$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json) Hash identifier: Av0EhsWJ6jZQounS1yn8Ykv/Ym8OGmQ6fxXbqmefayQ= Subject key identifier: 21:BD:B3:1D:D6:1B:EC:F1:EA:C7:3D:BC:36:B0:E6:D1:B6:E8:B5:B1 Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft Manifest number: B1 Signing time: Fri 05 Sep 2025 06:28:38 +0000 Manifest this update: Fri 05 Sep 2025 06:28:38 +0000 Manifest next update: Fri 12 Sep 2025 06:28:38 +0000 Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: 2ry3ZebiSkxTtWT7UpqrbIaAzYPUc8XiDFtyr6Jqro8=) 2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: aGiRG+xUGgWwAx/G6pVvTX9ourgHUuGhOXJQLlTyA9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Validity Not Before: Sep 5 06:28:38 2025 GMT Not After : Sep 12 06:28:38 2025 GMT Subject: CN=68ba8316-288d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:56:69:07:f2:15:75:98:80:c8:09:47:87: ea:27:98:03:b5:ca:ea:fe:c3:83:ba:d9:e0:7a:84: c4:e0:18:45:87:12:30:ae:e4:ff:94:dd:a7:95:4d: bd:9d:a5:a6:f5:64:bc:f0:54:fb:2e:51:4c:33:71: d0:e1:38:71:75:85:af:46:5f:f6:18:b9:5c:4f:9e: 43:6b:18:fc:fd:e1:f9:99:41:5d:f6:81:54:be:85: 75:02:48:af:9d:35:fc:e4:f2:72:26:f8:a4:92:c8: c2:d2:c3:6f:53:7e:64:af:cd:46:ae:7e:74:cc:da: 96:c3:51:ac:8b:9b:bb:19:fd:2a:f8:49:8d:11:50: 98:b0:92:14:b3:2c:fb:a5:30:cc:c6:5f:9f:4b:77: 8d:93:b8:df:e1:f8:f8:3d:65:46:17:ea:5b:fa:b0: 2b:2f:0f:97:76:06:24:60:1a:6e:ff:f5:35:e1:9f: 43:8b:eb:c6:bd:8e:c0:3d:1a:2b:66:63:8f:88:a0: 70:60:67:f1:ad:92:5f:d5:bd:da:4c:0a:42:e6:d2: b8:7d:15:48:0f:3f:c3:9e:67:71:b9:c1:64:af:06: 1a:3e:31:49:bf:00:eb:9b:28:08:3f:f8:dd:0b:98: 6f:7b:96:5c:f4:47:57:1e:a0:09:47:1d:18:7d:e9: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BD:B3:1D:D6:1B:EC:F1:EA:C7:3D:BC:36:B0:E6:D1:B6:E8:B5:B1 X509v3 Authority Key Identifier: keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c6:fc:db:f2:86:a9:7c:06:ef:f0:29:c4:e6:d5:cf:e7:87: 06:da:cf:1a:d2:a5:7e:70:0b:86:d7:a8:ae:7e:76:34:0f:d5: 1f:2f:4b:d7:0c:b7:5c:75:c2:77:4e:f8:77:dd:b0:36:f9:3f: b0:69:62:b1:be:95:6f:a1:4e:45:87:11:f5:47:68:17:97:20: 71:44:20:af:3b:83:09:29:a4:bf:5f:81:9a:2a:0f:3a:e9:43: 09:22:f0:7f:bd:66:90:dc:2d:fd:af:44:10:13:16:95:ad:29: b7:47:36:2b:c1:a7:7f:fb:92:c9:c2:54:ca:2f:99:d7:6f:e1: 6d:0b:1c:86:d5:ab:94:08:95:46:80:29:55:90:bb:73:51:80: 30:7e:a5:0a:52:03:ee:1e:f4:0b:7d:7b:2e:7d:1a:7d:5e:d6: 57:26:6d:89:82:db:ca:08:5f:b4:90:4f:05:a0:e3:a7:3e:ed: cf:a2:5a:e6:c0:87:4b:5c:2a:95:1a:8c:3d:79:7a:a0:f7:90: d0:c2:b8:19:80:5e:65:66:1e:b1:3c:cb:06:d2:55:7b:da:b8: 01:0a:7e:5f:00:8f:31:5c:aa:05:20:fc:c7:ee:51:bd:66:28: 34:79:27:d2:6e:8d:d1:69:af:a4:14:42:9c:4b:35:82:ca:dc: f3:4f:a8:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNEUxMTAvBgNVBAUTKEM3MjAwMjc2N0ExMEVDMkZGMTQ1MTVBMkFBQjg2RTYx NDA5N0E3NUMwHhcNMjUwOTA1MDYyODM4WhcNMjUwOTEyMDYyODM4WjAYMRYwFAYD VQQDEw02OGJhODMxNi0yODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7RWaQfyFXWYgMgJR4fqJ5gDtcrq/sODutngeoTE4BhFhxIwruT/lN2nlU29 naWm9WS88FT7LlFMM3HQ4ThxdYWvRl/2GLlcT55Daxj8/eH5mUFd9oFUvoV1Akiv nTX85PJyJvikksjC0sNvU35kr81Grn50zNqWw1Gsi5u7Gf0q+EmNEVCYsJIUsyz7 pTDMxl+fS3eNk7jf4fj4PWVGF+pb+rArLw+XdgYkYBpu//U14Z9Di+vGvY7APRor ZmOPiKBwYGfxrZJf1b3aTApC5tK4fRVIDz/DnmdxucFkrwYaPjFJvwDrmygIP/jd C5hve5Zc9EdXHqAJRx0YfemHEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCG9sx3W G+zx6sc9vDaw5tG26LWxMB8GA1UdIwQYMBaAFMcgAnZ6EOwv8UUVoqq4bmFAl6dc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU0RS9EMTY1RTRBMjdC RTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5vUTdDX3hSUldpcXJodVlVQ1hw MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h5QUNkbm9RN0NfeFJSV2lxcmh1WVVDWHAxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU0RS9EMTY1RTRBMjdCRTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5vUTdD X3hSUldpcXJodVlVQ1hwMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQxvzb8oapfAbv8CnE5tXP54cG2s8a0qV+cAuG16iufnY0D9UfL0vX DLdcdcJ3Tvh33bA2+T+waWKxvpVvoU5FhxH1R2gXlyBxRCCvO4MJKaS/X4GaKg86 6UMJIvB/vWaQ3C39r0QQExaVrSm3RzYrwad/+5LJwlTKL5nXb+FtCxyG1auUCJVG gClVkLtzUYAwfqUKUgPuHvQLfXsufRp9XtZXJm2JgtvKCF+0kE8FoOOnPu3Polrm wIdLXCqVGow9eXqg95DQwrgZgF5lZh6xPMsG0lV72rgBCn5fAI8xXKoFIPzH7lG9 Zig0eSfSbo3Raa+kFEKcSzWCytzzT6ji -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:05 2025 by rpki-client