$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: pO0guCR65jQ3xrh3HQ6jDbzZCOPPCG/J19cW+rf2YJA= Subject key identifier: 61:73:0E:09:F7:D7:D2:A0:CE:9F:6A:D5:C6:A2:56:72:E8:47:6D:EF Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 0A09 Signing time: Mon 08 Sep 2025 19:55:19 +0000 Manifest this update: Mon 08 Sep 2025 19:55:19 +0000 Manifest next update: Mon 15 Sep 2025 19:55:19 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: t76tyVrd4LEGXRY1bSRQ6cs+sN4Q127tDrl0zsZd6y8=) 2: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: fT5I6I+PgWW4dacN3a4Ms0RKDB8N3MNCREMj8FDesrg=) 3: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 2Dd7cd8I4OSARGKZ0mccoyZW6iVZIc9ObRTGe4O/Dcc=) 4: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: NOfiYVkjVgVKJdndF7rjEsZWLBXmxcXaA+rDg1JFfcI=) 5: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: eb8Dxmgs1pJ56B+p/g4fWelI2bfJeXR9VvaW0O1EVCY=) 6: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Fh5T2BpUHXj8z7zvCSIDzf9GCkAnUEieH5BE04K3ZeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Sep 8 19:55:19 2025 GMT Not After : Sep 15 19:55:19 2025 GMT Subject: CN=68bf34a7-6f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:90:40:8c:e0:13:38:c8:2a:3b:a9:aa:59:86: 15:f3:8a:f2:97:ab:8d:00:db:74:f0:ff:67:4a:fb: 81:30:58:2f:bd:21:e6:ea:09:e7:24:59:01:53:0d: 27:63:10:6a:3e:e5:25:61:0e:2f:83:a1:b6:aa:b9: ef:76:a4:70:27:c7:6d:43:64:1f:b1:af:43:0a:d8: a6:7a:5f:db:91:15:35:c2:af:53:d5:3a:b9:d9:e3: 79:80:b6:2d:d0:7c:65:4e:28:75:6f:3b:8b:a6:7a: f4:39:f7:47:8b:4d:c6:00:1f:a3:08:3f:ff:2a:af: 8c:25:22:fd:cb:c4:ad:3f:42:1c:f7:b0:5a:76:9f: 37:a7:d6:17:b3:95:c0:04:0d:0c:59:ad:11:fa:bc: 7d:98:1f:e9:17:94:91:ed:4f:e5:db:63:96:4c:47: 13:cc:51:a5:4b:f8:2b:a7:68:77:3f:66:2c:e5:fe: f7:1e:af:4a:17:a9:84:42:0f:72:68:69:11:85:10: 8f:7b:09:e0:8e:14:73:9a:b7:1f:b7:c9:4b:15:95: 85:6d:14:73:0e:75:3f:0f:96:f5:d5:7b:1e:e5:15: 77:1d:27:8b:71:d9:d3:87:77:48:d6:09:9a:18:08: ab:e3:e1:ba:e3:18:72:1b:e4:18:a7:8c:fe:1f:d2: ac:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:73:0E:09:F7:D7:D2:A0:CE:9F:6A:D5:C6:A2:56:72:E8:47:6D:EF X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b8:7e:98:dd:0f:bb:05:32:59:f3:d7:4d:07:63:60:70:03: 8b:3a:62:58:c3:42:85:cd:83:4b:c6:dc:04:94:75:b7:cb:01: fa:7d:2b:17:6a:e1:d7:3d:f0:6f:79:57:97:c6:a9:28:cb:b6: 2d:8e:8c:88:40:bf:74:6b:5f:92:1d:de:06:57:d1:7f:db:ee: 86:4b:73:09:6e:c8:98:18:48:5c:28:13:6a:70:fe:9f:7a:e1: f9:fc:25:29:18:64:47:8d:cf:74:84:8f:6e:14:06:99:68:48: c2:cf:e7:63:db:28:11:37:15:10:05:a8:de:94:d1:b4:67:fe: 4c:4c:2c:89:d4:fe:74:53:b4:ba:c8:f3:c6:33:eb:b4:95:c4: 6b:e0:74:60:1c:f3:e2:4c:1b:09:7f:3f:05:2c:4f:01:77:4a: 52:2b:97:70:cf:f5:36:c3:60:e1:38:a5:42:f8:b4:04:d4:2d: 4f:4c:18:bf:5e:46:66:74:fc:69:bf:2d:76:50:23:50:c0:63: 0b:18:17:89:c9:71:b8:61:3f:cd:d3:0e:a1:2c:f7:52:bb:60: ef:33:98:cd:03:b8:2f:73:6d:81:cb:e4:83:92:c2:d1:97:ce: e2:24:a3:67:5d:72:64:b0:ec:94:13:09:59:59:c5:97:f5:d9: 69:22:dc:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjUwOTA4MTk1NTE5WhcNMjUwOTE1MTk1NTE5WjAYMRYwFAYD VQQDEw02OGJmMzRhNy02ZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZBAjOATOMgqO6mqWYYV84ryl6uNANt08P9nSvuBMFgvvSHm6gnnJFkBUw0n YxBqPuUlYQ4vg6G2qrnvdqRwJ8dtQ2Qfsa9DCtimel/bkRU1wq9T1Tq52eN5gLYt 0HxlTih1bzuLpnr0OfdHi03GAB+jCD//Kq+MJSL9y8StP0Ic97Badp83p9YXs5XA BA0MWa0R+rx9mB/pF5SR7U/l22OWTEcTzFGlS/grp2h3P2Ys5f73Hq9KF6mEQg9y aGkRhRCPewngjhRzmrcft8lLFZWFbRRzDnU/D5b11Xse5RV3HSeLcdnTh3dI1gma GAir4+G64xhyG+QYp4z+H9KsiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFzDgn3 19Kgzp9q1caiVnLoR23vMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeuH6Y3Q+7BTJZ89dNB2NgcAOLOmJYw0KFzYNLxtwElHW3ywH6fSsX auHXPfBveVeXxqkoy7YtjoyIQL90a1+SHd4GV9F/2+6GS3MJbsiYGEhcKBNqcP6f euH5/CUpGGRHjc90hI9uFAaZaEjCz+dj2ygRNxUQBajelNG0Z/5MTCyJ1P50U7S6 yPPGM+u0lcRr4HRgHPPiTBsJfz8FLE8Bd0pSK5dwz/U2w2DhOKVC+LQE1C1PTBi/ XkZmdPxpvy12UCNQwGMLGBeJyXG4YT/N0w6hLPdSu2DvM5jNA7gvc22By+SDksLR l87iJKNnXXJksOyUEwlZWcWX9dlpItxU -----END CERTIFICATE-----Generated at Tue Sep 9 10:37:19 2025 by rpki-client