$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft File: XcAwMzGJiu_bheTZFABriTdr7-E.mft (raw, json) Hash identifier: F6VcOuNGFI56Bx1QNLyxAI0aJGGS6SpgMXgIBKDT8dM= Subject key identifier: 4F:CF:FC:54:51:4A:6A:11:26:7D:AB:DD:F7:F0:C9:0E:AA:39:86:0A Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft Manifest number: 067F Signing time: Fri 08 Aug 2025 22:48:57 +0000 Manifest this update: Fri 08 Aug 2025 22:48:57 +0000 Manifest next update: Fri 15 Aug 2025 22:48:57 +0000 Files and hashes: 1: XcAwMzGJiu_bheTZFABriTdr7-E.crl (hash: w5a8G8sp+QcRb+55XwVnY9jEy7kRHZFJvoyzHWiMKDA=) 2: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (hash: zRXwtVciA3XUq61vGPC3fC7y/rZPmZqFfk9/8k9uEj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Validity Not Before: Aug 8 22:48:57 2025 GMT Not After : Aug 15 22:48:57 2025 GMT Subject: CN=68967ed9-6ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:56:01:0e:67:10:c2:b0:72:c3:48:9a:81: 34:5d:9b:99:16:1c:6c:c9:18:84:57:4b:d0:e1:96: 6b:fd:e3:2b:c8:f8:e1:78:b3:3a:b1:8b:0f:7c:12: 1a:48:30:19:fe:e3:0e:24:df:2f:85:6c:b3:a6:be: b3:ac:c0:b2:9d:45:2e:02:e0:81:6e:c4:27:6d:df: bd:57:19:de:6b:27:75:ad:48:c3:7c:0f:b6:d4:44: 0f:6d:1e:27:4a:cb:2b:3b:41:53:4a:f4:36:88:5e: ee:ac:28:1a:ed:30:b7:5b:b6:d6:d8:93:7e:cb:d2: 68:81:20:b0:f8:bf:4c:8c:a1:4b:a0:c3:29:bb:55: 3c:a9:59:42:ae:e0:1d:11:d9:d6:b3:c0:3a:d3:e3: e5:86:12:4c:d7:38:92:e9:c6:0a:02:16:de:ec:da: 78:7e:10:d1:5b:3c:8f:5f:59:b3:7a:04:71:af:3c: 0d:eb:ec:e1:c6:90:7c:9c:8c:bb:3e:29:97:92:ba: 06:0c:8e:59:26:b7:d7:bf:f2:80:35:d0:c1:b5:85: d8:3a:7c:85:ba:7b:bb:4c:d1:12:a3:7d:1b:8c:23: 2f:d7:9a:50:d8:a2:48:17:4d:be:f2:5f:d1:ac:66: 5a:13:c1:1f:a7:b2:ac:e6:f8:77:b5:2f:59:88:0c: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CF:FC:54:51:4A:6A:11:26:7D:AB:DD:F7:F0:C9:0E:AA:39:86:0A X509v3 Authority Key Identifier: keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:22:0b:6c:c8:c9:30:c3:e5:64:4c:3e:b1:f3:d6:63:42:91: cb:50:53:76:76:4b:f9:85:7f:2a:b6:9f:d0:77:79:86:5d:d6: 26:7f:be:cc:0b:9c:50:e9:27:69:af:2d:06:6d:6e:7c:f6:05: ba:1c:64:1e:29:3e:8e:3a:3f:9d:ac:e3:bb:49:d2:29:9a:de: d2:96:6b:9a:f0:2c:ab:b7:d1:2c:ad:3a:b2:42:1d:b3:10:f8: f4:09:02:28:84:9b:e2:61:5b:f3:1e:8c:4f:43:0a:71:96:92: 09:22:11:21:d0:8f:d8:c1:25:ef:a9:b3:e4:bc:e0:db:82:0a: c5:44:b5:52:72:41:04:1b:e9:fc:76:8b:35:85:8e:56:76:d0: 6e:bc:e5:4f:be:90:f1:71:6f:dd:ba:7a:d5:dd:63:ec:e0:62: 8b:c3:a6:28:c8:d0:fd:79:85:dd:53:c5:56:3f:49:31:32:f1: 99:9e:85:7e:87:fa:a4:a6:0c:13:64:cd:d4:2d:e2:13:96:29: bc:d9:5a:cf:47:c1:90:9a:dc:29:09:88:f4:f1:90:d0:d2:d3: bd:24:11:21:15:d8:d3:4e:ee:7d:23:89:6c:90:76:be:12:87: 9b:cd:11:ea:b0:7e:aa:42:52:bb:99:35:90:4b:9b:9a:d9:eb: 36:ec:61:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCRDQxMTAvBgNVBAUTKDVEQzAzMDMzMzE4OThBRUZEQjg1RTREOTE0MDA2Qjg5 Mzc2QkVGRTEwHhcNMjUwODA4MjI0ODU3WhcNMjUwODE1MjI0ODU3WjAYMRYwFAYD VQQDEw02ODk2N2VkOS02Y2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnpWAQ5nEMKwcsNImoE0XZuZFhxsyRiEV0vQ4ZZr/eMryPjheLM6sYsPfBIa SDAZ/uMOJN8vhWyzpr6zrMCynUUuAuCBbsQnbd+9Vxneayd1rUjDfA+21EQPbR4n SssrO0FTSvQ2iF7urCga7TC3W7bW2JN+y9JogSCw+L9MjKFLoMMpu1U8qVlCruAd EdnWs8A60+PlhhJM1ziS6cYKAhbe7Np4fhDRWzyPX1mzegRxrzwN6+zhxpB8nIy7 PimXkroGDI5ZJrfXv/KANdDBtYXYOnyFunu7TNESo30bjCMv15pQ2KJIF02+8l/R rGZaE8Efp7Ks5vh3tS9ZiAydkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/P/FRR SmoRJn2r3ffwyQ6qOYYKMB8GA1UdIwQYMBaAFF3AMDMxiYrv24Xk2RQAa4k3a+/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENC80RTg3QTQ2QTg2 QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1X2JoZVRaRkFCcmlUZHI3 LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjQXdNekdKaXVfYmhlVFpGQUJyaVRkcjctRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JENC80RTg3QTQ2QTg2QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1 X2JoZVRaRkFCcmlUZHI3LUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaIgtsyMkww+VkTD6x89ZjQpHLUFN2dkv5hX8qtp/Qd3mGXdYmf77M C5xQ6Sdpry0GbW589gW6HGQeKT6OOj+drOO7SdIpmt7Slmua8Cyrt9EsrTqyQh2z EPj0CQIohJviYVvzHoxPQwpxlpIJIhEh0I/YwSXvqbPkvODbggrFRLVSckEEG+n8 dos1hY5WdtBuvOVPvpDxcW/dunrV3WPs4GKLw6YoyND9eYXdU8VWP0kxMvGZnoV+ h/qkpgwTZM3ULeITlim82VrPR8GQmtwpCYj08ZDQ0tO9JBEhFdjTTu59I4lskHa+ EoebzRHqsH6qQlK7mTWQS5ua2es27GH0 -----END CERTIFICATE-----Generated at Sun Aug 10 13:50:23 2025 by rpki-client