$ rpki-client -vvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft File: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json) Hash identifier: LZudtRzLeYg4EXJtx7FkBjnX6kIkPilMor3wrcv9Ink= Subject key identifier: DA:63:2C:AF:6D:44:8C:F6:DA:80:5C:1D:A0:A3:9D:9E:24:D0:1A:48 Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 Certificate issuer: /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft Manifest number: 0B1B Signing time: Thu 18 Sep 2025 19:31:58 +0000 Manifest this update: Thu 18 Sep 2025 19:31:57 +0000 Manifest next update: Thu 25 Sep 2025 19:31:57 +0000 Files and hashes: 1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: QKUsq96zM1Rxm3c6jvCUXfOK/Iiod9YSzJ05KfNERyw=) 2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: ArNuSAGS500F2Au8BkBemb4Fqw5PMgC4H5tbUjnLNK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Validity Not Before: Sep 18 19:31:57 2025 GMT Not After : Sep 25 19:31:57 2025 GMT Subject: CN=68cc5e2d-e76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:44:9b:07:cd:bf:ee:67:b0:da:01:ce:38: da:27:f3:aa:83:3b:b5:31:e9:23:ee:4c:78:98:51: 37:a5:36:07:f2:87:78:9d:70:dc:81:cd:0f:74:4c: 1c:1e:36:fd:f1:b4:8c:22:df:98:3f:d7:1e:75:11: 67:b9:1d:00:41:65:a7:ac:35:c3:09:1e:5e:7e:3b: 0f:bb:63:9e:4d:d3:98:d5:e2:8f:c6:3e:22:49:f9: 1c:f0:35:26:4b:4d:1f:e6:9c:c7:d0:39:78:90:7e: 45:8b:df:71:d7:07:51:7c:8d:7a:dd:20:e0:fe:20: e7:b9:2c:e4:06:60:f4:d0:60:be:2f:82:9d:fa:e8: d4:3b:bf:7c:21:37:6d:d4:35:cb:ae:0e:8f:9b:b7: 2b:30:b1:4b:f4:9b:fe:d9:cf:6c:b8:fd:d2:57:a8: 61:43:fc:85:98:76:47:0a:ed:6f:4a:8d:fa:ff:66: 14:40:c7:c0:af:ca:1e:82:e0:f6:24:d2:b8:e2:eb: b9:6f:ca:96:90:52:8d:8c:77:58:96:cc:01:ae:60: 7a:f1:66:9d:4c:46:58:09:8e:6b:89:b4:a5:ea:05: ca:d6:c4:5d:3d:2d:32:26:3c:48:40:87:3f:45:a6: 96:f2:d6:37:5a:a1:36:59:bb:e3:26:c9:5c:c7:f1: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:63:2C:AF:6D:44:8C:F6:DA:80:5C:1D:A0:A3:9D:9E:24:D0:1A:48 X509v3 Authority Key Identifier: keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:23:cd:57:46:bc:5f:30:3a:b3:f5:3c:23:ea:de:76:19:82: 1f:79:46:5f:31:0a:1a:15:42:23:7a:eb:2e:f7:41:cb:d1:18: 58:33:9b:3d:f6:75:be:26:2e:8d:d0:e0:b9:1c:0f:f3:70:21: ce:99:24:00:ee:52:e1:59:5d:cd:e4:76:21:ff:29:35:7a:d5: f5:93:d0:bb:7a:6a:ff:8d:7d:06:49:f9:1c:19:9e:92:ca:e8: 24:66:2b:69:5d:21:86:ac:f3:c8:c6:12:64:c1:0b:21:d0:42: de:10:9d:4f:81:40:58:e4:34:d9:f2:43:87:11:80:4f:17:e6: 80:c6:99:68:d3:d9:87:0c:86:47:e2:10:b1:ca:39:5b:71:25: 52:f0:e0:8a:3d:40:ea:6d:d7:cf:e2:0f:95:f6:81:32:35:e1: 5c:46:9d:fb:f9:72:1f:7a:37:88:bd:4b:94:1f:c3:54:84:45: 8d:f8:f2:e3:72:12:99:5c:a3:ea:d4:3c:b0:1d:17:b4:0c:c8: 8f:3a:90:42:06:27:c3:e7:7c:6e:d9:63:fb:bd:36:3c:07:58: d1:85:11:36:d3:2e:72:8c:39:11:9e:34:49:63:b8:e3:ea:51: e1:37:85:63:ee:22:ff:d3:34:7c:3d:d2:30:0a:36:13:c2:85: 44:25:33:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2N0QxMTAvBgNVBAUTKDVGMUM1MzRBRUVGRjRFMzgwQ0U1QTA5QTEwODRCRjhG NTcwOUVEMDgwHhcNMjUwOTE4MTkzMTU3WhcNMjUwOTI1MTkzMTU3WjAYMRYwFAYD VQQDEw02OGNjNWUyZC1lNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYNEmwfNv+5nsNoBzjjaJ/Oqgzu1Mekj7kx4mFE3pTYH8od4nXDcgc0PdEwc Hjb98bSMIt+YP9cedRFnuR0AQWWnrDXDCR5efjsPu2OeTdOY1eKPxj4iSfkc8DUm S00f5pzH0Dl4kH5Fi99x1wdRfI163SDg/iDnuSzkBmD00GC+L4Kd+ujUO798ITdt 1DXLrg6Pm7crMLFL9Jv+2c9suP3SV6hhQ/yFmHZHCu1vSo36/2YUQMfAr8oeguD2 JNK44uu5b8qWkFKNjHdYlswBrmB68WadTEZYCY5ribSl6gXK1sRdPS0yJjxIQIc/ RaaW8tY3WqE2WbvjJslcx/ERiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpjLK9t RIz22oBcHaCjnZ4k0BpIMB8GA1UdIwQYMBaAFF8cU0ru/044DOWgmhCEv49XCe0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY3RC84NDhFN0QxODQ5 QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1RqZ001YUNhRUlTX2oxY0o3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4eFRTdTdfVGpnTTVhQ2FFSVNfajFjSjdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY3RC84NDhFN0QxODQ5QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1Rq Z001YUNhRUlTX2oxY0o3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKI81XRrxfMDqz9Twj6t52GYIfeUZfMQoaFUIjeusu90HL0RhYM5s9 9nW+Ji6N0OC5HA/zcCHOmSQA7lLhWV3N5HYh/yk1etX1k9C7emr/jX0GSfkcGZ6S yugkZitpXSGGrPPIxhJkwQsh0ELeEJ1PgUBY5DTZ8kOHEYBPF+aAxplo09mHDIZH 4hCxyjlbcSVS8OCKPUDqbdfP4g+V9oEyNeFcRp37+XIfejeIvUuUH8NUhEWN+PLj chKZXKPq1DywHRe0DMiPOpBCBifD53xu2WP7vTY8B1jRhRE20y5yjDkRnjRJY7jj 6lHhN4Vj7iL/0zR8PdIwCjYTwoVEJTMM -----END CERTIFICATE-----Generated at Thu Sep 18 21:53:15 2025 by rpki-client