$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: hzhPvs2ySt5fZVdXQhMdV7s2UCR4CRdkuqSQAbwrsWw= Subject key identifier: 5D:A7:3C:6C:B9:21:6C:6F:45:06:16:7E:42:B0:7D:90:11:B4:C5:DC Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 0161 Signing time: Thu 07 Aug 2025 04:26:38 +0000 Manifest this update: Thu 07 Aug 2025 04:26:37 +0000 Manifest next update: Thu 14 Aug 2025 04:26:37 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: lqadD2YRMpXHvmgrfrhb0bToAZ5pzlEhhwxiKYVDBAM=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: fQ0Wv2YD60Yo4ln05PtaRg2v4/R5zwKrC/7wYHWQM3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Aug 7 04:26:37 2025 GMT Not After : Aug 14 04:26:37 2025 GMT Subject: CN=68942afd-352a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:df:aa:6f:b9:14:ea:db:64:0c:01:ad:31: e3:18:6b:a4:a8:a7:ac:b7:b6:de:bb:15:ed:6f:3f: 5f:d8:f3:7d:11:5c:68:e4:e3:ba:f2:17:a5:96:f8: 29:c8:78:c7:2f:05:aa:06:9b:11:8b:56:a7:13:25: 11:3b:8f:fb:72:a2:ec:b7:d4:2f:12:fc:17:39:7a: 7f:1b:06:7c:12:4b:d2:00:1d:3b:94:2c:47:64:63: 1c:08:57:61:33:60:c7:4d:2d:87:22:34:bd:d0:b6: ee:23:63:03:77:2a:f1:74:3e:b6:7c:39:7c:be:0f: a3:96:59:b6:e1:14:ef:b1:82:fa:bc:55:0a:46:bb: e9:43:ee:a0:8c:5f:97:77:97:96:87:b2:d2:79:32: c9:d9:2a:f2:f4:4d:e9:4c:0b:1a:43:7d:d7:99:ef: 1a:be:a1:f6:6f:cb:83:b1:3b:66:1f:9d:73:c8:86: 6f:80:a5:4f:87:9b:5f:2e:4c:43:cd:23:d8:48:17: b8:04:4c:dc:a2:a0:f3:06:a6:0a:6f:4e:2e:13:5e: 02:a6:4c:e7:b7:99:0d:c3:d0:1d:b9:b7:65:52:33: 07:1c:e9:cb:69:9a:58:58:55:f1:09:e7:f8:f2:a6: 52:8b:14:ff:15:98:6f:7f:75:94:94:6d:cc:48:b9: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A7:3C:6C:B9:21:6C:6F:45:06:16:7E:42:B0:7D:90:11:B4:C5:DC X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:42:d0:dc:88:42:3e:e3:6c:2b:c0:b2:4e:6d:11:ab:f9:22: 28:ab:a3:96:50:a4:0d:84:f9:d8:ba:66:0c:a9:1b:45:47:d7: 6d:84:a2:55:58:88:9c:74:a6:9c:7e:c4:fa:af:17:eb:63:05: 60:88:a1:55:c3:2a:3b:34:bd:6a:8e:f7:c5:23:02:42:18:6f: a9:fa:d7:58:ba:bb:84:df:ab:85:b1:a1:58:cd:f3:06:22:e5: 49:a6:92:58:18:df:69:4f:d3:99:d0:c4:26:d0:b0:89:d8:f3: 8c:6c:9c:46:35:5e:94:0a:7e:13:64:5a:98:51:e1:c4:20:3f: 92:e3:ae:30:b3:3c:69:50:35:22:31:30:6f:b5:49:5f:7c:05: 67:0f:28:3c:0c:8e:57:bc:24:2c:25:bf:39:94:c5:23:c4:6b: 9b:ff:2a:65:0b:23:cb:a6:93:33:71:c1:9a:0e:81:9a:a9:d2: ea:5a:a2:ff:9f:00:1a:9d:e2:a5:41:c1:d7:db:58:fe:f5:4d: 0e:d6:94:ba:47:c3:30:87:29:cd:c5:2a:34:a8:3a:75:f1:b5: 67:59:74:8d:c7:5b:e1:1c:5c:32:da:29:6f:7c:df:98:b3:4a: 03:6d:8e:5f:76:a8:b3:4b:04:77:97:50:c8:9a:d7:bc:cc:1b: 89:4e:2a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjUwODA3MDQyNjM3WhcNMjUwODE0MDQyNjM3WjAYMRYwFAYD VQQDEw02ODk0MmFmZC0zNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydzfqm+5FOrbZAwBrTHjGGukqKest7beuxXtbz9f2PN9EVxo5OO68hellvgp yHjHLwWqBpsRi1anEyURO4/7cqLst9QvEvwXOXp/GwZ8EkvSAB07lCxHZGMcCFdh M2DHTS2HIjS90LbuI2MDdyrxdD62fDl8vg+jllm24RTvsYL6vFUKRrvpQ+6gjF+X d5eWh7LSeTLJ2Sry9E3pTAsaQ33Xme8avqH2b8uDsTtmH51zyIZvgKVPh5tfLkxD zSPYSBe4BEzcoqDzBqYKb04uE14Cpkznt5kNw9AdubdlUjMHHOnLaZpYWFXxCef4 8qZSixT/FZhvf3WUlG3MSLm3KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2nPGy5 IWxvRQYWfkKwfZARtMXcMB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnQtDciEI+42wrwLJObRGr+SIoq6OWUKQNhPnYumYMqRtFR9dthKJV WIicdKacfsT6rxfrYwVgiKFVwyo7NL1qjvfFIwJCGG+p+tdYuruE36uFsaFYzfMG IuVJppJYGN9pT9OZ0MQm0LCJ2POMbJxGNV6UCn4TZFqYUeHEID+S464wszxpUDUi MTBvtUlffAVnDyg8DI5XvCQsJb85lMUjxGub/yplCyPLppMzccGaDoGaqdLqWqL/ nwAaneKlQcHX21j+9U0O1pS6R8MwhynNxSo0qDp18bVnWXSNx1vhHFwy2ilvfN+Y s0oDbY5fdqizSwR3l1DImte8zBuJTioT -----END CERTIFICATE-----Generated at Sat Aug 9 01:19:47 2025 by rpki-client