$ rpki-client -vvf rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft (raw, json) Hash identifier: AhYXDL+kVEtrKVdL98Dza+F7j3CpPYXk39vh8ouXglQ= Subject key identifier: 53:3B:7F:8E:36:A2:4E:1D:B3:DA:27:CF:BD:FB:61:67:1D:89:6F:DE Authority key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 Certificate issuer: /CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Certificate serial: 03D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft Manifest number: 03CF Signing time: Mon 11 Aug 2025 00:47:15 +0000 Manifest this update: Mon 11 Aug 2025 00:47:15 +0000 Manifest next update: Mon 18 Aug 2025 00:47:15 +0000 Files and hashes: 1: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl (hash: 41S286Ui653hYX42B/t5I4v0BR5X/rSRneubwgOsIe0=) 2: 5ADF4C92956811EC9028F155C4F9AE02.roa (hash: 6C9pOBCK4sWDlaS78t/pprsEcl/8A0s9Wlk6KVMoAhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7 Validity Not Before: Aug 11 00:47:15 2025 GMT Not After : Aug 18 00:47:15 2025 GMT Subject: CN=68993d93-f758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:21:58:2a:79:1d:00:ff:1d:26:2c:cc:ec: 6f:d9:dd:4b:50:eb:2b:ca:fc:64:4d:f7:04:b4:18: 67:30:61:c6:e1:30:38:a2:df:e2:b5:9c:bc:28:24: e5:e1:f3:1e:e1:a7:08:9a:66:8d:c1:4c:6c:8d:ae: 80:1a:f3:e4:93:7d:22:86:28:e0:1d:e1:e5:8a:76: f1:40:2c:65:4b:1a:19:6b:4f:ca:9c:b0:43:8f:f2: 81:39:4c:da:f5:c3:30:b1:7a:20:1f:65:62:b6:b6: 74:a5:2e:46:a6:91:bd:0f:af:b7:2d:d4:9b:05:85: 68:19:cb:14:cc:9d:66:f6:f2:9f:40:2b:6d:1b:40: 73:96:d7:13:a3:05:3f:01:4d:14:32:75:37:f4:8e: 12:4c:cd:99:7a:42:9c:a1:b9:5c:47:6b:88:ce:6c: ae:12:12:79:13:1e:0e:1b:52:bd:d7:f2:43:09:13: 7b:d3:2f:7a:d1:f5:6e:ac:ce:3d:d1:ef:62:39:41: 63:49:5e:d6:a1:2b:ef:61:84:d8:02:99:47:0c:ee: 64:dd:5b:70:04:ee:59:0e:66:e0:d0:de:66:83:ee: d2:cd:a6:9a:3a:4f:dc:ea:7e:85:66:7d:24:19:d7: 78:42:63:e0:e8:5f:b7:55:49:4f:a7:f0:d0:9b:45: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3B:7F:8E:36:A2:4E:1D:B3:DA:27:CF:BD:FB:61:67:1D:89:6F:DE X509v3 Authority Key Identifier: keyid:C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:d9:aa:36:04:e1:09:6e:0b:58:43:de:1f:67:41:da:13:74: 4f:21:02:0c:3e:21:e5:f5:e5:7f:69:a1:c6:70:15:7a:5c:c9: d1:4e:d6:49:5a:7b:ab:03:d5:b2:0d:c5:24:d0:67:ad:ec:31: 52:ae:0f:e7:06:7a:bb:f1:60:dc:a6:86:7a:86:38:17:e5:16: 3a:70:79:4f:a7:49:ec:77:b0:83:bf:76:e3:fd:ba:6a:bb:b6: 9a:05:68:94:65:4b:75:78:73:a1:7a:49:50:a8:06:db:15:3d: 4c:53:9b:b5:49:ca:89:7d:b9:2d:93:6f:5a:e7:f8:51:ac:21: f1:7a:0a:7c:ec:42:1a:c6:5d:5c:dc:90:9f:cf:17:99:1f:10: e1:77:64:2a:7d:e0:c7:ed:f5:ce:cd:1b:85:51:56:f5:a0:6e: 5b:ac:ba:04:31:14:6e:3a:04:25:3f:2e:2a:06:55:dc:e6:b9: fd:eb:08:07:30:dd:c9:da:07:99:52:e1:74:e8:a6:8b:94:41: 67:39:9b:ca:8c:32:00:b6:03:a8:3b:d3:5d:02:74:f6:25:8a: ec:48:76:a0:bd:29:8e:58:62:d8:07:5a:57:b1:d2:7f:ec:09: f9:7c:82:26:8a:10:a1:76:10:df:58:26:4f:3b:69:6e:a2:90: a3:a6:61:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzRkUxMTAvBgNVBAUTKEM3MEJGM0RGRjQ1MDIzRDQxQUY0QzRERjVENzY1MDQw QjkyNDFBQzcwHhcNMjUwODExMDA0NzE1WhcNMjUwODE4MDA0NzE1WjAYMRYwFAYD VQQDEw02ODk5M2Q5My1mNzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6khWCp5HQD/HSYszOxv2d1LUOsryvxkTfcEtBhnMGHG4TA4ot/itZy8KCTl 4fMe4acImmaNwUxsja6AGvPkk30ihijgHeHlinbxQCxlSxoZa0/KnLBDj/KBOUza 9cMwsXogH2VitrZ0pS5GppG9D6+3LdSbBYVoGcsUzJ1m9vKfQCttG0BzltcTowU/ AU0UMnU39I4STM2ZekKcoblcR2uIzmyuEhJ5Ex4OG1K91/JDCRN70y960fVurM49 0e9iOUFjSV7WoSvvYYTYAplHDO5k3VtwBO5ZDmbg0N5mg+7SzaaaOk/c6n6FZn0k Gdd4QmPg6F+3VUlPp/DQm0UnKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFM7f442 ok4ds9onz737YWcdiW/eMB8GA1UdIwQYMBaAFMcL89/0UCPUGvTE3112UEC5JBrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDNGRS85ODE0ODA2Mjk1 NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5UWE5TVRmWFhaUVFMa2tH c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3dnozX1JRSTlRYTlNVGZYWFpRUUxra0dzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDNGRS85ODE0ODA2Mjk1NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5 UWE5TVRmWFhaUVFMa2tHc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDm2ao2BOEJbgtYQ94fZ0HaE3RPIQIMPiHl9eV/aaHGcBV6XMnRTtZJ WnurA9WyDcUk0Get7DFSrg/nBnq78WDcpoZ6hjgX5RY6cHlPp0nsd7CDv3bj/bpq u7aaBWiUZUt1eHOheklQqAbbFT1MU5u1ScqJfbktk29a5/hRrCHxegp87EIaxl1c 3JCfzxeZHxDhd2QqfeDH7fXOzRuFUVb1oG5brLoEMRRuOgQlPy4qBlXc5rn96wgH MN3J2geZUuF06KaLlEFnOZvKjDIAtgOoO9NdAnT2JYrsSHagvSmOWGLYB1pXsdJ/ 7An5fIImihChdhDfWCZPO2luopCjpmEy -----END CERTIFICATE-----Generated at Mon Aug 11 01:52:37 2025 by rpki-client