$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: UptFpq5LyvxtwkYHgs27/k3kfAx/ettGQNF/p7Q1BrA= Subject key identifier: 79:6D:4E:A9:6A:C8:D4:AF:CA:7F:2D:8F:BC:B1:2B:FF:BD:65:63:64 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0690 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 0656 Signing time: Fri 08 Aug 2025 23:15:38 +0000 Manifest this update: Fri 08 Aug 2025 23:15:38 +0000 Manifest next update: Fri 15 Aug 2025 23:15:38 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: MxuwNPtr3vCGB5YNJSC6aJQuVCJXE9ULXQ03OHsYVCQ=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: oyubRpGqXRPhXUbHGDMN11nyLcbaEyRpquXs/6vcD1s=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: 4DBjk9RooSzZolI3F0wRR+UkFptKPPbZZIJnu5t3sTc=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: q5An5IejOkRYWLTS2K7o5KZUOm0z/1pEEu1xwJZBWV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1680 (0x690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Aug 8 23:15:38 2025 GMT Not After : Aug 15 23:15:38 2025 GMT Subject: CN=6896851a-67a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:b6:9c:ec:81:9f:bc:c2:83:d3:e2:dd:0c: 5d:77:35:6e:98:4b:ec:d9:6b:8b:b5:83:ce:94:0d: 6b:2f:19:3b:48:e3:4f:e7:21:40:b1:37:79:3f:f4: f1:ad:eb:92:b2:3c:fa:82:9a:49:ad:8e:71:fd:63: 57:36:62:5f:c1:88:97:58:d3:1b:28:82:43:46:8f: 2d:90:5f:b0:68:84:a7:48:01:a2:74:0c:e1:10:95: f1:1c:28:e6:c1:45:0a:3d:ed:78:13:89:84:e7:52: 6d:7f:79:11:c5:34:0e:42:3a:92:28:b4:7a:81:2f: 5d:ee:ec:23:a9:89:e5:36:b2:19:1e:9f:20:10:7d: 1a:82:97:5a:ec:01:30:33:86:50:3e:43:de:7d:ef: 5c:b6:85:88:42:61:70:a8:5e:7b:04:14:80:d1:6f: 41:3a:fd:e5:7c:c3:b9:e2:94:81:f8:f9:46:bd:6a: 64:be:53:62:18:b0:3b:b5:b9:83:d9:b6:60:cd:50: 79:ab:7b:6b:0f:0d:16:51:4f:c4:6e:45:c3:13:e0: b8:9d:09:c9:f1:05:a6:cc:b1:27:ca:58:f4:03:3b: d5:68:55:31:ba:10:42:f4:65:78:14:bb:b0:31:78: 98:cd:f1:01:99:10:7a:a1:a4:da:56:59:e5:d6:42: fe:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6D:4E:A9:6A:C8:D4:AF:CA:7F:2D:8F:BC:B1:2B:FF:BD:65:63:64 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:12:16:c7:65:a6:bd:a4:c2:cb:dc:01:cf:77:b1:cd:2b:d9: 2f:b2:eb:2a:ab:9f:ad:ed:e2:34:0b:0c:ac:d3:4a:40:6b:11: ad:7f:32:40:04:e0:e9:ba:38:66:d3:e9:8c:a2:e3:4b:94:2f: 3f:ea:ad:29:9c:f8:d1:8b:88:ef:41:16:c6:c5:fc:98:b0:cf: 88:ac:9c:ec:6a:00:a8:d5:a9:35:98:84:7f:59:92:ef:5d:2b: 84:25:f6:65:46:dc:10:1e:8e:86:88:08:f5:9f:70:60:5e:0c: f5:22:46:f4:c5:cb:28:f8:f5:20:53:f2:5d:dd:d9:a0:be:df: 93:c1:a3:8f:32:ab:b7:e0:72:04:5f:8e:ad:0e:8d:22:55:c7: 3e:41:eb:35:b9:a1:95:e4:4c:e9:45:08:e9:08:69:9b:2a:a8: 93:f3:84:45:28:a6:01:86:52:f7:c2:cb:4e:4a:85:e7:a5:41: 83:cb:ee:1a:86:3d:da:aa:09:8c:a5:67:c2:ce:c3:09:c6:03: 15:c7:44:dd:06:bd:15:a2:5f:a0:82:45:10:8c:a9:ad:39:8a: 22:b1:1d:d3:d8:70:bf:54:0b:12:45:11:46:8b:95:0f:ca:82: 5d:53:94:b1:d1:cf:17:a9:c8:83:66:de:a7:9f:9d:27:62:65: bc:aa:17:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUwODA4MjMxNTM4WhcNMjUwODE1MjMxNTM4WjAYMRYwFAYD VQQDEw02ODk2ODUxYS02N2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKO2nOyBn7zCg9Pi3QxddzVumEvs2WuLtYPOlA1rLxk7SONP5yFAsTd5P/Tx reuSsjz6gppJrY5x/WNXNmJfwYiXWNMbKIJDRo8tkF+waISnSAGidAzhEJXxHCjm wUUKPe14E4mE51Jtf3kRxTQOQjqSKLR6gS9d7uwjqYnlNrIZHp8gEH0agpda7AEw M4ZQPkPefe9ctoWIQmFwqF57BBSA0W9BOv3lfMO54pSB+PlGvWpkvlNiGLA7tbmD 2bZgzVB5q3trDw0WUU/EbkXDE+C4nQnJ8QWmzLEnylj0AzvVaFUxuhBC9GV4FLuw MXiYzfEBmRB6oaTaVlnl1kL+JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHltTqlq yNSvyn8tj7yxK/+9ZWNkMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2EhbHZaa9pMLL3AHPd7HNK9kvsusqq5+t7eI0Cwys00pAaxGtfzJA BODpujhm0+mMouNLlC8/6q0pnPjRi4jvQRbGxfyYsM+IrJzsagCo1ak1mIR/WZLv XSuEJfZlRtwQHo6GiAj1n3BgXgz1Ikb0xcso+PUgU/Jd3dmgvt+TwaOPMqu34HIE X46tDo0iVcc+Qes1uaGV5EzpRQjpCGmbKqiT84RFKKYBhlL3wstOSoXnpUGDy+4a hj3aqgmMpWfCzsMJxgMVx0TdBr0Vol+ggkUQjKmtOYoisR3T2HC/VAsSRRFGi5UP yoJdU5Sx0c8XqciDZt6nn50nYmW8qhdr -----END CERTIFICATE-----Generated at Sat Aug 9 01:19:49 2025 by rpki-client