$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft File: X1zijATRbpUODrzVlVVCSD05VtA.mft (raw, json) Hash identifier: b98b3HJNVn+zSIhJuzCwfAwjayesdMe8GEkRum3rqBE= Subject key identifier: 42:6C:D4:75:38:54:5B:20:49:19:19:BC:1C:D6:42:88:8F:A0:C2:8E Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft Manifest number: 015F Signing time: Sat 23 Aug 2025 04:11:15 +0000 Manifest this update: Sat 23 Aug 2025 04:11:14 +0000 Manifest next update: Sat 30 Aug 2025 04:11:14 +0000 Files and hashes: 1: X1zijATRbpUODrzVlVVCSD05VtA.crl (hash: vFIdAWhz3xs11X7acx3CJU1KcyHpr8WT5sc+i3DKGe8=) 2: 85BF2BE4710111F093C54468C4F9AE02.roa (hash: DHeUh6Boki6/Qn0u9RFENX6qUoDb9jI1NIN7RVH9Vfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0D86, serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Validity Not Before: Aug 23 04:11:14 2025 GMT Not After : Aug 30 04:11:14 2025 GMT Subject: CN=68a93f62-d496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:a7:63:e2:31:0e:c2:45:e7:27:12:92:b5: 07:65:79:5d:d6:48:57:f9:9d:46:41:8e:84:84:56: 9a:a9:15:c1:e4:9d:2a:78:b9:78:6b:3d:71:b8:93: db:2a:12:59:1c:87:17:6b:4d:4e:22:3a:41:6a:b1: 8c:3d:db:f3:d4:97:09:e5:46:e0:62:55:14:42:04: 99:89:ef:33:01:a4:73:62:b6:ed:50:56:ed:f6:bc: dd:2d:3b:00:b0:82:0e:3a:60:78:4e:34:04:af:3e: 3f:8c:c9:f1:de:bf:9c:d8:54:76:6d:68:16:89:86: 3e:01:6d:15:b4:a3:a1:2e:34:05:58:b7:c3:af:b0: 4b:f1:ec:ea:02:8e:4a:b8:ca:52:91:db:a3:95:1e: cf:7e:e8:fc:2b:09:e6:b5:7d:c2:a7:61:5d:bb:6e: fe:33:8d:f4:29:91:07:74:f8:37:16:f6:2a:7f:13: ed:26:b4:2d:56:e2:7d:f6:b0:3c:97:a0:66:16:b2: 3e:2d:0e:9c:8e:82:16:16:6f:21:8a:d8:88:5a:f4: 3f:10:80:45:c4:66:de:2f:70:4b:c8:5f:2d:84:ac: ca:84:a8:ac:a4:38:2e:e1:e3:a9:88:15:a2:e7:c9: 26:ca:6f:12:b6:a9:55:0f:e2:ea:21:44:9d:69:15: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6C:D4:75:38:54:5B:20:49:19:19:BC:1C:D6:42:88:8F:A0:C2:8E X509v3 Authority Key Identifier: keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e7:35:89:f2:cf:c0:f9:4a:95:13:ab:1e:7c:cd:bb:41:8c: 26:80:ad:1c:26:43:e4:1c:b5:72:2c:b8:ed:a5:e2:dd:91:90: f4:09:e8:6d:b3:84:86:de:9d:2e:cc:0d:30:30:b3:39:99:49: 4f:7a:f9:10:f0:67:bb:f2:9d:2f:41:c0:6c:88:cc:c5:67:d6: fd:9d:b2:06:78:cf:3f:64:0d:03:d9:58:2d:45:e8:a7:63:25: 7c:cf:17:12:b6:89:81:51:f7:08:5f:76:41:ac:3a:b2:c1:b6: 40:a8:f3:b0:f1:b3:d6:86:00:70:d4:cc:e0:83:93:06:9f:2f: 33:fd:09:37:fa:5b:3f:ae:f9:6e:82:70:63:66:a8:15:83:0b: a5:f5:37:b9:5f:b7:fb:39:be:fd:bd:3b:1b:78:39:cd:6b:14: 61:8e:02:78:87:78:ae:0f:d1:d4:25:a6:a5:71:8a:ee:af:43: 79:06:82:ac:7a:06:c9:c3:8a:1d:0a:f7:64:1d:89:ed:c0:b6: 97:25:82:90:b0:80:e4:bf:e9:61:06:1a:69:73:19:48:b9:60: 66:b6:ff:4c:41:bc:f0:2e:0d:55:8f:e6:ae:15:68:61:bf:a9: 63:3d:fa:2a:ed:10:24:f9:d3:47:d3:a2:c2:2e:49:28:a4:86: 4d:b7:7a:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBEODYxMTAvBgNVBAUTKDVGNUNFMjhDMDREMTZFOTUwRTBFQkNENTk1NTU0MjQ4 M0QzOTU2RDAwHhcNMjUwODIzMDQxMTE0WhcNMjUwODMwMDQxMTE0WjAYMRYwFAYD VQQDEw02OGE5M2Y2Mi1kNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/mnY+IxDsJF5ycSkrUHZXld1khX+Z1GQY6EhFaaqRXB5J0qeLl4az1xuJPb KhJZHIcXa01OIjpBarGMPdvz1JcJ5UbgYlUUQgSZie8zAaRzYrbtUFbt9rzdLTsA sIIOOmB4TjQErz4/jMnx3r+c2FR2bWgWiYY+AW0VtKOhLjQFWLfDr7BL8ezqAo5K uMpSkdujlR7Pfuj8KwnmtX3Cp2Fdu27+M430KZEHdPg3FvYqfxPtJrQtVuJ99rA8 l6BmFrI+LQ6cjoIWFm8hitiIWvQ/EIBFxGbeL3BLyF8thKzKhKispDgu4eOpiBWi 58kmym8StqlVD+LqIUSdaRWy8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJs1HU4 VFsgSRkZvBzWQoiPoMKOMB8GA1UdIwQYMBaAFF9c4owE0W6VDg681ZVVQkg9OVbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEQ4Ni82OEU3OTc4QTZD QkQxMUVFQjg0NkYzNzlDNEY5QUUwMi9YMXppakFUUmJwVU9EcnpWbFZWQ1NEMDVW dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gxemlqQVRSYnBVT0RyelZsVlZDU0QwNVZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEQ4Ni82OEU3OTc4QTZDQkQxMUVFQjg0NkYzNzlDNEY5QUUwMi9YMXppakFUUmJw VU9EcnpWbFZWQ1NEMDVWdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn5zWJ8s/A+UqVE6sefM27QYwmgK0cJkPkHLVyLLjtpeLdkZD0Ceht s4SG3p0uzA0wMLM5mUlPevkQ8Ge78p0vQcBsiMzFZ9b9nbIGeM8/ZA0D2VgtRein YyV8zxcStomBUfcIX3ZBrDqywbZAqPOw8bPWhgBw1Mzgg5MGny8z/Qk3+ls/rvlu gnBjZqgVgwul9Te5X7f7Ob79vTsbeDnNaxRhjgJ4h3iuD9HUJaalcYrur0N5BoKs egbJw4odCvdkHYntwLaXJYKQsIDkv+lhBhppcxlIuWBmtv9MQbzwLg1Vj+auFWhh v6ljPfoq7RAk+dNH06LCLkkopIZNt3qX -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:59 2025 by rpki-client