$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: +91DnzWSL6OiEEb0ItC+3Gn7G976TlFZ5YPTx2bWW6s= Subject key identifier: DC:08:0C:24:E6:8D:7B:AA:E8:D1:F8:CD:E2:CE:9D:F8:63:7D:03:98 Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: 65 Signing time: Sat 23 Aug 2025 07:24:15 +0000 Manifest this update: Sat 23 Aug 2025 07:24:15 +0000 Manifest next update: Sat 30 Aug 2025 07:24:15 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: SBaiwFf3qF+GRpPdqHr5ROdQCbahscDlO71QCjBnpWU=) 2: D2E899F86EB511F0A3A63A59C4F9AE02.roa (hash: 0dFbZ0ducL2EHPg1wlqAHlDGhzD129B1kp1qJTYRuTU=) 3: 2C0E544C6EB511F094E66857C4F9AE02.roa (hash: MFMadZ9hIQ4pKDfnggH43mNknioivrdN+SzVsH0zBtQ=) 4: 917D3A184BED11F0A2F7CC21C4F9AE02.roa (hash: IYpTiwoDdKk+DKwv65zZ7BTxOeFfDIMdePJWFd5JpGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: Aug 23 07:24:15 2025 GMT Not After : Aug 30 07:24:15 2025 GMT Subject: CN=68a96c9f-6859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:12:a0:46:1a:6e:60:d7:ee:a3:97:1a:4f: 8b:1c:8c:f3:49:76:99:a6:45:b8:ae:1f:2b:25:1f: 24:5a:c0:e9:b7:49:fc:6a:a2:54:22:fc:7a:07:7a: a9:5d:f5:01:3c:b4:e8:df:dc:7f:69:ea:f9:24:10: a8:1f:51:c8:19:98:7f:d6:7f:43:bb:6d:41:99:ef: f1:38:17:93:65:8f:c3:88:a5:a7:9a:f4:19:e5:f4: d2:a2:5a:bc:c5:6d:8d:80:c8:0a:2c:ae:71:a6:9e: dd:f8:98:dd:08:0c:a0:68:f4:ec:78:7b:28:d2:76: 73:21:bc:0b:ff:85:10:75:0b:bd:15:92:29:e2:b7: 45:1a:d0:59:bb:c4:d8:04:62:d4:90:10:8d:88:a0: 37:b4:03:8e:a5:cc:9d:99:39:03:48:66:2c:09:16: 30:60:27:b7:8d:75:a5:6c:c7:d0:a4:5f:dd:07:ee: 84:3d:ce:e4:0a:67:33:aa:3b:d3:df:c6:12:59:68: 5b:52:69:f3:20:28:9e:ba:df:09:18:f6:45:b1:9e: 5f:b0:7e:9c:3b:56:e8:fb:ce:b3:98:c5:fe:53:a6: 57:6e:5b:7a:51:a3:70:94:fb:d4:f2:16:40:42:b3: f2:80:e4:d4:06:06:5f:c5:32:53:64:3c:d3:96:fc: f4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:08:0C:24:E6:8D:7B:AA:E8:D1:F8:CD:E2:CE:9D:F8:63:7D:03:98 X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:4d:dd:45:1e:ea:40:9f:81:dd:11:02:ce:54:51:34:1e:f4: 5c:c0:c8:b7:ca:35:4a:19:c4:b7:8c:ee:af:ac:24:d4:a3:01: 7e:06:af:c7:53:0b:fa:ff:53:b1:9f:c8:f7:45:c3:17:11:c1: 80:88:7c:2f:f8:c6:dd:83:dc:49:d7:31:0b:af:c3:8b:3a:0b: 55:6f:47:87:77:06:63:0d:61:c2:c4:66:0e:e5:73:8d:c9:73: d3:c1:e9:36:62:89:74:eb:7c:f4:90:9e:8c:99:dc:03:91:aa: ac:02:72:77:70:ea:c8:12:6f:1b:97:77:4d:63:fd:96:3f:64: 88:02:e7:33:12:d4:58:43:9a:4e:02:db:cd:54:00:a7:24:85: 78:9c:99:fe:d4:fd:e9:81:56:bb:84:ec:53:78:0a:21:ce:46: fb:db:14:85:18:aa:1b:a9:fa:6c:8b:b7:bf:8d:91:da:fe:f3: 77:0a:98:3d:8d:d2:c7:d3:e8:b4:95:a0:54:6f:be:fa:b8:03: 7b:42:db:c7:5b:f9:2a:35:87:f1:92:30:47:4f:00:5a:7b:2a: 81:30:c8:fa:91:72:04:9c:d4:9c:7d:d4:cc:c7:27:0e:11:02: 29:ea:dc:92:99:4d:ad:65:bc:a9:4c:3d:96:50:07:01:98:d7: 0d:b6:9d:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OERGNTExMC8GA1UEBRMoQzZGNzU4RUNEREM0QzlCMEY3MkYwNjVDMzVBRDU0Njk3 NDMyNzExQjAeFw0yNTA4MjMwNzI0MTVaFw0yNTA4MzAwNzI0MTVaMBgxFjAUBgNV BAMTDTY4YTk2YzlmLTY4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJmBKgRhpuYNfuo5caT4scjPNJdpmmRbiuHyslHyRawOm3SfxqolQi/HoHeqld 9QE8tOjf3H9p6vkkEKgfUcgZmH/Wf0O7bUGZ7/E4F5Nlj8OIpaea9Bnl9NKiWrzF bY2AyAosrnGmnt34mN0IDKBo9Ox4eyjSdnMhvAv/hRB1C70Vkinit0Ua0Fm7xNgE YtSQEI2IoDe0A46lzJ2ZOQNIZiwJFjBgJ7eNdaVsx9CkX90H7oQ9zuQKZzOqO9Pf xhJZaFtSafMgKJ663wkY9kWxnl+wfpw7Vuj7zrOYxf5TplduW3pRo3CU+9TyFkBC s/KA5NQGBl/FMlNkPNOW/PRpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3AgMJOaN e6ro0fjN4s6d+GN9A5gwHwYDVR0jBBgwFoAUxvdY7N3EybD3LwZcNa1UaXQycRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1LzMxRTBGMTZBRjk2 MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHZkWTdOM0V5YkQzTHdaY05hMVVhWFF5Y1JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 REY1LzMxRTBGMTZBRjk2MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJE M0x3WmNOYTFVYVhReWNScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALpN3UUe6kCfgd0RAs5UUTQe9FzAyLfKNUoZxLeM7q+sJNSjAX4Gr8dT C/r/U7GfyPdFwxcRwYCIfC/4xt2D3EnXMQuvw4s6C1VvR4d3BmMNYcLEZg7lc43J c9PB6TZiiXTrfPSQnoyZ3AORqqwCcndw6sgSbxuXd01j/ZY/ZIgC5zMS1FhDmk4C 281UAKckhXicmf7U/emBVruE7FN4CiHORvvbFIUYqhup+myLt7+Nkdr+83cKmD2N 0sfT6LSVoFRvvvq4A3tC28db+So1h/GSMEdPAFp7KoEwyPqRcgSc1Jx91MzHJw4R Ainq3JKZTa1lvKlMPZZQBwGY1w22nXQ= -----END CERTIFICATE-----Generated at Sun Aug 24 04:46:21 2025 by rpki-client