$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: zNx//CVHHLsKe9BHo0a/J8GBE8nr6+RVusAUgNT6WEY= Subject key identifier: 7E:C3:F4:9E:AE:70:5C:2C:AB:14:93:49:61:84:81:7D:DC:09:7A:1F Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0C0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0ACF Signing time: Thu 04 Sep 2025 20:17:08 +0000 Manifest this update: Thu 04 Sep 2025 20:17:08 +0000 Manifest next update: Thu 11 Sep 2025 20:17:08 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: H00jGWj+ChWIlAqiD6pL8fxxVABelDYSo2dbDk2i9Ow=) 2: CED9053CE35211EDB7F6B44EC4F9AE02.roa (hash: JmnrBzA6dJ9YsMu7pz9xXLOAQrwChmETl1tBrYYwR4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3085 (0xc0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Sep 4 20:17:08 2025 GMT Not After : Sep 11 20:17:08 2025 GMT Subject: CN=68b9f3c4-7f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1e:d0:33:38:5b:05:88:ee:f8:1e:8e:27:99: 90:ee:2c:38:2b:0d:48:6c:be:8b:41:fe:9f:e6:53: 97:b5:52:ce:5d:2d:e9:0f:b5:3e:4f:6e:6d:ed:96: ec:89:e1:38:48:fe:ad:67:ee:e1:3f:fa:0f:c6:63: ba:e8:40:dc:61:66:d1:82:95:2a:02:7f:51:c9:b4: 8d:f3:fb:40:4c:c4:43:32:23:b0:77:04:5c:14:01: 4c:82:07:6b:76:8c:b0:3f:90:49:12:20:0c:e4:09: b7:47:ee:7a:66:a7:3b:bf:e7:71:8d:50:fb:fd:29: ba:d1:f3:7a:a1:55:47:12:82:7d:34:aa:d6:bc:65: 02:0a:54:ff:cb:a0:1b:4d:eb:d1:2e:40:cd:79:b6: 9f:62:34:b4:88:3f:68:21:1d:92:ff:2b:43:62:e7: 0c:ef:f5:85:63:0b:cb:42:e1:47:82:1b:f1:c4:94: d6:25:29:63:b9:34:57:82:e3:b3:cf:90:05:de:11: 14:9a:cb:c2:86:5a:5b:1e:36:eb:2f:c0:ed:1a:bd: d1:89:87:20:c5:5a:74:53:db:2f:f5:3f:ab:05:a7: a7:ac:46:e0:36:4d:3d:5f:cc:7a:6d:fa:1d:43:10: 28:af:d7:9f:8c:79:91:37:d3:11:83:19:1c:5d:df: a9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C3:F4:9E:AE:70:5C:2C:AB:14:93:49:61:84:81:7D:DC:09:7A:1F X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:88:78:f2:93:e8:bb:4c:24:8b:5c:40:00:90:24:a3:73:0f: e3:dd:aa:1c:2a:5c:07:9a:6b:33:5d:b3:e1:bf:c7:ff:0a:fe: f5:6b:e9:24:86:48:15:59:97:7d:1f:ed:77:7d:e7:97:a2:90: f5:cf:2d:47:c3:d3:dc:0c:62:d3:4b:ba:07:1d:c0:32:00:b8: 6d:8a:6a:88:0a:02:fc:6b:cc:47:0b:61:e7:f1:27:8f:fc:82: 65:17:53:a5:3d:9c:11:7a:c4:ae:f0:d4:51:fd:17:3f:84:1f: 42:3f:bb:e6:af:8d:8f:8b:d6:d5:5d:f5:47:15:41:b9:2a:d5: c9:36:0c:ce:93:f5:37:4c:c3:81:2b:53:a8:81:90:33:b5:b8: d6:d4:ef:e2:10:4e:97:bc:e0:48:d4:ad:46:b3:6e:36:ef:f1: 1e:49:d3:e5:5e:08:c2:a0:a2:c7:2f:39:7f:39:a8:54:5d:7f: 20:8d:f2:28:a6:24:0d:8a:28:ac:b8:af:d8:3a:45:0b:6c:27: be:7d:db:eb:f6:f2:b2:38:2c:c1:96:35:b5:c6:46:16:a4:06: 2b:93:04:5d:e5:3f:98:d8:a7:10:9e:79:ad:20:4d:e8:9f:d4: f4:cf:63:9c:42:b9:a8:35:5c:f6:61:7e:a1:52:8e:b1:61:e5: a2:29:87:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjUwOTA0MjAxNzA4WhcNMjUwOTExMjAxNzA4WjAYMRYwFAYD VQQDEw02OGI5ZjNjNC03ZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1R7QMzhbBYju+B6OJ5mQ7iw4Kw1IbL6LQf6f5lOXtVLOXS3pD7U+T25t7Zbs ieE4SP6tZ+7hP/oPxmO66EDcYWbRgpUqAn9RybSN8/tATMRDMiOwdwRcFAFMggdr doywP5BJEiAM5Am3R+56Zqc7v+dxjVD7/Sm60fN6oVVHEoJ9NKrWvGUCClT/y6Ab TevRLkDNebafYjS0iD9oIR2S/ytDYucM7/WFYwvLQuFHghvxxJTWJSljuTRXguOz z5AF3hEUmsvChlpbHjbrL8DtGr3RiYcgxVp0U9sv9T+rBaenrEbgNk09X8x6bfod QxAor9efjHmRN9MRgxkcXd+p1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7D9J6u cFwsqxSTSWGEgX3cCXofMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4iHjyk+i7TCSLXEAAkCSjcw/j3aocKlwHmmszXbPhv8f/Cv71a+kk hkgVWZd9H+13feeXopD1zy1Hw9PcDGLTS7oHHcAyALhtimqICgL8a8xHC2Hn8SeP /IJlF1OlPZwResSu8NRR/Rc/hB9CP7vmr42Pi9bVXfVHFUG5KtXJNgzOk/U3TMOB K1OogZAztbjW1O/iEE6XvOBI1K1Gs2427/EeSdPlXgjCoKLHLzl/OahUXX8gjfIo piQNiiisuK/YOkULbCe+fdvr9vKyOCzBljW1xkYWpAYrkwRd5T+Y2KcQnnmtIE3o n9T0z2OcQrmoNVz2YX6hUo6xYeWiKYdH -----END CERTIFICATE-----Generated at Sat Sep 6 16:52:48 2025 by rpki-client