$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: 4Ld+nushwzIpV5NloEaqLl6HIi3baWoXAaEm/C2ShPA= Subject key identifier: 8B:B4:B4:BB:35:70:D6:4D:F7:2E:94:22:2E:B6:25:5F:FB:69:67:4E Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 0863 Signing time: Fri 08 Aug 2025 21:01:50 +0000 Manifest this update: Fri 08 Aug 2025 21:01:49 +0000 Manifest next update: Fri 15 Aug 2025 21:01:49 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: vQ2nHKANSzULAE4l4XqQyUeZ0KTljF/XRrfxQGKkYY0=) 2: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: rDQvy+rn0SobEFslboEMqv4jyHrKq9kLuJT6gHMmCJY=) 3: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: TdVNysB3ntS2HR65IAfyKvgdlfFK4ozUli+BZdpaY/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Aug 8 21:01:49 2025 GMT Not After : Aug 15 21:01:49 2025 GMT Subject: CN=689665bd-2909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:31:85:47:d6:a1:8b:47:73:ad:0b:23:e1:18: 6f:fa:6f:6c:76:3e:62:39:9a:f2:f4:7a:02:4e:7e: 79:f1:d8:89:b8:61:d8:93:12:da:b0:87:ec:c8:d7: b6:28:15:f6:34:e1:cd:66:91:8d:51:51:c4:fb:6b: 65:22:5e:b8:37:98:71:27:3d:8e:aa:32:40:7c:b0: 3d:bf:82:ee:b3:87:c8:20:f6:fb:09:e0:79:f0:54: 91:9e:0b:d2:00:93:c8:dc:f7:25:bf:61:e7:9e:bd: ae:ef:06:71:eb:39:5f:df:6e:e8:8c:87:aa:63:d7: f0:06:7d:18:9e:dc:97:b7:81:80:d2:3e:8c:9e:ae: d7:2f:f2:a0:7d:35:2f:04:c3:47:67:fc:66:e3:11: 65:ee:9d:e9:5c:a6:62:d9:28:cc:1a:1a:3a:cd:3c: 55:2b:d4:5b:34:08:64:e4:03:b3:97:89:40:98:bc: 0a:00:59:57:58:4e:f8:cb:be:e8:40:82:e3:f7:d6: fa:12:af:2a:a1:b6:cc:d9:f2:55:43:af:c9:d9:11: 54:92:d4:af:d3:ef:81:a8:4d:11:32:d4:b0:81:39: 83:96:33:a6:12:8e:d4:73:09:62:0e:53:4c:a1:e6: c3:5e:c2:74:fb:87:76:7d:43:70:ae:29:64:d3:db: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B4:B4:BB:35:70:D6:4D:F7:2E:94:22:2E:B6:25:5F:FB:69:67:4E X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e7:7f:3c:6a:e4:12:a7:5c:8d:57:f9:13:01:22:32:ab:47: 28:ff:bb:c9:ac:89:ce:3f:2e:e9:b9:96:01:ff:33:6f:1b:0c: ec:ce:c0:b7:a4:96:e1:83:2b:79:e6:ff:4e:b4:6b:81:87:64: 0d:67:63:49:c2:fa:88:38:08:36:1b:9c:3a:da:32:3f:92:18: b7:f4:08:6d:76:39:48:a9:7e:44:44:1c:83:42:70:c7:f7:45: 78:fd:0f:51:a4:04:e3:44:2f:48:ca:01:08:37:7c:8d:19:9f: 19:e7:5d:d8:08:23:ba:89:a9:d3:54:61:56:24:56:4c:dd:1b: 7b:bb:a0:dd:84:54:79:e5:ae:17:94:82:44:4d:44:16:21:43: 9e:60:37:0b:8b:6c:28:33:b6:df:1f:29:10:05:62:b3:af:0d: d5:11:b3:08:fe:33:75:ae:f3:99:0a:37:df:e4:b2:aa:3e:82: b2:9d:ae:6c:5b:0e:37:10:fd:d6:4e:ec:40:75:d9:a4:cf:53: 59:ea:92:d1:12:65:d7:d1:4c:d2:8b:5e:f9:f3:f0:0b:d7:52: 0c:f3:31:68:4b:81:52:73:b3:0b:04:f7:99:e5:3a:14:6b:37: ae:76:f9:40:e2:c0:05:c3:d9:73:2f:d5:9e:8e:f5:8f:32:0e: b6:7b:b8:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjUwODA4MjEwMTQ5WhcNMjUwODE1MjEwMTQ5WjAYMRYwFAYD VQQDEw02ODk2NjViZC0yOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jGFR9ahi0dzrQsj4Rhv+m9sdj5iOZry9HoCTn558diJuGHYkxLasIfsyNe2 KBX2NOHNZpGNUVHE+2tlIl64N5hxJz2OqjJAfLA9v4Lus4fIIPb7CeB58FSRngvS AJPI3Pclv2Hnnr2u7wZx6zlf327ojIeqY9fwBn0YntyXt4GA0j6Mnq7XL/KgfTUv BMNHZ/xm4xFl7p3pXKZi2SjMGho6zTxVK9RbNAhk5AOzl4lAmLwKAFlXWE74y77o QILj99b6Eq8qobbM2fJVQ6/J2RFUktSv0++BqE0RMtSwgTmDljOmEo7UcwliDlNM oebDXsJ0+4d2fUNwrilk09sxJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIu0tLs1 cNZN9y6UIi62JV/7aWdOMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe5388auQSp1yNV/kTASIyq0co/7vJrInOPy7puZYB/zNvGwzszsC3 pJbhgyt55v9OtGuBh2QNZ2NJwvqIOAg2G5w62jI/khi39AhtdjlIqX5ERByDQnDH 90V4/Q9RpATjRC9IygEIN3yNGZ8Z513YCCO6ianTVGFWJFZM3Rt7u6DdhFR55a4X lIJETUQWIUOeYDcLi2woM7bfHykQBWKzrw3VEbMI/jN1rvOZCjff5LKqPoKyna5s Ww43EP3WTuxAddmkz1NZ6pLREmXX0UzSi1758/AL11IM8zFoS4FSc7MLBPeZ5ToU azeudvlA4sAFw9lzL9WejvWPMg62e7ia -----END CERTIFICATE-----Generated at Sat Aug 9 20:51:20 2025 by rpki-client