6:78: 29:cb:3d:3d:27:9d:cc:ff:43:6d:9c:5f:8c:4d:5e:b0:6f:b7: 9f:ca:fb:33:6b:84:d9:67:b2:50:78:0c:bb:6c:03:f9:8d:22: d4:a4:f3:a9:d1:16:1b:fe:cd:54:50:ff:c1:3f:10:84:cb:c1: cf:f8:34:f8:cf:6a:31:ac:a8:f0:be:76:4d:b9:3d:7e:94:bb: c6:db:5a:ff:d0:60:9b:c3:50:3b:c8:da:d7:fd:38:0b:e4:b2: f8:93:87:85:08:33:aa:cf:19:37:2f:d4:66:65:84:ae:f0:1e: a2:6b:88:6b:35:ab:cf:98:c2:6f:5c:1d:ba:64:b2:dd:1d:ea: 46:fc:62:47:8e:10:ed:87:bb:c8:3f:a8:31:65:5b:c8:33:51: b1:61:a9:03:5a:4f:d8:07:e5:20:f3:1c:4d:ad:64:23:dc:cf: 7f:c8:0f:11:a8:62:c1:39:50:3d:0b:16:a7:21:f0:f4:f6:88: b4:98:99:76:77:6f:2f:ce:16:53:19:73:ce:14:64:91:f9:e4: 8f:44:f5:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjUwODIyMjI0MTU3WhcNMjUwODI5MjI0MTU3WjAYMRYwFAYD VQQDEw02OGE4ZjIzNS1kNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4mdIkuJTO8X6vzDxgVG9l1RWiJw5W+RgdGV31ZYqc16j9I1aUuNQY5/nHXo YLV1ihRhckTodQRtAQqYP5CM+pfNPMPWjUFyxXw2kqSAtr/xWNQa5v/LNbhZ4hQP JQu6DbwsmOW9zZ4lh3UGLRDuEibe0RicGfjCV9UVUYbvRh6DL8rA6nBgumaBHklO YrwWqwbMcIdxyoI9ODmswINaHKdChY00Ve/nYYSL9plxFQfqqjMVF0awgeYvKSiG B1pV1RwrmRlNRWR4JuV6LA+e3gCoySv0NGhbuDoFSA7QlaPJ0Io9uIdMw4u2PDTu B59Dodff+Udf/xPmvt0ZVqMMawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgzCKKI m/Sko9+W1SvGNjGgUuBQMB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR eEJGa281SHVrRHRONVUzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRqkCrOgW+TPb1P018UgWy3GFgWlHSiLBjFaBZ1MFHrk0ZQZ5VASAl koyBBmcdkG2cz9k/1ngpyz09J53M/0NtnF+MTV6wb7efyvsza4TZZ7JQeAy7bAP5 jSLUpPOp0RYb/s1UUP/BPxCEy8HP+DT4z2oxrKjwvnZNuT1+lLvG21r/0GCbw1A7 yNrX/TgL5LL4k4eFCDOqzxk3L9RmZYSu8B6ia4hrNavPmMJvXB26ZLLdHepG/GJH jhDth7vIP6gxZVvIM1GxYakDWk/YB+Ug8xxNrWQj3M9/yA8RqGLBOVA9CxanIfD0 9oi0mJl2d28vzhZTGXPOFGSR+eSPRPUd -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:18 2025 by rpki-client