$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json) Hash identifier: j4qobaW8Hwog0hzeIjDYK9V5bF8BddOvFld+ANz2HZM= Subject key identifier: 95:5D:1D:09:23:A8:94:A1:63:B0:2B:4B:09:D7:C2:94:1E:8F:61:71 Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49 Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft Manifest number: 79 Signing time: Fri 05 Sep 2025 07:14:44 +0000 Manifest this update: Fri 05 Sep 2025 07:14:43 +0000 Manifest next update: Fri 12 Sep 2025 07:14:43 +0000 Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: HGRuKygwSj1+Q/w0vQn9mlWlmrtTDCM373JIqXCX+O0=) 2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 8Wzv5veel/E+M5qspAlwBsfA0pAvjm21LyceiyRo5cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449 Validity Not Before: Sep 5 07:14:43 2025 GMT Not After : Sep 12 07:14:43 2025 GMT Subject: CN=68ba8de3-04b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:c4:bc:c8:df:b6:e6:27:81:f3:f0:8b:0a: e1:58:73:b6:66:ac:0a:73:33:2e:3f:ca:b3:35:a4: 88:00:b8:3a:9c:06:c4:e9:04:1a:1a:c4:60:77:11: 4a:34:df:e5:52:c5:46:0e:c6:4b:08:a6:35:54:5f: 50:f6:38:c6:4d:31:ef:43:3f:8f:98:df:3f:06:2c: 15:ac:29:55:1b:d6:1b:52:d3:96:e4:b8:63:1e:a9: 02:cb:71:3b:01:eb:14:44:ce:0a:84:76:e7:f8:25: 8b:a3:42:ba:1c:38:e3:e7:7e:cd:49:01:42:70:da: 45:c2:9a:7e:bc:4a:6d:01:a8:c3:fd:60:11:52:59: e8:1c:9f:8c:fa:df:f6:82:ef:ff:4d:c4:d5:a8:4f: 5e:55:70:a4:cb:7a:8f:14:f7:e0:07:ec:d1:92:e2: 65:ef:c0:0b:95:d5:bc:05:29:08:ae:d5:73:a1:c6: 8e:7f:a4:44:da:4c:4b:ee:1a:19:31:b1:b6:8c:99: e8:54:cd:f8:af:17:70:84:b3:6d:fd:71:36:1d:14: b8:53:4a:14:c1:56:18:b2:b7:4a:8c:b6:b1:df:e9: 4e:68:82:a3:3d:fb:d7:d8:84:f3:b8:b5:4b:c6:d8: 4b:c5:b7:75:07:07:91:04:bf:9a:49:de:01:19:c6: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5D:1D:09:23:A8:94:A1:63:B0:2B:4B:09:D7:C2:94:1E:8F:61:71 X509v3 Authority Key Identifier: keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ab:6f:3b:aa:61:7a:e5:69:6f:47:23:07:b0:79:34:ac:ce: 1f:fe:89:e0:f5:d5:bd:41:15:ab:6a:30:bf:30:26:13:21:31: d3:f5:7a:5f:a3:ce:43:8c:7b:16:09:66:fe:47:a2:d4:e6:1f: 8d:10:d5:33:e1:02:ef:f7:6c:0e:3b:96:d6:f0:87:7d:ca:46: 5c:71:9a:9b:91:ee:45:5e:f3:d5:3e:3b:4b:5f:ce:2f:f1:3d: 49:c9:e6:1e:33:e1:7c:50:af:57:e1:27:bc:2e:95:02:01:09: 44:66:64:8e:c4:75:4d:99:6c:a0:f5:b6:40:64:d0:4a:ed:7a: 0b:f1:60:8d:b2:01:3e:fe:a3:96:a0:6c:80:13:e5:12:d9:cc: e3:14:4b:a7:fd:aa:d2:f1:12:92:6f:32:a8:81:95:69:31:0d: ea:03:44:6a:8f:04:52:bf:1c:3d:f3:bd:d8:1d:5f:d2:57:24: 72:86:c8:ad:5f:4b:04:90:e2:15:47:de:87:09:a3:38:db:fa: 1a:3a:2c:ee:40:14:b4:d2:51:d3:e3:57:78:69:45:8f:c4:7a: 9d:db:84:b7:47:c6:49:7b:58:bc:b5:0f:a1:41:80:0f:97:d8: 35:38:d0:c9:70:56:aa:7c:a3:a7:90:31:8d:c2:82:fe:69:45: 6f:7c:bb:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODZDMjExMC8GA1UEBRMoQzYyNjU4MzI5ODU3OEQxRDRBRjcyNzNFQkQ3OTFDNzIz MEEzNzQ0OTAeFw0yNTA5MDUwNzE0NDNaFw0yNTA5MTIwNzE0NDNaMBgxFjAUBgNV BAMTDTY4YmE4ZGUzLTA0YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC36cS8yN+25ieB8/CLCuFYc7ZmrApzMy4/yrM1pIgAuDqcBsTpBBoaxGB3EUo0 3+VSxUYOxksIpjVUX1D2OMZNMe9DP4+Y3z8GLBWsKVUb1htS05bkuGMeqQLLcTsB 6xREzgqEduf4JYujQrocOOPnfs1JAUJw2kXCmn68Sm0BqMP9YBFSWegcn4z63/aC 7/9NxNWoT15VcKTLeo8U9+AH7NGS4mXvwAuV1bwFKQiu1XOhxo5/pETaTEvuGhkx sbaMmehUzfivF3CEs239cTYdFLhTShTBVhiyt0qMtrHf6U5ogqM9+9fYhPO4tUvG 2EvFt3UHB5EEv5pJ3gEZxvlDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlV0dCSOo lKFjsCtLCdfClB6PYXEwHwYDVR0jBBgwFoAUxiZYMphXjR1K9yc+vXkccjCjdEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NkMyLzFEMkYwNzI0RDE3 RjExRUZCMzg0NjkyOEM0RjlBRTAyL3hpWllNcGhYalIxSzl5Yy12WGtjY2pDamRF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGlaWU1waFhqUjFLOXljLXZYa2NjakNqZEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 NkMyLzFEMkYwNzI0RDE3RjExRUZCMzg0NjkyOEM0RjlBRTAyL3hpWllNcGhYalIx Szl5Yy12WGtjY2pDamRFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ6rbzuqYXrlaW9HIweweTSszh/+ieD11b1BFatqML8wJhMhMdP1el+j zkOMexYJZv5HotTmH40Q1TPhAu/3bA47ltbwh33KRlxxmpuR7kVe89U+O0tfzi/x PUnJ5h4z4XxQr1fhJ7wulQIBCURmZI7EdU2ZbKD1tkBk0ErtegvxYI2yAT7+o5ag bIAT5RLZzOMUS6f9qtLxEpJvMqiBlWkxDeoDRGqPBFK/HD3zvdgdX9JXJHKGyK1f SwSQ4hVH3ocJozjb+ho6LO5AFLTSUdPjV3hpRY/Eep3bhLdHxkl7WLy1D6FBgA+X 2DU40MlwVqp8o6eQMY3Cgv5pRW98uxQ= -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:10 2025 by rpki-client