$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: 1guFSFJqkbpZCn0uaMHp3nZ+buzGLXcl/Fs4plGIkYM= Subject key identifier: 5C:44:A3:83:86:67:40:A0:72:FC:B2:1C:2A:A9:FD:D8:A5:6C:FF:A7 Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 0434 Signing time: Fri 05 Sep 2025 00:41:23 +0000 Manifest this update: Fri 05 Sep 2025 00:41:23 +0000 Manifest next update: Fri 12 Sep 2025 00:41:23 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: cOMu6dPE2RWOpZFxa+DiBUhKwOadSrS/On6MY9ixILs=) 2: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: JDhvBxRe3WYJ1iKQKnxqCUD2z2C21JJ9nqsXsWXBpYM=) 3: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: QNRRPIEXpBXbzOjvogyb/5EofzlDIH5pOqmalYkDTHw=) 4: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: pOC7yi76swQlUgILehboMwNcNI7fxV+UlNvd0wZTls0=) 5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: QSRbYccf6zSEHa0HsQVgKCVz5nS1O8L5U8Elot2Xz40=) 6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: R3jOsVUDlgPUNcLVjE2JxsnxeughPhg0TvY+Ytf4478=) 7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: 8STPYAJJhsqxveLpZRzmdl9yhMuww2dhMQO1WbQeNbU=) 8: 5F14A15442D111EF8424E65BC4F9AE02.roa (hash: +sir/1Ip5eUjrTrKzP4T0efIjhcNSv/WtmTYay9OtXs=) 9: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: 7KI+xGonwsZRICria/4CZwlDNlRIuXU/wVts22Crf9U=) 10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: fPCfFsxMUqOAvLJmkWjc+RPsiCNLjQ233XGNCqOiY/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Sep 5 00:41:23 2025 GMT Not After : Sep 12 00:41:23 2025 GMT Subject: CN=68ba31b3-373a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:b4:33:57:9d:35:64:b0:ee:ad:bf:5a:a9: c7:d1:ad:ef:f3:62:f3:09:9d:7f:35:e1:99:1a:d4: bd:0a:0b:58:ce:e6:04:31:c8:fe:5d:66:4e:92:67: d3:23:08:9d:f7:5b:d5:a7:51:de:16:e9:27:8e:27: bf:60:5c:d6:c5:ce:a6:95:a8:96:be:a3:28:a4:bd: d8:3a:1b:6e:d2:74:d8:d8:b0:e1:73:8f:33:c8:4d: 5c:05:95:0c:da:22:2f:f7:bc:ee:29:01:5c:e1:ad: 08:fe:4b:79:af:f8:7a:52:e0:82:2d:52:b6:3e:a4: 4d:b5:06:8e:87:6a:60:ee:51:f0:59:24:72:00:18: 50:24:03:b6:01:64:86:61:9e:7c:c0:6b:4c:8f:a5: b3:c6:46:7e:26:d3:3c:93:ac:ad:73:39:31:28:4b: 7e:b9:45:bb:94:e7:5c:69:61:da:c7:02:5b:19:5a: 2b:01:23:94:1c:02:2e:e5:ed:11:9c:2b:8a:02:41: 3b:b7:01:b7:e4:31:36:9a:18:78:36:6e:6c:75:d6: ae:d2:7b:7f:ed:bf:b3:f6:e4:c0:ed:93:46:15:30: ca:97:89:54:e9:2e:f8:3a:74:dc:b4:30:3b:d0:57: e7:8d:2e:ae:3b:f0:cd:80:c5:80:0d:0e:a6:35:1f: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:44:A3:83:86:67:40:A0:72:FC:B2:1C:2A:A9:FD:D8:A5:6C:FF:A7 X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ff:03:4f:5c:03:56:af:4e:6a:b3:67:e1:a2:de:80:76:64: ab:a0:c3:63:fb:f5:b9:6f:09:46:39:9d:f2:04:38:9b:fa:a8: a7:83:b2:3e:45:15:eb:b9:e0:1d:8b:5a:71:d3:18:57:ea:e5: b8:f3:94:c6:cb:73:bf:70:83:ce:ae:30:57:e8:bf:80:a9:24: d9:fd:81:c7:7f:c7:7a:73:7c:46:67:c8:70:63:a2:62:26:ac: ae:23:4c:ed:fb:47:fe:7e:0c:9b:76:6d:7f:56:57:41:ad:57: b4:77:e7:33:e2:0e:3d:65:6d:e5:57:c2:69:ca:60:4a:16:73: ff:67:51:9d:93:b3:16:c6:df:47:fe:60:d7:1f:0c:a1:0f:29: e2:d5:b5:ac:4b:6d:e0:c3:a9:5f:be:73:fd:50:16:06:87:e4: 95:ff:92:ac:e7:34:25:f0:dd:fb:1f:e3:ed:9a:8e:61:e8:91: 9d:d6:ec:47:45:2c:03:07:15:21:1c:7c:8e:0f:9c:ac:34:47: 70:72:94:66:60:47:40:11:c2:0e:6f:9a:2a:78:35:96:29:73: 05:04:8b:20:28:14:33:5c:d9:05:6d:d4:0a:c3:b5:fb:84:66: cc:27:13:15:f6:85:2b:26:ef:71:30:09:9c:a2:f4:be:29:0b: 3f:a0:37:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjUwOTA1MDA0MTIzWhcNMjUwOTEyMDA0MTIzWjAYMRYwFAYD VQQDEw02OGJhMzFiMy0zNzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwye0M1edNWSw7q2/WqnH0a3v82LzCZ1/NeGZGtS9CgtYzuYEMcj+XWZOkmfT Iwid91vVp1HeFuknjie/YFzWxc6mlaiWvqMopL3YOhtu0nTY2LDhc48zyE1cBZUM 2iIv97zuKQFc4a0I/kt5r/h6UuCCLVK2PqRNtQaOh2pg7lHwWSRyABhQJAO2AWSG YZ58wGtMj6WzxkZ+JtM8k6ytczkxKEt+uUW7lOdcaWHaxwJbGVorASOUHAIu5e0R nCuKAkE7twG35DE2mhh4Nm5sddau0nt/7b+z9uTA7ZNGFTDKl4lU6S74OnTctDA7 0FfnjS6uO/DNgMWADQ6mNR8h3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxEo4OG Z0CgcvyyHCqp/dilbP+nMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv/wNPXANWr05qs2fhot6AdmSroMNj+/W5bwlGOZ3yBDib+qing7I+ RRXrueAdi1px0xhX6uW485TGy3O/cIPOrjBX6L+AqSTZ/YHHf8d6c3xGZ8hwY6Ji JqyuI0zt+0f+fgybdm1/VldBrVe0d+cz4g49ZW3lV8JpymBKFnP/Z1Gdk7MWxt9H /mDXHwyhDyni1bWsS23gw6lfvnP9UBYGh+SV/5Ks5zQl8N37H+Ptmo5h6JGd1uxH RSwDBxUhHHyOD5ysNEdwcpRmYEdAEcIOb5oqeDWWKXMFBIsgKBQzXNkFbdQKw7X7 hGbMJxMV9oUrJu9xMAmcovS+KQs/oDcB -----END CERTIFICATE-----Generated at Sat Sep 6 12:06:30 2025 by rpki-client