$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: v+4r/LE6RO3Jv7oCKFL+y2DzVtT0syh0gFvgC51BAaA= Subject key identifier: 1D:03:79:96:3F:70:5B:1F:91:3F:DE:95:FF:38:E2:48:80:84:3A:1F Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0AFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0AD5 Signing time: Fri 08 Aug 2025 19:48:40 +0000 Manifest this update: Fri 08 Aug 2025 19:48:40 +0000 Manifest next update: Fri 15 Aug 2025 19:48:40 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: wsK0mYaDCx/SHwRqVMnKV2+OO53BE+2/h85GIaCzK+A=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Aug 8 19:48:40 2025 GMT Not After : Aug 15 19:48:40 2025 GMT Subject: CN=68965498-2fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:9d:03:04:f7:7c:b2:8b:f9:7e:44:54:fc: d7:98:bf:bc:05:1e:7b:aa:51:b2:0e:e0:92:d2:13: 36:36:d8:bf:8c:9c:dd:c2:fb:21:4c:bb:ae:99:61: 14:26:c4:b0:16:b5:19:e9:1b:27:e2:54:be:9d:8a: dd:a1:bc:36:59:fd:58:0a:ce:78:98:f5:35:b0:35: 4a:7d:ff:be:bc:41:22:08:e9:c6:36:84:83:63:d1: 4a:49:97:d8:a0:75:ff:ee:1f:c3:c7:59:a8:82:f3: c5:05:76:67:08:5a:5c:02:86:9f:dc:a6:a9:fc:57: b2:9c:70:7e:43:b4:3e:63:94:96:e5:06:6c:55:fb: b5:f9:56:04:8f:09:ae:b3:71:4e:95:8e:a9:39:95: 45:f4:ae:51:f4:2e:fb:4f:fe:59:5a:d5:35:93:84: c2:08:52:24:c7:1d:8f:92:8e:ee:09:45:68:4b:a5: 73:16:c7:5a:94:31:83:b0:ff:dc:d3:8d:b9:fe:92: 8b:cd:0b:1b:60:d0:83:55:7d:35:76:1e:7a:30:3b: 66:11:31:d1:a0:e3:75:49:38:76:f6:5d:53:b9:59: b4:ad:89:a3:83:c4:81:35:61:36:ff:27:ed:57:2c: 1b:67:2c:70:4e:b7:83:1d:5b:b9:c2:52:c4:ce:40: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:03:79:96:3F:70:5B:1F:91:3F:DE:95:FF:38:E2:48:80:84:3A:1F X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:90:3a:1b:12:dc:9d:a8:68:a5:b9:f7:4c:01:c9:40:25:2a: 3a:9e:77:00:39:74:95:40:35:76:8e:8c:81:cf:9c:a7:d9:10: 3b:14:6c:8c:1d:15:ca:2c:eb:c5:64:76:e8:72:47:48:7f:32: 33:55:f5:7c:ab:0b:41:ac:a8:7e:5f:9a:87:b3:da:1f:81:3a: 76:ad:12:15:0c:5e:05:6e:7d:7b:67:da:d1:c5:28:d7:19:c6: 8f:92:ad:55:91:70:53:09:71:bd:be:54:cf:74:3a:43:42:37: 86:e8:c1:24:a6:5b:10:6d:ec:d9:61:a7:32:6f:70:9a:77:ca: b4:75:4f:a4:76:f0:2f:a2:bc:c9:e7:e1:97:2b:71:de:3d:8d: 7f:df:07:e1:ce:a7:a0:4a:51:8e:50:af:98:0d:70:1e:74:eb: 0c:0f:b7:eb:5a:4f:93:03:f4:d9:e1:58:23:ba:8f:0d:57:ec: ea:a5:39:c8:62:8a:de:7a:d0:d2:93:4a:96:ac:e8:6e:45:32: 74:44:17:d8:9c:5f:db:5e:0b:03:ed:cd:3e:6c:5d:ea:0a:2c: de:ab:4a:f5:74:1b:31:a5:b7:d6:07:7a:d1:a3:5b:e6:f1:ff: 73:ec:14:f9:1a:6a:0c:9c:07:07:2d:f5:a2:cf:d6:58:89:78: 52:e2:8a:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjUwODA4MTk0ODQwWhcNMjUwODE1MTk0ODQwWjAYMRYwFAYD VQQDEw02ODk2NTQ5OC0yZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8GdAwT3fLKL+X5EVPzXmL+8BR57qlGyDuCS0hM2Nti/jJzdwvshTLuumWEU JsSwFrUZ6Rsn4lS+nYrdobw2Wf1YCs54mPU1sDVKff++vEEiCOnGNoSDY9FKSZfY oHX/7h/Dx1mogvPFBXZnCFpcAoaf3Kap/FeynHB+Q7Q+Y5SW5QZsVfu1+VYEjwmu s3FOlY6pOZVF9K5R9C77T/5ZWtU1k4TCCFIkxx2Pko7uCUVoS6VzFsdalDGDsP/c 0425/pKLzQsbYNCDVX01dh56MDtmETHRoON1STh29l1TuVm0rYmjg8SBNWE2/yft VywbZyxwTreDHVu5wlLEzkBOBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0DeZY/ cFsfkT/elf844kiAhDofMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANkDobEtydqGilufdMAclAJSo6nncAOXSVQDV2joyBz5yn2RA7FGyM HRXKLOvFZHbockdIfzIzVfV8qwtBrKh+X5qHs9ofgTp2rRIVDF4Fbn17Z9rRxSjX GcaPkq1VkXBTCXG9vlTPdDpDQjeG6MEkplsQbezZYacyb3Cad8q0dU+kdvAvorzJ 5+GXK3HePY1/3wfhzqegSlGOUK+YDXAedOsMD7frWk+TA/TZ4Vgjuo8NV+zqpTnI YoreetDSk0qWrOhuRTJ0RBfYnF/bXgsD7c0+bF3qCizeq0r1dBsxpbfWB3rRo1vm 8f9z7BT5GmoMnAcHLfWiz9ZYiXhS4ore -----END CERTIFICATE-----Generated at Sun Aug 10 18:20:32 2025 by rpki-client