$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft File: XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json) Hash identifier: w9L9k5mmEWD13sk8xyX9ZBZUcGWBGqQm2l8t6mColFM= Subject key identifier: 4B:C7:AE:87:DA:D4:2B:E5:0C:C8:0F:E7:5E:BC:27:35:98:D5:15:61 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 27E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft Manifest number: 2551 Signing time: Fri 22 Aug 2025 15:52:18 +0000 Manifest this update: Fri 22 Aug 2025 15:52:17 +0000 Manifest next update: Fri 29 Aug 2025 15:52:17 +0000 Files and hashes: 1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: tHSodPTsBPPjgulU9UKnjgxrm7AP/jSzIhzRrnEJlG4=) 2: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: JM3URqRB9lFjbjulP6HJXH0/nTZmKhp/VblyDepgmCA=) 3: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: L56JARs1lbyWfxDIMRSYK/QldVKbihzZgGIBK+gCvAE=) 4: F04860C28C5611E792848B4AC4F9AE02.roa (hash: OWjLebxJynytHvjgIP0SVIn8ZOFvLbt6j473I2eFdGg=) 5: F688FE388C5611E792848B4AC4F9AE02.roa (hash: lqz+b2mpZ7liApUeWmpk6Sxdz1MK1YVyI/nndtzOfc8=) 6: F1475E928C5611E792848B4AC4F9AE02.roa (hash: Azsul1kHuCMDc3vM/dyl3tkEbz4NHSW6BcHmreet4yc=) 7: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: arhZFiziS+sBDNkkd9ApjM4qRhUdC/BiQCxwPWquNA0=) 8: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: z8Txj1JKr5vAyHyXu3Q0JC83ZWN/Ombj0tuTCxlEaRY=) 9: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: nNfTdp4PUnPXPodCTbOjAsAWXgCW6bK0lHos7EHr9sI=) 10: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: VkOAhIa80kNaefVErpKRcJS1UUCVoa+4BpGDgLLqprQ=) 11: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: DsNdloDffNUf3moIjjEgjm54CfZxDdhXyzmCNd4A8iM=) 12: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: /ceuJ/WbnEGgNSZXAtMbOel5sgU4JUVf8lMbFmmrMek=) 13: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: zea1Z4utZ31hyYXYKPM+pLoUfd33/pFxc2Oz6L2A0xI=) 14: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: NQJGHd1cKyBqpoHctaUyw3dvZ0KuQOPSMwntjDFcg1A=) 15: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: 2JFPJBUaYhM0ytiq7e9eC6CYsDAt8wgMcc3SKiIFHsg=) 16: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: rMIZrcp78OdFGxAyj3EoE0LyB7/Lf2gRKvh+qENZ2aU=) 17: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: Xb63l3ZIQpud6T0SsIiJHA/1T9XjvXnyGqxkBm5CkQ0=) 18: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: g10juuqEsEAKzRtgsKTtEKp5BZovzdZezXJ/i6OnQX8=) 19: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: 8wMgBAimNVtvub961irO59NqQxJMZvEDQRKi+qZmzOM=) 20: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: HjDnuWYD2CM4eau1ngg0jQqOKxs9P1pY+POnRU8sW84=) 21: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: oci0lTgKFp7FiEncD15sU2Ngo6tK4eT2xuYmhT6iDlU=) 22: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: begcncLwYIJtBCQ6VJWY520RlYMTXNEWKkPpgmPjKb8=) 23: 543386248C5811E782F42951C4F9AE02.roa (hash: GlY/r205IC2OrqcOiTDslwqaWuBIkTf2ufwkodlMU14=) 24: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: Sottj9k4RXjczj3TRXwNeTc3keyEZnkoE9tmU2Bbb+s=) 25: 9B22F928BFE311EE949C2918C4F9AE02.roa (hash: rHfc038K7hZU+Vhyh8UrxdPg1RCOF3M80HQn+le/mCY=) 26: 14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (hash: xPXjL37oXeRRpPjLu0GM00DmOaXEa3PmK65wf2oESwE=) 27: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: ZQdD4QBAodxhPJDLvSXRmOQaG3cbzn75kTPxr7PdWwA=) 28: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: 3hdHgWnWw8iRZc3PLDAGckupDqE2yqREOxz6oL/nUl8=) 29: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 6KUaAZVDPkXTkOKZ5DbXYRghI5OIx+//6O9Z2SthviM=) 30: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: pP6QaZ6xCHzwaNezLWWh9N0zjLWnePhegpoh8w4BrFY=) 31: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: