$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json) Hash identifier: FzhD2mstPK/h5buwEjHzeiNgAcWNe6A6DOFIovEHaUM= Subject key identifier: E0:31:48:26:A3:96:4E:9F:5B:23:C2:C9:E6:32:A7:74:39:B4:23:10 Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 0580 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft Manifest number: 057B Signing time: Fri 08 Aug 2025 23:43:51 +0000 Manifest this update: Fri 08 Aug 2025 23:43:50 +0000 Manifest next update: Fri 15 Aug 2025 23:43:50 +0000 Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: Vf29CR4fdCDUQbkALU240BpAk+HsCsqQ5wfosvkhEaI=) 2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: jxQWNR1P8sYKVza0W/49c3uTybsGhMQmKrsxrcNc/xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Aug 8 23:43:50 2025 GMT Not After : Aug 15 23:43:50 2025 GMT Subject: CN=68968bb7-8ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:69:57:b8:39:8f:f0:ed:7b:43:85:49:58: 89:98:66:4a:0f:f1:1a:08:96:7c:25:91:58:4b:3e: ab:f1:86:eb:7e:f2:c4:8f:92:4a:6c:63:f7:16:90: 5d:41:c2:b1:a4:b5:30:fd:81:8b:39:41:80:5b:c8: 98:ec:2f:0b:db:32:68:81:f6:54:ff:f7:4b:d0:22: de:4f:a9:a9:18:a2:8a:22:43:65:b7:ef:ba:99:7a: 46:15:4e:6b:49:83:a2:75:85:a5:2f:7c:01:38:f7: e2:1f:4b:95:28:f7:38:c2:80:e6:10:7d:88:63:07: ef:c8:8a:ac:13:84:15:9e:06:e8:90:56:ae:b5:0c: 0b:26:ad:73:31:1b:ba:af:d2:b9:e3:2e:0c:27:69: 3b:7a:cd:fc:fb:46:b5:e9:be:7c:e9:be:19:6e:8a: ec:fb:18:09:1f:b5:c3:dd:4e:09:ed:a8:17:31:5c: 8c:ac:55:87:d0:79:2c:f6:74:9d:22:f6:52:e2:b1: 63:71:98:80:3b:27:57:81:89:ac:43:96:b7:e8:54: 38:9b:35:35:51:08:fb:8f:29:3e:c7:8a:18:32:d4: e1:9b:0a:ce:a2:c2:14:ad:16:ef:bc:7c:6d:7f:32: 30:2e:33:f9:8a:88:b4:f5:24:36:9e:e9:9d:a1:77: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:31:48:26:A3:96:4E:9F:5B:23:C2:C9:E6:32:A7:74:39:B4:23:10 X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8b:90:1b:e3:fe:ca:4b:46:a1:de:dd:88:53:c1:2d:a0:01: ea:20:f9:9b:fa:29:db:14:1e:37:77:41:08:6a:ea:f9:a4:38: d9:07:f4:15:45:57:77:a7:72:b5:22:5d:3e:34:9e:4f:c8:5b: 17:f8:70:34:9b:7c:59:4f:da:de:33:34:dd:77:b2:c4:37:ba: 4d:0a:8b:e1:1f:1d:b8:9d:71:f3:04:fb:f3:02:b5:8b:84:a4: 66:27:8b:b7:6c:93:67:1e:c8:1c:32:44:76:29:10:96:9d:52: 59:eb:22:b2:8a:66:a0:2c:03:29:f4:8b:b1:47:7f:6c:de:44: 31:15:8e:87:a8:dd:d0:fe:fc:ed:ab:f2:40:ac:52:64:3c:9c: 36:d2:34:b6:a5:2d:5a:7f:27:1f:d6:51:94:00:e2:b1:71:44: 7f:31:a3:a2:e2:08:24:13:b7:f9:9f:36:d4:65:1a:5f:0b:36: 02:37:c2:99:a3:5a:c5:aa:12:a4:6a:24:b2:8b:eb:82:31:e8: 7e:fb:a4:fe:98:68:e9:ac:93:b8:02:d8:89:90:10:ae:f5:2a: 5d:82:38:e9:b3:c4:62:46:bb:ce:09:76:d1:39:b3:6b:a4:27: f6:81:5e:e6:a0:1d:ab:76:2d:6c:ed:f9:e5:86:43:fe:40:2b: da:ff:f6:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjUwODA4MjM0MzUwWhcNMjUwODE1MjM0MzUwWjAYMRYwFAYD VQQDEw02ODk2OGJiNy04Y2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvVpV7g5j/Dte0OFSViJmGZKD/EaCJZ8JZFYSz6r8YbrfvLEj5JKbGP3FpBd QcKxpLUw/YGLOUGAW8iY7C8L2zJogfZU//dL0CLeT6mpGKKKIkNlt++6mXpGFU5r SYOidYWlL3wBOPfiH0uVKPc4woDmEH2IYwfvyIqsE4QVngbokFautQwLJq1zMRu6 r9K54y4MJ2k7es38+0a16b586b4Zbors+xgJH7XD3U4J7agXMVyMrFWH0Hks9nSd IvZS4rFjcZiAOydXgYmsQ5a36FQ4mzU1UQj7jyk+x4oYMtThmwrOosIUrRbvvHxt fzIwLjP5ioi09SQ2numdoXftmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAxSCaj lk6fWyPCyeYyp3Q5tCMQMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhCQy85MjA5MjM5MEVBRDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1 ZGJFc0ktQXdyRlRGSUZjV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8i5Ab4/7KS0ah3t2IU8EtoAHqIPmb+inbFB43d0EIaur5pDjZB/QV RVd3p3K1Il0+NJ5PyFsX+HA0m3xZT9reMzTdd7LEN7pNCovhHx24nXHzBPvzArWL hKRmJ4u3bJNnHsgcMkR2KRCWnVJZ6yKyimagLAMp9IuxR39s3kQxFY6HqN3Q/vzt q/JArFJkPJw20jS2pS1afycf1lGUAOKxcUR/MaOi4ggkE7f5nzbUZRpfCzYCN8KZ o1rFqhKkaiSyi+uCMeh++6T+mGjprJO4AtiJkBCu9Spdgjjps8RiRrvOCXbRObNr pCf2gV7moB2rdi1s7fnlhkP+QCva//aC -----END CERTIFICATE-----Generated at Sat Aug 9 15:09:59 2025 by rpki-client