$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json) Hash identifier: epK0JGvN86VTsa9zMgurUn0EpWWpKxhQ62hCTfoapmQ= Subject key identifier: 79:6E:E5:E6:B7:69:29:59:66:37:7C:0B:40:B6:F2:28:EA:C9:45:58 Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 0587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft Manifest number: 0582 Signing time: Fri 22 Aug 2025 23:26:44 +0000 Manifest this update: Fri 22 Aug 2025 23:26:44 +0000 Manifest next update: Fri 29 Aug 2025 23:26:44 +0000 Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: U8a1e+s/mLzGbooDoMV4TlE383uv1/iBcnDb0O+vF1Q=) 2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: jxQWNR1P8sYKVza0W/49c3uTybsGhMQmKrsxrcNc/xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1415 (0x587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Aug 22 23:26:44 2025 GMT Not After : Aug 29 23:26:44 2025 GMT Subject: CN=68a8fcb4-5700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:f7:f0:2c:00:4a:82:5a:82:55:5d:c2:24: b1:06:2e:e2:a1:30:23:0b:ee:e1:79:4d:08:28:9b: 0d:24:00:f9:48:97:ef:34:6c:ab:15:72:8a:06:82: fb:31:22:30:76:93:e5:f0:a1:a4:26:1e:51:99:fc: 4d:b1:c2:f5:98:4b:4a:9e:1d:fc:71:a2:f6:47:43: d3:68:da:2b:8f:42:13:42:59:bf:68:52:6b:35:01: 38:e4:3f:f5:9d:b0:6e:08:b1:d0:bb:0d:4b:0b:bc: cc:05:65:86:57:e6:2b:7b:a6:c3:1d:92:fb:3a:2b: be:76:e9:c1:3d:cd:31:94:dc:7d:ad:98:4d:72:56: 7a:89:bd:7c:d4:64:5e:10:47:2a:19:04:cf:a9:74: 9d:71:a5:01:b2:0c:8d:23:75:8f:1e:4d:bf:8c:a0: 9d:43:a3:15:32:c4:a9:1f:70:92:45:f1:8f:a5:72: 51:e9:db:ef:60:c6:1a:79:a1:50:2b:cf:8f:ee:28: 4a:aa:93:2a:31:41:27:00:62:e1:6a:7f:ab:c5:63: b2:b0:31:b0:ee:d4:41:37:8e:05:43:85:a7:1f:ac: 6f:27:63:35:b0:d2:36:da:b3:59:17:3c:16:02:ed: 33:af:b1:d7:fb:0c:cf:b2:91:76:ef:c8:86:72:f1: ad:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6E:E5:E6:B7:69:29:59:66:37:7C:0B:40:B6:F2:28:EA:C9:45:58 X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b1:ef:cf:5f:92:0e:98:ae:1d:1d:ae:cd:8a:a8:dd:be:cb: f3:71:39:95:6c:4b:7b:c0:f4:85:56:0c:72:6c:45:11:f4:f3: 41:29:21:ca:b6:42:5d:1b:68:48:a1:0c:14:8a:3f:6d:e0:31: f5:a5:e2:5f:89:92:fb:e7:07:7a:01:39:ad:3f:e5:a7:30:20: fb:4b:c7:7a:ab:69:52:bd:6d:ba:60:09:0d:0f:12:64:56:13: fb:88:ed:b1:9f:d0:34:5d:3b:4c:eb:da:b7:2c:eb:c8:f4:a5: 19:a9:e5:bf:4b:26:15:f7:87:3f:a8:6d:d7:88:17:f8:2d:2c: fb:c0:a3:38:06:8c:43:f9:49:bb:75:6d:f3:1c:aa:45:e2:41: 4d:70:9b:33:ed:0a:34:93:85:7b:0f:f9:6c:99:65:e9:13:52: 18:96:86:09:19:fc:b9:13:bb:f1:f5:c1:36:51:76:e0:0a:ff: 7a:da:a5:2f:28:03:0c:b7:d1:52:99:7d:24:d4:64:c2:bc:86: 4f:5c:5f:e1:c8:ab:77:16:83:fb:b0:2e:a1:ec:41:2d:04:25: 1e:35:5a:89:3b:54:95:9d:6c:fd:cb:99:6c:71:50:30:a9:51: 5a:b7:67:e8:72:8f:92:92:27:2b:de:d4:d9:1a:c9:13:09:51: ed:1b:e2:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjUwODIyMjMyNjQ0WhcNMjUwODI5MjMyNjQ0WjAYMRYwFAYD VQQDEw02OGE4ZmNiNC01NzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA338CwASoJaglVdwiSxBi7ioTAjC+7heU0IKJsNJAD5SJfvNGyrFXKKBoL7 MSIwdpPl8KGkJh5RmfxNscL1mEtKnh38caL2R0PTaNorj0ITQlm/aFJrNQE45D/1 nbBuCLHQuw1LC7zMBWWGV+Yre6bDHZL7Oiu+dunBPc0xlNx9rZhNclZ6ib181GRe EEcqGQTPqXSdcaUBsgyNI3WPHk2/jKCdQ6MVMsSpH3CSRfGPpXJR6dvvYMYaeaFQ K8+P7ihKqpMqMUEnAGLhan+rxWOysDGw7tRBN44FQ4WnH6xvJ2M1sNI22rNZFzwW Au0zr7HX+wzPspF278iGcvGtRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlu5ea3 aSlZZjd8C0C28ijqyUVYMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhCQy85MjA5MjM5MEVBRDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1 ZGJFc0ktQXdyRlRGSUZjV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcse/PX5IOmK4dHa7NiqjdvsvzcTmVbEt7wPSFVgxybEUR9PNBKSHK tkJdG2hIoQwUij9t4DH1peJfiZL75wd6ATmtP+WnMCD7S8d6q2lSvW26YAkNDxJk VhP7iO2xn9A0XTtM69q3LOvI9KUZqeW/SyYV94c/qG3XiBf4LSz7wKM4BoxD+Um7 dW3zHKpF4kFNcJsz7Qo0k4V7D/lsmWXpE1IYloYJGfy5E7vx9cE2UXbgCv962qUv KAMMt9FSmX0k1GTCvIZPXF/hyKt3FoP7sC6h7EEtBCUeNVqJO1SVnWz9y5lscVAw qVFat2foco+Skicr3tTZGskTCVHtG+Lo -----END CERTIFICATE-----Generated at Sun Aug 24 03:06:19 2025 by rpki-client