$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft File: xWFyqoU5BINNkF08MAE0TdKhjp4.mft (raw, json) Hash identifier: CoOK0+S6MLfUQ2Ox3gGfeAOVy1TKfleNG4uXwkuYJm0= Subject key identifier: A5:5C:3B:CA:F9:42:D8:D5:BC:5E:C1:24:2A:91:8A:87:D8:FF:0B:84 Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft Manifest number: 01A3 Signing time: Mon 11 Aug 2025 03:27:39 +0000 Manifest this update: Mon 11 Aug 2025 03:27:39 +0000 Manifest next update: Mon 18 Aug 2025 03:27:39 +0000 Files and hashes: 1: xWFyqoU5BINNkF08MAE0TdKhjp4.crl (hash: bakX5dPpjGZpUKrkl5aAgGul6kRIhiOHQ90elgU2/kA=) 2: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (hash: QJic5b/HC6ZO9L9AzouyI1f/AhHlKpyjlXdUDRpV06s=) 3: 6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (hash: fvrvhYuIB4wEmKs1ycLwW/A4j4ALVpjcmKJeAfUulIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Validity Not Before: Aug 11 03:27:39 2025 GMT Not After : Aug 18 03:27:39 2025 GMT Subject: CN=6899632b-4f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3b:27:26:d9:f1:1e:78:51:92:8e:45:21:45: 25:d7:d4:72:34:83:c0:89:78:0a:89:3b:58:76:0b: 71:c0:cc:0f:44:36:df:5c:a4:68:ee:c2:ae:bf:42: 99:27:a2:93:c9:9e:a7:2b:cc:cf:b1:87:c0:ea:96: 76:4c:23:36:ac:6d:c7:21:09:35:0b:29:73:71:df: be:89:7b:cf:f6:85:1e:b1:5e:94:97:cc:61:93:56: a6:56:cb:00:12:0d:76:ad:97:1b:93:a7:dc:6b:c4: 8d:cb:22:b2:45:fc:d4:5a:27:70:b4:dd:1d:76:80: 70:9a:4b:51:a8:13:50:1f:18:90:c9:64:5c:3d:e9: db:7b:4d:e4:a6:3e:01:c1:b4:fd:ad:a3:23:c1:4c: 50:f0:53:30:a5:53:60:32:c3:cb:9a:d6:e1:ee:6e: 66:c6:d9:3a:e0:a1:1d:6b:a4:7e:36:44:a2:93:c1: 05:2b:fc:cc:50:2c:73:2a:2c:d9:d0:16:f9:1c:63: 89:9c:cf:8b:22:72:0b:fe:8f:e0:58:f6:6c:94:6b: d1:ff:d6:af:3b:51:e8:27:6c:86:79:04:b3:46:4a: 8f:33:9f:b2:8c:c5:f5:d8:aa:24:b8:e3:b8:3b:ba: a3:1c:5a:bd:94:60:5c:4d:1f:30:96:90:d4:fb:74: 30:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5C:3B:CA:F9:42:D8:D5:BC:5E:C1:24:2A:91:8A:87:D8:FF:0B:84 X509v3 Authority Key Identifier: keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:3c:92:a5:da:c7:85:8e:1d:5a:5f:dc:96:69:11:4c:40:4b: 42:22:1a:e3:f3:e7:1c:33:17:28:f7:4f:3d:1d:06:58:c3:b9: 17:7c:94:c5:d4:63:1c:c4:93:8c:31:6a:53:f0:9f:23:41:44: a1:d7:67:79:cf:d4:11:2a:aa:bb:32:e2:12:95:3f:03:e7:b7: 94:b7:a6:5a:39:68:c1:04:be:8c:2b:1e:30:5a:d7:96:76:0d: 9f:38:e9:6f:c9:84:57:8f:40:af:cf:13:f1:67:1d:dd:59:ba: 1a:20:a5:b4:60:4e:13:67:c6:eb:f8:7e:1c:e6:8d:76:b6:da: 34:61:26:02:1e:ae:0b:44:46:4d:c8:d7:49:47:c2:81:de:a7: 73:e2:2b:94:b2:ad:c2:94:7e:7f:49:8e:ba:fa:ee:49:35:aa: 3d:49:c3:5d:c1:78:3d:23:af:73:23:53:fa:2e:29:46:53:e2: 19:3c:49:b7:fe:61:49:f4:6c:da:d3:96:3b:48:21:17:6d:96: e7:89:c7:3c:0f:15:c7:c8:1f:a5:03:57:a2:78:08:77:94:08: 2c:81:98:b3:31:f1:ec:cd:62:b4:de:95:ee:d1:40:0d:c7:9e: b7:cd:2a:9b:de:f6:ea:66:71:ed:78:74:f5:43:ad:15:0a:59: f1:30:84:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzMjExMTAvBgNVBAUTKEM1NjE3MkFBODUzOTA0ODM0RDkwNUQzQzMwMDEzNDRE RDJBMThFOUUwHhcNMjUwODExMDMyNzM5WhcNMjUwODE4MDMyNzM5WjAYMRYwFAYD VQQDEw02ODk5NjMyYi00ZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jsnJtnxHnhRko5FIUUl19RyNIPAiXgKiTtYdgtxwMwPRDbfXKRo7sKuv0KZ J6KTyZ6nK8zPsYfA6pZ2TCM2rG3HIQk1Cylzcd++iXvP9oUesV6Ul8xhk1amVssA Eg12rZcbk6fca8SNyyKyRfzUWidwtN0ddoBwmktRqBNQHxiQyWRcPenbe03kpj4B wbT9raMjwUxQ8FMwpVNgMsPLmtbh7m5mxtk64KEda6R+NkSik8EFK/zMUCxzKizZ 0Bb5HGOJnM+LInIL/o/gWPZslGvR/9avO1HoJ2yGeQSzRkqPM5+yjMX12KokuOO4 O7qjHFq9lGBcTR8wlpDU+3QwFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVcO8r5 QtjVvF7BJCqRiofY/wuEMB8GA1UdIwQYMBaAFMVhcqqFOQSDTZBdPDABNE3SoY6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDMyMS81MkIyRTAxNjAw QzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJTk5rRjA4TUFFMFRkS2hq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hXRnlxb1U1QklOTmtGMDhNQUUwVGRLaGpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDMyMS81MkIyRTAxNjAwQzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJ Tk5rRjA4TUFFMFRkS2hqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIPJKl2seFjh1aX9yWaRFMQEtCIhrj8+ccMxco9089HQZYw7kXfJTF 1GMcxJOMMWpT8J8jQUSh12d5z9QRKqq7MuISlT8D57eUt6ZaOWjBBL6MKx4wWteW dg2fOOlvyYRXj0CvzxPxZx3dWboaIKW0YE4TZ8br+H4c5o12tto0YSYCHq4LREZN yNdJR8KB3qdz4iuUsq3ClH5/SY66+u5JNao9ScNdwXg9I69zI1P6LilGU+IZPEm3 /mFJ9Gza05Y7SCEXbZbnicc8DxXHyB+lA1eieAh3lAgsgZizMfHszWK03pXu0UAN x563zSqb3vbqZnHteHT1Q60VClnxMIS7 -----END CERTIFICATE-----Generated at Tue Aug 12 14:48:49 2025 by rpki-client