$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft File: xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json) Hash identifier: T+IuxSlEnR4BEsidZcx5hFi1CNeXdGUaNJcPnSMAots= Subject key identifier: D9:38:BA:8D:43:B4:4C:5D:B2:35:9E:7D:3C:C8:CE:AB:75:6A:28:FF Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66 Certificate issuer: /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266 Certificate serial: 080B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft Manifest number: 0802 Signing time: Fri 22 Aug 2025 21:03:34 +0000 Manifest this update: Fri 22 Aug 2025 21:03:34 +0000 Manifest next update: Fri 29 Aug 2025 21:03:34 +0000 Files and hashes: 1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: BDAzQInSX6jiuWrIi55fHUDOc7scViBN+A5LfRqIxPA=) 2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: W17rFdVVlgGDVf5Sl4I92TD7UhWdwp3Z8iY6u8GBaHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266 Validity Not Before: Aug 22 21:03:34 2025 GMT Not After : Aug 29 21:03:34 2025 GMT Subject: CN=68a8db26-2efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7e:fc:6b:e1:88:5c:5e:b8:a9:25:31:0a:f8: 92:40:2a:ee:c7:49:da:a6:f6:21:0d:8a:ac:97:7a: 72:50:9c:ce:42:e2:ab:79:ca:69:de:f2:95:48:6c: 29:4c:56:e6:e4:21:ba:e3:4e:73:09:b7:ba:2b:77: ee:4e:0b:e4:76:6e:e7:36:11:8c:a0:fb:8a:63:0e: 98:53:2d:55:e7:d3:ec:60:bc:8e:1d:ef:21:9e:54: 3e:12:33:2b:6a:81:05:3f:cb:37:ca:ea:bd:f1:30: 6a:5f:1a:e5:b9:a3:4c:fb:01:14:ec:9c:8f:d1:1d: eb:d2:e3:79:cd:8b:22:33:03:2d:fa:a5:01:16:e6: 60:be:78:6a:cb:57:f6:f4:8b:f5:01:20:18:65:31: db:b8:a7:d9:cd:50:d3:65:87:e1:15:22:de:86:d2: b8:da:8b:13:94:aa:52:d0:2e:26:55:11:35:d4:37: ca:fb:d7:e9:aa:81:b5:f2:aa:11:98:66:07:2c:3d: 46:fc:7a:eb:66:c5:8c:a5:da:7c:30:c3:8f:1b:cb: cf:df:90:c7:6b:a5:b8:af:aa:ed:b1:c7:10:73:4e: 65:a2:6e:94:8b:df:ca:06:42:09:1c:6d:8a:6a:c4: 16:40:38:f3:34:d7:1c:b0:15:d8:7e:51:1f:69:89: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:38:BA:8D:43:B4:4C:5D:B2:35:9E:7D:3C:C8:CE:AB:75:6A:28:FF X509v3 Authority Key Identifier: keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:93:0e:35:4d:15:b2:89:ea:0e:18:c1:08:e0:c0:22:d9:34: e1:eb:ce:e9:9c:6d:33:1a:84:2d:5c:34:f7:07:f3:79:40:98: 78:72:92:f2:17:56:1b:4f:a0:fb:c6:f1:64:80:d4:52:aa:75: 43:18:c3:e6:2b:e7:b7:ed:f8:1a:a9:a2:d7:9c:1a:e8:99:d4: 73:3c:6b:e1:6f:c5:4e:3f:d5:eb:bc:8e:29:23:1a:84:84:2e: 36:b9:b8:13:7d:b0:06:31:0d:f9:9d:b3:ce:3b:b4:c8:22:a6: 1f:29:b0:31:25:e0:25:5f:a5:a1:7d:4d:c8:6c:64:aa:a2:bc: ee:2d:f5:dc:da:88:4a:d9:e9:99:5b:84:d0:fd:8c:5e:78:9a: ec:3a:04:c1:b3:55:f4:fa:31:9a:c7:bc:60:0e:22:17:c4:d3: 91:79:a8:1a:31:c8:9a:6a:d4:91:8b:1e:20:ed:6a:ab:01:78: 46:fb:24:74:c4:f6:4e:51:9b:cd:7c:fa:60:cb:7b:7b:7b:b6: 6a:06:17:42:3c:d3:f3:86:9f:6b:eb:5c:c3:e4:66:e0:f1:81: a6:dd:0e:9b:b7:00:41:87:56:03:5d:f2:b0:6a:b1:86:2a:c0: da:3a:3f:9b:32:c8:13:4b:e3:a1:78:c2:f8:d4:29:a7:76:7f: 33:5c:dc:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDNDYxMTAvBgNVBAUTKEM2QzE5MTY5RUVBN0QwNjZCQzlCQ0E3MkREODgzMEJD MTgzQTEyNjYwHhcNMjUwODIyMjEwMzM0WhcNMjUwODI5MjEwMzM0WjAYMRYwFAYD VQQDEw02OGE4ZGIyNi0yZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoH78a+GIXF64qSUxCviSQCrux0napvYhDYqsl3pyUJzOQuKrecpp3vKVSGwp TFbm5CG6405zCbe6K3fuTgvkdm7nNhGMoPuKYw6YUy1V59PsYLyOHe8hnlQ+EjMr aoEFP8s3yuq98TBqXxrluaNM+wEU7JyP0R3r0uN5zYsiMwMt+qUBFuZgvnhqy1f2 9Iv1ASAYZTHbuKfZzVDTZYfhFSLehtK42osTlKpS0C4mVRE11DfK+9fpqoG18qoR mGYHLD1G/HrrZsWMpdp8MMOPG8vP35DHa6W4r6rtsccQc05lom6Ui9/KBkIJHG2K asQWQDjzNNccsBXYflEfaYkACwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNk4uo1D tExdsjWefTzIzqt1aij/MB8GA1UdIwQYMBaAFMbBkWnup9BmvJvKct2IMLwYOhJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM0Ni8wNUNBREQxNkYx ODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBHYThtOHB5M1lnd3ZCZzZF bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hzR1JhZTZuMEdhOG04cHkzWWd3dkJnNkVtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM0Ni8wNUNBREQxNkYxODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBH YThtOHB5M1lnd3ZCZzZFbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQkw41TRWyieoOGMEI4MAi2TTh687pnG0zGoQtXDT3B/N5QJh4cpLy F1YbT6D7xvFkgNRSqnVDGMPmK+e37fgaqaLXnBromdRzPGvhb8VOP9XrvI4pIxqE hC42ubgTfbAGMQ35nbPOO7TIIqYfKbAxJeAlX6WhfU3IbGSqorzuLfXc2ohK2emZ W4TQ/YxeeJrsOgTBs1X0+jGax7xgDiIXxNOReagaMciaatSRix4g7WqrAXhG+yR0 xPZOUZvNfPpgy3t7e7ZqBhdCPNPzhp9r61zD5Gbg8YGm3Q6btwBBh1YDXfKwarGG KsDaOj+bMsgTS+OheML41Cmndn8zXNwR -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:22 2025 by rpki-client