$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json) Hash identifier: HJKC33CeiF+MvjqWgnAlyrbRYcSPmDygiDp8T0u6R+Q= Subject key identifier: F1:40:52:76:A1:7E:D0:2E:EF:CD:00:DD:A8:ED:52:4B:BC:5B:1D:36 Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61 Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft Manifest number: B3 Signing time: Mon 11 Aug 2025 02:17:23 +0000 Manifest this update: Mon 11 Aug 2025 02:17:22 +0000 Manifest next update: Mon 18 Aug 2025 02:17:22 +0000 Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: UE668NnTtRrbqSEtMjaMf7SRDaKGU2BfK5WSxA7/q7E=) 2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: DgEucoR97Y9+a6MdEE8/uaZNnvtkSjr5/qYttwnSpcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361 Validity Not Before: Aug 11 02:17:22 2025 GMT Not After : Aug 18 02:17:22 2025 GMT Subject: CN=689952b3-3e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:0e:10:13:41:ff:3d:3d:c3:d8:f0:90:bd: 75:3a:27:8f:fc:b0:b0:35:13:0f:ed:1d:f6:e4:4c: 5f:f7:bb:a4:d1:fd:56:0e:17:04:bc:46:33:b3:1f: c4:a8:12:7a:1b:5f:82:86:a4:07:4d:b8:db:44:bf: bb:62:34:76:a8:3d:be:38:b3:50:7b:e9:65:6b:d2: c6:c6:e8:76:4d:b1:7e:cf:85:22:59:df:b7:ca:07: 1d:a4:80:b7:69:3e:e4:87:be:18:ea:b2:3c:e2:99: 6a:c4:a1:6e:b4:bf:08:f5:89:92:13:68:16:69:17: 17:f0:90:86:6e:06:18:c0:e0:94:64:a2:29:a0:53: 73:d7:37:8a:07:01:90:af:c1:a8:29:cf:72:42:c4: 96:e0:4d:81:b5:df:55:cd:86:d4:2a:b3:a0:2f:89: b0:44:68:f0:3d:23:63:24:51:34:bd:0b:19:d6:38: a5:0a:e1:3d:aa:d5:11:20:c5:18:6d:9b:d6:3d:07: 99:95:8f:bf:98:01:80:86:03:80:7b:2d:b6:32:7e: 4b:bd:2d:81:aa:de:62:4b:6f:1c:94:84:49:d9:59: 24:86:c5:ab:82:47:65:ae:4c:2c:8c:02:5f:e2:5b: 14:fe:f9:41:53:ab:4a:ec:ed:82:4f:2b:81:ac:9d: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:40:52:76:A1:7E:D0:2E:EF:CD:00:DD:A8:ED:52:4B:BC:5B:1D:36 X509v3 Authority Key Identifier: keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:3c:10:c9:e0:09:b3:71:ef:6f:10:f7:03:4a:ed:40:9d:85: 96:d7:8d:cd:cf:ac:67:21:bb:c3:94:ad:e8:b2:86:e6:d4:a8: 4a:52:6b:77:b8:21:fa:1b:e5:be:78:b9:97:09:1d:be:1f:f3: 7e:f2:f9:6b:ba:fc:6c:3e:ad:05:c4:52:2b:2a:12:7a:d3:72: ee:5e:0b:5a:7d:cd:0b:71:7e:11:bb:8b:ac:db:54:93:0e:d6: 84:5c:f4:6c:18:78:a8:8c:19:c6:5f:3c:02:8b:7b:8a:51:c5: 2b:c3:76:e0:8b:da:9b:9a:04:d3:f5:54:af:4a:31:bd:e4:78: 5b:b5:07:63:f9:bc:80:b6:1b:53:a4:c1:7e:f2:7a:c3:e4:e1: 0b:0c:87:33:4a:0c:43:ce:44:2f:b7:11:bf:9e:76:df:27:05: 1b:5c:35:4f:fc:a0:92:56:2b:36:98:7e:f2:27:a9:d6:c8:2e: 80:bf:00:a5:1e:5d:8f:49:d2:86:2f:5a:f0:48:b8:a0:e9:41: c3:05:2a:65:04:97:e9:24:f8:ac:ef:2f:da:31:58:8a:03:1f: a6:cd:0a:c5:05:ec:36:98:1b:e5:d6:53:e8:e6:db:78:41:79: 6b:f0:80:27:11:14:95:8b:7f:56:e6:9c:48:e3:8c:15:6f:c1: 8e:34:ad:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTQxMTAvBgNVBAUTKEM2MTU3MDBEN0M4ODhCRTZCQTc1MEFERUNEOTREODg2 NDY4MkUzNjEwHhcNMjUwODExMDIxNzIyWhcNMjUwODE4MDIxNzIyWjAYMRYwFAYD VQQDEw02ODk5NTJiMy0zZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCkOEBNB/z09w9jwkL11OieP/LCwNRMP7R325Exf97uk0f1WDhcEvEYzsx/E qBJ6G1+ChqQHTbjbRL+7YjR2qD2+OLNQe+lla9LGxuh2TbF+z4UiWd+3ygcdpIC3 aT7kh74Y6rI84plqxKFutL8I9YmSE2gWaRcX8JCGbgYYwOCUZKIpoFNz1zeKBwGQ r8GoKc9yQsSW4E2Btd9VzYbUKrOgL4mwRGjwPSNjJFE0vQsZ1jilCuE9qtURIMUY bZvWPQeZlY+/mAGAhgOAey22Mn5LvS2Bqt5iS28clIRJ2VkkhsWrgkdlrkwsjAJf 4lsU/vlBU6tK7O2CTyuBrJ29wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFAUnah ftAu780A3ajtUku8Wx02MB8GA1UdIwQYMBaAFMYVcA18iIvmunUK3s2U2IZGguNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxNC84RjMzOTk5NjZC RkIxMUVGODQ2MzI2MzVDNEY5QUUwMi94aFZ3RFh5SWktYTZkUXJlelpUWWhrYUM0 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hoVndEWHlJaS1hNmRRcmV6WlRZaGthQzQyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxNC84RjMzOTk5NjZCRkIxMUVGODQ2MzI2MzVDNEY5QUUwMi94aFZ3RFh5SWkt YTZkUXJlelpUWWhrYUM0MkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuPBDJ4Amzce9vEPcDSu1AnYWW143Nz6xnIbvDlK3osobm1KhKUmt3 uCH6G+W+eLmXCR2+H/N+8vlruvxsPq0FxFIrKhJ603LuXgtafc0LcX4Ru4us21ST DtaEXPRsGHiojBnGXzwCi3uKUcUrw3bgi9qbmgTT9VSvSjG95HhbtQdj+byAthtT pMF+8nrD5OELDIczSgxDzkQvtxG/nnbfJwUbXDVP/KCSVis2mH7yJ6nWyC6AvwCl Hl2PSdKGL1rwSLig6UHDBSplBJfpJPis7y/aMViKAx+mzQrFBew2mBvl1lPo5tt4 QXlr8IAnERSVi39W5pxI44wVb8GONK0N -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:37 2025 by rpki-client