$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft File: XozcAfwJtFN0mgHuUjmzXt4kvmw.mft (raw, json) Hash identifier: 6opKzzR1oLeQv/lnQppLqiFEQ/pq1FB9OKOWDoJHg+s= Subject key identifier: 9A:DE:5B:25:B5:9C:FB:C7:9F:D7:41:E3:3B:81:C8:D9:21:E5:65:3B Authority key identifier: 5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C Certificate issuer: /CN=A91F4CFA/serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C Certificate serial: 075E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft Manifest number: 0758 Signing time: Sun 10 Aug 2025 21:43:16 +0000 Manifest this update: Sun 10 Aug 2025 21:43:16 +0000 Manifest next update: Sun 17 Aug 2025 21:43:16 +0000 Files and hashes: 1: XozcAfwJtFN0mgHuUjmzXt4kvmw.crl (hash: 7mGjqotUQuTejf6MubwB9qbpmsUUx0AhFC4WWtboai4=) 2: A5D573E4305A11EB921D6332C4F9AE02.roa (hash: YBEc7X7y2zLa5OdEGOrRlwoEuxYs7fU2wrxzm81YklQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 21:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1886 (0x75e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4CFA, serialNumber=5E8CDC01FC09B453749A01EE5239B35EDE24BE6C Validity Not Before: Aug 10 21:43:16 2025 GMT Not After : Aug 17 21:43:16 2025 GMT Subject: CN=68991274-a658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:f6:53:65:72:44:03:3f:e3:c3:11:e2:c1: 59:16:d8:13:c0:7e:cb:fb:20:38:65:f8:57:e2:46: 88:72:ff:80:94:6c:68:62:1d:84:fb:53:87:96:76: 3f:e3:ce:b3:70:0a:b1:6d:e9:99:de:1b:5a:02:3e: ad:a2:14:62:25:d9:bf:0f:18:64:ed:05:21:18:0a: bd:67:f2:6d:29:2d:60:b8:f4:9d:75:6b:ea:4c:bf: c3:04:a3:db:90:32:5f:03:b0:63:53:4b:6b:61:74: 17:36:67:1f:88:a8:d5:6f:75:06:ea:51:e0:6f:cc: a3:c6:36:c4:e9:b3:bd:2a:72:65:ab:82:bc:20:4b: ac:0f:36:2e:f0:b9:8e:1a:38:a1:03:d4:03:67:4b: 1c:35:b2:ef:1b:09:dc:28:4d:a0:7f:a0:07:cc:81: 72:7a:e0:c0:1f:ef:3d:8e:be:1d:8a:dd:ec:e5:1c: 00:ef:83:d5:12:81:ad:d2:5f:31:11:1a:6a:31:4e: 60:15:04:cc:8c:6e:f4:16:26:ac:88:10:e8:1c:a0: 75:91:c5:3e:7c:6c:54:7f:7a:ff:d4:87:54:35:db: 16:a3:d8:55:b5:26:4a:bb:13:9c:fc:95:65:99:7b: 3b:db:03:4a:16:51:d3:a8:77:36:30:c6:b4:35:e6: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DE:5B:25:B5:9C:FB:C7:9F:D7:41:E3:3B:81:C8:D9:21:E5:65:3B X509v3 Authority Key Identifier: keyid:5E:8C:DC:01:FC:09:B4:53:74:9A:01:EE:52:39:B3:5E:DE:24:BE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XozcAfwJtFN0mgHuUjmzXt4kvmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4CFA/1C2FAB2E305911EBB835C130C4F9AE02/XozcAfwJtFN0mgHuUjmzXt4kvmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:21:3c:50:c9:ff:22:5c:e4:ea:e1:2f:69:80:86:15:e7:cb: 