$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: 0DvhL+xbD8OnxdgtcD8DCGnJ8PN2TGqz/qMUNGBr0Ws= Subject key identifier: 47:6F:1B:04:DB:8A:22:68:ED:4C:D8:80:4E:A1:91:1D:5E:BA:40:C7 Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 013E Signing time: Sat 23 Aug 2025 04:34:27 +0000 Manifest this update: Sat 23 Aug 2025 04:34:27 +0000 Manifest next update: Sat 30 Aug 2025 04:34:27 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: UgJvw0/cghKDfnzKPNqSo6Gf1brAxhizY4h7GPUDWKw=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: W3PBLvmUcdE3zAX7FZy5vyT9kW67f//Ujbv+JZHmvZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: Aug 23 04:34:27 2025 GMT Not After : Aug 30 04:34:27 2025 GMT Subject: CN=68a944d3-e7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:dd:98:cc:72:20:86:a5:9d:f5:13:c4:ad: fd:be:93:64:44:3d:34:38:79:0e:0e:23:e4:34:cd: 08:13:37:33:7c:c9:29:9c:31:c8:07:09:d7:67:e0: 70:0e:48:ca:25:a7:89:53:b3:e4:a9:17:60:e2:8b: 32:83:c3:34:46:98:95:f8:09:4a:1e:9c:3c:ee:84: ab:6e:02:3a:c0:68:38:27:45:ab:92:58:a0:ba:80: d5:5b:5d:9c:50:ed:e9:bf:c0:6c:74:07:8e:85:11: 6f:79:61:e8:e2:1e:20:8b:a7:3c:cd:b0:a3:e9:4f: 12:57:fb:98:d5:a9:8e:4d:4e:18:ec:b9:55:7e:8e: e2:59:52:df:cd:c4:0f:41:d5:46:52:e9:f9:0d:32: 6b:73:1c:80:f3:37:0e:98:a9:32:e3:3c:05:73:6c: f0:a1:7a:9b:20:2f:c9:26:35:62:23:61:52:4b:e9: 43:f1:20:9d:e7:00:fb:92:a6:a2:5f:6c:f6:60:bf: b8:5f:74:1a:2b:b8:37:aa:f4:7a:a5:ec:05:cd:93: 91:89:18:ce:c1:e9:12:37:e6:f6:54:d8:3f:29:b2: 01:54:a0:d5:ab:78:23:bc:5a:2e:0c:e0:3d:c4:93: 5a:a0:48:0d:e6:4c:ad:4c:de:54:7e:76:05:b9:a3: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6F:1B:04:DB:8A:22:68:ED:4C:D8:80:4E:A1:91:1D:5E:BA:40:C7 X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:d7:78:47:ab:5c:04:3f:bc:bd:33:b8:d6:ef:15:0e:8f:0d: da:f5:22:e2:26:69:d8:66:d0:39:f3:f9:b3:07:f0:35:46:65: b7:96:fc:d1:0b:b2:91:64:cc:f8:4b:b8:fe:15:63:74:09:8a: 51:13:3d:0f:38:9e:cb:93:e6:67:dd:5c:67:a2:97:e9:1e:87: f5:0c:97:72:e4:24:8a:18:39:ee:63:16:a7:c4:f5:0d:30:eb: 78:41:4f:29:a2:21:48:e6:89:57:95:cc:1a:7c:a5:49:be:72: df:1e:d2:88:3b:33:3c:36:c7:00:c8:b3:b3:f5:7d:5d:a5:19: 14:d9:3f:7e:fd:81:c5:6e:e6:b3:be:2b:67:88:1d:5e:5a:43: 9d:47:ef:db:1b:1b:85:e0:86:d7:c8:fe:19:e1:2b:cb:4a:b1: e3:80:ba:b5:86:cb:f0:e0:9e:95:6a:be:c4:1f:52:43:1d:62: 74:e2:f8:28:5e:21:bb:bd:9f:21:ff:5f:b3:96:00:fb:69:e7: 62:19:7f:65:ea:d5:45:cf:96:ef:5f:da:b4:55:34:88:9d:8d: 26:55:5c:95:49:05:43:34:39:4a:51:ae:04:49:4d:52:45:1b: eb:c5:12:ec:ed:2b:72:09:d0:58:02:3d:bd:19:e0:62:c8:76: 07:c4:cd:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjUwODIzMDQzNDI3WhcNMjUwODMwMDQzNDI3WjAYMRYwFAYD VQQDEw02OGE5NDRkMy1lN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlLdmMxyIIalnfUTxK39vpNkRD00OHkODiPkNM0IEzczfMkpnDHIBwnXZ+Bw DkjKJaeJU7PkqRdg4osyg8M0RpiV+AlKHpw87oSrbgI6wGg4J0WrkliguoDVW12c UO3pv8BsdAeOhRFveWHo4h4gi6c8zbCj6U8SV/uY1amOTU4Y7LlVfo7iWVLfzcQP QdVGUun5DTJrcxyA8zcOmKky4zwFc2zwoXqbIC/JJjViI2FSS+lD8SCd5wD7kqai X2z2YL+4X3QaK7g3qvR6pewFzZORiRjOwekSN+b2VNg/KbIBVKDVq3gjvFouDOA9 xJNaoEgN5kytTN5UfnYFuaPyrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdvGwTb iiJo7UzYgE6hkR1eukDHMB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp13hHq1wEP7y9M7jW7xUOjw3a9SLiJmnYZtA58/mzB/A1RmW3lvzR C7KRZMz4S7j+FWN0CYpREz0POJ7Lk+Zn3VxnopfpHof1DJdy5CSKGDnuYxanxPUN MOt4QU8poiFI5olXlcwafKVJvnLfHtKIOzM8NscAyLOz9X1dpRkU2T9+/YHFbuaz vitniB1eWkOdR+/bGxuF4IbXyP4Z4SvLSrHjgLq1hsvw4J6Var7EH1JDHWJ04vgo XiG7vZ8h/1+zlgD7aediGX9l6tVFz5bvX9q0VTSInY0mVVyVSQVDNDlKUa4ESU1S RRvrxRLs7StyCdBYAj29GeBiyHYHxM0J -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:52 2025 by rpki-client