$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: 1wrSfpBM3XqvF2fhZVb9wHE/RZh5t0TvjwGNhz3d61s= Subject key identifier: 48:CE:25:4C:8B:28:66:AB:E9:05:0C:78:2D:DE:E7:40:C6:F2:89:7A Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 01DE Signing time: Thu 04 Sep 2025 23:46:28 +0000 Manifest this update: Thu 04 Sep 2025 23:46:27 +0000 Manifest next update: Thu 11 Sep 2025 23:46:27 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: L3woWbdpxH/den1xms/TpM2XSGmlosk08coNuVtL+Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Sep 4 23:46:27 2025 GMT Not After : Sep 11 23:46:27 2025 GMT Subject: CN=68ba24d3-8f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ef:3e:c5:02:57:62:33:06:12:bd:90:82:37: cd:90:17:02:4e:ab:c9:8c:9f:86:76:cd:4d:70:84: 19:0d:d1:46:44:36:76:51:de:94:7f:92:3f:d9:70: fd:6d:0b:84:e7:79:89:d9:5b:f4:f0:92:9a:15:a6: 4b:df:96:ec:b2:1f:0f:14:92:44:48:8f:eb:42:b6: 44:49:b9:f7:4b:7d:88:b7:56:bf:dd:62:43:1d:47: a4:99:c9:15:97:01:3d:e6:dd:36:2a:a7:dc:c3:1f: d2:10:7e:32:e3:e8:70:ae:91:7e:2e:cf:72:02:ac: 32:ac:96:bd:1f:ba:b9:7d:a9:3a:46:f7:46:4d:c6: 19:ec:04:be:12:83:e1:d3:61:b8:dc:d9:7f:90:91: 3f:37:1d:1b:5d:45:de:e0:d4:58:39:b3:7d:11:e0: 70:a5:53:c0:e5:30:4a:9e:a5:2c:50:c3:dc:f2:18: 68:71:0e:53:77:3d:1b:e2:07:b8:4d:1c:f8:3b:68: 19:1b:00:ec:8e:b1:21:27:cd:f2:ac:5d:27:3a:84: a8:69:0d:39:a9:3c:a7:6e:97:a4:5f:42:c6:77:73: b8:d5:f0:b1:95:7f:27:d5:cb:35:52:c4:24:e9:6d: b9:4f:0d:1c:d8:e4:e5:54:1c:87:2e:04:dd:e9:71: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CE:25:4C:8B:28:66:AB:E9:05:0C:78:2D:DE:E7:40:C6:F2:89:7A X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a0:96:cd:a5:af:f7:d6:3c:15:55:5d:72:e9:88:34:a6:a7: 70:68:62:c0:de:8a:50:92:98:f3:8c:b4:81:6f:76:a2:79:ee: 1f:5d:53:5a:d4:9f:1a:19:79:ca:db:50:76:fd:8b:73:aa:d0: 78:61:62:b4:64:63:87:b0:61:a6:4e:3f:68:a9:4f:e0:98:ef: 07:ac:3c:80:c2:7b:27:ff:22:92:d9:91:0f:65:97:53:42:e4: 9c:85:5f:4d:53:37:9c:ad:14:9b:af:62:82:30:fb:63:20:19: 8c:89:34:07:21:73:63:36:9b:43:aa:96:12:32:e9:73:ab:c2: e4:f4:a2:d0:70:8a:4f:d5:4b:3d:54:7a:da:06:ce:b8:b0:d9: 82:5e:7d:b8:1c:92:b3:3a:c6:2c:14:3f:6e:43:7f:d8:2e:1e: b7:69:7e:b6:9c:49:db:dd:f1:da:38:37:85:78:d0:da:ab:90: dc:9e:30:a8:23:a6:cb:9f:e5:b8:53:d8:8c:d2:b6:5e:51:25: 77:02:2c:7c:a5:51:7e:ef:a6:0a:2a:87:76:73:c9:83:aa:d6: 71:6a:3c:25:58:d5:63:df:9a:a0:d6:49:77:17:47:2d:eb:32: 68:45:e0:b2:a9:bd:28:21:64:53:9a:f8:a5:92:9a:57:7f:bd: 1b:d0:cb:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjUwOTA0MjM0NjI3WhcNMjUwOTExMjM0NjI3WjAYMRYwFAYD VQQDEw02OGJhMjRkMy04ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3e8+xQJXYjMGEr2QgjfNkBcCTqvJjJ+Gds1NcIQZDdFGRDZ2Ud6Uf5I/2XD9 bQuE53mJ2Vv08JKaFaZL35bssh8PFJJESI/rQrZESbn3S32It1a/3WJDHUekmckV lwE95t02Kqfcwx/SEH4y4+hwrpF+Ls9yAqwyrJa9H7q5fak6RvdGTcYZ7AS+EoPh 02G43Nl/kJE/Nx0bXUXe4NRYObN9EeBwpVPA5TBKnqUsUMPc8hhocQ5Tdz0b4ge4 TRz4O2gZGwDsjrEhJ83yrF0nOoSoaQ05qTynbpekX0LGd3O41fCxlX8n1cs1UsQk 6W25Tw0c2OTlVByHLgTd6XFmdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjOJUyL KGar6QUMeC3e50DG8ol6MB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxoJbNpa/31jwVVV1y6Yg0pqdwaGLA3opQkpjzjLSBb3aiee4fXVNa 1J8aGXnK21B2/YtzqtB4YWK0ZGOHsGGmTj9oqU/gmO8HrDyAwnsn/yKS2ZEPZZdT QuSchV9NUzecrRSbr2KCMPtjIBmMiTQHIXNjNptDqpYSMulzq8Lk9KLQcIpP1Us9 VHraBs64sNmCXn24HJKzOsYsFD9uQ3/YLh63aX62nEnb3fHaODeFeNDaq5DcnjCo I6bLn+W4U9iM0rZeUSV3Aix8pVF+76YKKod2c8mDqtZxajwlWNVj35qg1kl3F0ct 6zJoReCyqb0oIWRTmvilkppXf70b0MsQ -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:27 2025 by rpki-client