$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: WGOI7At2WokH7EwKoOYzFYPY7ev8dAlykvnLhhTeabM= Subject key identifier: E0:29:9F:17:DA:8E:63:AB:61:98:0E:C5:F5:FE:68:7C:78:29:DB:BE Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2312 Signing time: Fri 08 Aug 2025 15:55:41 +0000 Manifest this update: Fri 08 Aug 2025 15:55:40 +0000 Manifest next update: Fri 15 Aug 2025 15:55:40 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: 0RnEiRJrPL6HR0+PUaksQsAloQGJGjnz1nmPeGhoBpQ=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ceQW0pBKYX0iNvGIXu+d5odgS50V86e35zycTc8Ud5M=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9028 (0x2344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Aug 8 15:55:40 2025 GMT Not After : Aug 15 15:55:40 2025 GMT Subject: CN=68961dfd-8c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:0a:c6:a4:ab:1a:22:f7:35:97:3f:a7:ee: 9d:69:48:92:2b:c1:90:4c:e7:38:1d:68:21:25:75: 90:96:60:db:cb:7a:4c:ea:ba:9d:8f:a4:c6:df:0e: a5:45:17:6d:10:5c:35:6a:3a:32:d5:0b:83:9d:31: 7a:56:01:3d:32:69:34:0c:5b:00:9f:96:6f:16:67: 8d:b7:4a:19:42:fa:67:9e:cc:ac:73:7f:d4:8e:3c: 22:46:2b:b7:a5:4e:a1:58:87:5d:fc:7b:b8:4e:d7: 9d:17:3d:5d:72:68:e1:a1:e3:4b:79:9f:ff:d2:e1: 1b:a3:7f:7b:75:bd:6c:2c:f0:5b:3d:73:02:c1:f4: fb:77:f8:b7:28:ab:ad:80:6f:f0:09:a2:d0:d0:f8: a8:3f:80:72:c0:0e:13:20:8f:90:d9:22:b6:6b:3a: 84:ed:d2:cf:05:de:e5:d3:4f:4d:c1:25:ae:5c:6b: 00:27:cb:4d:5f:66:74:01:95:65:92:26:46:b6:9d: 30:51:f2:8c:ea:ea:a3:b5:7e:ab:82:28:3c:7a:23: 72:61:9a:39:9c:c8:da:9c:cb:b1:7e:f2:43:e8:0f: 32:e0:21:c6:60:42:1a:bb:4a:67:24:9b:80:3b:d0: a9:ec:00:69:b5:b6:df:19:ea:84:41:d8:d4:81:e2: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:29:9F:17:DA:8E:63:AB:61:98:0E:C5:F5:FE:68:7C:78:29:DB:BE X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:dc:0c:5f:ef:81:9a:76:e3:48:8d:c0:5a:3d:78:64:11:ed: c8:ba:c7:34:72:f5:e4:e1:90:05:df:9f:68:36:ae:d2:54:66: 5c:a1:7d:60:29:cc:e4:15:d1:a2:1e:fe:a1:e5:e8:9f:3d:82: 35:6b:0b:5a:64:24:e9:35:8d:99:3e:4b:6b:03:04:c1:80:5d: 08:fe:3a:c6:30:97:1a:00:af:24:81:d0:68:92:ae:b7:82:01: 58:ae:52:12:ab:b3:69:2a:a0:24:ec:37:92:e9:a0:74:13:f2: 5c:47:4a:20:f5:2c:a5:0b:56:59:d1:73:99:a6:c0:ae:bf:9d: af:29:3e:96:94:4b:d4:48:b4:55:d7:fe:83:ca:77:0a:02:28: ed:c0:f8:7a:f8:83:52:35:c8:5d:ed:03:ac:f0:b4:14:80:5e: 55:04:72:60:4e:ea:e5:dd:1c:ce:00:43:c2:1e:9f:7d:26:74: 96:e7:a8:5e:95:32:23:94:22:31:7a:c3:ae:08:25:35:2e:3c: 34:fc:a5:84:f1:ae:18:b4:ed:30:1c:5a:83:e9:ef:88:dc:db: 11:49:7b:63:75:8b:7f:9e:65:0f:b0:8b:7b:a9:77:1a:c0:c6: f0:ed:5f:69:51:f5:5f:6d:d7:21:3c:57:c7:83:33:43:4f:8e: b1:54:87:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjUwODA4MTU1NTQwWhcNMjUwODE1MTU1NTQwWjAYMRYwFAYD VQQDEw02ODk2MWRmZC04YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj8KxqSrGiL3NZc/p+6daUiSK8GQTOc4HWghJXWQlmDby3pM6rqdj6TG3w6l RRdtEFw1ajoy1QuDnTF6VgE9Mmk0DFsAn5ZvFmeNt0oZQvpnnsysc3/UjjwiRiu3 pU6hWIdd/Hu4TtedFz1dcmjhoeNLeZ//0uEbo397db1sLPBbPXMCwfT7d/i3KKut gG/wCaLQ0PioP4BywA4TII+Q2SK2azqE7dLPBd7l009NwSWuXGsAJ8tNX2Z0AZVl kiZGtp0wUfKM6uqjtX6rgig8eiNyYZo5nMjanMuxfvJD6A8y4CHGYEIau0pnJJuA O9Cp7ABptbbfGeqEQdjUgeJtYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOApnxfa jmOrYZgOxfX+aHx4Kdu+MB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB33Axf74GaduNIjcBaPXhkEe3Iusc0cvXk4ZAF359oNq7SVGZcoX1g KczkFdGiHv6h5eifPYI1awtaZCTpNY2ZPktrAwTBgF0I/jrGMJcaAK8kgdBokq63 ggFYrlISq7NpKqAk7DeS6aB0E/JcR0og9SylC1ZZ0XOZpsCuv52vKT6WlEvUSLRV 1/6DyncKAijtwPh6+INSNchd7QOs8LQUgF5VBHJgTurl3RzOAEPCHp99JnSW56he lTIjlCIxesOuCCU1Ljw0/KWE8a4YtO0wHFqD6e+I3NsRSXtjdYt/nmUPsIt7qXca wMbw7V9pUfVfbdchPFfHgzNDT46xVIei -----END CERTIFICATE-----Generated at Sat Aug 9 10:49:12 2025 by rpki-client