$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft File: xpA79e8aQHD8mDw02cUDz0MT_Is.mft (raw, json) Hash identifier: iVCBpHl6AnV3Ep/fS+fZb62q+q/4PaLMn35IfAHl6B4= Subject key identifier: DA:93:B3:18:F6:9C:70:67:D3:9E:FF:A1:BD:C3:73:89:F6:1C:BA:79 Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B Certificate issuer: /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft Manifest number: 0520 Signing time: Tue 05 Aug 2025 00:01:45 +0000 Manifest this update: Tue 05 Aug 2025 00:01:45 +0000 Manifest next update: Tue 12 Aug 2025 00:01:45 +0000 Files and hashes: 1: xpA79e8aQHD8mDw02cUDz0MT_Is.crl (hash: /uXzaM9BYxiG8qhYwY7kG2VJTQwNOGO1D3pTaEPXWEU=) 2: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (hash: n4qbIc5i3kLkXS9yMK9sKanURu/yHl+PFiYDGaralVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111A96, serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Validity Not Before: Aug 5 00:01:45 2025 GMT Not After : Aug 12 00:01:45 2025 GMT Subject: CN=689149e9-09c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:26:93:43:be:5c:64:11:b0:1d:ee:b0:61: 51:8e:d3:a2:2b:2d:84:4f:d1:ca:f0:c3:bc:14:4d: 40:2f:c6:08:3a:19:15:74:b3:9b:a3:6d:e3:99:f7: 97:a7:89:c3:d7:c1:48:a8:37:49:d6:8a:bc:6d:8f: 39:b1:21:1b:d1:6b:ed:3d:77:eb:c8:8a:90:4e:d0: 1d:e3:d5:f6:a7:c2:1b:41:05:27:18:41:cb:32:e6: 2b:b0:78:76:a5:f2:0b:68:c1:b3:6d:df:97:51:07: d8:e3:17:9f:e1:db:d5:9c:61:8b:89:74:b8:82:53: 86:47:7f:10:dd:5c:32:8b:fe:08:50:fc:5b:62:b3: dc:81:a7:1f:a6:a9:a2:85:4a:45:7e:18:f7:70:09: e1:8f:56:56:60:06:d2:e7:bd:94:06:76:a1:7f:dc: 6b:4c:6e:c0:e8:3d:44:ed:0c:fe:05:0a:3f:5b:c6: d3:77:39:2c:26:ae:74:8d:30:b5:3f:0f:96:fa:8e: 5e:6f:c6:de:1a:8c:78:e5:2d:0a:28:81:39:86:b3: 54:0f:d7:95:48:b1:5d:ee:fb:08:ce:15:6e:58:92: ee:cc:c5:a7:92:83:36:83:5b:c8:6d:85:7d:f2:87: 39:02:e6:e9:d2:91:5b:e3:b1:9a:a6:db:60:19:99: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:93:B3:18:F6:9C:70:67:D3:9E:FF:A1:BD:C3:73:89:F6:1C:BA:79 X509v3 Authority Key Identifier: keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a9:31:a1:6f:95:b7:ce:9d:15:64:cf:e9:ed:6f:a1:b3:03: ae:0c:32:78:02:9c:77:53:52:56:be:a6:07:5c:21:df:a6:a2: 85:f2:03:e2:60:19:95:60:a4:49:f2:b3:45:33:b9:5b:5a:d5: 76:6e:c7:cd:7b:96:0d:be:e9:e1:60:51:82:5c:ac:78:f4:3c: 37:b3:b6:54:a8:a6:ef:1b:02:bb:fd:4a:06:e1:0e:53:65:96: fb:5d:fc:d6:58:44:0a:53:e6:99:cf:04:f6:f6:fc:01:72:55: 7c:a2:86:32:c7:1b:14:af:5f:0a:e2:f4:31:4e:43:46:b8:b6: f9:6d:16:69:5d:30:46:8d:32:3f:b8:68:cf:ea:a9:8c:57:80: 46:3b:9d:79:28:4f:ba:75:d8:54:5d:85:a5:c3:54:8a:3b:77: 8f:18:29:82:76:2e:67:0c:58:ef:0d:6b:44:e3:c2:4a:f5:82: db:fb:3e:53:26:5b:21:51:1e:59:0d:28:8e:e5:96:89:5f:75: 14:4a:f6:2b:f7:e3:d2:53:29:d8:2f:ae:da:7c:8c:1b:25:92: 67:27:ba:23:db:fb:20:ec:e1:72:ab:74:c8:d4:95:1b:f6:73: e9:9a:ed:e7:1c:2f:5c:e6:e0:1e:69:48:ad:f4:33:48:73:8d: 56:7d:bb:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFBOTYxMTAvBgNVBAUTKEM2OTAzQkY1RUYxQTQwNzBGQzk4M0MzNEQ5QzUwM0NG NDMxM0ZDOEIwHhcNMjUwODA1MDAwMTQ1WhcNMjUwODEyMDAwMTQ1WjAYMRYwFAYD VQQDEw02ODkxNDllOS0wOWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOImk0O+XGQRsB3usGFRjtOiKy2ET9HK8MO8FE1AL8YIOhkVdLObo23jmfeX p4nD18FIqDdJ1oq8bY85sSEb0WvtPXfryIqQTtAd49X2p8IbQQUnGEHLMuYrsHh2 pfILaMGzbd+XUQfY4xef4dvVnGGLiXS4glOGR38Q3Vwyi/4IUPxbYrPcgacfpqmi hUpFfhj3cAnhj1ZWYAbS572UBnahf9xrTG7A6D1E7Qz+BQo/W8bTdzksJq50jTC1 Pw+W+o5eb8beGox45S0KKIE5hrNUD9eVSLFd7vsIzhVuWJLuzMWnkoM2g1vIbYV9 8oc5Aubp0pFb47GapttgGZm8cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqTsxj2 nHBn057/ob3Dc4n2HLp5MB8GA1UdIwQYMBaAFMaQO/XvGkBw/Jg8NNnFA89DE/yL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUE5Ni80NTg5QzYzODBF RUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFIRDhtRHcwMmNVRHowTVRf SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwQTc5ZThhUUhEOG1EdzAyY1VEejBNVF9Jcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUE5Ni80NTg5QzYzODBFRUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFI RDhtRHcwMmNVRHowTVRfSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGqTGhb5W3zp0VZM/p7W+hswOuDDJ4Apx3U1JWvqYHXCHfpqKF8gPi YBmVYKRJ8rNFM7lbWtV2bsfNe5YNvunhYFGCXKx49Dw3s7ZUqKbvGwK7/UoG4Q5T ZZb7XfzWWEQKU+aZzwT29vwBclV8ooYyxxsUr18K4vQxTkNGuLb5bRZpXTBGjTI/ uGjP6qmMV4BGO515KE+6ddhUXYWlw1SKO3ePGCmCdi5nDFjvDWtE48JK9YLb+z5T JlshUR5ZDSiO5ZaJX3UUSvYr9+PSUynYL67afIwbJZJnJ7oj2/sg7OFyq3TI1JUb 9nPpmu3nHC9c5uAeaUit9DNIc41Wfbug -----END CERTIFICATE-----Generated at Wed Aug 6 11:04:09 2025 by rpki-client