$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: NtdXT9IwQ01KQcU/Oz3oIP8KznLzyh9wFs4hgNx3Dek= Subject key identifier: A3:E4:08:03:C0:71:76:D4:A7:49:00:93:0C:49:C4:23:C3:8E:5C:9D Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 2564 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 2554 Signing time: Sat 06 Sep 2025 15:42:46 +0000 Manifest this update: Sat 06 Sep 2025 15:42:46 +0000 Manifest next update: Sat 13 Sep 2025 15:42:46 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: DISYzMgmM2h2AbNvloSpgl09hsIfjRjkSZh1Z/0WOd8=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: xnMX5X2YJrVvWA8Z+ilrknMulrMIGU6wGg57HKZlkt0=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: f2BKC0SfvfCVZzewNCyKNQgaDwalvIHM6ibs4HCHEDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9572 (0x2564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: Sep 6 15:42:46 2025 GMT Not After : Sep 13 15:42:46 2025 GMT Subject: CN=68bc5676-5609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:4b:84:ec:e3:fe:7d:05:46:a5:37:e4:b6: 67:2d:a0:81:ec:e0:bd:94:d6:80:02:44:48:9b:9b: 30:55:17:cc:01:57:83:5b:8c:04:95:f8:0d:02:6f: e1:8e:ad:17:b4:3f:8c:bb:e3:50:b2:91:60:51:f4: a9:be:59:05:66:db:c7:ef:c0:b5:22:e6:a5:db:43: 3d:76:19:18:e1:3f:aa:ff:dd:64:71:18:0f:5f:5c: 38:3e:18:dd:9f:cb:e9:b6:83:a8:d6:21:9a:b1:74: 73:eb:5e:76:5e:0d:59:bd:e9:72:89:10:d1:fd:59: a0:0f:7e:4e:11:bf:c6:ee:70:b7:f6:09:6e:96:4d: bd:fd:93:d2:d9:ba:fd:ef:ec:4f:ee:0b:64:5b:26: 9b:83:6f:ca:c5:14:4d:db:66:06:3f:2a:43:20:27: b9:65:df:97:4b:fd:b6:a1:7e:20:9f:16:91:97:58: 6b:8a:24:cd:0c:57:e6:a6:aa:24:ea:3d:26:24:72: 27:da:5e:f1:ad:ea:63:d3:fa:16:f4:cd:03:7d:da: 4f:f7:3e:6b:97:4e:8b:cb:52:bf:ae:9c:94:dc:23: 89:33:35:de:6f:79:1a:51:bb:1a:5b:f4:de:ad:82: f2:7a:25:3c:59:29:89:45:55:29:74:91:f5:31:0a: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E4:08:03:C0:71:76:D4:A7:49:00:93:0C:49:C4:23:C3:8E:5C:9D X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:7b:2d:11:b2:c0:ea:b6:22:9f:09:fd:51:ee:41:85:a2:94: 3e:27:b0:4f:0a:b8:62:d2:c2:43:5a:19:1d:fa:a5:8a:08:42: f1:3a:c7:0b:cf:f3:2a:51:8a:34:b8:0a:0b:1b:80:df:cb:36: 14:64:0f:39:c1:e0:ec:7c:74:77:17:ad:c2:b4:9b:60:cf:56: 57:b0:1a:05:8e:f2:02:c6:b9:13:44:81:32:dd:4e:3f:72:ec: df:45:d5:cb:f8:46:8b:da:88:fc:f8:a0:eb:20:ef:f9:70:8e: 16:68:53:5b:c6:96:0a:ed:65:b6:8c:c8:a4:e8:a3:6f:b8:c1: 9c:b9:ff:74:f0:6a:b9:0b:f2:6c:1a:3d:18:2e:3f:36:73:0d: 23:a6:55:e7:c5:be:b9:5f:19:e2:91:73:0a:9e:4b:d5:f8:26: a0:03:cd:18:ec:3a:ac:bc:e2:62:8f:33:21:e4:39:8a:76:5f: c1:bd:44:b2:6b:5f:8e:da:1d:96:c8:2f:4b:56:76:61:49:e0: 54:04:ad:9b:ee:1a:0c:6b:99:0b:55:47:27:51:4a:35:ef:51: d0:5e:b1:64:13:c7:45:db:fe:75:1b:86:b5:a8:8c:1d:15:32: dd:7b:ab:5f:2e:6b:35:f5:8c:54:89:56:39:4c:5a:a0:8a:86: b5:dd:bf:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUwOTA2MTU0MjQ2WhcNMjUwOTEzMTU0MjQ2WjAYMRYwFAYD VQQDEw02OGJjNTY3Ni01NjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxddLhOzj/n0FRqU35LZnLaCB7OC9lNaAAkRIm5swVRfMAVeDW4wElfgNAm/h jq0XtD+Mu+NQspFgUfSpvlkFZtvH78C1Iual20M9dhkY4T+q/91kcRgPX1w4Phjd n8vptoOo1iGasXRz6152Xg1ZvelyiRDR/VmgD35OEb/G7nC39glulk29/ZPS2br9 7+xP7gtkWyabg2/KxRRN22YGPypDICe5Zd+XS/22oX4gnxaRl1hriiTNDFfmpqok 6j0mJHIn2l7xrepj0/oW9M0DfdpP9z5rl06Ly1K/rpyU3COJMzXeb3kaUbsaW/Te rYLyeiU8WSmJRVUpdJH1MQrg6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPkCAPA cXbUp0kAkwxJxCPDjlydMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBey0RssDqtiKfCf1R7kGFopQ+J7BPCrhi0sJDWhkd+qWKCELxOscL z/MqUYo0uAoLG4DfyzYUZA85weDsfHR3F63CtJtgz1ZXsBoFjvICxrkTRIEy3U4/ cuzfRdXL+EaL2oj8+KDrIO/5cI4WaFNbxpYK7WW2jMik6KNvuMGcuf908Gq5C/Js Gj0YLj82cw0jplXnxb65XxnikXMKnkvV+CagA80Y7DqsvOJijzMh5DmKdl/BvUSy a1+O2h2WyC9LVnZhSeBUBK2b7hoMa5kLVUcnUUo171HQXrFkE8dF2/51G4a1qIwd FTLde6tfLms19YxUiVY5TFqgioa13b/K -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:53 2025 by rpki-client