$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: fJoht1Syw8ucLAnuOty5/oWpsDUtFqNbkuewvgY300M= Subject key identifier: DB:D0:09:20:FD:A3:3C:E1:5C:2D:FC:D3:6D:C7:F9:0C:52:19:0C:A6 Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: A2 Signing time: Tue 09 Sep 2025 06:26:04 +0000 Manifest this update: Tue 09 Sep 2025 06:26:04 +0000 Manifest next update: Tue 16 Sep 2025 06:26:04 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: pAOLmxIXRJHMYXTNu0ZPXZMg9fweHYgFfuHlh8+MJJA=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: Iqqm3XnZxAwHyLfxm5fiQ2PL3nIt3cAVFXF23TPN80A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Sep 9 06:26:04 2025 GMT Not After : Sep 16 06:26:04 2025 GMT Subject: CN=68bfc87c-3ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:89:1f:23:2a:8c:d8:28:95:a1:87:c9:35: bf:d2:38:16:7f:c4:60:6e:94:42:c0:2c:e7:8f:67: b2:7e:c3:8e:ad:66:53:92:46:8a:fd:d2:8e:c1:a3: be:75:72:83:39:35:15:33:4b:97:e7:97:b1:41:42: bb:ea:db:d8:a4:80:ad:e2:a7:21:6b:61:8d:e4:69: 1d:ce:a0:d0:f2:67:23:8f:9f:29:c1:24:2d:47:a5: 05:04:a4:a7:de:a3:aa:cd:59:94:ed:5e:f7:98:ad: dc:6e:b1:21:63:4e:30:b7:b9:9a:95:40:da:22:72: cd:35:10:52:65:30:8e:03:df:50:8f:38:ed:70:a8: 1a:49:d3:b8:31:5d:55:89:13:3a:31:b7:b7:fa:ab: 57:bc:e4:5b:d2:7a:14:4b:cb:c5:e7:c5:6b:f7:75: 11:0e:cb:3b:75:82:cd:7b:ae:bd:17:bf:e9:fa:b0: 65:20:c7:82:54:eb:b7:55:56:fe:c1:4e:07:08:2c: 92:cf:79:2e:d1:11:81:3c:6d:1d:b5:b5:55:b2:83: 05:6d:46:28:53:87:24:f6:eb:33:e8:6a:a2:d2:38: 59:10:be:af:ed:bd:e8:bc:41:ce:c7:5f:bd:e2:21: bc:e5:28:c7:f2:7e:1b:e5:50:8b:77:0c:b5:09:12: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D0:09:20:FD:A3:3C:E1:5C:2D:FC:D3:6D:C7:F9:0C:52:19:0C:A6 X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:24:63:e1:70:2d:c7:9a:a5:10:cd:91:14:51:f6:ef:dd:2f: 69:7d:c9:09:6d:90:d2:27:16:9c:b4:7a:52:95:87:22:79:6a: 3a:ab:00:76:51:20:fe:0d:43:80:14:d0:6e:82:ef:d9:9d:6a: 17:df:f8:e7:0e:ef:35:b4:9f:90:b4:c7:7c:de:1d:3b:10:4c: 04:61:12:b7:fd:59:7f:fe:67:8d:f9:53:2d:cf:e4:fc:e1:3b: cf:ce:7a:e8:47:93:6b:06:98:ef:4d:bd:cd:6d:10:57:b3:88: 69:31:01:8e:57:23:d1:cd:1d:14:c8:3b:31:a6:c7:cb:bb:80: 03:3c:ef:60:94:3a:6a:4d:c8:dc:f1:ba:8f:cc:60:ad:ae:b8: f1:7e:70:a8:49:8b:d8:70:4e:d5:05:17:ab:31:c0:d3:1f:0a: 26:cf:58:67:5e:4e:22:5c:e3:9c:0c:a8:28:f5:89:15:56:89: b5:6c:20:a0:16:7c:53:6a:4f:7d:7f:90:59:45:b1:6d:61:44: 6a:c9:a0:9b:08:96:98:92:60:7b:00:db:14:ac:dd:f5:de:1e: ec:b1:78:24:81:bb:73:e5:ab:3d:1b:d4:7b:e0:15:9a:4b:8b: f4:03:8e:dc:7a:cf:fc:63:21:04:34:96:5e:8e:7d:05:04:3d: 8e:a1:5d:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjUwOTA5MDYyNjA0WhcNMjUwOTE2MDYyNjA0WjAYMRYwFAYD VQQDEw02OGJmYzg3Yy0zZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/GJHyMqjNgolaGHyTW/0jgWf8RgbpRCwCznj2eyfsOOrWZTkkaK/dKOwaO+ dXKDOTUVM0uX55exQUK76tvYpICt4qcha2GN5GkdzqDQ8mcjj58pwSQtR6UFBKSn 3qOqzVmU7V73mK3cbrEhY04wt7malUDaInLNNRBSZTCOA99QjzjtcKgaSdO4MV1V iRM6Mbe3+qtXvORb0noUS8vF58Vr93URDss7dYLNe669F7/p+rBlIMeCVOu3VVb+ wU4HCCySz3ku0RGBPG0dtbVVsoMFbUYoU4ck9usz6Gqi0jhZEL6v7b3ovEHOx1+9 4iG85SjH8n4b5VCLdwy1CRJXAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvQCSD9 ozzhXC38023H+QxSGQymMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS85NTZGNjYyQzlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlD Wnk1bTh3QmZaR20yS0pGeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfJGPhcC3HmqUQzZEUUfbv3S9pfckJbZDSJxactHpSlYcieWo6qwB2 USD+DUOAFNBugu/ZnWoX3/jnDu81tJ+QtMd83h07EEwEYRK3/Vl//meN+VMtz+T8 4TvPznroR5NrBpjvTb3NbRBXs4hpMQGOVyPRzR0UyDsxpsfLu4ADPO9glDpqTcjc 8bqPzGCtrrjxfnCoSYvYcE7VBRerMcDTHwomz1hnXk4iXOOcDKgo9YkVVom1bCCg FnxTak99f5BZRbFtYURqyaCbCJaYkmB7ANsUrN313h7ssXgkgbtz5as9G9R74BWa S4v0A47ces/8YyEENJZejn0FBD2OoV3M -----END CERTIFICATE-----Generated at Tue Sep 9 17:42:21 2025 by rpki-client