$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: TEoyiwrFbnyf+tKpw1v0CL9Ayuv4x8DC29vXayZBJzk= Subject key identifier: E5:76:64:5E:DC:1F:8E:A4:D2:EE:92:1D:6D:86:04:F5:FD:86:25:ED Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 014A Signing time: Sat 23 Aug 2025 04:32:15 +0000 Manifest this update: Sat 23 Aug 2025 04:32:15 +0000 Manifest next update: Sat 30 Aug 2025 04:32:15 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: MhbxedN5yS3oXIDpZWmVjE2Cj7wd6ixpKwxfTsztK2E=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Aug 23 04:32:15 2025 GMT Not After : Aug 30 04:32:15 2025 GMT Subject: CN=68a9444f-240e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:72:a7:59:62:8c:fb:ea:a4:ee:50:ea:af:a0: 51:17:0d:49:7b:bd:6c:a5:68:dd:cb:44:a0:3a:a2: 58:34:f7:bc:39:6b:58:a3:cd:53:59:ec:36:ff:e8: dc:39:ca:52:b6:98:39:cf:76:e2:56:53:12:d1:e8: 5d:f6:02:a5:66:15:bb:ee:54:21:c4:cf:fd:9e:ab: 01:52:ab:e6:6d:25:75:39:fa:a8:d5:e0:71:da:92: 93:1c:25:e3:c3:b1:ca:6b:8e:ea:17:e0:40:e5:1b: 14:14:ac:98:81:e4:87:d4:b9:90:92:d7:5e:d7:74: 45:40:b2:be:6b:f2:3f:31:45:bc:ac:85:fc:27:b9: 30:18:24:09:f1:f3:db:fb:99:ea:25:30:b5:41:5e: f4:ac:0d:6b:60:1e:ff:d8:f5:bb:8a:de:76:1f:15: 00:c6:fa:c5:93:08:c9:c9:3a:45:f2:fb:88:48:8b: 9e:2e:ca:c1:9a:dc:22:1a:f9:b7:6b:fc:81:be:82: 5e:1f:ef:72:8d:15:f1:dd:39:9f:4c:b4:c9:30:de: c3:e7:a9:3d:84:7c:8e:22:20:b7:8e:80:09:1e:6c: 07:f0:15:0e:f1:43:d3:4d:67:6c:07:49:58:8d:9b: 0f:76:cd:8b:52:2f:1c:15:72:1c:5f:45:04:72:d5: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:76:64:5E:DC:1F:8E:A4:D2:EE:92:1D:6D:86:04:F5:FD:86:25:ED X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f0:85:af:49:74:b5:73:4b:4b:77:95:c3:cd:fe:ca:08:38: 4a:fb:48:ef:19:c7:04:19:79:07:ac:02:7c:f6:e6:fb:f0:cf: 98:9d:67:97:8c:98:47:4b:25:18:8d:5d:c3:1b:e1:e9:1a:af: 6f:20:95:60:ed:14:a4:00:03:3d:a0:c4:76:26:25:25:ef:a1: 3d:f6:14:32:d6:70:75:cb:f6:77:5b:22:c5:d1:85:af:df:27: 62:d2:c2:4c:de:b1:e3:97:16:8b:b5:7c:f7:68:55:a0:41:36: 25:d3:d6:b5:1f:3b:d0:64:27:73:be:60:c4:5f:b2:6a:b0:6e: 2f:d5:26:38:9e:fb:bd:15:a9:fb:8a:4e:5b:1f:14:bb:d4:1c: 10:49:89:0b:6f:96:e0:d9:78:d0:1d:80:da:46:09:f1:c0:a8: ca:38:6f:ae:b2:b6:e5:57:69:22:0d:9b:14:4a:13:34:5c:51: 7e:13:35:cc:b2:29:35:a2:c4:4e:da:b1:5c:35:df:e2:34:00: c0:9b:7f:02:d6:b0:b0:b1:1b:71:d5:20:db:c8:4c:d4:f1:7a: c0:44:18:5d:4d:71:db:b1:c1:75:87:59:04:b6:32:00:1e:8b: 84:e9:0c:d1:bc:0d:53:0c:38:18:28:33:6e:4c:34:30:1d:7e: f8:5f:b2:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUwODIzMDQzMjE1WhcNMjUwODMwMDQzMjE1WjAYMRYwFAYD VQQDEw02OGE5NDQ0Zi0yNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HKnWWKM++qk7lDqr6BRFw1Je71spWjdy0SgOqJYNPe8OWtYo81TWew2/+jc OcpStpg5z3biVlMS0ehd9gKlZhW77lQhxM/9nqsBUqvmbSV1Ofqo1eBx2pKTHCXj w7HKa47qF+BA5RsUFKyYgeSH1LmQktde13RFQLK+a/I/MUW8rIX8J7kwGCQJ8fPb +5nqJTC1QV70rA1rYB7/2PW7it52HxUAxvrFkwjJyTpF8vuISIueLsrBmtwiGvm3 a/yBvoJeH+9yjRXx3TmfTLTJMN7D56k9hHyOIiC3joAJHmwH8BUO8UPTTWdsB0lY jZsPds2LUi8cFXIcX0UEctXKdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOV2ZF7c H46k0u6SHW2GBPX9hiXtMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+8IWvSXS1c0tLd5XDzf7KCDhK+0jvGccEGXkHrAJ89ub78M+YnWeX jJhHSyUYjV3DG+HpGq9vIJVg7RSkAAM9oMR2JiUl76E99hQy1nB1y/Z3WyLF0YWv 3ydi0sJM3rHjlxaLtXz3aFWgQTYl09a1HzvQZCdzvmDEX7JqsG4v1SY4nvu9Fan7 ik5bHxS71BwQSYkLb5bg2XjQHYDaRgnxwKjKOG+usrblV2kiDZsUShM0XFF+EzXM sik1osRO2rFcNd/iNADAm38C1rCwsRtx1SDbyEzU8XrARBhdTXHbscF1h1kEtjIA HouE6QzRvA1TDDgYKDNuTDQwHX74X7IR -----END CERTIFICATE-----Generated at Sun Aug 24 00:52:16 2025 by rpki-client