$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: avWhlvokRcCATytNgWQnXtIxLuOnfkOHDmgD2u7qYCQ= Subject key identifier: 50:4E:F0:50:61:A3:6D:4E:D1:BE:B5:0C:AA:1A:BB:74:68:4B:0A:FB Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 1925 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 16AE Signing time: Thu 04 Sep 2025 17:01:54 +0000 Manifest this update: Thu 04 Sep 2025 17:01:54 +0000 Manifest next update: Thu 11 Sep 2025 17:01:54 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: sGMUgpl0cnNoMmhtauYY0f4jNJIMBYJLBonq72YCwgc=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: Ju8go9OBKML8ykj6qnfvaBG6KjObv0i9KK2dLnaHCbM=) 4: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 5: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 6: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 7: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 8: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 10: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 11: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 12: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 14: 4A1187B26E7811F09E744A82C4F9AE02.roa (hash: OQY4xPdf9rHdF59/a70j65T2nG8AtOe+ff57jJsTx9k=) 15: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 16: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 22: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 23: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 24: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 25: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 26: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 17:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6437 (0x1925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Sep 4 17:01:54 2025 GMT Not After : Sep 11 17:01:54 2025 GMT Subject: CN=68b9c602-ec9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:fd:a5:d5:fd:84:dd:e9:33:d5:16:4c:6e: 9f:ac:05:7a:39:4f:18:11:5e:6c:7c:6c:d9:42:b0: ad:b6:b8:eb:f7:c6:c6:a9:ef:08:a4:3b:78:4d:30: db:ae:be:bd:b3:51:e2:25:ea:80:c1:00:4c:26:14: 12:09:c8:a9:4f:14:9a:1f:c8:3f:a7:6f:2a:fc:a3: 59:ee:26:e2:18:79:36:a4:88:85:49:07:b8:aa:d9: cf:47:81:93:94:8b:cb:d8:b1:96:8b:b7:0f:c8:eb: d8:05:29:4a:ef:bc:12:55:53:45:63:6c:89:b3:cc: d8:39:b3:3f:75:bc:4f:13:b1:f9:ca:aa:f4:2f:6e: 03:e5:58:bf:0b:ac:ef:f8:87:0c:e5:e7:7d:c4:5b: 71:55:9f:37:ef:07:39:71:db:c6:97:e2:20:5e:96: c6:e1:1f:93:6e:be:8f:2c:50:05:ad:9e:71:07:a5: 61:8e:79:cc:74:3c:f8:63:8e:8d:15:49:68:a1:6c: b0:3c:c4:cc:78:9d:13:01:d9:aa:b7:8c:21:44:8d: 13:34:b3:22:81:96:d7:dd:84:c8:3d:23:b4:55:30: 69:97:5a:80:d9:67:24:7b:b0:43:78:da:11:82:32: 70:eb:85:b9:e4:61:1f:c7:07:b5:c9:72:d7:04:1d: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4E:F0:50:61:A3:6D:4E:D1:BE:B5:0C:AA:1A:BB:74:68:4B:0A:FB X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:cc:8e:53:53:7d:33:e0:db:30:2c:5a:3c:5b:6c:b2:98:d9: 0d:77:97:0d:86:30:5c:59:44:ae:74:70:09:2a:99:8c:60:1a: 4f:30:c0:39:b2:78:0a:05:61:f9:2f:3d:27:67:f2:1a:1d:33: f0:8d:8e:b8:55:1a:4f:cc:50:40:07:a5:7e:eb:6d:c7:dc:29: f8:5d:fa:04:a0:25:f4:0c:42:9c:88:c7:dc:6d:d4:e7:ef:9d: e4:ea:91:8e:30:7e:8a:1e:79:1b:3c:51:3f:48:9c:4f:97:82: 91:d3:d5:a8:43:1a:a5:0c:6e:64:2b:a8:24:6e:03:fd:1e:41: 23:b7:43:6e:54:05:bb:e9:49:4a:49:5e:dc:33:99:9a:87:f9: af:57:f3:b0:2f:10:28:bc:ea:32:38:9e:ee:3c:19:a0:c2:09: 43:32:00:78:2e:9e:ee:fe:c8:26:e6:12:82:28:25:7d:54:bc: 90:33:e5:9c:60:d1:16:67:aa:6a:fc:ec:c2:17:14:a2:e4:e6: 7b:3e:51:90:c9:7c:1b:52:45:80:49:e8:4e:a2:52:0b:b3:de: 59:72:ac:7d:14:da:89:5d:e9:65:04:32:f8:c7:12:ef:93:9f: b8:c8:dd:fe:30:df:dd:b6:e5:ea:f1:c8:f5:c3:75:22:0b:0c: 91:15:2b:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUwOTA0MTcwMTU0WhcNMjUwOTExMTcwMTU0WjAYMRYwFAYD VQQDEw02OGI5YzYwMi1lYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI/9pdX9hN3pM9UWTG6frAV6OU8YEV5sfGzZQrCttrjr98bGqe8IpDt4TTDb rr69s1HiJeqAwQBMJhQSCcipTxSaH8g/p28q/KNZ7ibiGHk2pIiFSQe4qtnPR4GT lIvL2LGWi7cPyOvYBSlK77wSVVNFY2yJs8zYObM/dbxPE7H5yqr0L24D5Vi/C6zv +IcM5ed9xFtxVZ837wc5cdvGl+IgXpbG4R+Tbr6PLFAFrZ5xB6VhjnnMdDz4Y46N FUlooWywPMTMeJ0TAdmqt4whRI0TNLMigZbX3YTIPSO0VTBpl1qA2Wcke7BDeNoR gjJw64W55GEfxwe1yXLXBB3sVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBO8FBh o21O0b61DKoau3RoSwr7MB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnzI5TU30z4NswLFo8W2yymNkNd5cNhjBcWUSudHAJKpmMYBpPMMA5 sngKBWH5Lz0nZ/IaHTPwjY64VRpPzFBAB6V+623H3Cn4XfoEoCX0DEKciMfcbdTn 753k6pGOMH6KHnkbPFE/SJxPl4KR09WoQxqlDG5kK6gkbgP9HkEjt0NuVAW76UlK SV7cM5mah/mvV/OwLxAovOoyOJ7uPBmgwglDMgB4Lp7u/sgm5hKCKCV9VLyQM+Wc YNEWZ6pq/OzCFxSi5OZ7PlGQyXwbUkWASehOolILs95Zcqx9FNqJXellBDL4xxLv k5+4yN3+MN/dtuXq8cj1w3UiCwyRFSty -----END CERTIFICATE-----Generated at Sat Sep 6 11:51:08 2025 by rpki-client