$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json) Hash identifier: six3iEzpo3xTvScyJhxSWQO5/YaQ3zO8g8pOeoJxf0c= Subject key identifier: 48:22:B4:8C:1F:C7:2A:59:16:B2:09:B2:16:C6:BB:98:CF:59:59:A7 Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 25D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft Manifest number: 25BA Signing time: Fri 22 Aug 2025 15:46:26 +0000 Manifest this update: Fri 22 Aug 2025 15:46:26 +0000 Manifest next update: Fri 29 Aug 2025 15:46:26 +0000 Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: q1q8IMic3fLBGhN1idSwn3S5Bm2B4Tcv/ax+K4mL0/E=) 2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: pVWyhrhr52dDPOhFrnd0oPU2DOTP+1UBjUuKhhhwO0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9683 (0x25d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: Aug 22 15:46:26 2025 GMT Not After : Aug 29 15:46:26 2025 GMT Subject: CN=68a890d2-0521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:b9:c7:19:69:74:10:a1:88:4f:7f:7d:d1: c6:aa:d2:33:0e:b6:ee:05:29:8d:84:6b:c9:30:2c: b6:b2:27:a5:fe:47:36:f1:29:8e:b0:58:28:12:79: 38:fa:af:8b:1c:f3:6e:06:fa:96:c8:2d:0b:a8:03: 2e:f9:c2:95:c7:d3:5b:1f:43:7c:c5:6a:9f:b3:c5: ec:4d:09:b1:5f:79:58:09:a3:76:39:a3:26:0e:97: e6:0a:fa:d0:f7:e6:e0:d7:65:ce:ac:3b:7c:ef:ac: 39:44:5f:fd:19:fb:42:4d:2f:18:f7:fc:4f:c3:9f: fc:d7:95:e3:1a:d3:92:ce:fc:c1:1c:c6:4b:93:41: 68:d3:b7:c6:31:f6:76:23:87:d8:bd:76:35:28:ad: 62:1b:4d:32:ed:9a:d2:c8:9f:6e:43:b7:a1:43:c6: 2b:48:4f:5c:60:ed:54:76:69:ba:74:94:e6:ab:43: f5:b4:5a:b9:cf:35:4d:e4:ba:ef:e9:7a:af:a7:69: 62:34:ce:7a:53:a0:dc:1b:0c:ad:b9:4e:c7:32:f9: a3:e2:b8:21:eb:61:12:c4:a4:70:75:d8:2d:09:a3: 5f:e7:fe:45:c2:4e:d7:c7:1f:34:f8:b1:aa:2b:f5: 44:ea:8d:63:68:85:c9:5c:a8:78:5c:7e:7c:d9:29: 94:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:22:B4:8C:1F:C7:2A:59:16:B2:09:B2:16:C6:BB:98:CF:59:59:A7 X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:fc:df:ab:b6:e8:7a:93:10:a2:ab:56:89:68:c7:e4:d8:e8: 0a:94:50:83:97:ef:53:a7:54:48:28:05:48:21:7b:4b:60:2c: 95:09:9e:2b:1f:a5:f6:78:04:df:e9:3d:57:d7:64:7e:ad:67: 47:d6:83:88:a7:7e:05:19:ae:14:eb:d8:0f:56:2b:e6:fb:74: 30:c4:17:94:06:10:c1:b5:b3:11:ca:61:9f:5c:59:9c:23:53: 2c:67:84:f6:b1:6d:c2:88:8c:0a:9b:b6:ca:15:a1:f1:0f:fd: 0a:f7:2f:64:4b:81:35:ae:0b:88:b1:58:4a:5d:5b:e6:8e:a3: ca:63:5f:c7:93:29:38:bc:5d:c9:43:93:c8:0d:a9:6d:22:51: c6:c3:94:58:c5:bf:1a:9b:d9:ed:8e:6f:6b:b3:38:7d:57:64: 61:6b:18:6e:c3:37:a8:ad:70:99:62:1e:62:36:6b:67:1f:ea: 2c:55:50:bd:ce:04:d2:a4:a4:1d:2d:1e:5f:88:81:6e:19:0e: 43:f0:24:40:32:42:40:6a:ec:22:85:e4:0c:40:c0:a0:ab:f7: 6b:9f:d1:9b:12:38:b2:0c:28:3a:7f:29:c5:66:6f:49:dd:66: 29:5b:8d:b5:2f:3a:54:69:bd:29:fa:31:30:3f:c0:cc:35:45: 78:bf:98:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjUwODIyMTU0NjI2WhcNMjUwODI5MTU0NjI2WjAYMRYwFAYD VQQDEw02OGE4OTBkMi0wNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KW5xxlpdBChiE9/fdHGqtIzDrbuBSmNhGvJMCy2siel/kc28SmOsFgoEnk4 +q+LHPNuBvqWyC0LqAMu+cKVx9NbH0N8xWqfs8XsTQmxX3lYCaN2OaMmDpfmCvrQ 9+bg12XOrDt876w5RF/9GftCTS8Y9/xPw5/815XjGtOSzvzBHMZLk0Fo07fGMfZ2 I4fYvXY1KK1iG00y7ZrSyJ9uQ7ehQ8YrSE9cYO1Udmm6dJTmq0P1tFq5zzVN5Lrv 6Xqvp2liNM56U6DcGwytuU7HMvmj4rgh62ESxKRwddgtCaNf5/5Fwk7Xxx80+LGq K/VE6o1jaIXJXKh4XH582SmUCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgitIwf xypZFrIJshbGu5jPWVmnMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly Mklia0M5cVNmMVhjYl9QbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5/N+rtuh6kxCiq1aJaMfk2OgKlFCDl+9Tp1RIKAVIIXtLYCyVCZ4r H6X2eATf6T1X12R+rWdH1oOIp34FGa4U69gPVivm+3QwxBeUBhDBtbMRymGfXFmc I1MsZ4T2sW3CiIwKm7bKFaHxD/0K9y9kS4E1rguIsVhKXVvmjqPKY1/Hkyk4vF3J Q5PIDaltIlHGw5RYxb8am9ntjm9rszh9V2RhaxhuwzeorXCZYh5iNmtnH+osVVC9 zgTSpKQdLR5fiIFuGQ5D8CRAMkJAauwiheQMQMCgq/drn9GbEjiyDCg6fynFZm9J 3WYpW421LzpUab0p+jEwP8DMNUV4v5gy -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:55 2025 by rpki-client