$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: CvsPAGBHkh+C/zC3Xmu4qkZJzyt8WGdYcPaCuielRTM= Subject key identifier: 86:15:E6:56:10:41:AB:B4:A0:30:71:84:02:F3:91:B1:0C:D4:39:E4 Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 04A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 0498 Signing time: Fri 05 Sep 2025 00:16:52 +0000 Manifest this update: Fri 05 Sep 2025 00:16:51 +0000 Manifest next update: Fri 12 Sep 2025 00:16:51 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: o76n8wJSzGyGcn6wLis/uLDvJP7uV4RRnw3huWrFgb0=) 2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: EUhD1CogfYx019LqOHk5ZADPXKjO2pURWvfLLk3fqG8=) 3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: 0C7V986gHLfF3RPO5trmAPFLdLtlvzlCJ3+47YeVJHU=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: CMOccFw4JW9T0ieBo3En9p6kBriebw6aKjGeEamJ19Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Sep 5 00:16:51 2025 GMT Not After : Sep 12 00:16:51 2025 GMT Subject: CN=68ba2bf4-7e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e9:ea:75:b4:ad:9d:63:b3:a4:e0:05:0a:31: 52:f2:f9:15:83:29:40:d3:c9:a1:fd:09:7d:4b:8e: b8:64:85:dd:fc:bd:e9:1c:98:eb:ba:0f:05:9f:0e: f0:08:e0:0c:9c:62:a2:c8:23:3f:bb:f2:f7:58:77: 96:79:ee:05:15:3f:c0:d3:2c:85:9f:42:59:f1:1d: 56:e8:95:ca:15:bd:21:e7:e5:65:d1:3f:bd:ce:14: 67:01:d3:a3:25:0d:47:52:e6:3a:db:04:2c:ac:42: 91:dd:f7:c7:49:83:ac:a2:ac:61:22:7a:78:0e:e9: 6c:3c:7e:35:18:9b:14:5e:ac:ae:fc:94:4c:fe:db: 67:c0:01:de:48:3d:d7:8b:2b:16:00:85:1d:60:0c: eb:36:34:a5:39:4c:f3:96:e2:53:fb:01:ae:05:39: 20:eb:d0:38:20:fc:68:54:5f:fc:cc:98:67:a0:71: 19:5e:a9:fe:9a:4d:ab:47:1f:d5:47:33:58:8c:08: 3a:fd:b1:f7:5a:78:bd:9b:bc:38:75:97:6a:83:eb: ad:09:f1:70:c5:cc:5d:86:7a:d5:3d:ce:44:ff:7b: 3c:c3:75:d5:8e:06:47:4a:0e:87:6d:16:e0:79:a4: 58:68:da:a9:c9:37:47:9e:07:3a:60:36:c9:da:39: 9c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:15:E6:56:10:41:AB:B4:A0:30:71:84:02:F3:91:B1:0C:D4:39:E4 X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:6e:83:ab:ac:69:be:a1:f2:8e:78:88:b1:f5:5a:aa:4b:a3: 36:85:15:a3:15:e7:65:0b:7e:0e:6d:e4:01:3a:32:a3:e4:2d: 01:b4:c4:c5:53:33:78:94:06:1d:96:ac:25:5b:92:54:69:8f: d3:95:a5:ef:fa:f4:f0:63:da:92:08:62:d3:10:f5:28:2a:44: 96:b8:d2:d3:43:2a:c7:00:4d:77:d3:9e:03:cc:c6:b9:18:87: 5a:2c:52:8c:6b:c0:6f:26:76:14:5f:54:a1:9d:b1:d7:67:b1: c0:a9:86:db:67:85:f5:51:12:55:e4:45:14:ba:a5:ff:03:19: a8:a3:52:45:00:07:17:af:f8:dd:98:82:66:0f:e3:f8:f8:f4: 92:8f:6f:10:86:43:03:ec:7a:17:1a:25:6a:ed:38:10:6d:e6: b2:b7:2c:89:a1:f3:85:c2:9a:4f:7d:e3:f5:c6:a0:84:31:9f: da:15:d7:29:62:cf:21:f3:23:f9:59:e4:ed:01:4c:22:20:10: 73:a1:54:a6:72:98:d9:fe:ed:b1:5c:63:aa:c4:8c:28:ff:ef: f9:cc:7c:99:f3:32:13:f5:75:d9:c8:68:dc:77:67:df:24:0a: ee:82:62:fb:6d:75:8a:68:81:2c:ee:6c:ab:07:22:ac:45:68: cf:fd:06:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjUwOTA1MDAxNjUxWhcNMjUwOTEyMDAxNjUxWjAYMRYwFAYD VQQDEw02OGJhMmJmNC03ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+nqdbStnWOzpOAFCjFS8vkVgylA08mh/Ql9S464ZIXd/L3pHJjrug8Fnw7w COAMnGKiyCM/u/L3WHeWee4FFT/A0yyFn0JZ8R1W6JXKFb0h5+Vl0T+9zhRnAdOj JQ1HUuY62wQsrEKR3ffHSYOsoqxhInp4DulsPH41GJsUXqyu/JRM/ttnwAHeSD3X iysWAIUdYAzrNjSlOUzzluJT+wGuBTkg69A4IPxoVF/8zJhnoHEZXqn+mk2rRx/V RzNYjAg6/bH3Wni9m7w4dZdqg+utCfFwxcxdhnrVPc5E/3s8w3XVjgZHSg6HbRbg eaRYaNqpyTdHngc6YDbJ2jmc9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYV5lYQ Qau0oDBxhALzkbEM1DnkMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIboOrrGm+ofKOeIix9VqqS6M2hRWjFedlC34ObeQBOjKj5C0BtMTF UzN4lAYdlqwlW5JUaY/TlaXv+vTwY9qSCGLTEPUoKkSWuNLTQyrHAE13054DzMa5 GIdaLFKMa8BvJnYUX1ShnbHXZ7HAqYbbZ4X1URJV5EUUuqX/Axmoo1JFAAcXr/jd mIJmD+P4+PSSj28QhkMD7HoXGiVq7TgQbeaytyyJofOFwppPfeP1xqCEMZ/aFdcp Ys8h8yP5WeTtAUwiIBBzoVSmcpjZ/u2xXGOqxIwo/+/5zHyZ8zIT9XXZyGjcd2ff JArugmL7bXWKaIEs7myrByKsRWjP/QZZ -----END CERTIFICATE-----Generated at Sat Sep 6 16:28:06 2025 by rpki-client