EnqXxHxizowT8zb+SHcbhbA09vXgZZGAE/YRBfr59Gc=) 32: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: X+/JRaBFSpU+csAjI62l5rVURr8ZUzb9qKYNdwDW88k=) 33: 5366509AC63511EAAC843455C4F9AE02.roa (hash: 4VfxlhXPt3Fli8QftF+Jbfr+B7PpkjZJjrN7R7UoFec=) 34: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: rNmuk0Zw99f4Kzt4k/QReGgYLjG+b50IvgI4wD110cw=) 35: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: cTr3m6jhSldGceNeNs9qUPTOBPhnI4QANoh1eGzuDWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10209 (0x27e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Aug 22 15:52:17 2025 GMT Not After : Aug 29 15:52:17 2025 GMT Subject: CN=68a89232-4fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e9:18:2f:c8:c3:da:24:09:11:dc:4a:51:b9: e3:61:6b:40:4e:f6:37:1a:44:41:1c:44:9d:39:71: 3b:9f:7c:a3:13:ab:15:84:b7:f8:c8:60:33:e6:dd: 02:64:b6:fe:b4:1d:ab:36:71:35:1c:1c:73:fb:fe: 61:1d:de:7b:d5:f8:a0:a5:77:0d:80:5a:cb:7d:3e: 2d:8d:b8:51:98:5f:c4:db:fe:35:0f:86:81:61:16: f6:5e:10:9b:f9:ef:35:11:5f:85:c9:06:ba:c3:6f: 74:b6:1e:53:a4:6a:bf:05:b3:9e:1a:a5:83:5e:f2: a2:3a:cd:4a:c7:96:7f:2f:c9:6b:30:bf:72:d4:f4: bd:2d:88:f9:14:5c:bb:c8:85:81:a3:07:1b:67:6c: 1c:96:87:14:3b:32:8e:7a:b1:72:81:61:b3:f2:19: a0:86:57:6d:f1:1f:e3:23:87:37:51:62:13:e2:09: cd:93:0a:0f:a8:1e:2f:ab:21:3f:be:95:a2:4c:01: 78:67:4f:a2:99:4a:96:77:ff:fa:7c:e5:2c:20:19: fb:13:5a:17:10:73:8d:98:3f:e5:15:6d:dd:6b:60: 87:40:4a:79:93:76:e7:b2:bd:00:7b:6a:e2:d7:57: 9b:1b:1e:21:19:e9:f2:83:3b:e5:1b:2a:17:62:17: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C7:AE:87:DA:D4:2B:E5:0C:C8:0F:E7:5E:BC:27:35:98:D5:15:61 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a3:02:2d:6d:2a:79:8c:ae:d4:da:8d:bd:a4:5a:41:ca:b1: e6:1b:6a:d3:49:f6:82:6c:53:dc:67:24:c6:3b:1e:09:9f:98: e7:1a:07:9a:24:6b:5d:dd:26:3a:6b:b9:5b:b7:43:f4:91:8d: 7b:3c:02:e8:d3:75:c0:6b:23:f6:e3:49:45:78:67:16:42:da: ce:00:a2:c7:88:2c:2d:d4:08:0b:45:18:fa:d9:61:1d:3d:f2: 17:98:db:4b:a6:e5:a0:24:9a:ef:0b:ef:aa:ba:47:d4:0c:41: 3c:94:63:61:76:2a:07:67:2f:bb:1a:14:9c:b7:ea:68:27:39: e5:77:70:04:5c:ad:ec:0e:0b:9e:d5:4c:c0:1a:7e:ff:4f:ae: 46:68:07:d0:1d:ea:ff:2a:18:54:dc:1a:38:54:28:e5:c2:83: f6:3c:b6:b8:c4:bf:20:9f:d5:81:dc:58:5f:b7:4d:be:25:24: 2e:b2:ef:ad:b7:ba:01:9a:d8:3e:e5:96:a9:b4:c8:ea:d3:fa: 2e:6c:73:02:aa:bb:58:4d:b5:87:f8:5d:a7:7d:21:09:da:8d: 13:06:8b:5d:96:2c:3d:24:35:54:26:5b:20:0e:16:45:99:36: 1e:ce:f8:38:8b:65:a8:ac:65:86:23:52:38:cf:31:8c:85:e8: b9:c3:8b:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwODIyMTU1MjE3WhcNMjUwODI5MTU1MjE3WjAYMRYwFAYD VQQDEw02OGE4OTIzMi00ZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+kYL8jD2iQJEdxKUbnjYWtATvY3GkRBHESdOXE7n3yjE6sVhLf4yGAz5t0C ZLb+tB2rNnE1HBxz+/5hHd571figpXcNgFrLfT4tjbhRmF/E2/41D4aBYRb2XhCb +e81EV+FyQa6w290th5TpGq/BbOeGqWDXvKiOs1Kx5Z/L8lrML9y1PS9LYj5FFy7 yIWBowcbZ2wclocUOzKOerFygWGz8hmghldt8R/jI4c3UWIT4gnNkwoPqB4vqyE/ vpWiTAF4Z0+imUqWd//6fOUsIBn7E1oXEHONmD/lFW3da2CHQEp5k3bnsr0Ae2ri 11ebGx4hGenygzvlGyoXYheC1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvHrofa 1CvlDMgP5168JzWY1RVhMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkI3MC8yOTgzNjQ3QzgzOEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRo LTNoc1VtMjk3eHNFV1NpcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8owItbSp5jK7U2o29pFpByrHmG2rTSfaCbFPcZyTGOx4Jn5jnGgea JGtd3SY6a7lbt0P0kY17PALo03XAayP240lFeGcWQtrOAKLHiCwt1AgLRRj62WEd PfIXmNtLpuWgJJrvC++qukfUDEE8lGNhdioHZy+7GhSct+poJznld3AEXK3sDgue 1UzAGn7/T65GaAfQHer/KhhU3Bo4VCjlwoP2PLa4xL8gn9WB3Fhft02+JSQusu+t t7oBmtg+5ZaptMjq0/oubHMCqrtYTbWH+F2nfSEJ2o0TBotdliw9JDVUJlsgDhZF mTYezvg4i2WorGWGI1I4zzGMhei5w4uW -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:22 2025 by rpki-client