$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: SBv6VjpwQcu89vnoWKd5NV8Qx4q94egQIi9pmHeg5NM= Subject key identifier: 92:EE:53:6F:9C:5D:37:F3:BF:12:51:13:E7:69:64:1F:B2:02:E0:70 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 06E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 06DA Signing time: Tue 12 Aug 2025 22:24:37 +0000 Manifest this update: Tue 12 Aug 2025 22:24:36 +0000 Manifest next update: Tue 19 Aug 2025 22:24:36 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: eAVPzy51v4Rh3BQ7A06cQqJSWaQBfo4g9P39kH0HsvI=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1769 (0x6e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Aug 12 22:24:36 2025 GMT Not After : Aug 19 22:24:36 2025 GMT Subject: CN=689bbf24-23e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:9a:0e:33:d6:2c:d5:e4:a4:c7:0f:a3:d7: c4:07:b5:31:b9:d4:d9:1b:08:51:69:d3:5a:83:15: 75:d3:81:0d:59:75:43:d1:11:c3:2d:ef:aa:9c:bc: dd:d5:b3:52:07:fe:c8:dd:5b:95:86:c5:90:b0:bc: df:46:d6:78:ba:ff:cd:6c:70:20:76:c2:c5:95:87: 29:78:cc:51:f2:05:97:7a:59:f0:ed:8b:df:6b:be: 5d:ec:61:fd:45:dd:dc:cc:28:4b:cc:d1:98:29:ad: 44:fc:e3:c4:e5:9a:9d:61:84:08:f4:dd:19:4a:38: ba:00:3f:a3:24:da:6a:0b:69:e3:b4:35:0e:a9:c1: 8e:70:cd:64:41:34:c3:80:ab:bd:c3:ae:d2:e6:b3: ed:ab:7e:43:62:d5:67:10:e9:9e:fa:a7:59:de:49: 64:45:4d:61:43:fb:c4:c6:45:b0:39:5c:6a:2b:64: e9:aa:62:f1:f5:cc:54:fb:dd:b1:fe:78:0f:8c:bc: 97:e9:4c:fc:7d:86:3b:0a:b4:fb:ae:13:ff:0f:08: b6:fc:d3:a4:af:ac:32:31:4e:ac:89:0c:c7:30:4b: 69:7e:68:a3:43:8a:9b:cf:f4:7c:c5:4f:28:78:0d: 25:1c:93:bc:ab:01:42:44:3d:18:96:90:92:a0:4a: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EE:53:6F:9C:5D:37:F3:BF:12:51:13:E7:69:64:1F:B2:02:E0:70 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:bb:65:8f:ed:d7:fc:99:a9:14:a1:d5:43:b7:74:4d:13:32: be:8f:b8:41:7f:a5:64:e5:9f:26:b5:20:f9:29:33:40:47:f6: 14:24:ba:11:ca:09:6c:e5:c8:2f:27:99:33:2a:fb:33:ca:c4: f1:fe:7f:91:0f:0c:c8:6b:f5:ad:0a:9d:af:98:44:5f:3d:ac: 17:b8:d2:15:8a:f9:2c:c2:f8:a9:3a:ad:f3:39:ac:09:14:89: 2c:80:19:da:f7:ba:28:c5:7d:14:3c:a7:1b:7a:2b:5f:e1:89: f8:42:26:78:0b:de:76:37:a6:ae:8a:99:a7:1a:0d:7e:8d:95: e5:fc:65:cf:06:33:7c:7b:f1:02:f6:b2:48:5b:06:6a:ab:ae: ec:d4:01:2a:41:c0:71:89:3b:3a:1d:b9:70:7d:cd:6b:40:37: e7:56:c9:2c:35:9a:03:96:f7:5d:35:da:55:04:07:e4:3b:78: 1e:70:69:c8:82:d4:c1:56:7d:2a:ff:1c:f6:27:c5:a4:56:31: c3:3c:ef:04:64:79:88:fa:88:d8:63:92:0d:4b:44:be:59:3f: 94:dd:7e:88:62:cb:be:fa:ad:fb:3b:87:ab:95:6a:24:75:0b: b4:c1:36:34:3e:e5:86:5a:28:1f:03:36:0f:dd:d9:62:79:35: 27:5c:68:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjUwODEyMjIyNDM2WhcNMjUwODE5MjIyNDM2WjAYMRYwFAYD VQQDEw02ODliYmYyNC0yM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArByaDjPWLNXkpMcPo9fEB7UxudTZGwhRadNagxV104ENWXVD0RHDLe+qnLzd 1bNSB/7I3VuVhsWQsLzfRtZ4uv/NbHAgdsLFlYcpeMxR8gWXelnw7Yvfa75d7GH9 Rd3czChLzNGYKa1E/OPE5ZqdYYQI9N0ZSji6AD+jJNpqC2njtDUOqcGOcM1kQTTD gKu9w67S5rPtq35DYtVnEOme+qdZ3klkRU1hQ/vExkWwOVxqK2TpqmLx9cxU+92x /ngPjLyX6Uz8fYY7CrT7rhP/Dwi2/NOkr6wyMU6siQzHMEtpfmijQ4qbz/R8xU8o eA0lHJO8qwFCRD0YlpCSoErFYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLuU2+c XTfzvxJRE+dpZB+yAuBwMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAu2WP7df8makUodVDt3RNEzK+j7hBf6Vk5Z8mtSD5KTNAR/YUJLoR ygls5cgvJ5kzKvszysTx/n+RDwzIa/WtCp2vmERfPawXuNIVivkswvipOq3zOawJ FIksgBna97ooxX0UPKcbeitf4Yn4QiZ4C952N6auipmnGg1+jZXl/GXPBjN8e/EC 9rJIWwZqq67s1AEqQcBxiTs6Hblwfc1rQDfnVsksNZoDlvddNdpVBAfkO3gecGnI gtTBVn0q/xz2J8WkVjHDPO8EZHmI+ojYY5INS0S+WT+U3X6IYsu++q37O4erlWok dQu0wTY0PuWGWigfAzYP3dlieTUnXGi5 -----END CERTIFICATE-----Generated at Wed Aug 13 07:40:50 2025 by rpki-client