$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: gATYPpu86ZAessE7LxWV5OlrJ9YtvHDLrSlgqCb9jqQ= Subject key identifier: CD:D5:F0:C1:70:E1:E0:6E:0F:CE:DD:B7:85:E7:DE:80:4C:EE:85:EF Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0B02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0ADC Signing time: Fri 22 Aug 2025 19:38:01 +0000 Manifest this update: Fri 22 Aug 2025 19:38:01 +0000 Manifest next update: Fri 29 Aug 2025 19:38:01 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: b8w4XXgyVYnBRXidSHAVrAunMz5kPUpHiiJjfBlMZ+I=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2818 (0xb02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Aug 22 19:38:01 2025 GMT Not After : Aug 29 19:38:01 2025 GMT Subject: CN=68a8c719-32f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:1e:9a:35:c0:10:0d:9d:3d:61:23:04:f3: af:4d:60:35:8d:f4:f9:70:4b:ad:ad:9d:cb:dc:34: 36:04:ca:88:7c:ed:e8:b0:79:09:14:f1:f0:45:6e: b4:d4:bb:53:b5:aa:da:6b:46:3e:92:d4:1f:8f:fa: 1e:05:7f:0d:00:7a:5f:02:2b:bb:1d:09:63:13:f0: bd:77:cf:db:31:a3:9e:be:c7:f2:c3:7c:9f:90:5c: 92:a4:ad:cb:aa:10:fb:6f:3f:33:c4:70:c1:8f:ee: 03:a1:3f:20:eb:7b:51:99:00:25:db:02:ae:39:b4: 00:a9:91:74:8e:2f:53:4b:a8:61:c9:63:a3:6d:b8: e0:cd:58:ef:ba:40:ed:08:cb:a7:04:ff:45:14:20: 33:47:a8:b0:87:fe:07:8a:ff:a9:08:0f:92:4f:71: f6:68:44:9a:37:94:54:68:87:3c:73:07:64:cf:c7: 43:92:87:2c:36:60:f8:e3:9d:5f:95:d7:d5:34:56: 50:fd:7b:a3:17:e9:e5:0e:71:d7:e4:bf:a7:be:77: 66:97:09:0e:4f:1a:c4:8e:bd:01:62:93:34:f1:76: a2:75:47:ec:af:c9:c3:ec:47:5b:ca:30:74:e3:71: 53:40:36:a1:af:dd:89:ae:79:bd:2c:d0:67:2e:fa: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D5:F0:C1:70:E1:E0:6E:0F:CE:DD:B7:85:E7:DE:80:4C:EE:85:EF X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f2:03:20:9e:5a:65:33:2b:fe:ab:f5:ff:ec:c0:86:79:25: ec:55:21:78:5d:eb:77:b2:8d:d2:d5:51:b1:e1:7e:89:58:8a: 73:46:9c:9e:3c:f0:a9:b9:2e:91:d4:2a:b5:f5:13:01:f6:05: b8:99:f9:e8:a5:fd:6f:88:1f:a8:7a:00:5f:15:39:0e:14:c4: be:ff:02:12:53:03:4f:9a:64:cb:07:5e:8f:fb:0d:eb:a0:66: ec:ae:30:e9:09:9c:e1:db:91:7f:0e:f5:f2:03:d3:d9:70:ed: bc:97:4c:07:0f:ae:6c:79:11:6e:da:df:8d:47:52:06:3c:16: fc:bd:0c:ab:3e:46:7d:ab:6d:03:eb:97:88:17:de:3b:6d:1e: 67:a1:91:1e:c8:aa:34:84:df:bc:fa:73:82:b3:99:7b:13:79: 45:fd:fe:46:cc:1a:84:e6:58:c4:62:0e:d8:d7:40:76:5a:5f: 74:1f:8a:85:79:a0:49:85:ed:5e:23:e5:7c:64:54:22:73:d3: 5e:e9:ec:f2:1a:6d:ff:b7:66:e2:56:7c:e5:af:91:cc:3a:51: 30:ee:39:29:e9:4a:78:42:de:84:8d:45:6a:ee:ba:7a:20:9e: 77:55:94:a3:11:46:e1:d4:c2:d0:78:a4:7c:2f:cd:21:79:b5: 72:5a:df:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjUwODIyMTkzODAxWhcNMjUwODI5MTkzODAxWjAYMRYwFAYD VQQDEw02OGE4YzcxOS0zMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/IemjXAEA2dPWEjBPOvTWA1jfT5cEutrZ3L3DQ2BMqIfO3osHkJFPHwRW60 1LtTtaraa0Y+ktQfj/oeBX8NAHpfAiu7HQljE/C9d8/bMaOevsfyw3yfkFySpK3L qhD7bz8zxHDBj+4DoT8g63tRmQAl2wKuObQAqZF0ji9TS6hhyWOjbbjgzVjvukDt CMunBP9FFCAzR6iwh/4Hiv+pCA+ST3H2aESaN5RUaIc8cwdkz8dDkocsNmD4451f ldfVNFZQ/XujF+nlDnHX5L+nvndmlwkOTxrEjr0BYpM08XaidUfsr8nD7EdbyjB0 43FTQDahr92Jrnm9LNBnLvrx7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3V8MFw 4eBuD87dt4Xn3oBM7oXvMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx8gMgnlplMyv+q/X/7MCGeSXsVSF4Xet3so3S1VGx4X6JWIpzRpye PPCpuS6R1Cq19RMB9gW4mfnopf1viB+oegBfFTkOFMS+/wISUwNPmmTLB16P+w3r oGbsrjDpCZzh25F/DvXyA9PZcO28l0wHD65seRFu2t+NR1IGPBb8vQyrPkZ9q20D 65eIF947bR5noZEeyKo0hN+8+nOCs5l7E3lF/f5GzBqE5ljEYg7Y10B2Wl90H4qF eaBJhe1eI+V8ZFQic9Ne6ezyGm3/t2biVnzlr5HMOlEw7jkp6Up4Qt6EjUVq7rp6 IJ53VZSjEUbh1MLQeKR8L80hebVyWt+L -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:18 2025 by rpki-client