$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: 74ooHa/UX+66Q4YXHVVAHOP49sE9WhZvNk7tTqIYO2w= Subject key identifier: 10:B4:84:61:1A:7B:BB:64:85:AE:81:3A:5C:56:C2:1C:A9:D8:2B:5B Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F38 Signing time: Sun 10 Aug 2025 15:58:49 +0000 Manifest this update: Sun 10 Aug 2025 15:58:49 +0000 Manifest next update: Sun 17 Aug 2025 15:58:49 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: wZdv4oaiaZs4lLQ6bRnnX863Moci2rA8BMqsR8RYNBI=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: CYv9JY9hI0P702N3lQBz+p9YJHwSjBcG7pv4fPI19/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8005 (0x1f45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Aug 10 15:58:49 2025 GMT Not After : Aug 17 15:58:49 2025 GMT Subject: CN=6898c1b9-6435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:30:77:0a:5d:95:48:6f:93:00:35:d8:37: 18:99:5f:c2:8f:39:68:d3:a2:46:27:37:ce:ea:a8: 25:5e:f2:36:51:73:9b:7f:fd:86:7e:bb:cf:76:f3: 64:78:68:16:9e:a6:72:1f:86:19:98:6a:f8:cd:2d: 8e:54:64:a4:b9:1d:b8:3b:41:44:c3:ca:12:85:41: e1:ae:1f:17:01:2f:cd:87:9b:ec:5b:a4:1a:2c:fc: 13:7b:22:a0:d0:e9:f3:5a:33:ca:a3:fa:08:65:4d: 7c:98:c8:7d:66:d7:e8:a6:a6:e1:45:13:a0:31:11: 24:b9:b1:60:e1:47:49:93:87:a1:aa:5a:8f:ee:65: b5:17:c1:f4:a7:6c:68:2f:7b:f6:11:e3:88:7d:ee: 52:49:c7:60:35:97:56:27:5a:58:c2:24:ff:ea:68: 18:a9:cd:bf:7d:94:10:fa:e0:23:cf:fb:80:9b:55: de:a6:ff:9d:31:c2:75:74:f3:5e:10:4a:ee:2e:70: 5e:17:7d:ba:0e:1e:f8:2b:71:ca:c9:b3:47:08:57: 70:38:de:09:ce:bf:ed:46:e3:f4:21:91:a9:ac:cf: 8f:d8:25:c9:49:6b:0a:52:73:46:03:16:02:84:d1: 54:ad:4d:52:21:29:f0:bb:71:fd:0c:5a:fb:80:a3: 20:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B4:84:61:1A:7B:BB:64:85:AE:81:3A:5C:56:C2:1C:A9:D8:2B:5B X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:06:11:c4:43:be:39:e8:9e:27:38:18:92:e7:30:30:8c:7b: d8:56:f3:28:3e:34:cb:8f:82:5b:4e:b0:4e:e0:54:ef:04:18: fe:b3:16:ba:f3:ab:ab:6a:8c:43:e8:31:d7:af:3f:21:09:f6: 76:a4:dc:45:26:d1:22:90:b5:e1:09:71:4b:77:3e:c4:75:fd: 4b:ae:da:99:d3:6a:cd:89:6a:37:fb:17:50:dd:0d:bb:4f:39: 7e:d0:4f:67:a1:7e:e1:76:0a:3b:6f:16:b2:41:f8:84:0e:fa: e3:ce:57:5a:87:af:51:6f:15:67:40:47:15:20:5c:85:98:84: 05:52:03:cd:46:e0:99:b7:e8:83:17:31:54:23:c6:fb:e4:d1: 8e:10:47:da:c0:f7:3b:ff:8c:e2:98:83:9e:aa:73:fe:0d:2c: 76:e5:e2:43:a1:3b:d8:03:42:bf:63:88:77:66:29:53:d8:c3: 5f:ff:e4:80:1e:8b:00:c4:a0:b8:97:49:ec:95:f4:5f:92:82: a1:37:ba:5c:52:62:32:18:eb:8f:8e:0b:9d:8f:5b:16:64:96: 8c:7d:ff:be:94:98:8d:92:53:61:f7:5b:4b:bf:6b:35:58:21: 24:6d:da:4a:58:b8:13:fa:ba:2a:7b:8d:f0:36:ca:3d:56:b5: e2:e1:42:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjUwODEwMTU1ODQ5WhcNMjUwODE3MTU1ODQ5WjAYMRYwFAYD VQQDEw02ODk4YzFiOS02NDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwowdwpdlUhvkwA12DcYmV/Cjzlo06JGJzfO6qglXvI2UXObf/2GfrvPdvNk eGgWnqZyH4YZmGr4zS2OVGSkuR24O0FEw8oShUHhrh8XAS/Nh5vsW6QaLPwTeyKg 0OnzWjPKo/oIZU18mMh9ZtfopqbhRROgMREkubFg4UdJk4ehqlqP7mW1F8H0p2xo L3v2EeOIfe5SScdgNZdWJ1pYwiT/6mgYqc2/fZQQ+uAjz/uAm1Xepv+dMcJ1dPNe EEruLnBeF326Dh74K3HKybNHCFdwON4Jzr/tRuP0IZGprM+P2CXJSWsKUnNGAxYC hNFUrU1SISnwu3H9DFr7gKMgsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC0hGEa e7tkha6BOlxWwhyp2CtbMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZBhHEQ7456J4nOBiS5zAwjHvYVvMoPjTLj4JbTrBO4FTvBBj+sxa6 86uraoxD6DHXrz8hCfZ2pNxFJtEikLXhCXFLdz7Edf1LrtqZ02rNiWo3+xdQ3Q27 Tzl+0E9noX7hdgo7bxayQfiEDvrjzldah69RbxVnQEcVIFyFmIQFUgPNRuCZt+iD FzFUI8b75NGOEEfawPc7/4zimIOeqnP+DSx25eJDoTvYA0K/Y4h3ZilT2MNf/+SA HosAxKC4l0nslfRfkoKhN7pcUmIyGOuPjgudj1sWZJaMff++lJiNklNh91tLv2s1 WCEkbdpKWLgT+roqe43wNso9VrXi4ULl -----END CERTIFICATE-----Generated at Sun Aug 10 21:08:17 2025 by rpki-client