$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: qlgv6uTuXTskVDYPtHYUOXYf/Byltg+px1UM2pcxe1Q= Subject key identifier: FC:0F:FE:FA:8B:BD:87:3D:86:AA:1C:A0:91:60:5B:3A:95:A9:23:EC Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 0158 Signing time: Sat 09 Aug 2025 04:29:58 +0000 Manifest this update: Sat 09 Aug 2025 04:29:57 +0000 Manifest next update: Sat 16 Aug 2025 04:29:57 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: 0ADDH28KkJVJwJf/NddwhKmYZ27lxXwDvqCRjEF6yU8=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: tBK54wCyQ2wcX6ZNsRYGZb85q/LNuJrcbm5n2EF4GsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Aug 9 04:29:57 2025 GMT Not After : Aug 16 04:29:57 2025 GMT Subject: CN=6896cec6-7a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:50:b2:2a:47:ae:c9:d8:27:a2:0d:71:40: a2:5b:57:e9:3b:f1:e9:6b:42:b0:b2:c6:39:22:8c: a8:c8:ff:70:ec:3b:db:ca:2d:56:03:db:43:29:65: 70:d4:04:9f:1d:fe:73:ab:0c:e8:07:31:99:04:e4: 15:c1:3a:df:a5:a9:b7:41:75:df:fb:38:be:9c:d1: b8:8f:96:1d:41:1b:8e:dc:d9:ff:54:1f:6e:f1:72: d8:9c:6e:84:bb:55:d3:68:8f:f7:11:96:ef:a9:c8: af:a0:c7:46:45:4b:11:bd:8d:aa:9d:ef:94:6c:f7: c0:38:5e:83:ec:6f:bc:2e:f2:e7:0a:a0:d6:48:9a: dc:1a:fa:f4:f7:1f:e4:12:e7:b0:38:6d:f8:7b:ab: 11:f2:3c:39:46:ad:be:ae:9e:0f:6b:53:c0:49:de: 38:a3:50:39:49:1b:f7:33:a9:a7:fa:aa:1f:68:03: e7:57:de:af:c4:64:c9:19:f4:13:7d:78:b4:1a:e0: d5:63:44:5c:dc:86:14:df:2b:c2:36:c8:f5:71:c0: 9e:ee:d7:2a:64:da:2e:bb:0e:f8:7c:a0:c2:8c:ed: 9d:35:94:4b:21:f4:4a:b5:eb:39:bf:07:c7:0a:dd: 70:76:31:2b:54:96:96:e4:83:94:e7:09:dc:f8:fd: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0F:FE:FA:8B:BD:87:3D:86:AA:1C:A0:91:60:5B:3A:95:A9:23:EC X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f3:92:6d:93:d1:01:39:a2:4a:6b:f0:65:5a:4f:f5:d2:f1: 5c:60:c9:28:b0:fe:bc:22:6e:50:31:5e:d5:ec:4a:59:25:f6: 92:b3:68:b8:61:48:ba:cc:a4:ae:b3:c6:47:45:ef:55:01:d3: 28:56:7c:ea:eb:cd:42:ec:02:ec:a0:d9:d0:cc:5c:2d:fa:8a: 75:56:ea:e6:e2:17:4c:76:50:dc:81:14:c0:a7:ca:1f:83:ca: 9e:9e:16:71:c8:0a:58:7e:20:fa:c6:d7:04:71:9a:98:1a:c8: fe:28:ec:aa:a5:94:d1:b2:3c:d6:38:0d:03:b9:34:34:f6:be: 8d:2c:09:f1:24:76:85:54:04:f8:b2:e4:62:45:00:5a:6d:f9: 2a:3c:b5:a3:4d:d1:6d:01:3b:2b:81:78:67:e4:36:89:c7:c5: e8:19:6b:13:2e:5b:80:78:0b:e0:6b:19:35:13:86:a9:c2:4c: 9a:57:40:dd:9f:d2:e8:61:95:8b:9e:28:a0:f9:87:b8:82:4b: 3c:8d:46:c4:20:af:2b:5a:2c:2e:23:9b:38:df:92:e9:bf:79: 3f:53:31:99:73:65:97:66:bd:07:f9:c7:82:7c:1f:0c:05:45: 1c:a3:8b:95:ad:af:59:3a:dd:0e:e0:af:4e:16:78:7b:a6:a9: 2b:4a:ae:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjUwODA5MDQyOTU3WhcNMjUwODE2MDQyOTU3WjAYMRYwFAYD VQQDEw02ODk2Y2VjNi03YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynpQsipHrsnYJ6INcUCiW1fpO/Hpa0KwssY5IoyoyP9w7Dvbyi1WA9tDKWVw 1ASfHf5zqwzoBzGZBOQVwTrfpam3QXXf+zi+nNG4j5YdQRuO3Nn/VB9u8XLYnG6E u1XTaI/3EZbvqcivoMdGRUsRvY2qne+UbPfAOF6D7G+8LvLnCqDWSJrcGvr09x/k EuewOG34e6sR8jw5Rq2+rp4Pa1PASd44o1A5SRv3M6mn+qofaAPnV96vxGTJGfQT fXi0GuDVY0Rc3IYU3yvCNsj1ccCe7tcqZNouuw74fKDCjO2dNZRLIfRKtes5vwfH Ct1wdjErVJaW5IOU5wnc+P2ebQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwP/vqL vYc9hqocoJFgWzqVqSPsMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK85Jtk9EBOaJKa/BlWk/10vFcYMkosP68Im5QMV7V7EpZJfaSs2i4 YUi6zKSus8ZHRe9VAdMoVnzq681C7ALsoNnQzFwt+op1Vurm4hdMdlDcgRTAp8of g8qenhZxyApYfiD6xtcEcZqYGsj+KOyqpZTRsjzWOA0DuTQ09r6NLAnxJHaFVAT4 suRiRQBabfkqPLWjTdFtATsrgXhn5DaJx8XoGWsTLluAeAvgaxk1E4apwkyaV0Dd n9LoYZWLniig+Ye4gks8jUbEIK8rWiwuI5s435Lpv3k/UzGZc2WXZr0H+ceCfB8M BUUco4uVra9ZOt0O4K9OFnh7pqkrSq5A -----END CERTIFICATE-----Generated at Sun Aug 10 04:55:07 2025 by rpki-client