$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: HslF0K4AvDj3R+TUl04HY77+R+lMTR8a57TXpcOZ33E= Subject key identifier: 1C:F7:16:8A:58:75:3D:27:E7:04:9B:06:1A:5D:7B:BE:E5:C5:31:67 Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 07DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 07D7 Signing time: Sun 10 Aug 2025 21:06:10 +0000 Manifest this update: Sun 10 Aug 2025 21:06:10 +0000 Manifest next update: Sun 17 Aug 2025 21:06:10 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: dhzergeGhBYS0tI38/lBQvB50xe8ORCKlIY3TArIzis=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: pS3E0icAhyYawyxkXSLUFbWuAzA0NV/jlalvE1DTh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Aug 10 21:06:10 2025 GMT Not After : Aug 17 21:06:10 2025 GMT Subject: CN=689909c2-6981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:a3:f0:f8:bd:28:2b:d1:79:88:c2:d9:1f: 66:76:42:f9:07:f1:08:7e:c6:7c:4f:d8:31:f6:89: 90:89:88:ae:ab:97:ea:51:05:f1:96:ac:c6:a5:76: 19:04:3d:a0:bb:41:88:90:18:a8:ff:d4:88:3f:ff: d5:75:79:b4:c1:27:11:98:b5:88:69:11:d1:37:42: 96:a6:a8:8e:31:b6:cd:58:05:97:43:48:a7:22:c7: 35:03:aa:0c:93:e9:1e:e3:6a:f7:98:c3:4d:b1:bd: 4f:2b:0e:0b:a6:9f:e5:f7:b3:e4:9a:8d:93:7c:7e: 31:6d:23:58:aa:6d:1a:0e:5e:58:54:1e:e7:6c:12: ff:b6:22:7d:cd:57:94:58:fc:ca:ae:d7:47:05:84: ff:f0:32:30:97:d1:3c:4c:e4:01:6f:d7:df:f6:fd: c5:e1:ac:12:9a:8d:84:f2:ad:d8:bb:3c:5b:a6:98: 9a:c1:d5:72:ef:8b:3f:2d:9f:c8:83:3e:f9:8b:80: 93:c6:7a:42:e4:19:e2:fc:3a:84:a0:27:db:b0:cb: f0:44:b9:c5:78:e9:24:e0:ad:bd:87:01:95:bd:28: a8:8f:f5:ad:8b:6b:bd:7d:be:6d:2e:aa:8f:03:1d: dd:cf:b0:54:89:d2:f5:32:81:58:e7:73:22:6e:d9: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F7:16:8A:58:75:3D:27:E7:04:9B:06:1A:5D:7B:BE:E5:C5:31:67 X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ea:ad:6e:86:31:13:5d:59:bc:27:14:88:5f:77:42:3b:4e: 30:4d:60:ad:1a:4d:5e:ad:12:9c:45:86:f9:91:d2:c5:a9:1e: aa:10:16:ff:e0:d1:be:b6:96:0d:07:ee:78:30:89:40:79:83: 74:a8:aa:b8:31:93:93:05:18:4d:01:69:2b:49:66:e2:7d:0f: 78:06:ec:3c:90:5e:33:13:71:41:d2:18:91:47:ce:a1:53:77: cd:b5:1a:4c:ea:f5:24:3a:52:ff:c3:af:70:e9:1e:be:64:29: cb:ad:f0:19:14:c0:ed:31:b7:85:e7:34:60:de:e5:16:30:87: e4:02:98:89:22:3e:1e:28:28:dd:bc:ff:e8:7c:a2:94:52:ce: 24:ba:bb:6a:06:0b:10:50:8e:2f:c5:28:1c:9a:53:04:fb:3d: 84:0b:4d:53:01:f1:d4:40:b3:51:3f:10:2b:a7:5f:c2:75:1f: 31:84:6e:bb:6b:b7:63:07:9a:17:ef:88:73:c2:8d:65:07:45: 56:18:44:43:0b:8c:22:e9:29:55:d4:92:6f:9f:d5:2a:83:fa: 8d:7a:08:6d:2f:09:f2:ce:15:6a:58:80:12:83:af:b1:20:b1: e6:a3:ec:e9:9e:87:6a:93:e9:7b:c8:8c:13:61:fb:cb:29:fb: 46:af:8a:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUwODEwMjEwNjEwWhcNMjUwODE3MjEwNjEwWjAYMRYwFAYD VQQDEw02ODk5MDljMi02OTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKmj8Pi9KCvReYjC2R9mdkL5B/EIfsZ8T9gx9omQiYiuq5fqUQXxlqzGpXYZ BD2gu0GIkBio/9SIP//VdXm0wScRmLWIaRHRN0KWpqiOMbbNWAWXQ0inIsc1A6oM k+ke42r3mMNNsb1PKw4Lpp/l97Pkmo2TfH4xbSNYqm0aDl5YVB7nbBL/tiJ9zVeU WPzKrtdHBYT/8DIwl9E8TOQBb9ff9v3F4awSmo2E8q3YuzxbppiawdVy74s/LZ/I gz75i4CTxnpC5Bni/DqEoCfbsMvwRLnFeOkk4K29hwGVvSioj/Wti2u9fb5tLqqP Ax3dz7BUidL1MoFY53MibtnJRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBz3FopY dT0n5wSbBhpde77lxTFnMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ6q1uhjETXVm8JxSIX3dCO04wTWCtGk1erRKcRYb5kdLFqR6qEBb/ 4NG+tpYNB+54MIlAeYN0qKq4MZOTBRhNAWkrSWbifQ94Buw8kF4zE3FB0hiRR86h U3fNtRpM6vUkOlL/w69w6R6+ZCnLrfAZFMDtMbeF5zRg3uUWMIfkApiJIj4eKCjd vP/ofKKUUs4kurtqBgsQUI4vxSgcmlME+z2EC01TAfHUQLNRPxArp1/CdR8xhG67 a7djB5oX74hzwo1lB0VWGERDC4wi6SlV1JJvn9Uqg/qNeghtLwnyzhVqWIASg6+x ILHmo+zpnodqk+l7yIwTYfvLKftGr4oJ -----END CERTIFICATE-----Generated at Mon Aug 11 04:27:46 2025 by rpki-client