$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json) Hash identifier: PJ2xOjVIoBzSoNMKKhNaA352MF/H9W2XxKdohf4TydQ= Subject key identifier: 26:9B:1B:9E:BD:24:35:DF:EB:E5:6D:74:3B:C6:48:C8:9D:8F:1E:8D Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft Manifest number: 01B4 Signing time: Sat 23 Aug 2025 03:12:28 +0000 Manifest this update: Sat 23 Aug 2025 03:12:28 +0000 Manifest next update: Sat 30 Aug 2025 03:12:28 +0000 Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: WqNxwcSrgZWC4O9j1iTgElj446r2EZlP962qQPT3Ntk=) 2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: 0JcJhlyjlF7wNse9vwSRpqDIz9jgkXs09QG/XtA+FYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Validity Not Before: Aug 23 03:12:28 2025 GMT Not After : Aug 30 03:12:28 2025 GMT Subject: CN=68a9319c-5abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:35:bd:3e:f9:26:20:c8:ff:bd:98:37:bb:ab: 07:0e:0f:1e:f1:a1:bb:15:48:94:4e:7b:25:5b:8d: 4b:03:19:7a:10:ec:4c:69:2c:cf:f5:96:30:4f:6b: ae:5f:b5:75:93:1c:6c:f7:44:07:2f:02:81:bf:23: b6:5a:aa:bc:79:d2:d0:17:80:c3:e4:e3:e3:a0:57: a2:ce:ce:cb:21:b1:63:b5:68:bf:57:ea:3f:fb:cd: e3:cf:8a:bb:75:23:72:20:41:67:fb:dc:b6:5d:f8: 2b:44:02:e2:4f:69:37:59:02:7e:ee:38:97:26:80: 0f:d7:0d:fe:51:ae:6a:4f:bf:80:4b:19:55:1e:67: eb:14:3b:22:c6:c7:7d:05:af:06:05:97:44:d4:cd: 5d:92:b4:7e:b3:e0:8b:ae:c7:17:c6:c1:e8:af:75: 4b:1d:c8:31:41:b8:ba:86:46:05:0a:8e:38:94:5a: ff:51:f0:e4:9e:50:95:a5:03:2b:65:4f:4b:18:b0: 5e:34:98:5a:04:9e:ac:43:ee:90:10:b3:49:cf:48: db:2a:7f:66:89:12:2a:99:62:0c:5c:cb:96:0d:00: 0d:e4:46:1a:64:eb:fd:c8:a5:2c:55:f5:e6:33:de: f7:d0:63:fc:93:de:64:35:82:f1:a0:1c:78:73:4f: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9B:1B:9E:BD:24:35:DF:EB:E5:6D:74:3B:C6:48:C8:9D:8F:1E:8D X509v3 Authority Key Identifier: keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a2:49:ec:22:b3:fd:13:3d:29:03:2e:8e:94:2b:0c:1d:aa: 23:10:19:45:74:34:42:4b:66:38:a1:59:67:f0:f8:e2:f4:4f: 61:51:d4:fd:ea:f0:2e:6d:47:af:a0:00:cb:ab:45:58:e2:fc: 0c:84:3a:7f:98:22:9b:38:05:8c:a8:49:5c:5a:d9:d1:02:40: 74:82:f1:f2:80:6c:b5:86:64:ec:65:82:c5:0a:19:60:55:ef: da:40:fb:34:3a:59:d1:68:6d:98:9d:99:86:62:3a:25:e4:c0: 4d:f0:29:7f:1a:90:c8:17:64:b3:b8:cd:8b:2b:de:28:f2:a3: 0a:93:f5:7c:85:14:4a:15:9b:da:91:f3:91:9a:6f:6b:01:2c: 73:5e:41:95:4e:38:66:d5:6b:e6:4b:a7:c9:0d:1c:98:57:bd: 0e:dc:c5:d1:b0:ce:58:f9:3e:64:fa:4b:27:d8:e9:0a:c4:a8: 50:df:71:22:64:ab:5b:0e:70:5b:c0:8a:32:11:41:4d:17:79: ff:bf:f4:08:53:ee:50:77:6e:0a:c3:ef:d5:89:c8:45:9c:6a: d1:48:2f:e1:fa:f7:29:c6:fd:4f:3b:ad:cc:4a:b5:e8:ba:a9: 62:27:bc:f3:99:74:00:75:b7:93:b3:c8:10:fa:13:4a:1a:de: 68:b9:70:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3RDExMTAvBgNVBAUTKEM1QkQ4QTUwQ0FENUEwNUVGRTU3N0M0OUM0NzE0RTVE OUFCQjdGRUYwHhcNMjUwODIzMDMxMjI4WhcNMjUwODMwMDMxMjI4WjAYMRYwFAYD VQQDEw02OGE5MzE5Yy01YWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jW9PvkmIMj/vZg3u6sHDg8e8aG7FUiUTnslW41LAxl6EOxMaSzP9ZYwT2uu X7V1kxxs90QHLwKBvyO2Wqq8edLQF4DD5OPjoFeizs7LIbFjtWi/V+o/+83jz4q7 dSNyIEFn+9y2XfgrRALiT2k3WQJ+7jiXJoAP1w3+Ua5qT7+ASxlVHmfrFDsixsd9 Ba8GBZdE1M1dkrR+s+CLrscXxsHor3VLHcgxQbi6hkYFCo44lFr/UfDknlCVpQMr ZU9LGLBeNJhaBJ6sQ+6QELNJz0jbKn9miRIqmWIMXMuWDQAN5EYaZOv9yKUsVfXm M9730GP8k95kNYLxoBx4c0/IVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCabG569 JDXf6+VtdDvGSMidjx6NMB8GA1UdIwQYMBaAFMW9ilDK1aBe/ld8ScRxTl2au3/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzdEMS8wNUE5OEYwRUUz QjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9GNy1WM3hKeEhGT1hacTdm LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiMktVTXJWb0Y3LVYzeEp4SEZPWFpxN2YtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzdEMS8wNUE5OEYwRUUzQjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9G Ny1WM3hKeEhGT1hacTdmLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAoknsIrP9Ez0pAy6OlCsMHaojEBlFdDRCS2Y4oVln8Pji9E9hUdT9 6vAubUevoADLq0VY4vwMhDp/mCKbOAWMqElcWtnRAkB0gvHygGy1hmTsZYLFChlg Ve/aQPs0OlnRaG2YnZmGYjol5MBN8Cl/GpDIF2SzuM2LK94o8qMKk/V8hRRKFZva kfORmm9rASxzXkGVTjhm1WvmS6fJDRyYV70O3MXRsM5Y+T5k+ksn2OkKxKhQ33Ei ZKtbDnBbwIoyEUFNF3n/v/QIU+5Qd24Kw+/VichFnGrRSC/h+vcpxv1PO63MSrXo uqliJ7zzmXQAdbeTs8gQ+hNKGt5ouXDv -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:56 2025 by rpki-client