$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: x1jgIy7bIx7bDil4RbOc/D/ET/o57DPXvN3goDvWO14= Subject key identifier: F9:2C:D8:58:00:70:EB:88:35:8D:3B:07:BB:D5:92:04:2F:4C:B4:B8 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 1915 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 169F Signing time: Sun 10 Aug 2025 16:53:52 +0000 Manifest this update: Sun 10 Aug 2025 16:53:51 +0000 Manifest next update: Sun 17 Aug 2025 16:53:51 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: 20yvc6aR0C6Xd4h6nsAe+dgnozWQrPo0lHBHQJHBOLk=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: Ju8go9OBKML8ykj6qnfvaBG6KjObv0i9KK2dLnaHCbM=) 4: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 5: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 6: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 7: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 8: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 10: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 11: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 12: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 14: 4A1187B26E7811F09E744A82C4F9AE02.roa (hash: dJjpFHpkMqHmt4CfDfWFKzsV9Emfi+BcDZ6MOJ55ZSs=) 15: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 16: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 22: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 23: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 24: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 25: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 26: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6421 (0x1915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Aug 10 16:53:51 2025 GMT Not After : Aug 17 16:53:51 2025 GMT Subject: CN=6898cea0-9bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:5f:dc:67:f9:cc:ac:0a:97:89:5b:c8:31: 07:7b:92:ee:84:37:dc:c6:d0:c2:80:3a:d4:73:92: f0:aa:e1:b1:48:85:33:63:23:fa:19:eb:39:b5:38: 21:ce:6e:fb:3e:f2:30:7d:26:74:49:0f:3c:24:eb: 93:62:0c:1b:ef:6a:fb:29:4b:0c:21:0d:fd:e1:1c: 86:90:98:8e:df:1c:c5:60:9e:ae:88:64:7c:12:9d: e1:6b:b9:f9:61:60:39:28:8a:41:77:01:59:19:27: 81:ab:f1:7b:4f:cc:7e:5b:36:91:cc:e8:a4:e8:12: 22:74:7a:af:14:61:33:ca:7e:df:2b:54:c2:56:32: 1c:76:0a:40:9f:a5:97:72:d5:86:21:12:b9:f9:75: 1f:1a:69:a8:57:05:2e:16:60:35:2c:59:64:73:3d: b7:f4:6b:a6:54:94:f3:90:80:bd:2e:93:d2:6c:f4: 56:b7:0d:73:6d:2b:d2:6d:5c:15:0d:6d:30:ab:ee: 8f:28:07:26:52:99:75:22:57:c4:00:7a:b7:5e:b5: 25:f8:ed:e6:79:e6:47:b9:a8:96:ec:62:04:e7:a3: 0c:d5:42:bf:ec:07:90:09:9b:98:ce:ff:84:02:48: 66:9e:6d:42:d5:b2:00:ab:98:2a:fd:71:e1:f2:d5: cd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2C:D8:58:00:70:EB:88:35:8D:3B:07:BB:D5:92:04:2F:4C:B4:B8 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:43:7d:4d:33:fe:94:9a:de:e4:b4:7d:5e:cf:ae:05:b9:78: 0e:bb:3e:f6:82:04:2d:ff:99:c9:6c:67:fc:69:c6:9d:53:b0: 31:b3:7a:e3:d8:c7:ab:e7:c9:88:90:9f:cd:3f:5b:72:ef:22: a4:cb:cc:4f:e7:54:78:01:aa:f0:7e:dc:b3:8a:06:54:22:2e: 3e:be:a5:1f:f9:bb:fd:4b:71:e7:5e:8b:ad:40:2d:0b:fe:10: 40:b3:6b:bd:2f:8d:6d:8b:65:2b:6d:e1:5f:cc:36:55:62:7b: a9:6d:7d:3a:6a:5c:55:1c:e0:7e:fe:9e:ba:26:da:94:63:72: 0e:e5:f5:41:17:32:ea:45:d0:e8:a0:5d:4b:71:d4:89:cc:67: 0f:f3:d7:bf:d2:64:eb:42:4a:e2:ee:26:84:e9:3c:fb:ab:8d: cf:1c:88:ad:c5:19:92:2a:31:0d:3f:7b:42:99:26:3c:42:db: a4:5f:a6:24:9c:f8:fd:e6:82:be:ac:a6:0f:98:0d:05:6f:39: 82:0b:f7:5d:e0:e1:ac:f3:cd:63:78:c1:2c:11:f2:92:62:1c: 37:7a:c9:7c:3c:21:b2:4d:c7:9d:65:a4:27:3b:ee:7e:a9:e2: 8b:a1:41:8f:47:18:0a:05:2c:81:64:da:1b:22:fb:69:3d:72: a9:dc:9f:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUwODEwMTY1MzUxWhcNMjUwODE3MTY1MzUxWjAYMRYwFAYD VQQDEw02ODk4Y2VhMC05YmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJFf3Gf5zKwKl4lbyDEHe5LuhDfcxtDCgDrUc5LwquGxSIUzYyP6Ges5tTgh zm77PvIwfSZ0SQ88JOuTYgwb72r7KUsMIQ394RyGkJiO3xzFYJ6uiGR8Ep3ha7n5 YWA5KIpBdwFZGSeBq/F7T8x+WzaRzOik6BIidHqvFGEzyn7fK1TCVjIcdgpAn6WX ctWGIRK5+XUfGmmoVwUuFmA1LFlkcz239GumVJTzkIC9LpPSbPRWtw1zbSvSbVwV DW0wq+6PKAcmUpl1IlfEAHq3XrUl+O3meeZHuaiW7GIE56MM1UK/7AeQCZuYzv+E Akhmnm1C1bIAq5gq/XHh8tXNuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPks2FgA cOuINY07B7vVkgQvTLS4MB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANQ31NM/6Umt7ktH1ez64FuXgOuz72ggQt/5nJbGf8acadU7Axs3rj 2Mer58mIkJ/NP1ty7yKky8xP51R4AarwftyzigZUIi4+vqUf+bv9S3HnXoutQC0L /hBAs2u9L41ti2UrbeFfzDZVYnupbX06alxVHOB+/p66JtqUY3IO5fVBFzLqRdDo oF1LcdSJzGcP89e/0mTrQkri7iaE6Tz7q43PHIitxRmSKjENP3tCmSY8QtukX6Yk nPj95oK+rKYPmA0FbzmCC/dd4OGs881jeMEsEfKSYhw3esl8PCGyTcedZaQnO+5+ qeKLoUGPRxgKBSyBZNobIvtpPXKp3J9w -----END CERTIFICATE-----Generated at Sun Aug 10 18:59:13 2025 by rpki-client