$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft File: XozcAfwJtFN0mgHuUjmzXt4kvmw.mft (raw, json) Hash identifier: 3eou8kXJPUjiR8EtaEgZlOCxOxKFQc7lHbEIgEkNDOY= Subject key identifier: E7:B5:A2:4A:68:43:8E:E2:A6:4E:A6:D5:C9:35:66:87:44:93:A8:CF Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C Certificate serial: 0764 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft Manifest number: 075E Signing time: Fri 22 Aug 2025 21:47:51 +0000 Manifest this update: Fri 22 Aug 2025 21:47:51 +0000 Manifest next update: Fri 29 Aug 2025 21:47:51 +0000 Files and hashes: 1: XozcAfwJtFN0mgHuUjmzXt4kvmw.crl (hash: RzpAHn3YkTyvFWGgxtlxaxN/lxjHMwcHPTDZCz3ky7M=) 2: A5D573E4305A11EB921D6332C4F9AE02.roa (hash: YBEc7X7y2zLa5OdEGOrRlwoEuxYs7fU2wrxzm81YklQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1892 (0x764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C Validity Not Before: Aug 22 21:47:51 2025 GMT Not After : Aug 29 21:47:51 2025 GMT Subject: CN=68a8e587-37de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:e8:b9:96:d3:ab:fc:3f:bf:0c:36:05:f2: d5:b9:92:f8:64:8f:4e:76:f2:89:79:36:8d:b2:9d: dd:d1:de:10:9e:fb:c3:2b:8d:5a:73:a4:1c:8e:a3: 42:12:3a:e2:a1:7a:26:3a:33:4c:8e:a7:36:ea:37: c1:03:b2:e8:7d:19:92:8f:7e:fb:6d:70:e1:06:3f: c2:0f:7f:0f:f5:c1:3f:56:41:3f:e3:d3:fa:05:05: 1b:dd:41:e7:0e:b9:7d:87:3b:d5:dd:f9:4e:d5:3a: 38:fa:4e:8d:0d:0c:df:ec:be:0c:b8:9b:2e:68:cd: 7e:ce:ba:58:3e:f7:05:38:79:38:ae:48:d2:74:8e: d9:42:ff:20:e0:7c:88:c2:52:ed:3a:37:e3:bc:bc: eb:da:be:44:03:a1:54:92:9e:a0:12:9b:7b:db:27: ab:85:10:13:3a:38:d5:9e:96:78:d2:33:36:d2:9c: 72:a6:d8:1e:69:fd:ec:80:73:73:cd:42:1c:98:c9: 3a:e9:3d:a5:d1:99:df:3c:e7:02:a1:33:36:e6:09: 48:9e:1c:25:de:c2:51:1d:7b:03:a3:d0:5e:d1:ba: c3:32:9d:91:c2:95:5e:66:e8:d1:c1:ad:68:2d:ca: 60:ae:22:ab:eb:96:b4:30:cb:78:24:cc:58:b4:1c: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B5:A2:4A:68:43:8E:E2:A6:4E:A6:D5:C9:35:66:87:44:93:A8:CF X509v3 Authority Key Identifier: keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:21:c0:fc:c5:d2:7f:2e:c9:57:d7:a9:7f:fa:8e:74:42:13: e9:0e:c2:bf:64:ef:bc:6f:93:20:00:8c:6f:a1:4d:7b:87:3e: ea:33:13:ac:70:93:99:47:e3:ee:72:d8:10:1b:ca:98:32:25: 44:2b:da:97:53:b3:8a:d1:f0:fa:be:69:3d:c8:e4:3f:4a:f9: e4:3b:a5:3d:d6:af:2a:d3:3a:1b:b0:25:75:09:15:35:77:99: 9d:0b:da:5e:fe:30:6d:b0:04:98:00:8a:8d:32:ac:d7:de:e2: 02:51:38:fb:40:43:7d:7b:71:86:45:67:35:ab:9e:6c:b7:9c: c3:7a:9c:5e:ed:04:cc:37:cb:7f:66:4d:b7:b6:aa:19:0a:4c: 18:a8:c8:67:ea:e1:2d:ae:26:22:19:f5:df:2d:5e:d8:2a:d3: 4b:da:b0:45:99:91:58:59:8a:c1:65:42:c1:b3:32:83:b4:11: b0:8c:71:f0:05:b5:41:a9:dc:3d:5b:bd:ce:41:94:bc:db:21: f8:45:04:b3:61:a2:22:01:24:b3:20:fd:66:3e:29:06:d8:c4: c2:b5:67:06:dd:3c:1e:5b:a4:00:11:66:a2:38:71:ce:6c:19: 3f:52:ed:67:fa:20:13:5d:94:69:ee:9b:f9:96:f3:fb:d3:d4: ec:e8:ba:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDRkExMTAvBgNVBAUTKDVFOENEQzAxRkMwOUI0NTM3NDlBMDFFRTUyMzlCMzVF REUyNEJFNkMwHhcNMjUwODIyMjE0NzUxWhcNMjUwODI5MjE0NzUxWjAYMRYwFAYD VQQDEw02OGE4ZTU4Ny0zN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudPouZbTq/w/vww2BfLVuZL4ZI9OdvKJeTaNsp3d0d4QnvvDK41ac6QcjqNC EjrioXomOjNMjqc26jfBA7LofRmSj377bXDhBj/CD38P9cE/VkE/49P6BQUb3UHn Drl9hzvV3flO1To4+k6NDQzf7L4MuJsuaM1+zrpYPvcFOHk4rkjSdI7ZQv8g4HyI wlLtOjfjvLzr2r5EA6FUkp6gEpt72yerhRATOjjVnpZ40jM20pxyptgeaf3sgHNz zUIcmMk66T2l0ZnfPOcCoTM25glInhwl3sJRHXsDo9Be0brDMp2RwpVeZujRwa1o LcpgriKr65a0MMt4JMxYtBxURQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe1okpo Q47ipk6m1ck1ZodEk6jPMB8GA1UdIwQYMBaAFF6M3AH8CbRTdJoB7lI5s17eJL5s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNENGQS8xQzJGQUIyRTMw NTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRGTjBtZ0h1VWptelh0NGt2 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvemNBZndKdEZOMG1nSHVVam16WHQ0a3Ztdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NENGQS8xQzJGQUIyRTMwNTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRG TjBtZ0h1VWptelh0NGt2bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOIcD8xdJ/LslX16l/+o50QhPpDsK/ZO+8b5MgAIxvoU17hz7qMxOs cJOZR+PuctgQG8qYMiVEK9qXU7OK0fD6vmk9yOQ/SvnkO6U91q8q0zobsCV1CRU1 d5mdC9pe/jBtsASYAIqNMqzX3uICUTj7QEN9e3GGRWc1q55st5zDepxe7QTMN8t/ Zk23tqoZCkwYqMhn6uEtriYiGfXfLV7YKtNL2rBFmZFYWYrBZULBszKDtBGwjHHw BbVBqdw9W73OQZS82yH4RQSzYaIiASSzIP1mPikG2MTCtWcG3TweW6QAEWaiOHHO bBk/Uu1n+iATXZRp7pv5lvP709Ts6Lpe -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:24 2025 by rpki-client