$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: BTkZRuGRATGD5dEP7xYKowLrQXRmoDLmA5/XkvTPi3c= Subject key identifier: 1F:B9:66:C0:54:5D:19:8B:6A:8F:71:41:98:15:45:89:4C:47:AD:46 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 0884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 0878 Signing time: Thu 18 Sep 2025 20:52:14 +0000 Manifest this update: Thu 18 Sep 2025 20:52:14 +0000 Manifest next update: Thu 25 Sep 2025 20:52:14 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: YmRSSUWynA4ELlQHO9/wt7FPY4jhJslWkeu8BlqlJfg=) 2: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: rDQvy+rn0SobEFslboEMqv4jyHrKq9kLuJT6gHMmCJY=) 3: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: TdVNysB3ntS2HR65IAfyKvgdlfFK4ozUli+BZdpaY/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Sep 18 20:52:14 2025 GMT Not After : Sep 25 20:52:14 2025 GMT Subject: CN=68cc70fe-d1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:da:e6:fe:a5:55:c1:d9:c1:5b:a1:ee:60: 38:50:bd:ce:75:84:96:20:93:a5:6f:2f:34:dd:10: cf:78:41:38:45:6d:f4:2e:71:aa:7b:5b:2c:26:29: cf:b3:5f:8e:60:0c:75:7b:f3:38:2b:9b:6e:96:24: b6:5a:bb:e0:83:65:a5:55:46:a1:a8:32:cc:3c:d7: 51:eb:f5:af:29:79:c7:16:79:fe:d1:44:c1:93:5f: 19:40:9e:12:40:33:fc:99:3c:06:c0:56:70:97:f4: 42:f2:1d:7a:4e:98:4e:47:b0:6e:9a:9d:5a:f4:23: 8c:90:d6:23:ac:fa:f1:ec:eb:6a:0f:81:1c:2f:55: e0:36:93:9f:2b:f1:c8:de:8a:9a:b0:90:dc:35:b6: 11:86:8d:54:02:d7:e7:a9:e0:19:47:85:92:ea:e5: 5c:f5:b7:9c:53:f9:61:9a:07:da:a0:f1:df:fb:16: b2:7e:17:ed:ce:6b:73:55:f6:d0:ba:74:93:ea:ca: d9:95:2b:e3:f4:bb:b9:db:ad:6a:27:44:52:05:18: 8c:6a:51:0c:33:80:28:94:52:3e:ea:a6:a5:20:af: 82:ba:db:ad:0e:dd:eb:d1:8f:5f:80:d1:ab:ba:5f: dc:5c:42:02:b3:66:1c:95:4b:da:94:6b:d6:2a:1a: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B9:66:C0:54:5D:19:8B:6A:8F:71:41:98:15:45:89:4C:47:AD:46 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:01:e8:36:07:a3:fb:23:e9:d6:d7:c8:ad:12:a8:75:db:b8: a4:aa:2a:a9:9c:61:04:83:42:bd:4e:db:98:b3:10:5d:a2:6d: c1:c1:89:5e:eb:12:c6:fe:3c:a5:77:f8:e9:0a:00:6d:d6:9b: 64:ec:e2:ff:6f:ca:7d:cd:b1:40:ea:51:4a:41:81:1d:39:cb: e5:64:89:c6:e3:75:36:61:74:a2:ec:dd:f3:f8:36:af:8d:c3: 38:45:1b:3a:ff:c0:82:0c:aa:e5:be:40:c6:85:d5:d7:42:74: d9:30:9e:53:fa:12:f6:9b:c7:c2:41:57:77:f7:dd:63:0f:44: 24:ee:eb:f8:ea:1b:38:a3:f8:cc:45:39:c6:e6:d9:e6:e3:1a: a1:7c:2d:f0:60:28:72:85:4f:16:b7:93:f0:31:25:23:21:ec: cb:8a:e2:a3:06:c2:78:01:e5:f9:09:88:6a:6f:1b:46:86:46: 66:e3:1f:25:78:15:a9:48:c6:a0:16:93:66:05:e1:94:98:85: 4a:1c:7d:0a:f1:d6:5a:2e:e6:5b:12:be:e9:95:09:98:e5:0f: b5:82:e1:d4:1f:1d:a7:a6:fd:17:ac:e8:61:f7:3f:0a:ff:4c: c6:5c:57:1a:54:68:c6:c0:2b:ad:ed:02:80:e1:1c:52:00:45: f9:38:b3:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjUwOTE4MjA1MjE0WhcNMjUwOTI1MjA1MjE0WjAYMRYwFAYD VQQDEw02OGNjNzBmZS1kMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZPa5v6lVcHZwVuh7mA4UL3OdYSWIJOlby803RDPeEE4RW30LnGqe1ssJinP s1+OYAx1e/M4K5tuliS2Wrvgg2WlVUahqDLMPNdR6/WvKXnHFnn+0UTBk18ZQJ4S QDP8mTwGwFZwl/RC8h16TphOR7Bump1a9COMkNYjrPrx7OtqD4EcL1XgNpOfK/HI 3oqasJDcNbYRho1UAtfnqeAZR4WS6uVc9becU/lhmgfaoPHf+xayfhftzmtzVfbQ unST6srZlSvj9Lu5261qJ0RSBRiMalEMM4AolFI+6qalIK+CututDt3r0Y9fgNGr ul/cXEICs2YclUvalGvWKhr5lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+5ZsBU XRmLao9xQZgVRYlMR61GMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdAeg2B6P7I+nW18itEqh127ikqiqpnGEEg0K9TtuYsxBdom3BwYle 6xLG/jyld/jpCgBt1ptk7OL/b8p9zbFA6lFKQYEdOcvlZInG43U2YXSi7N3z+Dav jcM4RRs6/8CCDKrlvkDGhdXXQnTZMJ5T+hL2m8fCQVd3991jD0Qk7uv46hs4o/jM RTnG5tnm4xqhfC3wYChyhU8Wt5PwMSUjIezLiuKjBsJ4AeX5CYhqbxtGhkZm4x8l eBWpSMagFpNmBeGUmIVKHH0K8dZaLuZbEr7plQmY5Q+1guHUHx2npv0XrOhh9z8K /0zGXFcaVGjGwCut7QKA4RxSAEX5OLO+ -----END CERTIFICATE-----Generated at Fri Sep 19 17:47:25 2025 by rpki-client