$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: 0ttyEKqbz/uPr44f9SgY8t77QPYt1rS2wgd7MxMDyiY= Subject key identifier: D2:46:52:7A:24:4C:17:00:F1:E4:E6:C7:18:F3:EA:71:AD:3E:F7:AB Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 35 Signing time: Wed 03 Sep 2025 08:19:44 +0000 Manifest this update: Wed 03 Sep 2025 08:19:43 +0000 Manifest next update: Wed 10 Sep 2025 08:19:43 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: 3yXXk0L4iI+BZT3LtPC07LaR1pkhqn1uNaYy1zHn5Ak=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GaxzV7+DkMGpd57xnNkPMderTpqjXPXFd/uGzJlcq9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Sep 3 08:19:43 2025 GMT Not After : Sep 10 08:19:43 2025 GMT Subject: CN=68b7fa20-13bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fc:a5:af:fd:bd:1d:1b:73:34:f7:51:b7:10: f3:4d:f5:90:7c:4b:70:c0:35:89:54:6e:1d:de:0a: 38:be:68:cc:fd:8e:ce:59:e9:50:f0:ad:7c:fc:5c: e4:bb:88:46:75:40:e5:92:16:9c:94:e8:d8:cf:0e: 6f:09:43:0c:9b:8b:33:b5:3f:da:87:2b:82:8a:61: ad:be:65:4b:12:6b:a6:d7:c9:96:d5:20:f7:7a:25: b7:aa:c9:d4:bc:88:47:d3:55:0d:c4:6d:57:ce:2b: 0f:42:b1:6e:11:20:92:f1:87:5b:fb:7c:70:a2:f8: e7:c1:4b:82:16:ef:de:54:19:17:54:80:a3:d6:0d: 2f:eb:fb:da:c0:b7:94:a1:8e:79:c7:c5:b3:70:b1: 17:d2:22:a4:2d:0b:a2:6e:1d:41:ad:9f:1a:fb:07: 74:70:60:a0:95:11:39:1f:a3:06:43:48:48:d8:f7: e7:1c:e9:d9:a7:dc:b4:13:68:9f:05:c2:94:ec:9f: 6f:6b:22:a8:d1:58:b8:0f:25:cf:8a:10:44:a4:8f: b4:20:1d:4e:cc:bd:c5:b2:ac:e0:86:eb:7a:7c:f3: bb:2e:f2:a2:f1:72:29:1d:67:9e:e7:ba:ec:52:ff: f9:3a:75:a6:60:b9:b2:aa:82:7b:09:68:ad:1a:35: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:46:52:7A:24:4C:17:00:F1:E4:E6:C7:18:F3:EA:71:AD:3E:F7:AB X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f8:de:cf:98:a1:0e:4c:6f:ae:65:ee:24:6c:c9:21:ee:9a: 49:f6:24:74:0c:3b:00:23:4b:e2:14:65:51:6e:59:e3:62:cb: 28:f7:02:92:07:db:27:67:6c:20:8f:5f:c7:fc:ef:86:e4:be: 6a:36:26:41:46:f9:27:47:00:fd:e2:a7:5d:9a:75:eb:ca:08: 5a:39:38:06:e4:43:36:d9:4e:f5:07:f7:99:39:15:d8:ea:44: b4:ea:36:a0:05:bc:00:64:74:cd:a0:15:7f:04:ef:73:26:25: 93:d5:13:24:e9:51:e5:ff:a2:c0:94:9d:0f:0b:d8:00:ed:b6: 85:e8:57:bb:d8:66:d1:0b:36:f4:d3:34:32:7b:49:8a:11:1c: b2:68:18:d2:27:59:fe:21:4c:f0:d3:6a:98:06:60:f2:44:46: 54:18:00:4c:6f:da:18:5a:10:34:d5:fa:74:cd:fe:cf:50:8a: 38:29:ca:aa:77:28:63:f4:97:41:15:e7:da:2e:65:cb:10:f0: eb:76:12:69:af:36:8b:0a:41:81:ea:97:0c:0d:30:73:9a:b0: c8:5e:5d:6e:3e:1a:da:aa:83:1a:8b:65:9e:ae:f2:e4:de:94: 6f:2f:1f:40:a4:21:ed:22:a9:84:ae:b3:21:d4:4d:4d:57:8f: 98:3b:e7:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTA5MDMwODE5NDNaFw0yNTA5MTAwODE5NDNaMBgxFjAUBgNV BAMTDTY4YjdmYTIwLTEzYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi/KWv/b0dG3M091G3EPNN9ZB8S3DANYlUbh3eCji+aMz9js5Z6VDwrXz8XOS7 iEZ1QOWSFpyU6NjPDm8JQwybizO1P9qHK4KKYa2+ZUsSa6bXyZbVIPd6JbeqydS8 iEfTVQ3EbVfOKw9CsW4RIJLxh1v7fHCi+OfBS4IW795UGRdUgKPWDS/r+9rAt5Sh jnnHxbNwsRfSIqQtC6JuHUGtnxr7B3RwYKCVETkfowZDSEjY9+cc6dmn3LQTaJ8F wpTsn29rIqjRWLgPJc+KEESkj7QgHU7MvcWyrOCG63p887su8qLxcikdZ57nuuxS //k6daZgubKqgnsJaK0aNfzjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0kZSeiRM FwDx5ObHGPPqca0+96swHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKj43s+YoQ5Mb65l7iRsySHumkn2JHQMOwAjS+IUZVFuWeNiyyj3ApIH 2ydnbCCPX8f874bkvmo2JkFG+SdHAP3ip12adevKCFo5OAbkQzbZTvUH95k5Fdjq RLTqNqAFvABkdM2gFX8E73MmJZPVEyTpUeX/osCUnQ8L2ADttoXoV7vYZtELNvTT NDJ7SYoRHLJoGNInWf4hTPDTapgGYPJERlQYAExv2hhaEDTV+nTN/s9Qijgpyqp3 KGP0l0EV59ouZcsQ8Ot2EmmvNosKQYHqlwwNMHOasMheXW4+GtqqgxqLZZ6u8uTe lG8vH0CkIe0iqYSusyHUTU1Xj5g75xM= -----END CERTIFICATE-----Generated at Thu Sep 4 14:01:35 2025 by rpki-client