$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: /qQSTBsdRByLXjGcjq675hq1+vj0hckqz9/6xsQdcrY= Subject key identifier: 8A:03:96:4F:F0:2F:A4:40:1A:E7:D0:72:8E:BE:95:D9:83:8D:36:03 Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 30E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 3076 Signing time: Thu 04 Sep 2025 15:31:29 +0000 Manifest this update: Thu 04 Sep 2025 15:31:29 +0000 Manifest next update: Thu 11 Sep 2025 15:31:29 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: LjfnbQRVs/UFryVAusDQUYMh30gTzdjLdw5FezJbl/E=) 2: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: VA85W2DwFcltrLQso3iWrGCK1p8MpteiBw4nv3k0XAA=) 3: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wLLmVC0SWl0ZV8inkOYwu+rXfwtuFkyqT9a9NHg4fsQ=) 4: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: u9Tgdh2mj51OfGhJuvlQ1Gy4m51DMyrbUiBF/Y8Vkj0=) 5: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: 7Dey0JGvmlqmWqhli9F4C8bTHZAZtymVOQxhxzYVfX4=) 6: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: aQNQHDH++NuHPMuhQ++m65fQNUDwylkPh47sY3kbEIs=) 7: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: yOrqaE9NockE6FGEvsKt1/X3bfnUWyv76Yj9yl2GGVQ=) 8: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: e7Dy/yrmu0hcKMxT0huel1vNg0CC7+GJucCX8fymY2o=) 9: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: AE5EIx4+Tp7/f50+D6PpmR05HTKi7X3OlU7mCpH4y7o=) 10: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: S5yp4tMLnbSyML+bu0OdmFYzHfjyLDv16/Xr3BO1cSA=) 11: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: egr/0pi0LBVzAfSriSf0oLVb0kHzcxRy+vyO59CHJ/Y=) 12: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: hoEdWJgd+iSbkEJxwwEB2OfxtCPHdbL8GJWAjTC4NaI=) 13: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: 4+IsQGE9DpxrqXHaGDjhfyFcaRugPanxx+iKmCYBXD4=) 14: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: Ak9ulSCBepvFHHWrtvRX78jK7UjLDTIXpbZCAO4ELzg=) 15: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: U9tQePLnZPrszhMNvs/YV6XDVfsxC3+GK3UJVlQgINc=) 16: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: ADGrwVjYVax00+B1Ntoo1NH+4zxjH9qwLNY0BDM8s3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12515 (0x30e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Sep 4 15:31:29 2025 GMT Not After : Sep 11 15:31:29 2025 GMT Subject: CN=68b9b0d1-d5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:50:b9:86:42:fc:53:8c:51:f1:22:39:7f: f6:52:63:c9:ad:f6:e8:cb:3f:df:55:f7:36:44:66: e2:ff:cd:c7:d9:96:ba:0d:a6:43:04:e6:b2:74:cc: 0d:3b:36:e4:39:29:50:09:b5:3d:76:a6:f6:e1:2b: d6:e7:c9:79:71:98:04:cf:3b:aa:cc:a8:24:ea:75: 