$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: 3509YMFYaRgyMAMxEKoofEeCEZyManppUHY9vPiMoR0= Subject key identifier: 5B:FD:42:93:BA:13:91:EC:28:B3:D9:8E:6A:03:4C:A1:12:12:DE:94 Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: 92 Signing time: Sat 09 Aug 2025 06:58:12 +0000 Manifest this update: Sat 09 Aug 2025 06:58:12 +0000 Manifest next update: Sat 16 Aug 2025 06:58:12 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: 2iZZF6OuBkB5vIYY5kNC9PrZjmvx6BtgX94XufHXGYs=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: Iqqm3XnZxAwHyLfxm5fiQ2PL3nIt3cAVFXF23TPN80A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Aug 9 06:58:12 2025 GMT Not After : Aug 16 06:58:12 2025 GMT Subject: CN=6896f184-5d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:be:9a:e9:64:6e:c1:6a:79:af:ea:b5:ab: 3b:db:d4:84:36:6a:26:db:6d:e1:ab:ff:33:be:65: 5b:87:48:fd:30:dd:0f:90:9b:f2:e6:cc:40:ef:69: d2:31:a8:66:ed:2c:74:96:f4:e5:98:7f:e3:6f:5a: 25:9f:97:05:a7:36:6c:60:f7:03:fc:ed:e9:58:d5: aa:09:ad:15:46:94:b2:0f:62:7e:77:49:9e:6a:2c: 7b:60:6b:db:1b:bb:a9:70:ba:64:62:9d:57:01:9f: 29:79:a4:90:0f:b8:27:e8:5e:04:dd:45:3c:37:bf: 13:86:23:79:8c:ac:83:59:38:eb:4a:06:97:ba:dd: 85:1f:9c:a7:2b:3d:45:eb:ed:e6:12:f3:42:c4:30: f9:6f:64:e5:04:d8:1c:a3:1e:81:b5:b4:ad:32:29: 18:cc:96:00:cf:c3:30:b4:dd:93:ad:06:e4:b3:45: 3a:97:3c:76:51:db:26:33:5c:64:a8:84:8c:ad:da: 42:9a:c7:c8:cc:22:c9:05:93:d1:65:0c:83:b6:41: 79:11:ec:3b:67:09:77:41:1e:a9:9f:4a:21:c5:ad: 01:db:18:af:94:d6:ec:6b:1a:d9:ed:1b:ee:3c:cb: 65:b1:46:38:4d:72:d2:5c:73:6e:4c:8a:d7:5d:f2: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FD:42:93:BA:13:91:EC:28:B3:D9:8E:6A:03:4C:A1:12:12:DE:94 X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:fe:48:de:9a:59:60:9a:8a:0c:b3:8f:bb:07:db:ab:09:ee: 39:d9:6c:2b:83:02:68:f8:fa:8d:e9:24:d8:bd:a9:6f:da:72: a3:5f:f2:fb:bf:3b:4b:eb:1d:44:d2:80:11:a9:12:96:77:af: d8:99:58:7f:f3:35:e4:d7:c6:e6:56:4a:48:54:1f:f9:78:89: d9:6e:85:26:a4:3e:2b:63:09:b8:c0:6a:7e:6b:e1:42:d8:ad: 2b:c0:a4:b4:dd:f6:ff:be:3b:d0:20:9c:7c:ce:e8:f8:44:bf: f5:64:45:e4:72:a6:0c:b5:aa:a7:8e:a0:b4:ca:e9:14:8f:3c: 99:1d:9a:70:e6:82:1d:4c:22:90:03:4d:05:6b:58:0e:37:b0: 45:f8:20:40:34:e2:81:56:aa:b8:8c:11:21:34:e0:f6:fc:5d: 29:48:dc:40:3e:e1:87:f6:3c:cf:16:e2:05:7f:9a:31:24:0c: c1:28:9a:21:8d:22:61:4a:61:a4:64:74:15:a8:00:2c:21:be: 04:48:59:67:bc:32:57:2e:b7:88:53:bf:2d:df:c5:e3:9c:b0: 1a:d8:49:85:9b:fc:8d:34:93:93:73:92:a4:75:be:fc:da:b7: 90:d9:0a:02:5e:4e:83:4f:e1:c2:7f:40:5b:c3:4a:28:06:85: e2:9d:56:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjUwODA5MDY1ODEyWhcNMjUwODE2MDY1ODEyWjAYMRYwFAYD VQQDEw02ODk2ZjE4NC01ZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryK+mulkbsFqea/qtas729SENmom223hq/8zvmVbh0j9MN0PkJvy5sxA72nS Mahm7Sx0lvTlmH/jb1oln5cFpzZsYPcD/O3pWNWqCa0VRpSyD2J+d0meaix7YGvb G7upcLpkYp1XAZ8peaSQD7gn6F4E3UU8N78ThiN5jKyDWTjrSgaXut2FH5ynKz1F 6+3mEvNCxDD5b2TlBNgcox6BtbStMikYzJYAz8MwtN2TrQbks0U6lzx2UdsmM1xk qISMrdpCmsfIzCLJBZPRZQyDtkF5Eew7Zwl3QR6pn0ohxa0B2xivlNbsaxrZ7Rvu PMtlsUY4TXLSXHNuTIrXXfJqzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv9QpO6 E5HsKLPZjmoDTKESEt6UMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS85NTZGNjYyQzlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlD Wnk1bTh3QmZaR20yS0pGeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDI/kjemllgmooMs4+7B9urCe452WwrgwJo+PqN6STYvalv2nKjX/L7 vztL6x1E0oARqRKWd6/YmVh/8zXk18bmVkpIVB/5eInZboUmpD4rYwm4wGp+a+FC 2K0rwKS03fb/vjvQIJx8zuj4RL/1ZEXkcqYMtaqnjqC0yukUjzyZHZpw5oIdTCKQ A00Fa1gON7BF+CBANOKBVqq4jBEhNOD2/F0pSNxAPuGH9jzPFuIFf5oxJAzBKJoh jSJhSmGkZHQVqAAsIb4ESFlnvDJXLreIU78t38XjnLAa2EmFm/yNNJOTc5Kkdb78 2reQ2QoCXk6DT+HCf0Bbw0ooBoXinVYn -----END CERTIFICATE-----Generated at Mon Aug 11 07:37:06 2025 by rpki-client