$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json) Hash identifier: cMAkW/OmZbhnNByQ3OqqRx3Pcv0oZm5hmoSUhXl984E= Subject key identifier: 36:A4:7B:45:69:F4:7C:E0:95:29:09:A6:16:65:53:09:E5:46:F1:85 Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft Manifest number: F1 Signing time: Sat 09 Aug 2025 05:41:06 +0000 Manifest this update: Sat 09 Aug 2025 05:41:06 +0000 Manifest next update: Sat 16 Aug 2025 05:41:06 +0000 Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: gbEcs2e/zh7i0VC/4AMXNN6nm3+OqDglKW7tBveWLlM=) 2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: K+g6F2DggfqAEcFUFS+CObch7aX7JFtpiO+kkOJ8Xy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Validity Not Before: Aug 9 05:41:06 2025 GMT Not After : Aug 16 05:41:06 2025 GMT Subject: CN=6896df72-6336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:de:85:6d:81:aa:0e:37:c6:5a:84:c8:b7: 4d:ac:4e:16:ce:85:3d:68:37:ff:43:6a:ee:77:df: 1a:23:9f:f0:e5:99:5d:2f:e9:ed:71:66:b0:5d:92: c5:b9:6e:4b:cf:a6:3d:54:b8:29:b5:5d:66:5f:76: 14:5b:4e:53:45:89:31:6c:3a:83:5a:34:b5:b6:7e: 0e:78:f5:41:3d:b4:cb:8a:56:e7:0f:41:9e:ac:09: c4:33:ee:fd:cf:b2:39:96:87:39:85:65:b0:99:a8: 5f:17:3d:98:e3:6e:da:69:e8:72:79:2f:d1:1d:da: 46:7a:3c:23:31:4d:fe:c1:7e:89:b5:1a:36:b5:a9: fa:9e:fc:39:d3:54:90:a1:05:49:72:4c:e9:58:84: 5d:f6:ce:3f:73:a8:79:2d:47:fe:9a:50:e7:6c:f6: 3b:2d:22:26:cf:e7:1e:7b:6f:75:8f:b1:78:73:04: 10:9a:ea:0b:f6:c1:58:19:35:6f:ea:38:b4:78:63: 20:0a:7a:ee:4a:6c:ef:fd:03:4d:8d:10:81:ad:f8: 46:3c:2e:a0:56:03:5f:da:bc:87:3d:21:e7:e0:97: a5:c4:44:d3:72:41:dd:3e:7b:2e:4e:86:84:95:34: 32:11:3e:c6:ad:b0:97:34:28:69:a6:0b:2c:c9:d1: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A4:7B:45:69:F4:7C:E0:95:29:09:A6:16:65:53:09:E5:46:F1:85 X509v3 Authority Key Identifier: keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4e:67:bc:c4:e3:d6:33:61:36:1e:aa:1b:ea:a8:a9:d3:56: ef:86:2a:a3:b8:e6:ba:4e:ef:26:8d:df:d5:73:7c:70:5c:5d: cf:3a:0f:21:36:ef:8d:70:55:87:8c:c5:3b:90:9d:20:80:1c: 8e:91:ee:b3:b0:96:2f:6f:80:89:7b:4a:a4:ac:42:28:fe:4d: 43:b4:48:a2:93:4c:13:fd:05:de:d3:36:d1:fa:75:45:3e:9b: f2:90:0d:88:7e:15:44:e2:e5:8a:e0:39:c8:ba:0b:d3:18:b7: 6f:55:c8:ef:a8:7a:67:af:bb:41:62:b2:ed:dd:a8:b0:da:a7: 1b:fb:de:31:5e:4a:5d:6c:a4:1f:d0:36:5a:1b:50:e6:f7:35: 25:f2:7d:d9:0c:21:ed:c9:de:10:64:87:b5:f8:ba:94:41:75: 5f:93:88:cb:95:b1:81:37:01:43:67:52:61:6b:5d:7f:27:dd: e4:83:b3:f3:dc:90:eb:f7:8b:4d:42:07:a4:18:f4:97:eb:3e: a3:1b:10:19:e3:ae:4d:d5:86:d7:9b:4e:38:49:33:1a:c1:59: 4b:1e:d3:23:e5:6e:c2:c2:05:21:12:3a:75:e3:40:98:ea:3a: fd:7f:cd:a1:cd:1f:7b:79:39:8d:f0:67:36:60:55:b3:55:89: 94:f2:bc:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0ODExMTAvBgNVBAUTKDVERUFFMzg1MzBGODE1RkJGMEI5QjNGOEVGNjM3NTA3 ODZDOEFDMEEwHhcNMjUwODA5MDU0MTA2WhcNMjUwODE2MDU0MTA2WjAYMRYwFAYD VQQDEw02ODk2ZGY3Mi02MzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsbehW2Bqg43xlqEyLdNrE4WzoU9aDf/Q2rud98aI5/w5ZldL+ntcWawXZLF uW5Lz6Y9VLgptV1mX3YUW05TRYkxbDqDWjS1tn4OePVBPbTLilbnD0GerAnEM+79 z7I5loc5hWWwmahfFz2Y427aaehyeS/RHdpGejwjMU3+wX6JtRo2tan6nvw501SQ oQVJckzpWIRd9s4/c6h5LUf+mlDnbPY7LSImz+cee291j7F4cwQQmuoL9sFYGTVv 6ji0eGMgCnruSmzv/QNNjRCBrfhGPC6gVgNf2ryHPSHn4JelxETTckHdPnsuToaE lTQyET7GrbCXNChppgssydH/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDake0Vp 9HzglSkJphZlUwnlRvGFMB8GA1UdIwQYMBaAFF3q44Uw+BX78Lmz+O9jdQeGyKwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ4MS9CQzg0MEY0NjAy QzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZmdnd1YlA0NzJOMUI0Ykly QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlcmpoVEQ0RmZ2d3ViUDQ3Mk4xQjRiSXJBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ4MS9CQzg0MEY0NjAyQzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZm dnd1YlA0NzJOMUI0YklyQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiTme8xOPWM2E2Hqob6qip01bvhiqjuOa6Tu8mjd/Vc3xwXF3POg8h Nu+NcFWHjMU7kJ0ggByOke6zsJYvb4CJe0qkrEIo/k1DtEiik0wT/QXe0zbR+nVF PpvykA2IfhVE4uWK4DnIugvTGLdvVcjvqHpnr7tBYrLt3aiw2qcb+94xXkpdbKQf 0DZaG1Dm9zUl8n3ZDCHtyd4QZIe1+LqUQXVfk4jLlbGBNwFDZ1Jha11/J93kg7Pz 3JDr94tNQgekGPSX6z6jGxAZ465N1YbXm044STMawVlLHtMj5W7CwgUhEjp140CY 6jr9f82hzR97eTmN8Gc2YFWzVYmU8rwD -----END CERTIFICATE-----Generated at Sun Aug 10 18:56:57 2025 by rpki-client