$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json) Hash identifier: urx2IaCplb0GasHDbV4QRqfMsYfNtLEtWWXKP3w2f0w= Subject key identifier: 38:64:4E:FB:D6:5A:94:80:93:FA:81:EE:6F:9A:0A:55:28:EB:29:9A Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61 Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661 Certificate serial: 04B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft Manifest number: 04AD Signing time: Sat 23 Aug 2025 00:07:34 +0000 Manifest this update: Sat 23 Aug 2025 00:07:33 +0000 Manifest next update: Sat 30 Aug 2025 00:07:33 +0000 Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: a9q0ALrukyFBGPgdgMzSWCb7U/k1AIVtdkN9rCfsa9c=) 2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: KhOuOM0Hy/s5cLutXXqmoIGycTqYNiIVdRfd5kJumPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7E61, serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661 Validity Not Before: Aug 23 00:07:33 2025 GMT Not After : Aug 30 00:07:33 2025 GMT Subject: CN=68a90646-a46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:41:51:a6:c6:c5:33:f4:9f:bd:91:6e:b7: 46:c1:25:9a:ff:7d:5d:29:de:db:40:3b:24:41:27: 16:24:16:0c:c6:1d:61:a6:d0:44:ca:83:57:80:c2: 54:28:ff:e9:54:85:4d:93:0f:fd:8c:b3:95:82:03: ba:f2:91:2c:40:1f:f2:43:3c:8c:5f:87:50:9e:92: ab:62:4e:0c:81:65:f4:a1:73:f6:5b:20:c3:65:60: d3:26:86:09:88:17:a2:54:7e:61:46:a9:54:47:21: fb:03:93:a3:68:53:d2:29:7a:34:21:1f:7a:20:4b: 37:02:a7:e8:d4:d7:fe:e5:c5:5d:75:0a:3b:66:21: ea:ce:f2:5d:0a:79:5b:c8:ca:cc:b9:0e:0a:c1:ab: 3d:86:95:dc:88:69:aa:95:5a:7f:61:fb:a1:b7:55: 60:33:29:0a:1a:11:8b:8b:5d:b6:14:c4:32:b4:2a: c3:cf:28:09:f1:8e:a4:9f:62:b9:4c:55:e1:50:61: 6f:31:10:d5:5f:4c:a1:20:c3:24:02:03:11:47:b4: 2d:44:52:44:9f:3c:76:b4:e6:35:c7:88:86:c9:b3: e0:0f:2c:b2:e9:c3:28:b2:a6:f2:d5:72:ad:db:e7: 96:4d:82:f7:88:5e:73:b6:cd:73:68:45:38:99:fb: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:64:4E:FB:D6:5A:94:80:93:FA:81:EE:6F:9A:0A:55:28:EB:29:9A X509v3 Authority Key Identifier: keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:bb:6f:eb:f0:0f:5e:87:46:7a:2e:d3:9e:13:93:49:ce:0c: 59:50:7a:03:a2:51:b8:89:97:fa:9d:bf:c4:c3:67:ae:41:6d: 33:97:1b:59:e8:a2:66:2d:f3:d6:05:97:7f:7c:e1:36:03:0f: ae:ed:2d:24:93:4e:f8:11:9d:d9:06:ea:db:ab:c5:07:dc:ba: 88:80:66:dd:3b:6d:c5:ed:b3:b5:be:57:83:fb:13:c8:01:7c: 5c:74:63:16:b5:7f:7a:e9:d9:82:c7:f6:67:f9:f2:cf:a7:49: d6:1d:7e:90:2d:b3:25:54:27:2a:6c:5f:35:97:cd:65:1a:70: 4f:04:88:1a:9f:42:0a:17:48:59:f5:b6:53:67:a0:43:2a:54: 42:31:59:3e:01:4b:3b:e8:3b:a4:f1:e6:91:42:c9:4f:12:b2: 04:ae:e5:c8:5f:2e:d8:57:ff:c6:29:d2:a8:8e:99:34:05:50: c2:a0:d3:44:01:73:cf:7a:ed:ae:9f:cf:58:cd:75:4e:4f:1d: 1e:c8:a2:7f:e1:e5:7f:92:9c:14:a7:5d:86:e9:0a:e2:c7:c5: 37:89:d3:2c:4d:45:af:a1:0e:52:08:a7:db:20:45:f8:d8:71: ec:b8:c0:39:58:40:6f:df:1f:e1:90:2b:d5:f9:78:d6:e1:87: 2b:7f:db:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdFNjExMTAvBgNVBAUTKEM2NDE4OUY1OENGNzJDMUY3M0JFQjI0MDdBNTIyN0I2 QTJDRTk2NjEwHhcNMjUwODIzMDAwNzMzWhcNMjUwODMwMDAwNzMzWjAYMRYwFAYD VQQDEw02OGE5MDY0Ni1hNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwlBUabGxTP0n72RbrdGwSWa/31dKd7bQDskQScWJBYMxh1hptBEyoNXgMJU KP/pVIVNkw/9jLOVggO68pEsQB/yQzyMX4dQnpKrYk4MgWX0oXP2WyDDZWDTJoYJ iBeiVH5hRqlURyH7A5OjaFPSKXo0IR96IEs3Aqfo1Nf+5cVddQo7ZiHqzvJdCnlb yMrMuQ4Kwas9hpXciGmqlVp/Yfuht1VgMykKGhGLi122FMQytCrDzygJ8Y6kn2K5 TFXhUGFvMRDVX0yhIMMkAgMRR7QtRFJEnzx2tOY1x4iGybPgDyyy6cMosqby1XKt 2+eWTYL3iF5zts1zaEU4mfuYhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhkTvvW WpSAk/qB7m+aClUo6ymaMB8GA1UdIwQYMBaAFMZBifWM9ywfc76yQHpSJ7aizpZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0U2MS9GNTk0REM4MDQw N0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xCOXp2ckpBZWxJbnRxTE9s bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrR0o5WXozTEI5enZySkFlbEludHFMT2xtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0U2MS9GNTk0REM4MDQwN0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xC OXp2ckpBZWxJbnRxTE9sbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJu2/r8A9eh0Z6LtOeE5NJzgxZUHoDolG4iZf6nb/Ew2euQW0zlxtZ 6KJmLfPWBZd/fOE2Aw+u7S0kk074EZ3ZBurbq8UH3LqIgGbdO23F7bO1vleD+xPI AXxcdGMWtX966dmCx/Zn+fLPp0nWHX6QLbMlVCcqbF81l81lGnBPBIgan0IKF0hZ 9bZTZ6BDKlRCMVk+AUs76Duk8eaRQslPErIEruXIXy7YV//GKdKojpk0BVDCoNNE AXPPeu2un89YzXVOTx0eyKJ/4eV/kpwUp12G6Qrix8U3idMsTUWvoQ5SCKfbIEX4 2HHsuMA5WEBv3x/hkCvV+XjW4Ycrf9tf -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:26 2025 by rpki-client