$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft File: xVznjEX0hWCLgkNgYAPYCooWzNY.mft (raw, json) Hash identifier: DfJ6m1Vwdjr4zbWw/2bCla1PTHslnaeZVVbosL4zVss= Subject key identifier: D8:61:9F:3A:F2:EB:E1:B0:A0:66:9E:05:20:AB:32:94:1B:EC:BB:55 Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6 Certificate issuer: /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6 Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft Manifest number: 04BB Signing time: Sat 09 Aug 2025 00:21:53 +0000 Manifest this update: Sat 09 Aug 2025 00:21:53 +0000 Manifest next update: Sat 16 Aug 2025 00:21:53 +0000 Files and hashes: 1: xVznjEX0hWCLgkNgYAPYCooWzNY.crl (hash: iJZaKUeRKkUStT0obs2KSvJqDJtAJmmQXQnrzNjztUA=) 2: 64DE26F6386011EC83DC2E23C4F9AE02.roa (hash: U5GEFoFbAoED1KEx2xWUb5hktSCjTMeSRDs24OHWcTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6 Validity Not Before: Aug 9 00:21:53 2025 GMT Not After : Aug 16 00:21:53 2025 GMT Subject: CN=689694a1-3475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d0:a5:a9:b6:34:7d:fe:bc:b7:e2:71:fd:64: 73:12:19:6c:86:b5:52:6d:c3:f4:2f:d5:c0:3e:32: 14:ee:42:a8:b8:d0:ff:cc:93:4b:5f:03:49:cb:3d: 9f:d3:78:e8:89:a5:22:66:a6:4a:43:63:ba:30:85: 0d:a2:8b:b0:d3:df:5b:24:8a:d7:24:3d:fe:38:e1: 5d:48:db:91:2a:ef:74:8e:b9:a1:79:0f:53:45:14: 55:29:b0:11:8b:c3:85:34:38:35:24:59:5c:7a:d6: cf:30:7a:0d:54:bb:05:92:83:43:99:89:4d:37:8c: ca:82:ac:67:c2:f4:2a:ff:bc:2f:08:2f:68:73:37: 5b:38:33:9b:9e:64:7f:35:32:64:e6:5a:5c:48:2b: 8d:b9:e9:ab:17:90:8c:80:b0:5e:56:06:2e:82:40: 66:dd:dd:ff:80:a6:fd:ca:bc:8c:7c:07:30:1f:80: bd:ed:8a:67:bc:d4:ff:88:a2:5d:fd:9a:6b:e8:6f: 49:27:bf:8b:33:a5:fc:49:b5:ca:b8:cb:7a:8c:70: 13:0e:8d:2b:9f:01:c5:79:36:f1:c1:7a:a6:98:11: 36:2b:af:ba:3c:63:c1:4a:2c:b9:5a:66:a4:e0:2f: 11:4d:47:a0:7d:83:b9:0c:6a:90:3d:74:66:82:20: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:61:9F:3A:F2:EB:E1:B0:A0:66:9E:05:20:AB:32:94:1B:EC:BB:55 X509v3 Authority Key Identifier: keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:0e:21:5c:e5:f0:94:1b:d9:e6:88:9b:49:db:b2:38:00:d0: d1:35:20:0e:10:3f:e5:dc:13:84:bc:f9:15:37:d9:33:e3:08: 78:c8:d0:48:9e:4a:46:93:fd:11:bd:48:19:80:e1:31:f9:dc: bb:92:14:45:9e:3d:d5:c7:6d:06:b1:30:7f:97:ad:c8:64:36: 1e:46:bb:9c:82:7d:b7:dc:1c:bc:63:19:e8:c1:b1:bc:9d:fb: 41:d0:6f:e3:a2:f1:ed:89:c4:b4:5b:03:4e:2d:ae:d4:f3:2c: ac:95:30:3b:22:bd:57:bd:6a:7e:07:e7:4b:8f:7c:72:06:65: 74:75:3a:45:1a:ef:a9:4d:b3:1f:f8:ed:24:5d:97:a7:30:a7: 9d:1c:b5:3c:f0:ce:05:16:af:08:66:ad:67:a6:e4:a9:fa:cc: 99:b6:71:6e:b7:8f:66:58:42:d2:6b:5f:0b:f3:19:14:c2:1a: 83:55:9d:d3:97:52:61:e1:a2:66:08:e4:23:55:a7:eb:8b:8a: b3:36:39:43:58:64:20:1e:eb:fb:7d:70:35:1d:da:29:04:96: f6:60:af:65:23:6c:cc:bd:9b:f8:3f:3e:87:bd:9c:d7:ec:c2: 5e:a0:92:89:9d:d6:6b:9e:87:38:6b:98:3a:6e:fd:9c:e1:86: 6f:9b:9d:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFOTYxMTAvBgNVBAUTKEM1NUNFNzhDNDVGNDg1NjA4QjgyNDM2MDYwMDNEODBB OEExNkNDRDYwHhcNMjUwODA5MDAyMTUzWhcNMjUwODE2MDAyMTUzWjAYMRYwFAYD VQQDEw02ODk2OTRhMS0zNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69ClqbY0ff68t+Jx/WRzEhlshrVSbcP0L9XAPjIU7kKouND/zJNLXwNJyz2f 03joiaUiZqZKQ2O6MIUNoouw099bJIrXJD3+OOFdSNuRKu90jrmheQ9TRRRVKbAR i8OFNDg1JFlcetbPMHoNVLsFkoNDmYlNN4zKgqxnwvQq/7wvCC9oczdbODObnmR/ NTJk5lpcSCuNuemrF5CMgLBeVgYugkBm3d3/gKb9yryMfAcwH4C97YpnvNT/iKJd /Zpr6G9JJ7+LM6X8SbXKuMt6jHATDo0rnwHFeTbxwXqmmBE2K6+6PGPBSiy5Wmak 4C8RTUegfYO5DGqQPXRmgiDEhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhhnzry 6+GwoGaeBSCrMpQb7LtVMB8GA1UdIwQYMBaAFMVc54xF9IVgi4JDYGAD2AqKFszW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkU5Ni83QjlEM0RFQTM4 NUMxMUVDOUMyNTg3NzhDNEY5QUUwMi94VnpuakVYMGhXQ0xna05nWUFQWUNvb1d6 TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWem5qRVgwaFdDTGdrTmdZQVBZQ29vV3pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkU5Ni83QjlEM0RFQTM4NUMxMUVDOUMyNTg3NzhDNEY5QUUwMi94VnpuakVYMGhX Q0xna05nWUFQWUNvb1d6TlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiDiFc5fCUG9nmiJtJ27I4ANDRNSAOED/l3BOEvPkVN9kz4wh4yNBI nkpGk/0RvUgZgOEx+dy7khRFnj3Vx20GsTB/l63IZDYeRrucgn233By8YxnowbG8 nftB0G/jovHticS0WwNOLa7U8yyslTA7Ir1XvWp+B+dLj3xyBmV0dTpFGu+pTbMf +O0kXZenMKedHLU88M4FFq8IZq1npuSp+syZtnFut49mWELSa18L8xkUwhqDVZ3T l1Jh4aJmCOQjVafri4qzNjlDWGQgHuv7fXA1HdopBJb2YK9lI2zMvZv4Pz6HvZzX 7MJeoJKJndZrnoc4a5g6bv2c4YZvm50b -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:29 2025 by rpki-client