$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft File: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json) Hash identifier: 8t6M5BFkhhjiqv55Yv3vo1piG6vOq+1YL5KvxgSj+ic= Subject key identifier: BE:2C:E2:F8:7F:02:0A:5C:23:7C:1A:5C:9C:65:6C:DB:C3:E7:7C:28 Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C Certificate issuer: /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Certificate serial: 06AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft Manifest number: 06A7 Signing time: Fri 08 Aug 2025 22:34:24 +0000 Manifest this update: Fri 08 Aug 2025 22:34:23 +0000 Manifest next update: Fri 15 Aug 2025 22:34:23 +0000 Files and hashes: 1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: ZNhoNsZ/Z4JDbdfJM3c0lH53jznEjmJIWXfUQlKa/jU=) 2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: 53zKcN6L7abJ9zpJ1rsGk1CMb4hTUDymJuK8BDIQ0eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1710 (0x6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91569FB, serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Validity Not Before: Aug 8 22:34:23 2025 GMT Not After : Aug 15 22:34:23 2025 GMT Subject: CN=68967b6f-b8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:70:1a:51:eb:a2:a2:89:03:56:a2:38:4e:ed: c9:e0:9e:62:b2:d8:c2:9a:65:51:31:ba:73:6d:ff: 2e:56:6c:9c:ba:fb:72:16:48:1f:e0:d4:b7:5c:be: aa:7e:91:77:68:46:b9:44:33:f1:92:60:f0:63:8e: c5:00:c5:75:29:cf:99:06:4e:2a:e6:0f:18:6b:79: f6:74:3c:f1:ec:a3:e2:4a:9c:a8:df:9b:01:bd:24: 18:23:38:09:8f:19:a7:53:99:74:a6:6f:8d:83:21: d2:84:d3:8a:cf:58:0f:5f:a0:a3:60:5d:b1:81:18: a4:c3:eb:09:96:65:c5:96:7f:3b:d4:35:1c:66:44: 27:a1:c2:f1:f7:56:ca:39:d1:3e:11:6d:2c:91:03: 1c:e4:69:c7:50:bb:e7:cd:05:cd:9f:8e:f5:33:6f: 85:3f:ec:0b:0f:34:d3:35:73:90:52:3b:51:dc:ec: f3:e2:39:65:16:1d:7d:54:a6:16:7c:ee:5d:4f:6b: 95:38:67:4a:0c:11:ef:e9:45:8f:ae:1c:5a:93:59: 44:1b:1b:f8:26:a8:3f:41:b8:43:df:7c:3d:0f:67: ed:5d:0d:8b:5b:eb:2e:d5:09:1d:76:64:b6:cb:0b: bb:98:35:22:1d:f6:a9:f6:37:c9:e1:67:46:78:dd: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2C:E2:F8:7F:02:0A:5C:23:7C:1A:5C:9C:65:6C:DB:C3:E7:7C:28 X509v3 Authority Key Identifier: keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:31:56:c5:ed:52:1a:56:de:a8:44:65:3f:3b:f3:23:f4:e8: 46:92:0a:32:d4:ce:6e:75:bb:81:9e:a3:f3:8f:f2:dc:c8:ee: be:81:8c:1c:1a:3f:2b:42:44:9e:a5:72:41:c2:77:97:ef:a7: ac:cd:dd:da:79:f6:bd:36:e6:75:db:90:60:0b:ea:12:13:c9: 3d:91:c0:1d:d0:57:fb:ed:1a:e1:7f:16:de:c8:6a:da:a3:e8: a5:f7:40:37:c3:1b:d1:62:3d:8f:e4:ca:74:9b:d8:86:b9:85: eb:84:08:c3:af:57:34:c1:23:f7:6b:ea:36:76:ef:dd:a7:39: ad:72:b3:4d:d4:e8:88:81:5f:5b:0f:f9:2c:07:76:e4:56:22: 05:7f:bd:ea:50:fd:ff:78:bf:a1:0e:00:dc:b0:30:51:20:eb: 6b:e8:e1:1d:51:1f:48:5d:1a:10:38:2c:2e:f5:71:0f:ce:a7: 0f:43:bd:90:9d:c8:5b:31:ad:8e:10:8d:56:b4:15:3e:fc:ec: 2d:00:cd:2a:4f:0d:53:ea:82:4f:80:97:3c:92:8c:b7:a0:fa: 6d:a2:cb:bb:85:04:5d:54:8a:88:f7:fd:02:fb:bf:fc:ff:f7: 37:99:cd:84:9c:a0:cd:c2:87:e0:01:94:ff:97:80:08:fc:d1: 46:27:97:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5RkIxMTAvBgNVBAUTKDVERUUxNkVGODVBMkJGODREQUQ4ODc2NjY3NTlCMUVD MTVEMUI5NEMwHhcNMjUwODA4MjIzNDIzWhcNMjUwODE1MjIzNDIzWjAYMRYwFAYD VQQDEw02ODk2N2I2Zi1iOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9HAaUeuiookDVqI4Tu3J4J5istjCmmVRMbpzbf8uVmycuvtyFkgf4NS3XL6q fpF3aEa5RDPxkmDwY47FAMV1Kc+ZBk4q5g8Ya3n2dDzx7KPiSpyo35sBvSQYIzgJ jxmnU5l0pm+NgyHShNOKz1gPX6CjYF2xgRikw+sJlmXFln871DUcZkQnocLx91bK OdE+EW0skQMc5GnHULvnzQXNn471M2+FP+wLDzTTNXOQUjtR3Ozz4jllFh19VKYW fO5dT2uVOGdKDBHv6UWPrhxak1lEGxv4Jqg/QbhD33w9D2ftXQ2LW+su1QkddmS2 ywu7mDUiHfap9jfJ4WdGeN22DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4s4vh/ AgpcI3waXJxlbNvD53woMB8GA1UdIwQYMBaAFF3uFu+For+E2tiHZmdZsewV0blM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjlGQi84REUxRENEQTc2 MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0VGEySWRtWjFteDdCWFJ1 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlNFc3NFdpdjRUYTJJZG1aMW14N0JYUnVVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjlGQi84REUxRENEQTc2MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0 VGEySWRtWjFteDdCWFJ1VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQMVbF7VIaVt6oRGU/O/Mj9OhGkgoy1M5udbuBnqPzj/LcyO6+gYwc Gj8rQkSepXJBwneX76eszd3aefa9NuZ125BgC+oSE8k9kcAd0Ff77RrhfxbeyGra o+il90A3wxvRYj2P5Mp0m9iGuYXrhAjDr1c0wSP3a+o2du/dpzmtcrNN1OiIgV9b D/ksB3bkViIFf73qUP3/eL+hDgDcsDBRIOtr6OEdUR9IXRoQOCwu9XEPzqcPQ72Q nchbMa2OEI1WtBU+/OwtAM0qTw1T6oJPgJc8koy3oPptosu7hQRdVIqI9/0C+7/8 //c3mc2EnKDNwofgAZT/l4AI/NFGJ5fC -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:25 2025 by rpki-client