$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: ikYJH+WrIRvq5gn06FtjmPuDwBw9GrBxigywEfUrKCY= Subject key identifier: 93:A3:BC:C3:A8:3F:B6:E6:1B:16:EB:45:AB:3C:B8:81:66:D3:AB:B9 Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 088F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 0888 Signing time: Sun 10 Aug 2025 20:37:08 +0000 Manifest this update: Sun 10 Aug 2025 20:37:08 +0000 Manifest next update: Sun 17 Aug 2025 20:37:08 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: fLcenVOVpLhv6DOZd/lW27vDVGSzjI4o6IleglteNC8=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: uyDMO7ckw/0z5jl/cntcgb/65TbIdBVdA1r68qbPTT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Aug 10 20:37:08 2025 GMT Not After : Aug 17 20:37:08 2025 GMT Subject: CN=689902f4-7369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:d9:23:f7:de:6f:c8:e4:44:31:9f:73:fc: 7e:f1:5c:e9:47:e0:aa:3a:9a:27:88:ed:1a:96:b6: fc:ca:99:fe:15:61:3d:47:10:9a:91:fe:58:13:58: 2e:e8:4f:51:c7:e3:6d:eb:e4:e6:ba:6f:fa:68:eb: c2:e2:1e:4a:ba:a9:dc:19:d5:4e:a7:55:21:6f:90: 06:00:7c:da:43:94:d5:77:f3:78:8c:86:0f:35:01: 33:a5:09:ce:21:a1:b6:98:92:71:22:19:77:38:c4: 2e:07:e0:75:81:ab:ac:fb:28:e8:ef:f4:18:57:62: 94:68:6b:5a:82:5e:18:23:ab:c9:58:85:ae:e4:2e: fc:e5:5b:c9:d9:3d:6c:dc:b3:c8:31:a1:33:8c:a1: 1b:5d:61:2c:35:c9:12:ed:45:b8:d3:a7:5a:13:d0: e4:97:6f:b4:4d:55:c9:64:5c:1d:4f:77:3f:7a:53: 6b:4d:84:22:8c:e8:18:22:33:58:f0:ca:6e:e8:a9: b7:85:9c:af:31:c4:7f:31:e3:a4:e6:53:69:52:0f: 7c:88:5a:ae:68:55:99:28:da:2a:c1:44:f3:4e:7f: 35:ab:21:b9:2b:44:b3:72:6d:2e:ab:bf:8a:2b:45: 92:a8:c0:00:06:25:2d:0b:04:2c:1d:74:33:cb:9f: 0f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A3:BC:C3:A8:3F:B6:E6:1B:16:EB:45:AB:3C:B8:81:66:D3:AB:B9 X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:fc:f7:ca:13:36:8f:92:10:83:4a:70:48:6c:d4:85:52:d2: 76:1c:44:60:db:6a:07:6a:cc:0f:e3:83:7c:52:28:fe:3d:38: 31:58:05:72:07:bf:aa:39:34:e8:ac:8b:eb:28:bf:5a:e6:e2: bc:57:69:9a:88:91:42:f3:92:03:72:34:da:68:b6:63:54:ba: 19:f9:00:b1:f1:40:d3:56:e4:d7:79:f4:61:1b:a1:2e:96:96: be:8a:cb:6b:9a:01:e7:f3:91:51:52:03:38:40:a4:d6:63:fc: 81:11:c3:21:71:d8:f6:3a:1d:e8:3a:19:a5:51:bc:f6:ed:f8: 35:d4:3d:10:28:e3:14:62:a1:42:5d:ac:f2:69:a3:04:fc:07: 88:1b:13:a1:49:ed:32:3a:08:a3:d0:e5:c6:1d:bd:0d:bf:f4: 80:dc:58:f1:6f:58:db:9c:d1:d4:13:81:8a:60:df:09:6f:fc: ed:4b:a5:e0:2e:38:cd:d2:7e:b9:14:fb:63:ad:22:39:52:a9: 92:d9:2d:eb:e3:1f:e7:87:db:3b:fa:bd:20:1f:4f:25:c8:23: 9d:39:a6:60:b5:7e:0b:4c:1a:51:fd:7f:50:b3:bc:d7:5d:d4: d9:86:06:09:da:01:e8:b8:5f:23:27:36:5d:87:98:6a:a6:1f: ac:06:8c:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjUwODEwMjAzNzA4WhcNMjUwODE3MjAzNzA4WjAYMRYwFAYD VQQDEw02ODk5MDJmNC03MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXLZI/feb8jkRDGfc/x+8VzpR+CqOponiO0alrb8ypn+FWE9RxCakf5YE1gu 6E9Rx+Nt6+Tmum/6aOvC4h5KuqncGdVOp1Uhb5AGAHzaQ5TVd/N4jIYPNQEzpQnO IaG2mJJxIhl3OMQuB+B1gaus+yjo7/QYV2KUaGtagl4YI6vJWIWu5C785VvJ2T1s 3LPIMaEzjKEbXWEsNckS7UW406daE9Dkl2+0TVXJZFwdT3c/elNrTYQijOgYIjNY 8Mpu6Km3hZyvMcR/MeOk5lNpUg98iFquaFWZKNoqwUTzTn81qyG5K0Szcm0uq7+K K0WSqMAABiUtCwQsHXQzy58PCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOjvMOo P7bmGxbrRas8uIFm06u5MB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw/PfKEzaPkhCDSnBIbNSFUtJ2HERg22oHaswP44N8Uij+PTgxWAVy B7+qOTTorIvrKL9a5uK8V2maiJFC85IDcjTaaLZjVLoZ+QCx8UDTVuTXefRhG6Eu lpa+istrmgHn85FRUgM4QKTWY/yBEcMhcdj2Oh3oOhmlUbz27fg11D0QKOMUYqFC XazyaaME/AeIGxOhSe0yOgij0OXGHb0Nv/SA3Fjxb1jbnNHUE4GKYN8Jb/ztS6Xg LjjN0n65FPtjrSI5UqmS2S3r4x/nh9s7+r0gH08lyCOdOaZgtX4LTBpR/X9Qs7zX XdTZhgYJ2gHouF8jJzZdh5hqph+sBoz9 -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:45 2025 by rpki-client