$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: LirDKPlvfzi7Mg7qJVWYAOG5zxJAXa5+ZLB7vaZpkDc= Subject key identifier: 4A:28:CD:07:8E:2B:E3:45:82:CF:BC:A4:6E:68:0C:00:79:00:A8:AB Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 0926 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 090C Signing time: Fri 08 Aug 2025 20:41:52 +0000 Manifest this update: Fri 08 Aug 2025 20:41:51 +0000 Manifest next update: Fri 15 Aug 2025 20:41:51 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: 7M4QumftrDd+VOeIM5qqGQKDhCYWSbi9IGGuNdnwy5c=) 2: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: Del+9YrkACA6yrhYJeSPVVuh01l/16gJ82iy69S9BRo=) 3: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: PnqDvM4vjQdsVy80UhznbWoKhp/dlqh33E+GG+RU+dk=) 4: 03706138786411EC8624EB12C4F9AE02.roa (hash: qKXv165pzdK/WBxXfxqKy/V+953i+G1rFbe37yvanHk=) 5: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: Ci305f1V47fRIRqmqjLy+EIi8DLnLoGCGpVVZ48v10E=) 6: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: lvX9qWs0U9FJpaiKhdFBFudNcs3mWD37dbOmEs33Njk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2342 (0x926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Aug 8 20:41:51 2025 GMT Not After : Aug 15 20:41:51 2025 GMT Subject: CN=6896610f-fbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:82:df:f0:08:7d:74:85:3d:28:44:71:ef: 09:ae:e5:82:32:1c:7e:4d:6f:9e:43:34:9f:ab:51: d0:e5:10:c9:af:72:71:28:95:df:2e:d3:0b:3e:d2: c1:a0:28:be:67:73:00:57:bd:3b:7c:d3:0a:d7:49: e6:f1:91:62:86:d6:c2:21:97:8c:11:25:19:ac:35: 58:01:b9:7b:22:f7:b4:48:d4:8b:8f:80:83:6d:5c: 38:e7:f6:e9:2f:c1:58:3b:ac:91:44:79:c3:26:9c: 32:82:d7:a2:dc:00:de:51:ef:73:0f:b5:66:41:88: 71:f9:df:86:c8:66:27:5a:2b:2c:24:d3:9c:6f:a1: 84:26:58:66:b1:2b:1d:8e:bb:2c:d5:1a:13:b0:3c: ee:dc:8e:55:d0:43:b1:00:70:a9:76:22:b6:2c:66: 6e:5a:78:6d:8d:90:c7:84:06:15:53:cd:ee:a7:d3: 0f:e2:e2:9e:92:2a:dd:fd:68:f7:19:7c:84:d9:54: 24:de:ea:74:94:d2:87:b1:c0:ce:12:08:ac:c6:1e: c9:c6:38:9c:ff:b8:5c:40:17:c5:4b:f6:94:0d:87: ad:25:f2:d3:fc:51:38:0c:30:f8:5b:15:cf:e7:79: c2:f5:dc:f7:ba:5c:8d:d7:38:33:84:e9:db:08:5d: 04:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:28:CD:07:8E:2B:E3:45:82:CF:BC:A4:6E:68:0C:00:79:00:A8:AB X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:07:8a:79:c2:a3:a8:aa:13:c8:41:20:b1:2b:44:83:a5:f0: 7e:64:64:4e:88:45:0f:97:c8:c3:2b:01:27:e0:b0:e3:ff:49: 11:dc:74:0c:e3:3a:17:e5:e3:78:dc:7c:06:60:75:7c:87:98: 66:ba:df:75:de:29:2a:9b:0a:77:1f:48:1f:00:d5:3d:ae:45: dc:b7:85:29:e9:f0:8a:0e:36:76:1c:63:4d:52:86:3c:7a:1e: cf:c9:3f:67:6a:0b:db:4b:d4:86:1c:1d:a6:cb:26:b9:a4:bc: c5:21:e2:d7:a2:1a:14:fa:88:89:a3:d8:bd:7c:71:b3:47:d7: 60:60:bf:b9:4d:fd:e8:ad:0c:43:1a:2a:bb:05:ec:f2:ba:89: 9a:d0:48:5a:24:12:d9:68:8b:8f:46:11:42:d3:d0:d0:08:01: c2:53:7b:eb:c1:c3:98:c5:57:1a:b5:05:23:88:a4:98:b0:ed: 36:55:28:3d:ca:15:7f:94:98:65:05:6a:49:89:dd:a9:94:7a: 7e:94:de:f2:11:35:88:45:80:d0:52:b7:b5:37:fb:8f:55:25: 3b:ff:45:39:36:66:c0:5c:b6:a2:6f:b5:fd:9a:3a:94:fa:be: bb:40:6a:35:2e:52:b8:0a:36:4e:28:6f:f9:f0:e0:79:f9:42: a9:24:63:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjUwODA4MjA0MTUxWhcNMjUwODE1MjA0MTUxWjAYMRYwFAYD VQQDEw02ODk2NjEwZi1mYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsuC3/AIfXSFPShEce8JruWCMhx+TW+eQzSfq1HQ5RDJr3JxKJXfLtMLPtLB oCi+Z3MAV707fNMK10nm8ZFihtbCIZeMESUZrDVYAbl7Ive0SNSLj4CDbVw45/bp L8FYO6yRRHnDJpwygtei3ADeUe9zD7VmQYhx+d+GyGYnWissJNOcb6GEJlhmsSsd jrss1RoTsDzu3I5V0EOxAHCpdiK2LGZuWnhtjZDHhAYVU83up9MP4uKekird/Wj3 GXyE2VQk3up0lNKHscDOEgisxh7Jxjic/7hcQBfFS/aUDYetJfLT/FE4DDD4WxXP 53nC9dz3ulyN1zgzhOnbCF0ENQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoozQeO K+NFgs+8pG5oDAB5AKirMB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMB4p5wqOoqhPIQSCxK0SDpfB+ZGROiEUPl8jDKwEn4LDj/0kR3HQM 4zoX5eN43HwGYHV8h5hmut913ikqmwp3H0gfANU9rkXct4Up6fCKDjZ2HGNNUoY8 eh7PyT9nagvbS9SGHB2myya5pLzFIeLXohoU+oiJo9i9fHGzR9dgYL+5Tf3orQxD Giq7Bezyuoma0EhaJBLZaIuPRhFC09DQCAHCU3vrwcOYxVcatQUjiKSYsO02VSg9 yhV/lJhlBWpJid2plHp+lN7yETWIRYDQUre1N/uPVSU7/0U5NmbAXLaib7X9mjqU +r67QGo1LlK4CjZOKG/58OB5+UKpJGM3 -----END CERTIFICATE-----Generated at Sat Aug 9 03:00:23 2025 by rpki-client