$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json) Hash identifier: wl48Ow0aBJlBW7TA8IsqfuJ13hnl2zJIirLh87aqCSY= Subject key identifier: 13:FF:9F:CD:4F:88:3E:8C:7E:99:E7:1A:8E:F6:EF:CC:CD:68:70:0F Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft Manifest number: 0676 Signing time: Thu 18 Sep 2025 22:46:58 +0000 Manifest this update: Thu 18 Sep 2025 22:46:58 +0000 Manifest next update: Thu 25 Sep 2025 22:46:58 +0000 Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: h/CVPuiV1u2HrPPZyOcxnKNc7NqK7xkH4hS5/XGXW6k=) 2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: NSWzyjE2HPsrPxuhTouX2YNe98sTsio9BMgnAVmwnyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: Sep 18 22:46:58 2025 GMT Not After : Sep 25 22:46:58 2025 GMT Subject: CN=68cc8be2-6f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:8a:63:57:ca:46:d5:17:d1:f2:cb:89:99: a4:75:b2:df:1e:16:68:5e:0e:45:9d:14:a0:13:47: cd:8f:20:38:c7:af:bf:35:54:15:bc:42:d3:b4:f2: 41:63:be:c5:3a:a3:4a:76:fe:97:91:2a:46:d4:14: c2:e1:70:b2:b9:b6:5f:05:6f:49:01:e0:9c:fe:9a: 10:49:f4:ea:52:83:db:f0:f1:f4:d2:49:80:04:17: f6:f1:ac:1a:ec:83:11:5d:82:22:1a:f2:76:0f:15: 2d:9d:96:ed:e0:6e:01:7b:2b:41:31:b7:16:00:b5: 56:c2:9c:a0:8c:63:15:09:35:37:d0:78:56:6a:ed: 3e:37:9c:81:ea:dc:b4:d5:9d:26:9c:de:d7:38:1e: 44:bd:5f:e9:51:da:4b:35:25:13:bc:a1:25:8d:24: 7b:e7:c6:6a:99:01:e5:61:fb:15:c6:29:ec:7b:65: aa:ec:28:d6:d1:c9:e6:20:9d:d5:23:30:90:59:2c: 36:2e:15:e9:48:9a:96:d9:7e:c4:f5:58:d2:89:97: c5:c2:b6:c1:bd:9d:96:11:3e:24:87:5a:ae:42:66: a0:88:d2:37:d2:dc:50:a6:ae:91:58:c4:52:58:d9: d1:7a:7a:35:5c:9d:21:26:e0:29:6a:a5:1c:fd:ba: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FF:9F:CD:4F:88:3E:8C:7E:99:E7:1A:8E:F6:EF:CC:CD:68:70:0F X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:31:92:5c:0f:c2:87:1f:a1:33:68:d9:75:39:00:d2:5d:66: f6:87:9a:53:75:16:63:b5:d8:d0:ee:20:98:c1:d9:f6:84:a0: 24:b1:89:82:14:03:ea:7d:00:57:2b:60:ea:69:25:e8:c4:54: a2:53:ea:7e:9c:a0:b2:3e:14:c8:47:93:7a:48:c7:e5:18:36: b6:97:0a:f2:2c:ed:ef:c5:82:42:51:f6:fb:af:a3:7f:d7:54: f7:f4:79:05:ed:cc:c4:12:62:7e:e6:56:2a:ff:11:18:c1:e8: da:10:a3:03:05:47:a1:5a:f0:32:4e:3c:ce:17:12:24:41:39: 52:65:b6:8d:c2:61:87:68:10:5c:c1:26:9e:83:95:cd:4a:4d: 9f:e8:a9:59:7b:93:af:3f:a1:2f:2d:71:3a:89:cf:d1:8f:96: ee:b4:64:d4:c4:71:bc:2a:ae:07:93:c4:a4:93:93:e6:f7:2c: 97:51:c1:d0:6f:5c:3b:55:a3:55:9f:96:a7:27:a8:51:23:12: ca:f0:72:62:67:3c:17:ae:44:4f:5d:83:d3:1a:2b:50:d3:d4: 18:ab:fd:d1:b8:38:05:a0:c4:53:2e:70:90:d6:21:e2:54:b9: c1:8f:91:ce:b7:e2:7e:d7:1d:d5:df:bc:4a:ae:a2:d1:7c:8f: f5:78:07:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjUwOTE4MjI0NjU4WhcNMjUwOTI1MjI0NjU4WjAYMRYwFAYD VQQDEw02OGNjOGJlMi02ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0riKY1fKRtUX0fLLiZmkdbLfHhZoXg5FnRSgE0fNjyA4x6+/NVQVvELTtPJB Y77FOqNKdv6XkSpG1BTC4XCyubZfBW9JAeCc/poQSfTqUoPb8PH00kmABBf28awa 7IMRXYIiGvJ2DxUtnZbt4G4BeytBMbcWALVWwpygjGMVCTU30HhWau0+N5yB6ty0 1Z0mnN7XOB5EvV/pUdpLNSUTvKEljSR758ZqmQHlYfsVxinse2Wq7CjW0cnmIJ3V IzCQWSw2LhXpSJqW2X7E9VjSiZfFwrbBvZ2WET4kh1quQmagiNI30txQpq6RWMRS WNnReno1XJ0hJuApaqUc/brKHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBP/n81P iD6MfpnnGo7278zNaHAPMB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR eEJGa281SHVrRHRONVUzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9MZJcD8KHH6EzaNl1OQDSXWb2h5pTdRZjtdjQ7iCYwdn2hKAksYmC FAPqfQBXK2DqaSXoxFSiU+p+nKCyPhTIR5N6SMflGDa2lwryLO3vxYJCUfb7r6N/ 11T39HkF7czEEmJ+5lYq/xEYwejaEKMDBUehWvAyTjzOFxIkQTlSZbaNwmGHaBBc wSaeg5XNSk2f6KlZe5OvP6EvLXE6ic/Rj5butGTUxHG8Kq4Hk8Skk5Pm9yyXUcHQ b1w7VaNVn5anJ6hRIxLK8HJiZzwXrkRPXYPTGitQ09QYq/3RuDgFoMRTLnCQ1iHi VLnBj5HOt+J+1x3V37xKrqLRfI/1eAdh -----END CERTIFICATE-----Generated at Fri Sep 19 02:59:11 2025 by rpki-client