$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json) Hash identifier: fWTToU+U+UV8wbbvoeB/ZKdPQQXBQGhFWr9h9HwdJzY= Subject key identifier: 6F:B1:0A:3B:60:42:15:68:04:CF:CB:CB:AC:E1:09:77:14:1E:EC:11 Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft Manifest number: 010E Signing time: Thu 21 Aug 2025 05:06:07 +0000 Manifest this update: Thu 21 Aug 2025 05:06:07 +0000 Manifest next update: Thu 28 Aug 2025 05:06:07 +0000 Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: 6GcLBza42w7UMb+cQ9H7nHDN7M2EtoJ3lQlFod4itAQ=) 2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: osmG47ejUnqAfJKuMkDqKj8NyV5CxVCxx93M/mU6AGU=) 3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: tXFOS4K6NP0mWp2yqDrG4Mk0xH2TKVaPDDMjLQ6peHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Validity Not Before: Aug 21 05:06:07 2025 GMT Not After : Aug 28 05:06:07 2025 GMT Subject: CN=68a6a93f-c8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:de:f1:b8:f9:54:36:66:5d:42:b4:81:52: fc:c1:61:5a:ad:cc:b5:57:7b:7e:ec:7e:7a:2c:c4: 5d:83:b3:fc:65:a3:a5:26:73:8f:9b:47:43:37:18: 59:2c:40:87:05:9d:40:3a:da:f8:9b:7f:8c:aa:53: f1:fd:fe:1b:99:76:16:9e:0b:f2:6a:0e:c7:d6:b0: 8c:cf:9e:3b:24:8f:0c:bf:09:ca:8c:25:6d:b4:3f: 9a:3b:d6:5e:89:a1:3f:74:8e:45:eb:b1:85:6b:1e: 03:16:5b:16:f4:5f:58:84:ac:46:67:24:14:f2:d6: ba:72:c4:aa:28:4b:cb:a3:a5:b7:9e:fa:66:64:2a: 76:06:6c:80:9c:b9:ba:aa:76:60:d2:5d:78:dc:7f: 43:c1:13:02:02:d0:91:f4:b6:4a:36:4d:dd:b4:cb: f8:3e:3b:96:87:c0:44:f4:16:14:79:bc:fb:5e:c7: a5:1b:5f:9c:b2:d0:a2:13:97:81:d7:25:e4:55:04: 55:fa:93:a2:91:43:7e:af:6e:39:fa:19:b0:55:3d: 34:ff:8a:81:0f:9c:7a:d8:92:9f:6c:40:45:78:c4: e4:29:ae:bb:56:46:d5:11:57:4f:a5:9d:e2:c5:4c: 90:33:a8:1b:6a:a0:cf:ec:64:2f:f9:f3:93:8a:f4: 05:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B1:0A:3B:60:42:15:68:04:CF:CB:CB:AC:E1:09:77:14:1E:EC:11 X509v3 Authority Key Identifier: keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:04:06:ec:57:46:1e:67:53:62:54:ea:82:3a:c9:23:11:4b: f3:29:ba:0b:f5:f3:d0:41:a7:d3:e7:09:c8:0f:65:93:62:fb: 2b:ba:4c:d5:ad:80:3c:02:91:89:de:7d:bc:a5:63:34:b9:88: 5e:e3:4a:09:84:d5:9f:4c:6a:ae:d1:7d:31:6f:da:32:82:da: 9c:b4:97:30:4b:b8:f9:83:29:f7:92:e3:97:b2:72:76:9e:70: 13:e0:d4:5c:e9:2b:52:0c:9b:83:78:77:88:4f:59:cf:ab:94: a6:ab:56:6c:02:5f:01:97:ef:e9:d9:24:67:73:31:eb:b7:01: ab:02:e5:c5:36:51:45:29:ef:37:89:d5:13:a1:bf:6e:e7:9a: 24:60:0c:fb:2f:5b:94:5d:51:d9:ee:29:74:00:cc:65:64:d0: dd:ab:8e:0d:eb:82:53:db:d9:75:a6:7c:c0:90:3a:6a:ab:3d: ed:82:84:d4:c9:d9:8d:73:2b:da:aa:3d:62:74:7e:71:88:eb: 9f:79:6b:a3:01:f3:c8:36:4c:4c:a1:ff:71:c9:d2:b6:24:19: 71:08:85:27:d0:c5:4f:81:64:3f:3c:87:b5:e1:58:bd:dd:4a: f5:db:b8:23:87:7a:e8:57:1c:d9:29:ee:0b:a4:e1:32:54:b7: e3:05:36:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy OTFDNDdCQUYwHhcNMjUwODIxMDUwNjA3WhcNMjUwODI4MDUwNjA3WjAYMRYwFAYD VQQDEw02OGE2YTkzZi1jOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb/e8bj5VDZmXUK0gVL8wWFarcy1V3t+7H56LMRdg7P8ZaOlJnOPm0dDNxhZ LECHBZ1AOtr4m3+MqlPx/f4bmXYWngvyag7H1rCMz547JI8MvwnKjCVttD+aO9Ze iaE/dI5F67GFax4DFlsW9F9YhKxGZyQU8ta6csSqKEvLo6W3nvpmZCp2BmyAnLm6 qnZg0l143H9DwRMCAtCR9LZKNk3dtMv4PjuWh8BE9BYUebz7XselG1+cstCiE5eB 1yXkVQRV+pOikUN+r245+hmwVT00/4qBD5x62JKfbEBFeMTkKa67VkbVEVdPpZ3i xUyQM6gbaqDP7GQv+fOTivQFKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+xCjtg QhVoBM/Ly6zhCXcUHuwRMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2BAbsV0YeZ1NiVOqCOskjEUvzKboL9fPQQafT5wnID2WTYvsrukzV rYA8ApGJ3n28pWM0uYhe40oJhNWfTGqu0X0xb9oygtqctJcwS7j5gyn3kuOXsnJ2 nnAT4NRc6StSDJuDeHeIT1nPq5Smq1ZsAl8Bl+/p2SRnczHrtwGrAuXFNlFFKe83 idUTob9u55okYAz7L1uUXVHZ7il0AMxlZNDdq44N64JT29l1pnzAkDpqqz3tgoTU ydmNcyvaqj1idH5xiOufeWujAfPINkxMof9xydK2JBlxCIUn0MVPgWQ/PIe14Vi9 3Ur127gjh3roVxzZKe4LpOEyVLfjBTZB -----END CERTIFICATE-----Generated at Sat Aug 23 03:26:14 2025 by rpki-client