$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: uDs3LaGbg3FlxK34AuAn9Uxs6A7L7h8e7H+nHvFO4L8= Subject key identifier: 12:41:0F:03:98:06:55:8E:4F:A1:25:6E:C0:CF:4F:9F:75:8E:C4:82 Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 0419 Signing time: Sat 23 Aug 2025 00:36:58 +0000 Manifest this update: Sat 23 Aug 2025 00:36:57 +0000 Manifest next update: Sat 30 Aug 2025 00:36:57 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: uRo0wGtjGD/Il2eskfAqAyBecfxofB6OJdpApbw9VHg=) 2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Aug 23 00:36:57 2025 GMT Not After : Aug 30 00:36:57 2025 GMT Subject: CN=68a90d2a-8e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:24:fb:83:a3:a9:f7:3e:08:8a:ad:9d:1e: a5:fa:44:d4:45:a9:1e:49:de:95:f0:3c:c4:4e:f1: 86:6f:d3:cc:13:21:4a:db:f5:57:74:92:a2:db:30: 7b:c6:9e:f2:30:69:9c:c8:fa:1c:19:8a:cc:3d:7c: e5:55:66:5d:cc:c4:39:ae:be:8a:d2:b3:b1:53:27: 7a:c2:7e:ca:12:e2:ae:a1:ab:31:6d:ce:06:4e:8c: 1d:c4:92:9b:30:5d:63:51:38:f2:24:fc:ce:c1:81: 37:93:02:23:f4:85:44:71:54:5c:c9:7c:be:26:d9: 2c:fb:29:f2:8e:57:b1:76:09:0e:0b:fa:66:23:45: fa:59:33:90:b8:89:ca:37:f3:d0:9b:b9:f5:3a:51: 64:c7:af:99:13:81:e4:6c:04:21:ef:01:57:b7:e8: 5b:d6:e0:b8:c4:06:aa:e5:34:f0:87:92:c5:18:eb: 1d:9e:d1:28:87:3c:c8:15:4a:d0:de:a1:a2:3c:ad: 49:4e:ea:be:cc:97:ac:46:ff:b0:c3:e2:ff:a2:96: d0:fe:13:ec:2a:ec:ed:c9:cd:d2:07:db:4a:a0:de: 77:ef:59:82:2a:bd:ba:91:e6:4a:e1:4f:31:1f:6d: c5:c7:b8:04:52:2c:86:14:b5:e2:45:63:c1:27:c1: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:41:0F:03:98:06:55:8E:4F:A1:25:6E:C0:CF:4F:9F:75:8E:C4:82 X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2c:43:e7:4e:f5:56:4c:ed:21:af:0d:78:0f:ff:14:e9:7a: 1f:b8:f1:58:25:63:d3:53:e2:eb:59:ea:f6:43:56:22:54:d5: c4:bc:4a:0c:24:57:ad:e1:69:0a:6d:8a:c2:90:2f:a1:49:f1: 26:20:d4:e7:fa:79:cf:c9:bc:15:4a:f5:d6:9b:ef:fa:6e:d7: 2b:63:e8:e9:62:11:93:24:cb:13:08:e5:40:37:8c:cc:4b:a4: da:2c:27:54:8b:4c:cc:ff:fe:b2:be:5e:48:c1:ec:24:b4:72: 4a:f0:2a:5f:e3:17:5b:1b:ba:87:a9:21:b2:b3:47:ff:7b:eb: d7:d7:67:db:e0:bd:38:31:47:43:28:87:76:4c:10:df:46:ec: 90:cc:f0:0e:7d:ec:03:e8:65:68:65:da:c6:2f:6c:d8:71:4c: 41:2d:8e:81:d5:fe:f6:f0:ea:d6:d0:4d:38:dd:49:25:02:73: c4:38:6f:2b:c8:7d:90:79:1e:9b:68:31:26:b1:c0:53:bd:35: 2d:f9:93:a5:50:42:bf:cc:ad:de:16:62:50:05:16:1a:b0:be: 4f:09:3b:0b:0c:ec:01:13:ef:34:f4:45:59:35:f2:96:a7:b9: 38:f3:eb:30:bb:3f:50:b1:ad:f1:8d:78:5e:02:f9:cf:2c:08: 20:d6:75:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjUwODIzMDAzNjU3WhcNMjUwODMwMDAzNjU3WjAYMRYwFAYD VQQDEw02OGE5MGQyYS04ZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIok+4Ojqfc+CIqtnR6l+kTURakeSd6V8DzETvGGb9PMEyFK2/VXdJKi2zB7 xp7yMGmcyPocGYrMPXzlVWZdzMQ5rr6K0rOxUyd6wn7KEuKuoasxbc4GTowdxJKb MF1jUTjyJPzOwYE3kwIj9IVEcVRcyXy+Jtks+ynyjlexdgkOC/pmI0X6WTOQuInK N/PQm7n1OlFkx6+ZE4HkbAQh7wFXt+hb1uC4xAaq5TTwh5LFGOsdntEohzzIFUrQ 3qGiPK1JTuq+zJesRv+ww+L/opbQ/hPsKuztyc3SB9tKoN5371mCKr26keZK4U8x H23Fx7gEUiyGFLXiRWPBJ8G+hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJBDwOY BlWOT6ElbsDPT591jsSCMB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdLEPnTvVWTO0hrw14D/8U6XofuPFYJWPTU+LrWer2Q1YiVNXEvEoM JFet4WkKbYrCkC+hSfEmINTn+nnPybwVSvXWm+/6btcrY+jpYhGTJMsTCOVAN4zM S6TaLCdUi0zM//6yvl5IwewktHJK8Cpf4xdbG7qHqSGys0f/e+vX12fb4L04MUdD KId2TBDfRuyQzPAOfewD6GVoZdrGL2zYcUxBLY6B1f728OrW0E043UklAnPEOG8r yH2QeR6baDEmscBTvTUt+ZOlUEK/zK3eFmJQBRYasL5PCTsLDOwBE+809EVZNfKW p7k48+swuz9Qsa3xjXheAvnPLAgg1nWn -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:06 2025 by rpki-client