$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: mDqbCaCH1sGpdBqbONPFawy//jl9w4GT8MFk6zPVH/0= Subject key identifier: FF:AB:BA:C2:AA:D3:A5:0A:A3:EB:FD:42:67:4D:1C:84:C6:24:E0:0F Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: 6E Signing time: Tue 09 Sep 2025 07:10:58 +0000 Manifest this update: Tue 09 Sep 2025 07:10:57 +0000 Manifest next update: Tue 16 Sep 2025 07:10:57 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: +5lrbGADgMT5wlIaWsDnIjbcLn6H9OXxiH7IeEufArg=) 2: D2E899F86EB511F0A3A63A59C4F9AE02.roa (hash: 0dFbZ0ducL2EHPg1wlqAHlDGhzD129B1kp1qJTYRuTU=) 3: 2C0E544C6EB511F094E66857C4F9AE02.roa (hash: MFMadZ9hIQ4pKDfnggH43mNknioivrdN+SzVsH0zBtQ=) 4: 917D3A184BED11F0A2F7CC21C4F9AE02.roa (hash: IYpTiwoDdKk+DKwv65zZ7BTxOeFfDIMdePJWFd5JpGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: Sep 9 07:10:57 2025 GMT Not After : Sep 16 07:10:57 2025 GMT Subject: CN=68bfd302-2384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:8e:b9:56:99:9d:6f:64:7f:11:ae:28:c7: 97:00:bf:3b:bc:cd:81:49:d4:0d:a7:44:5d:5a:9a: d3:fd:ca:15:f9:d6:85:5a:9f:33:62:ca:60:4a:ab: b8:89:4e:49:c0:25:fb:32:7e:c8:74:e0:b3:67:67: ba:60:b0:a6:ba:7b:f3:f4:e1:82:1c:66:28:03:d4: c6:df:c3:c7:b8:fa:7e:9b:ea:b4:81:86:0e:67:d3: db:6f:8e:e7:67:11:65:30:19:e8:dd:54:e2:d1:0e: 56:75:fe:5d:65:cb:2f:5e:72:e8:9e:ec:31:95:d2: 2d:8d:fd:63:44:f1:31:09:6f:ef:dd:a9:69:aa:31: d9:d0:41:d3:8c:1b:2d:9c:9f:28:d9:09:3b:6b:c5: f7:f0:12:e3:af:69:e0:15:09:d8:ec:1f:79:c6:1c: 97:b9:3e:21:c6:0a:2a:d6:a0:bd:72:1a:f6:48:60: 41:5a:e0:96:97:a7:e8:e0:4d:f8:d9:ca:90:ba:4c: 7a:57:dd:c4:73:90:9a:c1:f8:b1:0b:2a:89:b4:63: e4:87:88:65:bb:9f:80:34:1e:42:aa:1b:72:bd:7a: ee:b7:fb:1b:6e:52:9b:7d:9f:49:8d:b1:4a:29:54: 18:09:28:61:d9:28:86:6b:07:4a:67:c4:e6:f2:ee: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AB:BA:C2:AA:D3:A5:0A:A3:EB:FD:42:67:4D:1C:84:C6:24:E0:0F X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:55:f2:eb:d1:72:c6:74:7c:2e:f4:e9:f0:5e:64:14:a5:5f: 17:ea:9e:51:df:0b:4c:eb:f7:65:d0:95:a7:7e:10:1b:08:d0: 31:12:49:05:96:c7:ca:d0:a3:ab:45:05:28:7d:7e:e5:ae:db: a9:69:39:75:c5:bf:9e:14:aa:04:4d:b0:25:f1:d4:46:3b:8f: b6:40:fa:36:82:d6:ba:d1:73:15:65:9b:75:24:07:80:bf:50: 57:e7:9c:f5:0c:9d:19:cd:09:e1:b5:80:ed:3b:59:2c:5a:6b: fa:3f:8e:56:44:8e:0b:f3:bb:44:71:69:27:57:17:4e:32:b0: 55:d9:a5:41:2a:6c:79:fe:c8:2d:d3:b2:5c:6c:36:f5:26:14: bc:b2:80:56:1e:fd:fa:67:50:47:6b:70:94:ba:cd:3e:eb:43: d0:00:5a:17:08:d6:4e:e1:0e:75:c0:ec:8b:a7:13:9c:f6:88: 35:e1:7b:e9:25:a6:7e:3b:39:c8:36:7a:e1:5f:6d:f5:bf:40: 53:cc:66:a6:2b:3d:64:fe:ec:89:37:f3:d1:29:7a:04:ab:b9: 7a:b6:37:a7:a5:e2:41:60:74:c0:ca:1e:f2:50:bd:a0:14:e6: f2:f5:b1:d4:99:8d:99:57:b7:94:08:fe:68:53:c9:14:e0:aa: dd:3b:f2:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OERGNTExMC8GA1UEBRMoQzZGNzU4RUNEREM0QzlCMEY3MkYwNjVDMzVBRDU0Njk3 NDMyNzExQjAeFw0yNTA5MDkwNzEwNTdaFw0yNTA5MTYwNzEwNTdaMBgxFjAUBgNV BAMTDTY4YmZkMzAyLTIzODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKR465Vpmdb2R/Ea4ox5cAvzu8zYFJ1A2nRF1amtP9yhX51oVanzNiymBKq7iJ TknAJfsyfsh04LNnZ7pgsKa6e/P04YIcZigD1Mbfw8e4+n6b6rSBhg5n09tvjudn EWUwGejdVOLRDlZ1/l1lyy9ecuie7DGV0i2N/WNE8TEJb+/dqWmqMdnQQdOMGy2c nyjZCTtrxffwEuOvaeAVCdjsH3nGHJe5PiHGCirWoL1yGvZIYEFa4JaXp+jgTfjZ ypC6THpX3cRzkJrB+LELKom0Y+SHiGW7n4A0HkKqG3K9eu63+xtuUpt9n0mNsUop VBgJKGHZKIZrB0pnxOby7uM1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/6u6wqrT pQqj6/1CZ00chMYk4A8wHwYDVR0jBBgwFoAUxvdY7N3EybD3LwZcNa1UaXQycRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1LzMxRTBGMTZBRjk2 MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHZkWTdOM0V5YkQzTHdaY05hMVVhWFF5Y1JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 REY1LzMxRTBGMTZBRjk2MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJE M0x3WmNOYTFVYVhReWNScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEFV8uvRcsZ0fC706fBeZBSlXxfqnlHfC0zr92XQlad+EBsI0DESSQWW x8rQo6tFBSh9fuWu26lpOXXFv54UqgRNsCXx1EY7j7ZA+jaC1rrRcxVlm3UkB4C/ UFfnnPUMnRnNCeG1gO07WSxaa/o/jlZEjgvzu0RxaSdXF04ysFXZpUEqbHn+yC3T slxsNvUmFLyygFYe/fpnUEdrcJS6zT7rQ9AAWhcI1k7hDnXA7IunE5z2iDXhe+kl pn47Ocg2euFfbfW/QFPMZqYrPWT+7Ik389EpegSruXq2N6el4kFgdMDKHvJQvaAU 5vL1sdSZjZlXt5QI/mhTyRTgqt078qA= -----END CERTIFICATE-----Generated at Tue Sep 9 09:33:21 2025 by rpki-client