$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: 1cnBHk6Kfu6F6YtIW3CPz+F6VOSsV4WvAZtuf2n8Cyo= Subject key identifier: 15:9F:DA:67:84:9C:B1:05:B9:7B:1D:FF:98:91:DD:74:0B:2B:15:04 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 28 Signing time: Sat 09 Aug 2025 08:17:52 +0000 Manifest this update: Sat 09 Aug 2025 08:17:52 +0000 Manifest next update: Sat 16 Aug 2025 08:17:52 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: GX6J7hjjOwR0u1KQRqpca1soLorCnBO++EndAiFeppU=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GaxzV7+DkMGpd57xnNkPMderTpqjXPXFd/uGzJlcq9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Aug 9 08:17:52 2025 GMT Not After : Aug 16 08:17:52 2025 GMT Subject: CN=68970430-8336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7d:64:00:cd:66:6e:87:f4:03:46:e1:58:b1: 8a:a2:da:43:9a:f7:71:0b:d2:63:ff:40:f5:63:45: c3:83:d1:1c:0a:8b:64:ac:a7:22:b5:6f:b4:87:3d: 3d:36:e2:46:10:84:1d:87:a1:9f:5e:10:9e:88:fd: c2:74:7a:aa:da:a7:2c:66:a8:e7:72:b1:b2:ad:4e: c3:f3:ac:b8:62:9d:6b:29:e4:2b:c4:eb:ff:82:74: de:f2:c4:ed:79:16:4a:11:87:77:3a:2e:a6:4b:5f: ed:b1:6f:e5:57:a8:54:51:25:be:23:7d:5d:83:fa: e9:34:02:e5:c2:46:70:5f:89:5b:82:2e:8b:a7:d8: 04:eb:ed:b8:26:00:6b:55:0b:36:ca:14:3e:fa:1d: ce:f9:85:7c:4a:26:f0:58:4e:65:eb:95:cc:8d:f4: 92:a8:3e:95:07:2b:ea:ff:c7:24:dc:f0:87:ea:63: ba:f2:21:a5:90:a8:9e:aa:a7:0c:4f:ac:6e:9e:57: 6a:d6:ea:3c:93:ca:ea:3f:10:fb:f2:97:25:95:e8: 0d:fe:15:ef:65:b7:3b:45:b8:d0:29:a2:2c:b6:76: eb:da:44:50:6c:0a:16:ea:a3:c6:52:3a:c4:49:de: 4a:d5:07:d4:a8:66:f9:79:52:0a:5d:3e:b0:86:44: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9F:DA:67:84:9C:B1:05:B9:7B:1D:FF:98:91:DD:74:0B:2B:15:04 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6b:13:0d:ed:9b:a6:f4:ce:a8:51:fe:8f:09:ca:9d:fa:11: ae:8a:da:09:01:9b:8d:e6:ef:13:02:ef:24:be:be:96:78:b0: 9e:58:f2:1e:17:36:32:ad:bf:84:d0:20:a2:18:b2:ad:65:4b: d9:39:5a:d7:49:79:89:3a:de:0e:80:cf:54:e6:e6:24:63:69: 39:91:c4:e2:8e:69:f1:d4:33:4e:2a:f4:d2:d3:a2:15:20:4e: 2e:93:37:0f:75:03:19:a7:a1:3b:97:b7:4a:94:bf:6e:51:a8: a4:ae:7a:bd:ac:50:e2:45:4b:50:d8:46:7b:1f:f6:90:95:e6: 53:ef:52:d1:dd:eb:64:c9:e8:e0:be:6e:13:5a:72:77:ef:fc: de:bb:c4:e6:1f:23:1a:74:33:07:36:03:4b:b6:4d:03:f5:48: 17:7e:91:58:73:3d:0c:b1:28:d6:36:f4:d7:76:80:7b:e9:7a: 05:a8:9e:29:a0:73:63:54:40:18:26:92:a9:a1:0a:a0:96:b8: 92:37:a9:83:c8:ae:8f:bb:c7:d0:a2:75:74:1d:4d:0d:99:56: 73:75:7f:c3:16:69:ca:dd:80:6b:01:11:05:9e:93:e2:e5:6e: 49:96:25:d6:ae:fc:9b:b1:bd:6a:c6:00:a9:0f:68:98:7e:7b: 57:53:c9:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTA4MDkwODE3NTJaFw0yNTA4MTYwODE3NTJaMBgxFjAUBgNV BAMTDTY4OTcwNDMwLTgzMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhfWQAzWZuh/QDRuFYsYqi2kOa93EL0mP/QPVjRcOD0RwKi2SspyK1b7SHPT02 4kYQhB2HoZ9eEJ6I/cJ0eqrapyxmqOdysbKtTsPzrLhinWsp5CvE6/+CdN7yxO15 FkoRh3c6LqZLX+2xb+VXqFRRJb4jfV2D+uk0AuXCRnBfiVuCLoun2ATr7bgmAGtV CzbKFD76Hc75hXxKJvBYTmXrlcyN9JKoPpUHK+r/xyTc8IfqY7ryIaWQqJ6qpwxP rG6eV2rW6jyTyuo/EPvylyWV6A3+Fe9ltztFuNApoiy2duvaRFBsChbqo8ZSOsRJ 3krVB9SoZvl5UgpdPrCGRKRRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFZ/aZ4Sc sQW5ex3/mJHddAsrFQQwHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAhrEw3tm6b0zqhR/o8Jyp36Ea6K2gkBm43m7xMC7yS+vpZ4sJ5Y8h4X NjKtv4TQIKIYsq1lS9k5WtdJeYk63g6Az1Tm5iRjaTmRxOKOafHUM04q9NLTohUg Ti6TNw91AxmnoTuXt0qUv25RqKSuer2sUOJFS1DYRnsf9pCV5lPvUtHd62TJ6OC+ bhNacnfv/N67xOYfIxp0Mwc2A0u2TQP1SBd+kVhzPQyxKNY29Nd2gHvpegWonimg c2NUQBgmkqmhCqCWuJI3qYPIro+7x9CidXQdTQ2ZVnN1f8MWacrdgGsBEQWek+Ll bkmWJdau/JuxvWrGAKkPaJh+e1dTyQw= -----END CERTIFICATE-----Generated at Sat Aug 9 10:45:25 2025 by rpki-client