$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: r2LK5p9ePxSj/VRl1XIc+IpYdb+5IhVbfup3SmoizAk= Subject key identifier: 00:33:AD:18:21:3C:B3:BE:8E:7E:11:E1:88:93:BE:96:D3:FD:B3:8A Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: D5 Signing time: Sat 09 Aug 2025 06:02:08 +0000 Manifest this update: Sat 09 Aug 2025 06:02:08 +0000 Manifest next update: Sat 16 Aug 2025 06:02:08 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: GJfoqCTMYGI7hxNg3HA/yDd+Mgc4wE249VJ95uAn0BM=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Aug 9 06:02:08 2025 GMT Not After : Aug 16 06:02:08 2025 GMT Subject: CN=6896e460-39e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:51:71:83:2d:a8:ad:93:b3:8f:b6:5f:b4: 2e:fd:84:98:1c:89:d5:f6:38:0d:af:6d:01:c0:20: f5:23:ca:d7:d1:60:c8:4c:8a:20:2e:0b:ca:7d:ba: d6:5b:d0:a1:ad:d9:27:ad:a3:65:e4:2c:45:3a:04: 66:ed:ff:43:06:a3:f7:44:cb:98:56:2e:f2:a3:42: 92:46:0a:40:f8:53:8e:7f:ed:83:45:04:64:fd:67: 22:24:54:32:65:53:4c:5f:0e:5e:0f:df:ce:95:a9: 3b:b2:0a:d2:e6:c8:8e:4b:cc:fd:e5:8c:3f:dd:b1: 17:1c:60:2d:86:34:57:c9:37:de:c8:3c:68:30:30: c0:56:68:b4:05:b4:bc:f0:22:d4:91:8d:3d:13:3d: 65:e0:e1:7c:1b:85:86:4c:7f:51:b6:de:dd:dc:df: c8:ec:23:07:6e:5c:5e:e0:1b:2a:e6:7f:ed:f3:dc: 85:8e:36:31:d8:23:25:d3:7c:63:2e:aa:9a:35:b6: 42:32:6a:35:bb:ed:9d:22:a7:e5:d5:98:7a:cb:c9: f7:80:0f:cb:48:2c:9f:27:10:49:3c:1d:0c:eb:80: 91:c2:78:c8:2e:27:6e:02:69:c4:19:04:89:b7:a3: e8:be:94:4e:45:d7:43:8d:6b:89:e6:ec:91:cc:17: de:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:33:AD:18:21:3C:B3:BE:8E:7E:11:E1:88:93:BE:96:D3:FD:B3:8A X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:34:22:11:a7:f3:29:0f:23:e1:1c:f2:63:0d:87:89:82:9a: f8:1d:59:fa:d2:ca:80:cf:2b:55:2e:49:20:f7:a9:46:d8:bb: 4c:34:ea:4f:10:50:a5:0f:d6:55:5c:0d:36:96:9e:1d:d0:e7: 42:d3:4a:2a:5d:1f:8a:10:f8:d7:c7:a7:c5:70:f0:60:48:95: d9:de:ca:63:ef:32:d0:87:d0:d4:93:54:19:49:e9:61:51:34: fa:39:9e:34:5a:53:1e:e0:ea:4d:ad:d1:db:79:0a:5f:dc:76: 21:ca:0e:07:a6:ac:df:34:9b:52:6a:9b:72:a1:eb:b9:1e:63: 07:46:af:dc:3d:a2:36:7f:77:5e:9a:68:01:e1:a3:df:26:23: ed:95:a8:0e:98:e2:21:92:6a:29:b0:27:c7:41:0b:17:2b:e2: 94:03:d5:42:87:c8:20:bd:65:ca:ca:a6:3b:13:b5:fb:ae:c8: d3:99:a8:f5:68:95:14:82:9e:c0:e7:90:e8:88:e8:80:66:45: 81:1b:c6:b8:dc:e3:a2:bf:fa:46:c1:6b:a8:7a:7c:64:0f:42: ae:ee:17:be:e2:e1:06:77:85:15:a5:d3:4b:1e:18:5d:87:45: c1:07:69:71:48:2e:ee:0c:36:86:67:09:cb:56:7f:14:81:5e: 6f:c0:a3:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUwODA5MDYwMjA4WhcNMjUwODE2MDYwMjA4WjAYMRYwFAYD VQQDEw02ODk2ZTQ2MC0zOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvpRcYMtqK2Ts4+2X7Qu/YSYHInV9jgNr20BwCD1I8rX0WDITIogLgvKfbrW W9ChrdknraNl5CxFOgRm7f9DBqP3RMuYVi7yo0KSRgpA+FOOf+2DRQRk/WciJFQy ZVNMXw5eD9/Olak7sgrS5siOS8z95Yw/3bEXHGAthjRXyTfeyDxoMDDAVmi0BbS8 8CLUkY09Ez1l4OF8G4WGTH9Rtt7d3N/I7CMHblxe4Bsq5n/t89yFjjYx2CMl03xj LqqaNbZCMmo1u+2dIqfl1Zh6y8n3gA/LSCyfJxBJPB0M64CRwnjILiduAmnEGQSJ t6PovpRORddDjWuJ5uyRzBfefwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAzrRgh PLO+jn4R4YiTvpbT/bOKMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxNCIRp/MpDyPhHPJjDYeJgpr4HVn60sqAzytVLkkg96lG2LtMNOpP EFClD9ZVXA02lp4d0OdC00oqXR+KEPjXx6fFcPBgSJXZ3spj7zLQh9DUk1QZSelh UTT6OZ40WlMe4OpNrdHbeQpf3HYhyg4HpqzfNJtSaptyoeu5HmMHRq/cPaI2f3de mmgB4aPfJiPtlagOmOIhkmopsCfHQQsXK+KUA9VCh8ggvWXKyqY7E7X7rsjTmaj1 aJUUgp7A55DoiOiAZkWBG8a43OOiv/pGwWuoenxkD0Ku7he+4uEGd4UVpdNLHhhd h0XBB2lxSC7uDDaGZwnLVn8UgV5vwKMJ -----END CERTIFICATE-----Generated at Sun Aug 10 16:05:24 2025 by rpki-client