$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft File: x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json) Hash identifier: vYIG+6XSwZthkJcRRpgImL7KqBgh8DR59bJXKuPnOKU= Subject key identifier: E9:F0:63:95:EE:6C:B0:5F:D8:3E:D8:7F:EB:1B:35:9F:C4:FD:B9:4B Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD Certificate issuer: /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD Certificate serial: 0781 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft Manifest number: 077B Signing time: Thu 04 Sep 2025 21:47:10 +0000 Manifest this update: Thu 04 Sep 2025 21:47:09 +0000 Manifest next update: Thu 11 Sep 2025 21:47:09 +0000 Files and hashes: 1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: cM9+cGMOom7/m/VqU2XLgWswex02sgOTSLOFmF/EMjQ=) 2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: wsrS8Hj9tlKWrRYJKi3rNPfDpEOnN9QMK0e9qX0Cib4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD Validity Not Before: Sep 4 21:47:09 2025 GMT Not After : Sep 11 21:47:09 2025 GMT Subject: CN=68ba08dd-2317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:fc:95:33:fd:dd:12:8c:f1:73:ad:bc:75: 83:87:ce:ad:d2:01:65:f7:90:df:10:a6:57:80:c0: 2f:c6:9e:88:9a:6c:f6:df:53:70:50:4c:7d:ab:34: b8:7c:e8:87:b8:cc:ab:4f:27:af:a8:23:5d:02:5c: 64:62:ba:08:d4:73:85:a3:5c:f1:4e:e1:76:f1:d4: 37:d6:5e:d3:41:f2:f4:96:70:44:d5:4f:66:13:13: 2f:f4:eb:c2:25:5a:81:4c:c5:b7:d0:ba:ce:80:26: 80:d7:c9:06:59:11:bf:61:bb:07:da:f0:44:f0:4c: 3e:bd:ea:22:c2:bf:ef:b6:5e:08:64:65:27:d2:db: 68:ab:c0:8e:9f:7a:02:c9:9c:4d:40:51:8a:f7:50: 46:9e:9e:af:90:e7:ab:5d:3b:ae:a8:6f:1d:8d:2d: 91:47:4a:e6:70:6b:72:92:d8:45:ba:6a:f0:c2:9d: b2:e5:e0:29:72:e0:8e:f3:ce:9b:6a:ef:93:ce:1e: e7:06:b8:8d:67:a1:72:25:ce:79:c0:f6:48:b4:16: 60:b3:68:5a:02:0e:4a:b9:db:b2:e0:a6:68:18:2c: 2d:78:77:5b:de:c9:0d:74:0d:d1:b0:ea:51:4f:d1: f1:83:4f:e0:1f:9a:7e:fc:0a:8d:16:9e:fe:18:45: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F0:63:95:EE:6C:B0:5F:D8:3E:D8:7F:EB:1B:35:9F:C4:FD:B9:4B X509v3 Authority Key Identifier: keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:1e:14:04:4d:fc:5f:7f:78:53:c0:f8:8a:f7:d5:69:23:46: 4c:e9:40:dd:81:09:d3:e9:1e:cb:4b:82:10:b2:20:48:7e:94: 27:49:fb:10:97:a1:88:75:c3:0d:56:a8:b9:d4:14:4f:84:73: 96:3b:17:a3:d3:04:21:a4:ef:92:60:ff:4a:58:e9:4a:c0:e8: 6c:68:83:6e:c0:d3:7e:0a:5d:3f:a7:7e:82:16:fb:98:ad:8a: 23:42:4a:fb:42:1b:84:52:db:6e:27:a6:cb:6a:71:df:c8:10: 12:aa:a1:6d:5f:79:90:c4:aa:ba:ba:68:26:87:ed:ca:e6:0e: f5:0b:45:6e:49:2e:ac:ce:2c:95:04:16:77:5e:f3:84:e8:76: dc:43:67:13:70:4d:d0:62:d8:2a:b0:4c:67:f7:18:db:16:15: 60:c4:46:7c:2c:ea:9a:6e:99:2e:79:d5:c7:ac:cd:22:af:85: d6:04:f7:9a:ea:b8:22:75:f2:ac:da:28:a2:0f:d6:c2:e4:c5: be:4c:bc:08:5a:7c:49:01:dd:57:51:c2:2a:f0:0e:b4:ae:20: 28:bc:f1:ba:4e:16:79:f6:8a:25:39:37:fb:e2:07:fc:5e:f6: b7:df:f5:ce:9e:30:5f:29:2c:57:12:06:90:24:93:c5:9f:d0: a4:dd:30:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKEM3OTVFNTlDMDMwQzdDOTI5RkNCRTQ3NDE5RkM1RUM2 OUUxRkFDRkQwHhcNMjUwOTA0MjE0NzA5WhcNMjUwOTExMjE0NzA5WjAYMRYwFAYD VQQDEw02OGJhMDhkZC0yMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTL8lTP93RKM8XOtvHWDh86t0gFl95DfEKZXgMAvxp6Immz231NwUEx9qzS4 fOiHuMyrTyevqCNdAlxkYroI1HOFo1zxTuF28dQ31l7TQfL0lnBE1U9mExMv9OvC JVqBTMW30LrOgCaA18kGWRG/YbsH2vBE8Ew+veoiwr/vtl4IZGUn0ttoq8COn3oC yZxNQFGK91BGnp6vkOerXTuuqG8djS2RR0rmcGtykthFumrwwp2y5eApcuCO886b au+Tzh7nBriNZ6FyJc55wPZItBZgs2haAg5Kuduy4KZoGCwteHdb3skNdA3RsOpR T9Hxg0/gH5p+/AqNFp7+GEXxXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnwY5Xu bLBf2D7Yf+sbNZ/E/blLMB8GA1UdIwQYMBaAFMeV5ZwDDHySn8vkdBn8XsaeH6z9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi9CMDE4QUQ5NjI5 MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZKS2Z5LVIwR2Z4ZXhwNGZy UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1WGxuQU1NZkpLZnktUjBHZnhleHA0ZnJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZFQi9CMDE4QUQ5NjI5MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZK S2Z5LVIwR2Z4ZXhwNGZyUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRHhQETfxff3hTwPiK99VpI0ZM6UDdgQnT6R7LS4IQsiBIfpQnSfsQ l6GIdcMNVqi51BRPhHOWOxej0wQhpO+SYP9KWOlKwOhsaINuwNN+Cl0/p36CFvuY rYojQkr7QhuEUttuJ6bLanHfyBASqqFtX3mQxKq6umgmh+3K5g71C0VuSS6sziyV BBZ3XvOE6HbcQ2cTcE3QYtgqsExn9xjbFhVgxEZ8LOqabpkuedXHrM0ir4XWBPea 6rgidfKs2iiiD9bC5MW+TLwIWnxJAd1XUcIq8A60riAovPG6ThZ59oolOTf74gf8 Xva33/XOnjBfKSxXEgaQJJPFn9Ck3TDH -----END CERTIFICATE-----Generated at Sat Sep 6 13:45:44 2025 by rpki-client