$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: ELH1XGwbAOLOTtYRXdo/v1nGFwIDRjfrY5gUakbiBRY= Subject key identifier: 5F:FC:3C:F1:E8:30:BF:01:EF:9D:CC:C5:53:84:66:57:5C:24:6C:5F Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 01D7 Signing time: Fri 22 Aug 2025 23:42:39 +0000 Manifest this update: Fri 22 Aug 2025 23:42:38 +0000 Manifest next update: Fri 29 Aug 2025 23:42:38 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: 36D4GhA0UZE0aX2EXy+cqBFFofw9hLMB2pJr16n+mWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Aug 22 23:42:38 2025 GMT Not After : Aug 29 23:42:38 2025 GMT Subject: CN=68a9006f-ffec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:8e:92:f4:4d:c1:ea:4e:bd:e3:57:f9:a6: a2:95:cd:52:25:ae:b2:e1:a8:64:f4:47:78:06:10: 15:89:29:59:1c:b0:e0:9f:a0:45:aa:67:0f:30:f4: b4:b3:dc:e5:4b:09:ea:b9:76:16:d8:19:02:4d:53: 63:af:d9:f8:ef:90:58:70:6d:b6:50:cc:22:5c:43: 0c:62:f4:6c:25:d2:d0:b1:96:d4:07:b1:69:01:6c: c4:54:df:4d:8c:a7:d6:92:91:65:37:02:3b:77:56: 3f:09:79:70:9f:79:a2:37:4f:05:e3:dd:8f:d0:ad: 53:88:8e:7c:6c:5d:01:cf:71:51:9b:da:7e:c3:ac: 12:b8:b6:ce:4c:fa:b7:9b:95:8b:1a:a6:df:d1:ac: ec:8c:44:80:67:ec:fc:76:d6:4c:40:c4:f6:85:96: a7:57:05:50:28:80:9f:bf:b8:ea:42:b8:fb:74:82: 1c:7a:5e:e6:ca:9f:fd:7e:b6:d2:93:64:63:6d:e0: f7:41:4c:1f:dd:d0:f1:73:c5:be:ea:55:9c:14:d7: 0a:c7:9a:98:09:d3:3a:cc:5c:d8:78:dc:20:ea:46: 06:19:e2:51:bd:81:33:23:3e:05:de:f5:dd:a0:48: 20:fc:05:cb:ab:70:15:0d:ee:aa:f3:3f:70:65:a5: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FC:3C:F1:E8:30:BF:01:EF:9D:CC:C5:53:84:66:57:5C:24:6C:5F X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3d:c8:3f:e4:76:1f:04:75:eb:21:b7:b8:1d:2d:27:44:1a: 0c:30:7b:0d:a9:b8:3f:b9:f3:bf:37:5f:47:69:00:46:f5:45: fc:b7:c7:16:90:23:1f:8f:83:9b:0a:64:be:70:b1:fd:f0:db: bb:41:62:42:ef:5c:9f:8b:49:4b:45:e0:63:ff:f4:73:97:b6: f6:c2:e4:d3:b5:b1:6e:b1:f2:87:eb:87:88:9c:c1:ba:50:a2: 54:b3:83:e8:89:13:32:d4:0d:15:7c:d2:a7:47:05:ce:8a:91: 7c:31:e0:20:ca:08:c4:0c:91:f4:4e:3c:3f:ee:61:c0:b9:5b: ac:3a:49:28:d9:84:8d:30:78:29:5a:21:a0:73:ab:63:5e:39: 35:a4:3b:35:a0:3f:09:f9:d1:95:05:15:da:f5:a8:df:a3:c4: e9:b2:fa:3a:a0:9f:7d:be:26:ca:3f:b6:d2:76:9f:6e:15:36: 83:4d:2f:98:57:b8:4e:e6:e6:53:42:8c:59:fb:8b:ba:2b:cc: 1b:4b:c2:b0:72:fb:e1:9d:c4:92:63:08:e6:a3:b4:23:cf:29: 90:68:93:90:d2:52:3a:31:6a:df:d2:a5:98:fc:17:fa:99:99: 35:16:39:39:09:16:e5:3a:5d:9b:e0:d4:3a:ed:20:42:bc:16: 2e:e5:3f:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjUwODIyMjM0MjM4WhcNMjUwODI5MjM0MjM4WjAYMRYwFAYD VQQDEw02OGE5MDA2Zi1mZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvziOkvRNwepOveNX+aailc1SJa6y4ahk9Ed4BhAViSlZHLDgn6BFqmcPMPS0 s9zlSwnquXYW2BkCTVNjr9n475BYcG22UMwiXEMMYvRsJdLQsZbUB7FpAWzEVN9N jKfWkpFlNwI7d1Y/CXlwn3miN08F492P0K1TiI58bF0Bz3FRm9p+w6wSuLbOTPq3 m5WLGqbf0azsjESAZ+z8dtZMQMT2hZanVwVQKICfv7jqQrj7dIIcel7myp/9frbS k2RjbeD3QUwf3dDxc8W+6lWcFNcKx5qYCdM6zFzYeNwg6kYGGeJRvYEzIz4F3vXd oEgg/AXLq3AVDe6q8z9wZaX1XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/8PPHo ML8B753MxVOEZldcJGxfMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Pcg/5HYfBHXrIbe4HS0nRBoMMHsNqbg/ufO/N19HaQBG9UX8t8cW kCMfj4ObCmS+cLH98Nu7QWJC71yfi0lLReBj//Rzl7b2wuTTtbFusfKH64eInMG6 UKJUs4PoiRMy1A0VfNKnRwXOipF8MeAgygjEDJH0Tjw/7mHAuVusOkko2YSNMHgp WiGgc6tjXjk1pDs1oD8J+dGVBRXa9ajfo8Tpsvo6oJ99vibKP7bSdp9uFTaDTS+Y V7hO5uZTQoxZ+4u6K8wbS8KwcvvhncSSYwjmo7QjzymQaJOQ0lI6MWrf0qWY/Bf6 mZk1Fjk5CRblOl2b4NQ67SBCvBYu5T9B -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:13 2025 by rpki-client