$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: xruD/zJpXmi771UKdiodedC37TLX2Q420OO8ka0VJd8= Subject key identifier: 51:D0:58:5E:42:FF:F2:F6:C5:99:96:78:44:28:0A:1D:1F:DD:52:32 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 06C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 06B9 Signing time: Fri 08 Aug 2025 22:32:15 +0000 Manifest this update: Fri 08 Aug 2025 22:32:14 +0000 Manifest next update: Fri 15 Aug 2025 22:32:14 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: 5vV91J1BTUfRYjARUnf3BQF/zw7KvTCgOmPZqXJCUzM=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Aug 8 22:32:14 2025 GMT Not After : Aug 15 22:32:14 2025 GMT Subject: CN=68967aee-a226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3d:67:40:be:33:66:63:28:ae:c8:d3:4d:f7: 81:e7:ff:a3:c8:1b:1f:86:26:64:ba:7b:a1:86:e4: 09:fc:a9:7f:0c:61:bd:dc:09:17:04:f4:44:48:e5: d0:68:e2:3d:99:23:c5:ef:3f:98:4d:ad:a8:d7:b1: c6:5e:f5:19:76:1f:45:41:41:c5:6c:5b:50:00:91: 1d:3f:04:f3:65:b7:51:dc:73:4a:5b:f5:79:b2:31: 32:8c:13:4b:40:18:ad:b2:73:a4:90:f7:2e:c3:77: e7:c1:87:36:cc:ab:5a:a1:82:82:8b:98:80:49:5a: 9b:00:0d:c9:60:95:8f:26:26:31:8f:a2:22:ff:83: 12:f0:96:f1:c2:91:66:49:5c:2e:a2:e4:f2:e6:1b: c7:83:0a:75:f1:6c:76:ba:a3:63:b6:e8:9b:36:50: 61:35:da:45:55:64:1c:a8:4a:aa:90:77:87:67:07: de:7f:e9:e0:12:a2:d4:23:db:ba:cb:09:b1:d8:80: 08:59:bc:52:c2:89:11:34:38:97:27:36:3e:a1:7b: d0:ed:5b:c7:b2:98:2d:fd:36:d4:81:bb:48:24:0b: 74:2c:6d:58:d7:16:3f:54:55:49:27:ab:ad:46:61: 23:0b:22:78:31:61:24:d4:36:e1:dc:1d:45:69:9e: 06:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D0:58:5E:42:FF:F2:F6:C5:99:96:78:44:28:0A:1D:1F:DD:52:32 X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ac:e9:3f:af:b5:76:a2:3b:ec:bb:f4:e5:4d:8d:87:7b:59: 86:6e:f1:8d:cd:d6:17:20:c0:8d:95:7e:c8:bd:86:c5:cd:dc: 9f:9a:4a:33:61:d9:7d:d3:bc:79:e9:6c:da:0c:e5:15:c9:a6: 70:bf:96:06:14:cc:47:21:9d:8f:ef:29:57:3c:f8:7e:8e:ea: 0b:81:99:1b:d8:a1:26:56:44:38:1d:9e:e5:da:ca:e9:5f:2d: 26:bd:d6:ec:97:22:48:77:b7:36:7e:14:8e:39:b3:a2:b0:d9: 6e:9b:ec:21:a8:2c:70:3a:0c:f1:f3:73:c7:98:ef:93:aa:f4: c5:2b:4d:0b:31:7d:b3:6b:ed:e5:76:a9:59:af:85:e0:34:0c: 18:9e:63:69:c9:f1:c0:7a:98:3c:ce:b9:80:9f:a1:68:c4:3b: 87:66:0e:29:dc:85:ff:51:7a:dd:99:29:54:dd:c2:5c:90:ec: 18:38:e4:82:bf:92:1a:df:c4:b1:bb:b5:6f:c3:90:95:e5:db: a6:df:46:76:14:1c:99:c8:54:bc:40:97:51:b6:d6:57:67:21: 35:e2:65:18:d4:fd:97:d7:0d:8c:a7:36:10:91:c8:08:cd:21: 4e:c9:51:f3:c3:8a:60:7b:34:b9:9e:9d:24:9c:b2:3d:74:c0: 05:c2:1f:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUwODA4MjIzMjE0WhcNMjUwODE1MjIzMjE0WjAYMRYwFAYD VQQDEw02ODk2N2FlZS1hMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2z1nQL4zZmMorsjTTfeB5/+jyBsfhiZkunuhhuQJ/Kl/DGG93AkXBPRESOXQ aOI9mSPF7z+YTa2o17HGXvUZdh9FQUHFbFtQAJEdPwTzZbdR3HNKW/V5sjEyjBNL QBitsnOkkPcuw3fnwYc2zKtaoYKCi5iASVqbAA3JYJWPJiYxj6Ii/4MS8JbxwpFm SVwuouTy5hvHgwp18Wx2uqNjtuibNlBhNdpFVWQcqEqqkHeHZwfef+ngEqLUI9u6 ywmx2IAIWbxSwokRNDiXJzY+oXvQ7VvHspgt/TbUgbtIJAt0LG1Y1xY/VFVJJ6ut RmEjCyJ4MWEk1Dbh3B1FaZ4GYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHQWF5C //L2xZmWeEQoCh0f3VIyMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfrOk/r7V2ojvsu/TlTY2He1mGbvGNzdYXIMCNlX7IvYbFzdyfmkoz Ydl907x56WzaDOUVyaZwv5YGFMxHIZ2P7ylXPPh+juoLgZkb2KEmVkQ4HZ7l2srp Xy0mvdbslyJId7c2fhSOObOisNlum+whqCxwOgzx83PHmO+TqvTFK00LMX2za+3l dqlZr4XgNAwYnmNpyfHAepg8zrmAn6FoxDuHZg4p3IX/UXrdmSlU3cJckOwYOOSC v5Ia38Sxu7Vvw5CV5dum30Z2FByZyFS8QJdRttZXZyE14mUY1P2X1w2MpzYQkcgI zSFOyVHzw4pgezS5np0knLI9dMAFwh+P -----END CERTIFICATE-----Generated at Sun Aug 10 13:59:02 2025 by rpki-client