$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: SX0vjmXcONxulAj/o+kSYG5AQ7eMHEK4lcnYLNs6KFs= Subject key identifier: 6D:A3:38:81:23:25:F0:80:BC:D9:01:68:26:36:80:5C:14:34:D8:C7 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 034F Signing time: Sun 07 Sep 2025 01:28:30 +0000 Manifest this update: Sun 07 Sep 2025 01:28:30 +0000 Manifest next update: Sun 14 Sep 2025 01:28:30 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: zWyfk9pYdkR4p8Hujj/9deZApODUaCl03fgpDHLD8/Y=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: 4/rySl/r5Eo+RCE6z8XYayPr6ezbIDIspCcJrRM4VBA=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 0wTMHozntDRRL6WlF/g074Q+r6/Lm6ac7roKHdDstY4=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 0K1MrQSQm8pKMHQMtu2VIbqhJP366PQFOjPnnF6bEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Sep 7 01:28:30 2025 GMT Not After : Sep 14 01:28:30 2025 GMT Subject: CN=68bcdfbe-b68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:4f:e2:e7:b5:83:9a:b1:30:81:1a:96:81: 07:01:5c:82:81:4a:a2:de:b9:bc:80:5c:20:08:98: 69:6d:0a:43:a1:2c:a5:f2:65:8d:90:7c:56:2b:dc: ce:a7:a1:32:4a:c2:ca:70:7d:21:59:65:3f:05:f5: 21:69:2b:0c:6d:59:f6:b0:78:bd:5d:26:c0:e0:0d: 74:e4:53:ac:2d:bc:80:fa:70:bc:10:72:3a:8f:fb: d3:e0:4c:3d:b2:35:cc:00:9f:1b:a6:1e:f6:4d:65: 9e:7b:d9:7f:69:d6:44:7a:a7:43:4f:dd:a4:ff:95: d7:70:0e:89:c9:02:33:8e:be:d3:75:b7:2d:7d:04: 3d:40:11:7d:b1:4d:ad:a1:ed:68:00:4e:be:25:ca: f9:58:62:8d:46:d8:a0:2d:d5:86:4c:50:83:00:61: b4:3a:ff:3c:05:27:df:36:ca:95:63:0f:63:2e:f5: 97:6c:8e:ac:cc:20:dd:88:17:4a:b9:27:37:45:8d: 31:c6:76:1a:f2:a0:b1:48:5e:4e:76:31:c8:a5:e7: b6:52:17:8b:d8:c9:64:8a:1d:6f:94:ab:0c:b8:58: d5:e8:03:cf:f3:24:9a:0d:20:82:7c:95:ad:54:24: 0d:e7:44:d2:25:43:f0:f1:3d:49:2f:c4:78:0d:1a: d0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A3:38:81:23:25:F0:80:BC:D9:01:68:26:36:80:5C:14:34:D8:C7 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:cd:b0:3f:5a:b5:05:b4:bd:bb:b5:13:02:7e:16:ad:87:1c: f3:89:b6:4e:cc:a8:ec:fe:9d:05:e1:43:4b:f4:5d:55:ac:9e: 9f:2e:6c:23:be:0e:60:a8:84:39:c6:72:88:03:81:35:e5:e7: 44:25:ac:b8:66:a0:e4:84:3a:0a:14:de:0a:38:dd:34:7c:6b: f9:6e:f3:68:4a:21:93:15:78:ae:2e:07:7c:65:ab:a5:51:6d: 49:6b:a1:01:3e:45:60:11:84:84:ba:2d:b1:2c:16:16:6f:a5: c6:d7:77:ab:9c:d3:92:ca:2a:a9:28:25:6b:71:63:39:94:4f: 21:7a:49:39:9a:da:73:30:1b:1d:4c:c7:59:54:5a:a9:7c:b2: 76:16:e7:8b:20:94:15:57:03:5d:1e:fd:56:a5:8a:c5:9a:a0: 19:3b:57:be:59:2a:eb:68:20:4c:9a:ed:06:19:80:ef:c9:05: 42:c4:0d:de:b2:4a:98:49:cd:90:b9:c8:95:87:1a:02:62:b0: 8b:80:49:36:d9:13:16:c3:ae:af:07:8c:fc:7c:d8:e4:be:42: a3:e2:29:62:6f:9b:f2:31:2d:e1:76:ef:9a:04:65:82:e2:98: a3:03:b6:aa:9f:fe:96:ae:a0:83:9c:cd:b5:ab:7d:6c:05:10: ec:11:69:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjUwOTA3MDEyODMwWhcNMjUwOTE0MDEyODMwWjAYMRYwFAYD VQQDEw02OGJjZGZiZS1iNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKtP4ue1g5qxMIEaloEHAVyCgUqi3rm8gFwgCJhpbQpDoSyl8mWNkHxWK9zO p6EySsLKcH0hWWU/BfUhaSsMbVn2sHi9XSbA4A105FOsLbyA+nC8EHI6j/vT4Ew9 sjXMAJ8bph72TWWee9l/adZEeqdDT92k/5XXcA6JyQIzjr7TdbctfQQ9QBF9sU2t oe1oAE6+Jcr5WGKNRtigLdWGTFCDAGG0Ov88BSffNsqVYw9jLvWXbI6szCDdiBdK uSc3RY0xxnYa8qCxSF5OdjHIpee2UheL2Mlkih1vlKsMuFjV6APP8ySaDSCCfJWt VCQN50TSJUPw8T1JL8R4DRrQdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2jOIEj JfCAvNkBaCY2gFwUNNjHMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADzbA/WrUFtL27tRMCfhathxzzibZOzKjs/p0F4UNL9F1VrJ6fLmwj vg5gqIQ5xnKIA4E15edEJay4ZqDkhDoKFN4KON00fGv5bvNoSiGTFXiuLgd8Zaul UW1Ja6EBPkVgEYSEui2xLBYWb6XG13ernNOSyiqpKCVrcWM5lE8hekk5mtpzMBsd TMdZVFqpfLJ2FueLIJQVVwNdHv1WpYrFmqAZO1e+WSrraCBMmu0GGYDvyQVCxA3e skqYSc2QuciVhxoCYrCLgEk22RMWw66vB4z8fNjkvkKj4ilib5vyMS3hdu+aBGWC 4pijA7aqn/6WrqCDnM21q31sBRDsEWke -----END CERTIFICATE-----Generated at Mon Sep 8 22:12:44 2025 by rpki-client