0a:fb:11:55:93:3e:53:f5:57:dc:0f:e9:1b:d1:aa:86:6e:cc: dd:ec:92:7e:eb:21:b2:74:c7:45:d4:90:10:ea:cf:66:e2:32: 97:1b:17:5c:26:95:a6:5e:c6:98:63:17:97:51:c2:32:93:34: 5a:59:a2:40:c1:8c:5c:e8:74:75:53:93:33:0a:0d:ea:b0:9d: 0c:f8:cf:fc:a2:87:5d:56:5a:0f:37:35:c3:b9:f6:28:3b:35: 8f:4c:5a:9a:2a:45:da:f3:5e:10:b8:9e:a9:b3:20:86:1e:f0: 69:ad:da:3f:f1:81:05:a8:68:a7:78:22:5c:90:c9:12:5b:74: ce:2b:9b:ac:e5:7c:f7:e7:e0:ce:19:7b:6d:26:07:58:f8:3d: ea:7e:f9:53:93:9b:01:27:c9:de:5a:8d:d8:73:fa:4e:74:7b: b8:a7:9f:dc:51:23:65:21:ed:4f:b2:ad:99:d9:82:a7:23:be: b8:84:5c:7d:79:b4:05:3c:00:13:a2:d6:87:da:20:45:97:57: 6a:7a:77:3b:6f:4a:de:5e:4b:23:f8:3c:70:5a:af:c6:0b:0d: fd:d2:0b:ed:57:22:9d:54:28:56:29:22:37:dc:b3:79:8a:93: a9:ac:30:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDRkExMTAvBgNVBAUTKDVFOENEQzAxRkMwOUI0NTM3NDlBMDFFRTUyMzlCMzVF REUyNEJFNkMwHhcNMjUwODEwMjE0MzE2WhcNMjUwODE3MjE0MzE2WjAYMRYwFAYD VQQDEw02ODk5MTI3NC1hNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbD2U2VyRAM/48MR4sFZFtgTwH7L+yA4ZfhX4kaIcv+AlGxoYh2E+1OHlnY/ 486zcAqxbemZ3htaAj6tohRiJdm/Dxhk7QUhGAq9Z/JtKS1guPSddWvqTL/DBKPb kDJfA7BjU0trYXQXNmcfiKjVb3UG6lHgb8yjxjbE6bO9KnJlq4K8IEusDzYu8LmO GjihA9QDZ0scNbLvGwncKE2gf6AHzIFyeuDAH+89jr4dit3s5RwA74PVEoGt0l8x ERpqMU5gFQTMjG70FiasiBDoHKB1kcU+fGxUf3r/1IdUNdsWo9hVtSZKuxOc/JVl mXs72wNKFlHTqHc2MMa0NebCRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJreWyW1 nPvHn9dB4zuByNkh5WU7MB8GA1UdIwQYMBaAFF6M3AH8CbRTdJoB7lI5s17eJL5s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNENGQS8xQzJGQUIyRTMw NTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRGTjBtZ0h1VWptelh0NGt2 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvemNBZndKdEZOMG1nSHVVam16WHQ0a3Ztdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NENGQS8xQzJGQUIyRTMwNTkxMUVCQjgzNUMxMzBDNEY5QUUwMi9Yb3pjQWZ3SnRG TjBtZ0h1VWptelh0NGt2bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUITxQyf8iXOTq4S9pgIYV58sK+xFVkz5T9VfcD+kb0aqGbszd7JJ+ 6yGydMdF1JAQ6s9m4jKXGxdcJpWmXsaYYxeXUcIykzRaWaJAwYxc6HR1U5MzCg3q sJ0M+M/8ooddVloPNzXDufYoOzWPTFqaKkXa814QuJ6psyCGHvBprdo/8YEFqGin eCJckMkSW3TOK5us5Xz35+DOGXttJgdY+D3qfvlTk5sBJ8neWo3Yc/pOdHu4p5/c USNlIe1Psq2Z2YKnI764hFx9ebQFPAATotaH2iBFl1dqenc7b0reXksj+DxwWq/G Cw390gvtVyKdVChWKSI33LN5ipOprDAQ -----END CERTIFICATE-----Generated at Tue Aug 12 14:49:07 2025 by rpki-client