$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: cUPb9FfmlHOn1lnryXdDo1XE83Ivv5rfhDCbcpm/moc= Subject key identifier: E8:18:D5:C3:F9:2F:9F:A2:B6:77:A4:CB:21:65:45:B7:BE:3D:F7:A7 Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 2353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 2325 Signing time: Sat 02 Aug 2025 15:57:29 +0000 Manifest this update: Sat 02 Aug 2025 15:57:29 +0000 Manifest next update: Sat 09 Aug 2025 15:57:29 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: DqGp+9bjBwDvImHOKOhCMllrDyRnU2hkwFxWjbWHF3Q=) 2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=) 3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9043 (0x2353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Aug 2 15:57:29 2025 GMT Not After : Aug 9 15:57:29 2025 GMT Subject: CN=688e3569-5be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:d0:72:1b:ac:65:37:47:dd:9f:67:25:24: fe:8a:7e:d5:c9:f7:b3:9a:f2:62:17:7c:55:dc:7c: 97:58:83:06:55:d6:8d:b2:94:11:73:ae:96:1e:9b: 73:b6:49:ba:27:52:3e:5c:b4:e6:22:08:ec:32:4a: 7c:dd:5a:62:93:ca:35:25:ca:d9:39:20:ec:76:09: ff:8d:a4:89:1a:a5:1f:6f:0b:86:f7:3c:e0:ab:5b: da:aa:a8:27:98:3f:96:29:68:a2:f1:2d:48:c1:a5: f9:7d:1e:74:d5:d6:78:fc:cf:7e:ca:bf:b9:fa:96: 4f:68:a2:2f:03:ef:90:d6:cd:aa:01:d8:f0:0a:0f: c9:ad:6f:8f:39:5f:d8:63:38:2f:1c:59:8f:e1:74: a2:e4:9c:8a:ad:0e:39:58:f7:64:fa:cd:30:df:37: 0d:65:3e:1b:9d:37:4b:a3:75:bf:e8:5d:87:ab:f9: f1:79:26:b1:74:73:17:a5:88:80:4f:ff:4c:71:ba: 04:49:e5:c9:10:55:27:ba:df:c6:6e:13:13:21:38: a0:e3:8d:ef:b3:5a:5b:0d:80:e2:30:00:1c:47:45: 96:76:48:ea:53:76:7e:6e:62:6f:04:e9:bf:93:f0: 55:88:0e:1d:63:4c:ca:a6:88:84:46:ed:dd:b2:29: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:18:D5:C3:F9:2F:9F:A2:B6:77:A4:CB:21:65:45:B7:BE:3D:F7:A7 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:69:aa:5e:a6:4c:70:ec:c2:e6:11:35:b6:b9:21:bd:f9:16: 17:69:78:1a:41:b3:7e:14:2e:b4:10:ab:59:38:da:73:14:d4: bd:ae:af:90:be:14:6b:cd:54:39:30:f7:46:85:1c:f8:b2:6e: 08:76:b9:36:9f:41:16:6e:92:c6:31:ec:71:3a:39:49:99:94: 1e:3e:82:e3:52:a1:63:79:27:1c:d4:c8:e5:d8:c5:39:b3:ef: 8e:6b:e0:2e:43:2a:20:fd:b6:78:8b:29:bc:32:82:4b:06:75: f3:3a:02:d2:ff:ba:86:67:11:16:c1:e5:65:a5:47:19:7e:33: 0e:9f:20:38:21:03:7e:89:f7:cc:21:3e:b3:30:c9:4a:d9:33: 0e:16:da:05:3c:ab:42:0f:2c:2c:28:2d:2c:0a:c5:db:81:79: 3e:3c:b8:7f:b3:f7:10:07:45:cf:80:ff:cd:21:b9:66:14:d0: 62:ba:09:9d:be:14:5f:31:d8:fa:39:12:78:6c:27:32:ac:6a: 7a:cd:4c:48:0b:e2:73:eb:b0:13:f2:87:31:0d:db:27:e6:9c: d2:15:78:97:97:fe:9a:d4:f3:c7:1d:b4:ff:d7:ae:5e:ca:37: 3a:e1:a8:cf:ff:c4:91:b6:e7:25:13:4f:2d:3a:15:40:59:50: 45:bb:93:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjUwODAyMTU1NzI5WhcNMjUwODA5MTU1NzI5WjAYMRYwFAYD VQQDEw02ODhlMzU2OS01YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XnQchusZTdH3Z9nJST+in7VyfezmvJiF3xV3HyXWIMGVdaNspQRc66WHptz tkm6J1I+XLTmIgjsMkp83Vpik8o1JcrZOSDsdgn/jaSJGqUfbwuG9zzgq1vaqqgn mD+WKWii8S1IwaX5fR501dZ4/M9+yr+5+pZPaKIvA++Q1s2qAdjwCg/JrW+POV/Y YzgvHFmP4XSi5JyKrQ45WPdk+s0w3zcNZT4bnTdLo3W/6F2Hq/nxeSaxdHMXpYiA T/9McboESeXJEFUnut/GbhMTITig443vs1pbDYDiMAAcR0WWdkjqU3Z+bmJvBOm/ k/BViA4dY0zKpoiERu3dsimy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgY1cP5 L5+itnekyyFlRbe+PfenMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATaapepkxw7MLmETW2uSG9+RYXaXgaQbN+FC60EKtZONpzFNS9rq+Q vhRrzVQ5MPdGhRz4sm4Idrk2n0EWbpLGMexxOjlJmZQePoLjUqFjeScc1Mjl2MU5 s++Oa+AuQyog/bZ4iym8MoJLBnXzOgLS/7qGZxEWweVlpUcZfjMOnyA4IQN+iffM IT6zMMlK2TMOFtoFPKtCDywsKC0sCsXbgXk+PLh/s/cQB0XPgP/NIblmFNBiugmd vhRfMdj6ORJ4bCcyrGp6zUxIC+Jz67AT8ocxDdsn5pzSFXiXl/6a1PPHHbT/165e yjc64ajP/8SRtuclE08tOhVAWVBFu5OR -----END CERTIFICATE-----Generated at Mon Aug 4 11:09:28 2025 by rpki-client