$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json) Hash identifier: GAW6IW35JRg6dyCoTgAvAkCm0+nItxsKcijfasn1Yi4= Subject key identifier: 32:B5:06:4D:7A:F5:67:68:15:93:DB:AB:33:4B:91:41:C4:DF:E4:1D Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft Manifest number: 0158 Signing time: Sun 03 Aug 2025 04:30:24 +0000 Manifest this update: Sun 03 Aug 2025 04:30:23 +0000 Manifest next update: Sun 10 Aug 2025 04:30:23 +0000 Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: 9TZI7O8VLemU5qhY/iRuBC+Qg4d1hH55Gl4JOmJEfdU=) 2: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: 1ZszVXnu+oof2agkcsw2N+1e9S9zcssyc5TigB7H1/w=) 3: 6821BAB4450C11F0A7A54A80C4F9AE02.roa (hash: cK+N9izYWqB7nJ2gb9CD89n2r86dl3xekNBy66q5a0Q=) 4: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: e26WrvOpcLVtFLCEGQEyLqc/kWvK3maBfU7Yb9x41Mg=) 5: 6911C6C6450C11F0A7A54A80C4F9AE02.roa (hash: XM9Bx/2dvSebxGit5XsfhdOhtq9u4/gFe4PEE8p0hU0=) 6: 688DF576450C11F0A7A54A80C4F9AE02.roa (hash: 4F6WXMQnkc6O0hYawZzx3De82Qtz5srkx6WGHHAwdQk=) 7: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: ejDPctxuPr+08V8pahIdV3zpYnFneVGtkqcwrd8I5VM=) 8: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: NbEb3oWP2ceJtb7zrqoj41m3/pXeHDptDVhijrcSdOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Aug 3 04:30:23 2025 GMT Not After : Aug 10 04:30:23 2025 GMT Subject: CN=688ee5df-8687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:47:8d:fe:4f:a7:f5:17:50:de:4e:7d:15:87: fa:75:ad:50:2f:d1:d7:a2:f1:56:50:a8:fe:ed:ea: 2d:e6:bb:9b:3b:cf:8e:52:3e:fe:be:2d:3a:a9:5a: 7f:93:8e:0f:d9:45:45:5c:7d:97:e6:4a:69:47:8c: 94:6c:2b:db:44:30:45:7c:07:50:58:47:d2:47:06: c9:41:cb:c6:dd:c4:9c:cb:0c:fc:9e:8f:db:51:e6: 3b:a3:5a:d8:40:9e:27:48:16:ab:0f:dd:d4:fb:55: 27:f2:b5:9d:b0:3e:30:fc:86:ba:f0:28:75:7c:88: 09:54:d8:3b:84:67:5d:0b:ed:4d:99:7f:d2:85:92: 4c:6c:99:14:56:45:e1:79:3f:56:a6:74:18:c7:a5: d3:45:0f:12:2f:21:47:3f:53:e0:2c:41:17:dc:62: 8b:b1:45:ea:61:1d:fa:93:5a:61:a7:93:64:64:b6: a4:8c:5a:f6:2b:7e:49:55:bd:e1:a9:72:6f:fa:bd: 94:30:f1:7c:6d:b2:14:0c:19:44:ba:bc:53:c8:15: 67:de:5c:08:0c:0e:93:c8:3f:33:40:a3:15:54:ac: 79:bd:e3:b8:21:20:79:a1:8c:27:51:02:04:cd:85: 40:5e:b5:c2:0b:09:a8:28:31:91:a6:73:03:86:4d: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B5:06:4D:7A:F5:67:68:15:93:DB:AB:33:4B:91:41:C4:DF:E4:1D X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:22:cb:3f:40:7f:52:5c:07:ff:88:e9:e4:1c:d4:28:76:62: 86:59:78:d2:8c:91:64:b1:0e:26:0b:b9:64:0b:b6:a6:0a:16: 6c:96:07:1f:6b:c8:36:20:f0:b9:e0:a4:be:9f:4a:77:0c:89: 10:5a:c4:1b:1d:54:0e:7f:c3:cf:31:76:69:be:1a:11:db:c7: f6:f3:ab:c6:86:ad:61:97:d7:55:14:c7:9f:4f:bf:07:35:3c: bd:64:82:6c:aa:48:22:22:1c:bc:15:2e:47:08:2e:c7:93:fb: a1:8e:46:11:44:a4:55:8e:f4:19:f1:6e:c4:e7:13:e2:13:2a: 0b:3c:b4:94:04:12:45:e3:db:cf:a5:5e:c3:a2:03:bc:15:f4: 43:1f:be:e0:ae:d4:09:ce:98:c3:8f:c5:fc:f7:65:7c:cc:4d: 7c:fd:be:4e:57:de:a2:f7:47:b7:ae:67:8a:67:c6:48:4e:1f: e3:64:60:a9:b5:5a:a8:3a:e8:de:82:28:f4:18:f2:4e:c7:6e: eb:2a:7f:73:81:7b:95:71:74:c5:47:f6:3f:ee:37:7e:74:01: 52:66:bc:31:f6:24:a7:53:f7:12:2a:27:f4:fc:37:a1:f4:a5: c2:aa:c0:99:de:0f:a5:cb:e7:d5:97:18:9b:0e:34:36:ab:81: 50:ec:96:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjUwODAzMDQzMDIzWhcNMjUwODEwMDQzMDIzWjAYMRYwFAYD VQQDEw02ODhlZTVkZi04Njg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20eN/k+n9RdQ3k59FYf6da1QL9HXovFWUKj+7eot5rubO8+OUj7+vi06qVp/ k44P2UVFXH2X5kppR4yUbCvbRDBFfAdQWEfSRwbJQcvG3cScywz8no/bUeY7o1rY QJ4nSBarD93U+1Un8rWdsD4w/Ia68Ch1fIgJVNg7hGddC+1NmX/ShZJMbJkUVkXh eT9WpnQYx6XTRQ8SLyFHP1PgLEEX3GKLsUXqYR36k1php5NkZLakjFr2K35JVb3h qXJv+r2UMPF8bbIUDBlEurxTyBVn3lwIDA6TyD8zQKMVVKx5veO4ISB5oYwnUQIE zYVAXrXCCwmoKDGRpnMDhk2p0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK1Bk16 9WdoFZPbqzNLkUHE3+QdMB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM3Qy8yQjVDQUFFODY5RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4 aHd5S0FMWm91XzZWbEYtTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPIss/QH9SXAf/iOnkHNQodmKGWXjSjJFksQ4mC7lkC7amChZslgcf a8g2IPC54KS+n0p3DIkQWsQbHVQOf8PPMXZpvhoR28f286vGhq1hl9dVFMefT78H NTy9ZIJsqkgiIhy8FS5HCC7Hk/uhjkYRRKRVjvQZ8W7E5xPiEyoLPLSUBBJF49vP pV7DogO8FfRDH77grtQJzpjDj8X892V8zE18/b5OV96i90e3rmeKZ8ZITh/jZGCp tVqoOujegij0GPJOx27rKn9zgXuVcXTFR/Y/7jd+dAFSZrwx9iSnU/cSKif0/Deh 9KXCqsCZ3g+ly+fVlxibDjQ2q4FQ7Jax -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:11 2025 by rpki-client