$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: YCSj3LbPr2KlakxHfGaOn192GSZIfumPhWD9+Po4e/g= Subject key identifier: EA:25:F2:A0:0E:DC:1D:86:B2:C9:0B:44:4A:B4:26:AC:E3:70:18:44 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 018D Signing time: Thu 07 Aug 2025 03:57:21 +0000 Manifest this update: Thu 07 Aug 2025 03:57:20 +0000 Manifest next update: Thu 14 Aug 2025 03:57:20 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: vUffBzSg1hyAQMseVhxpcRZJdl+hd5KUnWbGtR6Cs2M=) 2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: kKqvj0xomNS0RBNYUt8mH1385WpqQD6GeAsQ4vaFhLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: Aug 7 03:57:20 2025 GMT Not After : Aug 14 03:57:20 2025 GMT Subject: CN=68942421-6ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:6c:2e:bc:c0:6c:82:49:29:f2:fa:66:12: ca:be:e2:0c:f6:7b:06:76:b5:71:7b:aa:c5:45:75: 77:84:74:f2:3a:97:54:b4:26:f5:de:bc:c2:38:54: 2e:ba:1a:d7:29:b1:00:8c:0b:94:42:ed:1c:a2:bd: 33:32:01:73:c0:83:5e:da:6d:fa:89:ba:81:de:90: 65:3c:43:4e:52:85:f2:ed:30:03:a5:50:37:cd:69: 89:0c:14:15:23:5e:a3:d4:dd:80:18:45:3d:d8:46: fd:cc:8a:e3:5c:9c:18:e9:06:de:49:1e:22:e9:12: 94:c1:71:58:1b:51:c6:40:5e:2a:67:a4:3c:22:cc: d0:85:69:4a:88:37:6d:00:79:33:5f:16:ba:75:dd: 6b:d1:8d:0c:3a:65:40:c2:46:81:65:a3:48:ad:d0: cf:82:ad:2e:6f:b5:dd:a4:d8:e0:2a:ec:76:7b:3b: 4e:bb:81:6a:34:d6:74:b5:5e:da:6a:49:e3:bd:45: ce:26:7d:4a:63:c5:e7:cf:1e:0b:b5:82:49:bb:33: b6:a1:92:2d:dc:9e:a8:26:14:4b:c2:77:93:29:ea: 4e:66:df:2b:8e:f2:c4:51:a2:b4:db:33:44:97:ea: 0a:b0:27:0c:d3:5e:90:d3:6a:05:82:fe:c4:16:08: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:25:F2:A0:0E:DC:1D:86:B2:C9:0B:44:4A:B4:26:AC:E3:70:18:44 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:93:54:b9:da:b9:db:22:54:f2:24:df:91:44:c3:3a:25:ea: 88:37:56:80:69:aa:75:84:18:34:99:54:59:4f:8d:6f:9c:9b: b4:57:ea:d7:2a:44:05:57:11:ff:6a:3c:cd:2b:79:39:5e:03: 2d:04:67:0c:fc:42:c0:65:eb:33:72:6a:36:fb:dc:d2:48:0f: 9e:65:b6:2f:e8:67:e2:46:6e:c1:33:e6:ab:a6:b6:c4:5f:5c: eb:d4:88:f6:67:75:df:ab:bf:22:18:4e:8d:58:fa:70:a7:5b: b6:33:49:7c:e0:85:85:e1:8b:e3:cb:d3:a2:47:84:d9:1d:8b: b8:1d:b8:e8:89:37:32:21:49:54:66:d7:f5:4b:ea:c4:58:54: de:ed:6a:4b:2c:2a:38:bc:e1:37:f9:1f:00:cd:d8:86:6c:41: ed:99:ac:11:be:36:01:32:29:8d:e5:8c:04:37:91:4f:31:f0: 1f:7d:1a:23:fb:47:b8:9b:3f:d1:8b:16:c2:43:53:05:d4:b9: 2d:02:f5:48:cf:a2:eb:5d:ed:5c:dd:a2:cd:91:d2:db:86:db: b3:de:8d:b0:29:94:b1:4d:29:fc:c3:40:5c:1d:8f:09:30:51: 59:64:81:be:83:68:98:18:92:d3:39:e9:b4:19:03:b7:36:53: 1b:dd:76:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjUwODA3MDM1NzIwWhcNMjUwODE0MDM1NzIwWjAYMRYwFAYD VQQDEw02ODk0MjQyMS02ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMhsLrzAbIJJKfL6ZhLKvuIM9nsGdrVxe6rFRXV3hHTyOpdUtCb13rzCOFQu uhrXKbEAjAuUQu0cor0zMgFzwINe2m36ibqB3pBlPENOUoXy7TADpVA3zWmJDBQV I16j1N2AGEU92Eb9zIrjXJwY6QbeSR4i6RKUwXFYG1HGQF4qZ6Q8IszQhWlKiDdt AHkzXxa6dd1r0Y0MOmVAwkaBZaNIrdDPgq0ub7XdpNjgKux2eztOu4FqNNZ0tV7a aknjvUXOJn1KY8Xnzx4LtYJJuzO2oZIt3J6oJhRLwneTKepOZt8rjvLEUaK02zNE l+oKsCcM016Q02oFgv7EFgg/fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOol8qAO 3B2GsskLREq0JqzjcBhEMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzk1S52rnbIlTyJN+RRMM6JeqIN1aAaap1hBg0mVRZT41vnJu0V+rX KkQFVxH/ajzNK3k5XgMtBGcM/ELAZeszcmo2+9zSSA+eZbYv6GfiRm7BM+arprbE X1zr1Ij2Z3Xfq78iGE6NWPpwp1u2M0l84IWF4Yvjy9OiR4TZHYu4HbjoiTcyIUlU Ztf1S+rEWFTe7WpLLCo4vOE3+R8AzdiGbEHtmawRvjYBMimN5YwEN5FPMfAffRoj +0e4mz/RixbCQ1MF1LktAvVIz6LrXe1c3aLNkdLbhtuz3o2wKZSxTSn8w0BcHY8J MFFZZIG+g2iYGJLTOem0GQO3NlMb3Xa3 -----END CERTIFICATE-----Generated at Fri Aug 8 12:59:10 2025 by rpki-client