$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: pUpJTUQhWx2v7DKe6knBuiAKvSAZMESIp3Of7GdB5+Y= Subject key identifier: AC:2C:12:41:A2:AF:4C:0B:C2:C6:14:E2:EE:44:26:58:6D:EB:3C:9D Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 191B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 16A5 Signing time: Fri 22 Aug 2025 17:01:59 +0000 Manifest this update: Fri 22 Aug 2025 17:01:59 +0000 Manifest next update: Fri 29 Aug 2025 17:01:59 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: uJBqs7Ls3lMX2uqD80UKABJGkxwC29atYNdErDLplrU=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: Ju8go9OBKML8ykj6qnfvaBG6KjObv0i9KK2dLnaHCbM=) 4: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 5: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 6: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 7: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 8: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 10: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 11: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 12: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 14: 4A1187B26E7811F09E744A82C4F9AE02.roa (hash: dJjpFHpkMqHmt4CfDfWFKzsV9Emfi+BcDZ6MOJ55ZSs=) 15: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 16: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 22: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 23: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 24: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 25: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 26: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6427 (0x191b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Aug 22 17:01:59 2025 GMT Not After : Aug 29 17:01:59 2025 GMT Subject: CN=68a8a287-7e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:e6:60:87:2c:44:fd:60:4f:c0:e8:8b:c5: 46:f0:b2:85:05:f2:ea:21:c2:58:8a:bc:82:ed:e1: 4a:85:94:86:03:1e:6b:f2:1e:0b:d2:77:ed:3c:e7: d7:2b:f8:58:ea:4a:ec:cc:31:21:84:6a:d9:c7:b5: 80:da:75:af:d7:eb:65:ba:30:d1:32:25:44:b5:ae: 81:37:ae:e5:a4:46:99:1c:81:9b:4e:0f:e3:1f:7c: ba:84:30:87:b7:29:29:92:e6:a6:c9:47:d1:5f:2e: 1c:de:16:45:65:05:53:39:1f:4e:f8:49:26:ad:bf: c5:73:1c:13:3d:2a:1f:a5:b8:d5:8d:c8:de:d9:40: 39:28:fb:dd:02:bd:13:e9:ca:2c:49:45:c9:89:a5: 4a:79:b3:2d:d5:22:41:e6:ab:67:7f:46:10:4c:29: a4:4c:85:66:33:14:5c:fa:59:42:db:10:8a:23:6b: e6:e8:f4:fc:ab:64:7a:a4:88:8a:6e:4c:4a:a1:b0: 41:64:ee:77:48:51:c6:fe:27:e8:c8:f9:3b:f0:4a: 11:aa:cd:95:b6:45:8c:bf:46:51:eb:86:fd:09:21: 67:60:e1:e2:fc:60:4b:23:8a:07:9f:17:7b:e5:86: c1:9f:b1:d3:1b:7e:29:c4:db:6e:a0:54:8d:5f:3c: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2C:12:41:A2:AF:4C:0B:C2:C6:14:E2:EE:44:26:58:6D:EB:3C:9D X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:77:6f:a3:70:13:21:2a:3e:87:9a:1b:df:43:a2:68:9b:48: cf:69:02:87:e9:ee:32:22:c1:98:65:a0:6a:d8:7e:ed:8c:d0: ba:72:c3:08:61:79:2a:a7:93:ae:4b:03:a1:03:69:8d:f4:9a: 0d:11:25:fa:bc:e0:ac:ee:a4:d0:38:1a:60:82:dc:f7:7a:cd: ce:3b:36:7c:a2:c0:ca:97:4c:2b:0b:ad:a0:39:27:ab:5e:cc: 24:56:19:4d:e2:ac:28:68:17:1e:8c:23:72:a2:d3:08:06:79: 98:03:82:73:00:29:00:58:f4:7d:b4:61:de:d9:83:55:e8:8c: 26:ba:0e:73:64:ac:84:82:4a:e7:c8:bd:f1:34:80:78:55:af: 2b:63:41:e3:1b:fe:a1:e3:de:28:2c:4e:93:fd:d8:6e:40:7e: 7c:7d:4d:20:c4:c5:57:58:2f:73:62:ba:13:19:6f:2e:47:37: 00:5e:3d:03:eb:0c:b8:f0:83:22:ab:0b:43:e2:a4:cc:ad:3d: b4:eb:03:57:e1:66:fb:f9:3f:be:73:50:c3:2b:72:29:18:aa: f5:7b:15:d7:f4:0b:17:43:90:59:19:35:00:89:e1:c0:ef:ee: f6:ee:68:64:88:df:29:e9:97:68:cc:d3:dd:11:3b:2a:47:25: 73:1b:7d:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUwODIyMTcwMTU5WhcNMjUwODI5MTcwMTU5WjAYMRYwFAYD VQQDEw02OGE4YTI4Ny03ZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTDmYIcsRP1gT8Doi8VG8LKFBfLqIcJYiryC7eFKhZSGAx5r8h4L0nftPOfX K/hY6krszDEhhGrZx7WA2nWv1+tlujDRMiVEta6BN67lpEaZHIGbTg/jH3y6hDCH tykpkuamyUfRXy4c3hZFZQVTOR9O+Ekmrb/FcxwTPSofpbjVjcje2UA5KPvdAr0T 6cosSUXJiaVKebMt1SJB5qtnf0YQTCmkTIVmMxRc+llC2xCKI2vm6PT8q2R6pIiK bkxKobBBZO53SFHG/ifoyPk78EoRqs2VtkWMv0ZR64b9CSFnYOHi/GBLI4oHnxd7 5YbBn7HTG34pxNtuoFSNXzzerwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwsEkGi r0wLwsYU4u5EJlht6zydMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCld2+jcBMhKj6HmhvfQ6Jom0jPaQKH6e4yIsGYZaBq2H7tjNC6csMI YXkqp5OuSwOhA2mN9JoNESX6vOCs7qTQOBpggtz3es3OOzZ8osDKl0wrC62gOSer XswkVhlN4qwoaBcejCNyotMIBnmYA4JzACkAWPR9tGHe2YNV6Iwmug5zZKyEgkrn yL3xNIB4Va8rY0HjG/6h494oLE6T/dhuQH58fU0gxMVXWC9zYroTGW8uRzcAXj0D 6wy48IMiqwtD4qTMrT206wNX4Wb7+T++c1DDK3IpGKr1exXX9AsXQ5BZGTUAieHA 7+727mhkiN8p6ZdozNPdETsqRyVzG31V -----END CERTIFICATE-----Generated at Sat Aug 23 07:10:02 2025 by rpki-client