$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: fuM9Xk2gmCqVX8Jyjse/Pd7r/VAt11j6lpgPNOon02U= Subject key identifier: D2:2D:F1:09:00:DB:F0:57:56:9D:34:F4:36:F6:98:6B:A7:F9:37:AB Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 236B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 233D Signing time: Thu 18 Sep 2025 15:55:48 +0000 Manifest this update: Thu 18 Sep 2025 15:55:47 +0000 Manifest next update: Thu 25 Sep 2025 15:55:47 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: YEI6FBbO7dujoIVZGbgxPjalhShDpLNjXFFqYnLcFXI=) 2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=) 3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9067 (0x236b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Sep 18 15:55:47 2025 GMT Not After : Sep 25 15:55:47 2025 GMT Subject: CN=68cc2b84-c9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:aa:21:ee:12:82:c8:5a:29:c8:e4:be:51: 5d:c8:2a:e7:b4:ca:eb:54:7e:6c:28:02:f8:bd:75: 03:89:36:a6:80:73:b1:6c:5d:14:dc:79:e0:83:00: 45:6e:ca:15:3f:31:23:1a:56:d6:b3:27:c1:44:e5: e0:aa:ea:88:cc:ee:4c:c0:80:7e:67:a7:02:14:6d: 06:8f:10:9c:3a:69:d9:c1:cd:60:69:16:0a:72:75: 76:fd:93:41:52:7c:59:e1:1e:be:68:8f:91:a5:18: 4d:25:f6:37:39:30:2d:1d:17:65:23:7f:0a:75:5e: 64:63:2d:dc:e1:b3:72:d6:95:40:c8:d4:a6:3f:4c: 7e:ee:4b:fe:f2:02:94:68:6e:3f:8e:a3:e8:15:df: eb:0f:96:e1:24:b7:5a:9e:e8:ee:6b:95:7a:2c:cc: 6d:ab:0b:3a:59:fd:6e:71:70:b3:1d:ff:c1:50:ce: 1a:a1:d4:11:1d:b1:03:b2:3a:ce:f7:ae:a5:f0:40: 62:e3:bc:23:dc:c2:1d:cf:8d:fe:59:68:30:4e:c8: a6:2f:78:f7:f9:f7:e5:0a:75:2d:83:07:b8:fb:7f: 66:f3:86:e2:85:82:09:a9:66:a5:16:d1:53:12:8b: 3c:80:38:3f:2f:0c:45:3a:dc:78:7e:8a:e8:c6:43: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2D:F1:09:00:DB:F0:57:56:9D:34:F4:36:F6:98:6B:A7:F9:37:AB X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:5e:18:e5:94:c8:7b:27:6c:1f:6a:df:a5:2c:83:30:b8:a5: fe:70:bd:35:c4:78:20:d8:9a:67:12:94:9c:fb:be:3f:73:b0: 55:91:8e:34:2e:a1:7f:8b:42:55:59:95:8e:38:40:35:36:9f: 07:03:c0:ca:f1:a4:23:68:7a:a5:13:52:d5:69:fe:84:ce:67: c7:6e:71:46:d6:9e:eb:c6:90:d2:c6:d5:7f:f7:ca:2b:24:41: 79:85:af:fb:98:22:ff:ef:f0:38:e6:42:4e:9d:10:85:7b:5e: de:a4:30:3d:64:10:89:23:c5:1a:a2:dc:33:c9:5c:60:89:9b: 8a:d3:b0:ea:d4:2f:61:d2:e8:ce:6b:63:55:93:65:aa:8a:35: 82:91:c7:85:78:cf:c1:84:87:42:f9:5b:ce:2b:3b:7d:36:d2: 2d:79:73:87:f2:37:2d:d3:f6:ef:50:0a:ff:6f:32:3c:be:b0: 5b:8f:b6:8b:03:4d:ba:fd:27:c8:ae:4e:86:b3:2c:b0:53:56: 19:b6:71:5b:12:72:21:4d:f8:b6:01:27:6f:35:70:f9:ba:4d: 8b:98:1b:57:45:44:ee:99:da:45:0a:89:3b:35:f0:f2:ee:82: d2:be:53:a5:ae:5c:fd:fa:1e:0f:ea:bb:8e:51:79:54:a9:e4: 5a:89:54:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjUwOTE4MTU1NTQ3WhcNMjUwOTI1MTU1NTQ3WjAYMRYwFAYD VQQDEw02OGNjMmI4NC1jOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1SqIe4SgshaKcjkvlFdyCrntMrrVH5sKAL4vXUDiTamgHOxbF0U3HnggwBF bsoVPzEjGlbWsyfBROXgquqIzO5MwIB+Z6cCFG0GjxCcOmnZwc1gaRYKcnV2/ZNB UnxZ4R6+aI+RpRhNJfY3OTAtHRdlI38KdV5kYy3c4bNy1pVAyNSmP0x+7kv+8gKU aG4/jqPoFd/rD5bhJLdanujua5V6LMxtqws6Wf1ucXCzHf/BUM4aodQRHbEDsjrO 966l8EBi47wj3MIdz43+WWgwTsimL3j3+fflCnUtgwe4+39m84bihYIJqWalFtFT Eos8gDg/LwxFOtx4foroxkPkbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIt8QkA 2/BXVp009Db2mGun+TerMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQXhjllMh7J2wfat+lLIMwuKX+cL01xHgg2JpnEpSc+74/c7BVkY40 LqF/i0JVWZWOOEA1Np8HA8DK8aQjaHqlE1LVaf6EzmfHbnFG1p7rxpDSxtV/98or JEF5ha/7mCL/7/A45kJOnRCFe17epDA9ZBCJI8UaotwzyVxgiZuK07Dq1C9h0ujO a2NVk2WqijWCkceFeM/BhIdC+VvOKzt9NtIteXOH8jct0/bvUAr/bzI8vrBbj7aL A026/SfIrk6GsyywU1YZtnFbEnIhTfi2ASdvNXD5uk2LmBtXRUTumdpFCok7NfDy 7oLSvlOlrlz9+h4P6ruOUXlUqeRaiVQ+ -----END CERTIFICATE-----Generated at Fri Sep 19 00:34:28 2025 by rpki-client