$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: f8KNYCZGSguaf/+wF2NZYBV3WpOY+b2omDAU9SB5aOI= Subject key identifier: 34:C9:E0:AD:FF:7D:99:3B:DC:1C:A6:7F:72:72:9D:44:BB:04:07:F0 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: DC Signing time: Sat 23 Aug 2025 05:41:52 +0000 Manifest this update: Sat 23 Aug 2025 05:41:52 +0000 Manifest next update: Sat 30 Aug 2025 05:41:52 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: VwHRQ4AIWaQCZ/N0yFBCqDmgEnwEy8CUbPncXFs1FH8=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Aug 23 05:41:52 2025 GMT Not After : Aug 30 05:41:52 2025 GMT Subject: CN=68a954a0-983c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:34:ee:14:55:5d:fb:84:b4:9d:03:c8:36: 94:30:e0:2f:5f:3a:b1:f0:2e:e0:2a:b6:68:72:10: 63:a9:7d:99:f1:7d:22:c6:b1:a1:65:50:a3:a5:a9: bd:b9:10:a0:88:e2:b7:ac:e0:38:07:65:f5:68:d4: 4d:b7:55:b4:bf:67:8f:81:72:3f:ce:9b:b0:d4:ae: 20:38:4a:10:fc:0e:5b:4d:26:ad:58:9c:9e:4d:19: 2f:21:88:c8:1a:16:5d:27:3e:ab:82:11:af:6f:8d: 30:a2:17:9b:b9:f5:3c:ae:66:59:5e:b2:d7:86:89: 04:46:28:66:a9:89:60:24:51:cc:53:de:70:c9:ea: ef:07:cd:03:d3:d4:fa:61:2c:c3:17:4a:0b:9e:7e: 30:a5:c6:34:34:b5:bf:ef:fc:f7:d0:b9:98:d3:50: 79:4a:be:88:75:08:e4:82:0b:3b:e1:3f:86:80:ca: 9c:25:55:49:27:74:c9:66:f1:bb:41:f8:86:1c:c6: 75:ad:19:be:7c:4b:1b:bd:f5:b6:9e:74:4a:31:6f: 2d:51:fe:59:5d:39:c0:9d:ba:af:80:ad:12:06:30: 99:03:87:d3:4e:fe:18:ed:dc:c9:45:ea:e3:bf:9e: c5:3c:8f:d1:a1:eb:bb:8b:9e:2f:ea:49:d5:02:9b: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C9:E0:AD:FF:7D:99:3B:DC:1C:A6:7F:72:72:9D:44:BB:04:07:F0 X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ff:d3:27:d3:3c:bb:88:83:61:e2:99:90:4a:c7:10:0d:e6: 75:14:d8:ac:a9:2b:14:80:b7:1d:4a:3a:ef:de:92:50:df:47: c0:46:ee:4b:bd:52:2f:9d:d2:05:5a:16:ad:d6:02:84:87:4e: e6:b6:94:a0:d9:80:2c:47:a1:f4:f6:31:2e:38:27:37:ad:ad: 04:e4:b3:a1:b3:d5:c0:a0:8f:14:d1:04:f3:79:c6:65:f9:65: cf:03:64:70:a7:38:09:50:cc:40:fe:a3:37:0f:ab:bf:e2:80: 18:59:88:b8:60:9f:f7:19:3d:48:27:ac:1e:64:26:1a:b3:94: 17:1e:48:a6:7e:7f:18:4a:05:d5:0c:31:bc:11:20:91:a6:9d: 2d:85:99:36:0f:91:f0:74:65:7b:25:b4:f4:46:22:55:1c:32: 28:3f:e8:ac:c3:ea:ce:a9:73:9d:bb:16:63:4b:10:a7:34:82: 41:e9:1a:dc:20:7e:7c:80:21:84:da:81:31:ad:f4:9f:76:e9: 93:84:91:01:cf:20:13:6f:78:f9:18:a3:d7:8c:6c:56:cd:83: fc:75:f4:79:f7:8c:e4:d4:19:cb:ed:c9:f9:9b:74:28:80:57: 20:42:88:fd:b6:d1:eb:15:15:a6:44:b5:1a:ce:53:1e:36:5d: ed:64:a1:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUwODIzMDU0MTUyWhcNMjUwODMwMDU0MTUyWjAYMRYwFAYD VQQDEw02OGE5NTRhMC05ODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUQ07hRVXfuEtJ0DyDaUMOAvXzqx8C7gKrZochBjqX2Z8X0ixrGhZVCjpam9 uRCgiOK3rOA4B2X1aNRNt1W0v2ePgXI/zpuw1K4gOEoQ/A5bTSatWJyeTRkvIYjI GhZdJz6rghGvb40wohebufU8rmZZXrLXhokERihmqYlgJFHMU95wyervB80D09T6 YSzDF0oLnn4wpcY0NLW/7/z30LmY01B5Sr6IdQjkggs74T+GgMqcJVVJJ3TJZvG7 QfiGHMZ1rRm+fEsbvfW2nnRKMW8tUf5ZXTnAnbqvgK0SBjCZA4fTTv4Y7dzJRerj v57FPI/Roeu7i54v6knVApvklQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTJ4K3/ fZk73Bymf3JynUS7BAfwMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM/9Mn0zy7iINh4pmQSscQDeZ1FNisqSsUgLcdSjrv3pJQ30fARu5L vVIvndIFWhat1gKEh07mtpSg2YAsR6H09jEuOCc3ra0E5LOhs9XAoI8U0QTzecZl +WXPA2RwpzgJUMxA/qM3D6u/4oAYWYi4YJ/3GT1IJ6weZCYas5QXHkimfn8YSgXV DDG8ESCRpp0thZk2D5HwdGV7JbT0RiJVHDIoP+isw+rOqXOduxZjSxCnNIJB6Rrc IH58gCGE2oExrfSfdumThJEBzyATb3j5GKPXjGxWzYP8dfR594zk1BnL7cn5m3Qo gFcgQoj9ttHrFRWmRLUazlMeNl3tZKGz -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:08 2025 by rpki-client