$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: iyxbr3d9CE26yUdcIp3VcM4+ZaWC4+Ql39/RSyKOc9s= Subject key identifier: BC:EB:80:8D:A6:FE:FF:49:0F:E6:BE:DE:D4:61:99:27:67:85:58:9C Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: 7F Signing time: Sat 09 Aug 2025 06:09:41 +0000 Manifest this update: Sat 09 Aug 2025 06:09:41 +0000 Manifest next update: Sat 16 Aug 2025 06:09:41 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: y+jT3C6hGBpR8RsmXcNSewm3QWJIsmqh+ifnSe2flz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Aug 9 06:09:41 2025 GMT Not After : Aug 16 06:09:41 2025 GMT Subject: CN=6896e625-8ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:57:04:63:dd:31:5f:d2:62:b2:f2:67:95: 85:63:da:32:1d:c4:84:e3:78:a3:88:0c:67:2f:c6: b5:94:7d:50:ff:cd:c6:b5:f0:04:35:13:5c:e9:70: 49:d6:fd:6b:95:43:73:bc:14:d4:7b:a9:6b:19:9b: d3:72:50:65:02:37:7a:be:19:d3:a6:19:ee:bc:c3: 2a:45:8a:33:09:66:b6:99:b3:68:6e:9e:27:54:79: 11:23:9a:c5:4c:c3:ac:c5:b4:6b:cf:28:8a:d9:1f: b2:70:1a:42:79:b5:56:ad:d2:5f:31:8f:2e:54:61: de:e9:f3:8a:c0:8c:95:25:31:8f:23:12:39:eb:53: 78:ff:d5:1a:d0:2b:97:31:1d:39:f2:b3:2d:50:08: 9e:b1:8c:db:75:05:19:f9:ab:45:a7:c2:64:48:e7: d7:89:04:90:dd:5b:a7:5c:54:c8:e2:ce:66:4e:57: 58:1b:0b:f5:6e:60:77:9a:5b:d3:63:a1:44:b7:c0: 60:7e:e1:f4:4c:e6:d6:de:ba:57:24:db:f5:f1:47: 78:2f:da:14:f8:ad:61:3a:fb:ef:04:89:57:ac:d0: 84:0e:2c:7a:58:b9:48:44:3d:b8:96:73:4c:63:17: e0:9f:d5:51:dc:78:21:01:bd:de:7e:7b:1d:60:d7: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EB:80:8D:A6:FE:FF:49:0F:E6:BE:DE:D4:61:99:27:67:85:58:9C X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:90:dc:27:66:4a:8d:5c:d1:3f:70:aa:3d:49:8a:46:9f:f1: 35:56:4c:15:9e:0f:ab:38:d0:dd:b9:6d:e5:9a:b8:1e:c2:25: e4:c9:a6:94:2b:e8:0d:02:d7:91:40:12:10:e3:b1:50:db:3a: 46:42:81:79:93:9a:e6:eb:3e:45:b4:c0:be:fa:5b:74:0e:48: ee:5b:26:46:41:be:d9:0a:33:a6:f4:33:64:8b:c1:e6:4c:5b: fe:39:15:0e:32:b6:2e:01:6c:9b:f6:45:88:fc:8a:a6:6c:f3: dc:bb:04:c4:8a:55:d5:7f:9a:07:71:19:ce:57:3b:4b:61:d9: d9:2f:e1:bc:f2:20:45:9b:a6:5e:77:6f:e4:8f:16:56:7c:a4: 92:d5:a5:01:20:97:45:4c:94:23:8d:80:34:69:a9:6e:08:0f: 55:58:e9:95:fa:c1:f9:ca:2e:93:ee:ae:78:1c:6e:fe:8c:c1: 34:71:66:ff:da:bb:d8:30:1d:b5:72:b3:9f:32:09:ad:13:6a: ce:41:ed:77:f8:fd:1a:9d:c3:72:81:0f:82:9b:12:96:ce:70: 41:e7:67:1f:2b:7f:09:79:27:68:69:86:80:c3:67:09:ff:ca: 9f:9c:32:ca:82:dc:61:6f:f1:2f:f6:b0:33:51:6b:e2:2a:00: 4d:64:66:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDg1NTExMC8GA1UEBRMoNUVGNUUxQTU4NUM0OEUyQkM0NTBCQTcyRjRDMzEzNDY4 MEU1MkIwRDAeFw0yNTA4MDkwNjA5NDFaFw0yNTA4MTYwNjA5NDFaMBgxFjAUBgNV BAMTDTY4OTZlNjI1LThhYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu4lcEY90xX9JisvJnlYVj2jIdxITjeKOIDGcvxrWUfVD/zca18AQ1E1zpcEnW /WuVQ3O8FNR7qWsZm9NyUGUCN3q+GdOmGe68wypFijMJZraZs2hunidUeREjmsVM w6zFtGvPKIrZH7JwGkJ5tVat0l8xjy5UYd7p84rAjJUlMY8jEjnrU3j/1RrQK5cx HTnysy1QCJ6xjNt1BRn5q0WnwmRI59eJBJDdW6dcVMjizmZOV1gbC/VuYHeaW9Nj oUS3wGB+4fRM5tbeulck2/XxR3gv2hT4rWE6++8EiVes0IQOLHpYuUhEPbiWc0xj F+Cf1VHceCEBvd5+ex1g1zalAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvOuAjab+ /0kP5r7e1GGZJ2eFWJwwHwYDVR0jBBgwFoAUXvXhpYXEjivEULpy9MMTRoDlKw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwODU1L0UxQUU1NDdDQjEz ODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHZYaHBZWEVqaXZFVUxweTlNTVRSb0RsS3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw ODU1L0UxQUU1NDdDQjEzODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2 RVVMcHk5TU1UUm9EbEt3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKiQ3CdmSo1c0T9wqj1Jikaf8TVWTBWeD6s40N25beWauB7CJeTJppQr 6A0C15FAEhDjsVDbOkZCgXmTmubrPkW0wL76W3QOSO5bJkZBvtkKM6b0M2SLweZM W/45FQ4yti4BbJv2RYj8iqZs89y7BMSKVdV/mgdxGc5XO0th2dkv4bzyIEWbpl53 b+SPFlZ8pJLVpQEgl0VMlCONgDRpqW4ID1VY6ZX6wfnKLpPurngcbv6MwTRxZv/a u9gwHbVys58yCa0Tas5B7Xf4/Rqdw3KBD4KbEpbOcEHnZx8rfwl5J2hphoDDZwn/ yp+cMsqC3GFv8S/2sDNRa+IqAE1kZto= -----END CERTIFICATE-----Generated at Sun Aug 10 18:55:59 2025 by rpki-client