$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json) Hash identifier: cHeyDGdBfBvKGKwyHRhoz4rzwWZzXZxFbaN+aGz6GeQ= Subject key identifier: 63:45:84:7B:FC:9F:67:0F:8B:0D:9F:E4:81:9D:F2:22:9D:53:D4:C2 Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft Manifest number: 016A Signing time: Sat 09 Aug 2025 04:15:36 +0000 Manifest this update: Sat 09 Aug 2025 04:15:36 +0000 Manifest next update: Sat 16 Aug 2025 04:15:36 +0000 Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: Fobttf7AVNLCHce8DjqnZve8qgy0rtH3x8q+YklqOj0=) 2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: yfGsvyhYqLz0xE6IXfI7E9U3FSonAVaSuKA3zKUE4Zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Validity Not Before: Aug 9 04:15:36 2025 GMT Not After : Aug 16 04:15:36 2025 GMT Subject: CN=6896cb68-8f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:01:03:03:0e:2a:72:96:5f:d4:d7:09:44:8d: 8f:8f:3c:88:be:d4:a1:07:bf:fb:bd:ac:53:0d:77: 0f:9d:f6:25:ea:21:99:69:0d:4c:36:91:ba:55:66: bf:f4:39:10:de:0b:ad:ad:3f:d6:2b:1b:18:e6:7c: d3:90:83:f6:39:f6:4b:33:02:42:d3:fe:98:cb:8f: c9:f9:4c:29:cf:a0:74:35:6c:59:e4:03:a4:d3:32: 8c:3e:b0:3b:ed:98:c2:3d:1c:b2:d9:82:ff:65:ed: de:b8:f1:53:fc:70:83:8f:43:6b:66:d6:d2:74:c1: 2a:fb:78:4a:4d:f8:cb:07:3a:8e:f4:c0:82:f0:22: ca:36:69:17:a5:73:8e:52:63:35:07:8b:a6:85:f9: 10:bf:56:76:a9:61:9e:cb:cc:5a:a6:ab:d4:29:ee: 1e:e2:45:c8:2b:d7:e6:95:62:ef:dd:29:df:23:7a: 25:6d:50:00:7a:38:02:a0:74:0a:ca:55:c1:6d:ce: 87:b7:e6:66:18:7b:19:e4:77:4a:a3:2f:17:51:0a: 56:f4:77:3e:0e:ca:fd:18:a9:c2:1c:a6:06:e7:6e: a6:ba:82:83:ff:de:a8:35:7b:60:d1:b4:55:85:e0: 66:c8:9d:04:57:05:26:12:b4:82:4c:25:10:72:e1: 3e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:45:84:7B:FC:9F:67:0F:8B:0D:9F:E4:81:9D:F2:22:9D:53:D4:C2 X509v3 Authority Key Identifier: keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:11:80:e2:bd:7d:39:49:5e:14:80:8a:d5:d4:f3:d3:ef:2e: 0b:67:6f:19:74:b4:d8:02:26:c5:f6:48:7a:d8:02:8f:0d:05: 68:85:e6:48:2a:b0:86:1d:94:df:ef:2b:fd:ae:a1:5c:2c:ae: f3:ae:94:b8:fb:da:3f:fa:29:22:5c:ab:2e:85:1d:e2:75:2e: 01:67:05:e5:51:06:ba:59:31:22:73:94:bc:bb:06:18:b1:12: c1:d6:a3:a0:7e:30:18:c9:59:82:6d:de:7a:9e:51:78:a8:68: a7:3d:52:50:15:65:62:3c:f7:5f:3d:17:31:c9:d1:ba:90:dc: 9b:e6:35:9d:16:3e:9e:0a:f3:71:ee:d9:39:0f:a0:8c:c4:19: a1:31:11:5d:50:dd:1b:13:25:fc:02:d9:21:02:ef:27:21:ae: 93:53:30:9b:90:0b:8a:58:7a:58:7d:0a:54:e6:89:97:f6:d7: f0:a9:97:b1:13:a6:c9:be:09:09:0c:0a:d1:a1:8f:f9:2b:20: 3b:5d:b7:85:9e:2f:fd:5d:40:ff:80:e5:36:d6:4b:ea:a8:84: b0:24:4c:96:33:b8:f2:84:ee:c3:e8:2f:79:a9:2d:db:ef:da: 7b:23:e2:01:07:b0:18:d7:d4:9e:53:5c:d6:81:f5:75:fb:38: 94:61:d3:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC MDU5MTFCOUMwHhcNMjUwODA5MDQxNTM2WhcNMjUwODE2MDQxNTM2WjAYMRYwFAYD VQQDEw02ODk2Y2I2OC04ZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkwEDAw4qcpZf1NcJRI2PjzyIvtShB7/7vaxTDXcPnfYl6iGZaQ1MNpG6VWa/ 9DkQ3gutrT/WKxsY5nzTkIP2OfZLMwJC0/6Yy4/J+Uwpz6B0NWxZ5AOk0zKMPrA7 7ZjCPRyy2YL/Ze3euPFT/HCDj0NrZtbSdMEq+3hKTfjLBzqO9MCC8CLKNmkXpXOO UmM1B4umhfkQv1Z2qWGey8xapqvUKe4e4kXIK9fmlWLv3SnfI3olbVAAejgCoHQK ylXBbc6Ht+ZmGHsZ5HdKoy8XUQpW9Hc+Dsr9GKnCHKYG526muoKD/96oNXtg0bRV heBmyJ0EVwUmErSCTCUQcuE+pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNFhHv8 n2cPiw2f5IGd8iKdU9TCMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6 NnAzWmRRTzhuU2l3V1JHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKEYDivX05SV4UgIrV1PPT7y4LZ28ZdLTYAibF9kh62AKPDQVoheZI KrCGHZTf7yv9rqFcLK7zrpS4+9o/+ikiXKsuhR3idS4BZwXlUQa6WTEic5S8uwYY sRLB1qOgfjAYyVmCbd56nlF4qGinPVJQFWViPPdfPRcxydG6kNyb5jWdFj6eCvNx 7tk5D6CMxBmhMRFdUN0bEyX8AtkhAu8nIa6TUzCbkAuKWHpYfQpU5omX9tfwqZex E6bJvgkJDArRoY/5KyA7XbeFni/9XUD/gOU21kvqqISwJEyWM7jyhO7D6C95qS3b 79p7I+IBB7AY19SeU1zWgfV1+ziUYdPy -----END CERTIFICATE-----Generated at Mon Aug 11 04:32:06 2025 by rpki-client