42:70:c7:31:24:f5:13:10:ba:ff:36:ee:4a:e5:b0: e7:3c:7c:2e:1c:70:77:17:af:4b:6b:e9:fe:45:be: be:d5:95:8f:0f:69:e6:77:40:be:7b:18:75:61:d3: f9:c6:fc:9f:c1:bd:86:d6:4f:10:96:99:0f:29:b5: 77:ef:ed:c3:a5:e4:c4:7b:16:c0:aa:8d:9b:31:65: 99:1f:60:ba:ff:d5:4e:5c:3f:e2:f7:f9:ae:4e:8b: 86:ef:60:48:23:51:c2:a4:37:d7:5b:64:76:e1:4a: cd:87:33:cc:b3:1c:93:2f:14:ab:08:9d:26:b7:67: 5a:9c:93:8a:de:5f:b3:37:ae:2d:32:5d:c3:e9:55: a2:10:0b:c2:91:35:3a:75:05:a6:ad:d0:b2:a7:27: 0f:d2:d7:a5:20:bf:62:c2:34:c9:ea:fd:cb:1b:63: d3:56:5b:dd:d4:27:e1:30:c2:e5:78:b7:ba:9c:5c: de:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:96:4F:F0:2F:A4:40:1A:E7:D0:72:8E:BE:95:D9:83:8D:36:03 X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:99:f8:44:28:77:e1:74:0a:bf:77:20:db:e4:20:2c:48:75: 02:49:57:17:30:9e:06:b2:74:81:57:4b:c7:b2:70:be:cc:e6: 38:ed:af:c5:29:eb:65:ce:1f:fa:c7:ae:f0:5c:c7:b5:b3:c8: a6:07:5b:65:bb:a3:bc:16:9f:9e:b0:ef:92:ab:aa:1f:1f:a7: 66:bc:00:18:1f:ed:ae:a7:cc:37:62:dc:87:ca:f7:dd:40:e8: 29:46:f0:07:46:64:37:93:dd:de:82:2f:b4:54:ff:24:0c:8c: af:63:5a:fa:f3:63:a7:f9:b6:e8:a2:d2:3e:d7:dc:0b:9e:c5: 30:9d:a1:06:4b:6f:38:61:a1:0a:dd:00:f2:8f:c4:29:01:38: b7:ba:47:25:36:49:86:17:68:b6:92:16:53:e7:5e:27:4d:fe: c4:93:79:71:4b:e4:7b:ce:2f:be:db:f1:b9:8d:c3:07:6b:9c: 85:55:28:5a:27:6e:85:b8:eb:83:82:3d:df:99:e4:ee:5a:8f: 87:16:83:8b:4c:ff:47:8d:4d:fd:3e:1b:27:12:03:bc:cb:e1: 1f:8b:c4:4e:ad:73:a8:f1:e3:37:a0:3d:b8:0f:df:99:16:fc: e9:89:03:bc:cb:7b:2a:ab:9e:1f:6a:2f:66:6a:89:10:44:e5: 84:4a:33:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjUwOTA0MTUzMTI5WhcNMjUwOTExMTUzMTI5WjAYMRYwFAYD VQQDEw02OGI5YjBkMS1kNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5pQuYZC/FOMUfEiOX/2UmPJrfboyz/fVfc2RGbi/83H2Za6DaZDBOaydMwN OzbkOSlQCbU9dqb24SvW58l5cZgEzzuqzKgk6nVCcMcxJPUTELr/Nu5K5bDnPHwu HHB3F69La+n+Rb6+1ZWPD2nmd0C+exh1YdP5xvyfwb2G1k8QlpkPKbV37+3DpeTE exbAqo2bMWWZH2C6/9VOXD/i9/muTouG72BII1HCpDfXW2R24UrNhzPMsxyTLxSr CJ0mt2danJOK3l+zN64tMl3D6VWiEAvCkTU6dQWmrdCypycP0telIL9iwjTJ6v3L G2PTVlvd1CfhMMLleLe6nFzeOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoDlk/w L6RAGufQco6+ldmDjTYDMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABmfhEKHfhdAq/dyDb5CAsSHUCSVcXMJ4GsnSBV0vHsnC+zOY47a/F Ketlzh/6x67wXMe1s8imB1tlu6O8Fp+esO+Sq6ofH6dmvAAYH+2up8w3YtyHyvfd QOgpRvAHRmQ3k93egi+0VP8kDIyvY1r682On+bbootI+19wLnsUwnaEGS284YaEK 3QDyj8QpATi3ukclNkmGF2i2khZT514nTf7Ek3lxS+R7zi++2/G5jcMHa5yFVSha J26FuOuDgj3fmeTuWo+HFoOLTP9HjU39PhsnEgO8y+Efi8ROrXOo8eM3oD24D9+Z FvzpiQO8y3sqq54fai9maokQROWESjPT -----END CERTIFICATE-----Generated at Sat Sep 6 14:26:08 2025 by rpki-client