$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: ww3OnZ5CMT3t179qf6Z/LfnbjqkJML/eyHaWFXUmP34= Subject key identifier: E4:0E:57:B4:FC:E3:81:8B:E3:56:2E:6F:6B:56:2B:45:E2:F7:5D:72 Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 09C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 09C0 Signing time: Fri 22 Aug 2025 20:07:19 +0000 Manifest this update: Fri 22 Aug 2025 20:07:18 +0000 Manifest next update: Fri 29 Aug 2025 20:07:18 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: 5M1duRYT5f12Ix6j3/+B6XZV9koufG2NZuqMuIQASR0=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: 5OuJk3wuVixq/unKPrRmS/rEXR6rqWNJ7lk0q2nqJD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: Aug 22 20:07:18 2025 GMT Not After : Aug 29 20:07:18 2025 GMT Subject: CN=68a8cdf6-ba02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:29:bb:af:d1:24:76:a9:67:e8:4a:5a:46: c9:0c:5d:d4:f9:b3:fd:5c:78:26:b0:08:c5:2c:7b: 2b:47:b8:8a:a6:b4:9f:57:97:cf:8e:78:d7:fc:fe: 26:77:2f:74:32:4d:a0:18:a9:ac:cb:f0:3b:1e:9b: b3:58:a1:d2:c0:0f:09:da:5f:14:93:b3:97:8b:1b: ce:6a:49:16:52:7c:00:95:44:7c:4e:22:04:3c:9f: 52:e4:e5:b4:5e:b4:29:fc:28:34:e7:e2:7c:51:c4: a4:49:2b:e9:1a:88:86:fb:a4:8a:6b:76:96:c7:75: 26:f6:ae:c1:88:fc:30:9a:15:95:a5:4d:9c:56:64: 01:69:56:02:a6:7c:dc:0b:31:d2:b7:83:68:34:6b: 33:b8:2c:d0:28:51:38:83:b4:79:23:4d:40:8b:56: 59:cd:32:77:19:9c:8a:27:a9:f7:8c:f0:0f:41:ea: 42:c2:27:71:3b:72:4e:f6:e1:c9:8b:5a:7b:7d:b5: 87:a3:96:81:98:c1:17:30:f8:6a:4c:93:67:cf:d2: b0:52:47:cf:85:cf:eb:9d:c7:4f:a9:66:ff:f5:62: 46:66:ae:40:da:e6:80:6e:cd:1f:df:9c:1c:70:3a: 82:12:d5:73:73:82:07:96:6a:a5:ac:a0:ca:f5:7b: f9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0E:57:B4:FC:E3:81:8B:E3:56:2E:6F:6B:56:2B:45:E2:F7:5D:72 X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:80:bf:0e:9c:bc:e7:59:de:76:cf:7e:e8:7d:2a:e4:b0:8a: 4d:b7:ce:9b:1c:fd:b3:c1:0c:fa:3c:55:d4:7d:db:a5:18:58: 69:91:00:6b:6b:3c:8b:65:19:1a:e0:cd:07:da:12:98:82:06: 44:95:9d:2f:0a:31:60:f4:95:19:a5:3e:cd:3b:ff:cf:25:29: 27:7b:3c:fe:be:0b:75:25:9d:a1:cb:7e:07:6b:29:fa:52:95: da:41:0d:03:c3:6b:d9:e7:5d:d0:14:16:27:e0:74:f0:5a:36: fe:de:b7:50:b7:b2:a1:a5:c1:c1:f8:56:ae:24:cd:5b:42:3c: 8a:77:80:cc:42:21:e7:6e:6c:9c:bf:be:7f:1d:78:ed:3a:b3: d6:52:a0:5d:dd:86:48:87:e0:23:c4:76:a6:84:03:8a:77:89: 4d:72:03:1c:ca:6c:a1:64:1e:af:71:f8:e3:17:5a:53:c9:ca: b0:57:37:0e:ae:c4:e7:a9:ce:ba:5d:d3:85:00:3f:3f:6c:85: 7d:c3:83:51:63:a2:e3:b5:b1:6e:73:41:2c:33:9c:b8:fe:67: 0b:8f:09:44:16:36:3b:8b:58:af:94:e3:e7:d6:b7:92:e2:fd: 53:26:3d:c0:21:13:d4:27:42:d7:ff:6f:10:ba:aa:39:3f:f5: 1b:4c:41:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjUwODIyMjAwNzE4WhcNMjUwODI5MjAwNzE4WjAYMRYwFAYD VQQDEw02OGE4Y2RmNi1iYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8kpu6/RJHapZ+hKWkbJDF3U+bP9XHgmsAjFLHsrR7iKprSfV5fPjnjX/P4m dy90Mk2gGKmsy/A7HpuzWKHSwA8J2l8Uk7OXixvOakkWUnwAlUR8TiIEPJ9S5OW0 XrQp/Cg05+J8UcSkSSvpGoiG+6SKa3aWx3Um9q7BiPwwmhWVpU2cVmQBaVYCpnzc CzHSt4NoNGszuCzQKFE4g7R5I01Ai1ZZzTJ3GZyKJ6n3jPAPQepCwidxO3JO9uHJ i1p7fbWHo5aBmMEXMPhqTJNnz9KwUkfPhc/rncdPqWb/9WJGZq5A2uaAbs0f35wc cDqCEtVzc4IHlmqlrKDK9Xv5OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQOV7T8 44GL41Yub2tWK0Xi911yMB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBugL8OnLznWd52z37ofSrksIpNt86bHP2zwQz6PFXUfdulGFhpkQBr azyLZRka4M0H2hKYggZElZ0vCjFg9JUZpT7NO//PJSknezz+vgt1JZ2hy34Hayn6 UpXaQQ0Dw2vZ513QFBYn4HTwWjb+3rdQt7KhpcHB+FauJM1bQjyKd4DMQiHnbmyc v75/HXjtOrPWUqBd3YZIh+AjxHamhAOKd4lNcgMcymyhZB6vcfjjF1pTycqwVzcO rsTnqc66XdOFAD8/bIV9w4NRY6LjtbFuc0EsM5y4/mcLjwlEFjY7i1ivlOPn1reS 4v1TJj3AIRPUJ0LX/28Quqo5P/UbTEFE -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:40 2025 by rpki-client