$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json) Hash identifier: G8x50qhuFI7whqR6jgzT3ZY5M8T/rtD2PzrQ0A0sgck= Subject key identifier: 30:06:B4:04:B6:E7:FF:E0:D9:14:D9:51:FB:E3:EF:C5:BB:B6:B3:98 Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft Manifest number: 068A Signing time: Fri 08 Aug 2025 22:43:07 +0000 Manifest this update: Fri 08 Aug 2025 22:43:06 +0000 Manifest next update: Fri 15 Aug 2025 22:43:06 +0000 Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: UrX7UTtM7goqELyV9I8diIlF+ZuU7iVukjO+LmnIHlU=) 2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: Ode9C1rjZZ48xy/QuIzg9S8zoYsoG2CKnN/yX25u2gs=) 3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Validity Not Before: Aug 8 22:43:06 2025 GMT Not After : Aug 15 22:43:06 2025 GMT Subject: CN=68967d7b-8145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:bd:86:2f:be:65:c3:93:8e:a7:7b:8c:ce: cf:99:00:1e:24:23:f3:a9:d1:dd:6b:89:70:fb:c0: 7f:67:0a:ae:2e:8a:e9:1f:5b:94:fb:52:7e:50:11: 42:bd:66:ef:66:b0:af:31:6a:e7:d8:8f:1c:19:b1: 7a:0e:09:b1:9c:27:48:d3:ae:42:b9:a4:71:7a:87: 8b:d4:2a:fd:0b:de:52:3d:c8:f8:73:f6:5d:cb:31: 7a:b2:af:e5:8a:73:e1:23:06:47:9a:5d:c6:f6:0a: 8f:de:d6:7f:20:06:94:6c:64:f4:1e:d2:bf:2a:27: cd:42:aa:39:e9:57:e3:4a:ae:f8:31:e6:16:88:6c: b5:a8:21:a2:ac:c9:6d:45:09:67:a0:b6:18:23:5c: 96:2b:3c:d0:67:96:52:fd:b0:c4:0a:e3:7e:bb:79: 2e:79:91:ff:14:91:e2:6a:78:9c:fb:9d:ad:56:19: b5:93:78:45:e1:17:31:9e:f8:1d:49:cc:70:f3:c6: 32:dc:b3:de:61:9b:d4:8d:c4:63:7d:a3:33:69:45: f8:36:5a:0a:db:c3:59:c8:d0:67:79:d5:10:6f:45: c9:0b:a8:4c:6d:16:61:8f:25:34:e5:29:7e:d8:bb: a5:cc:a1:f3:4a:e2:07:b1:12:93:06:3a:33:6f:d7: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:06:B4:04:B6:E7:FF:E0:D9:14:D9:51:FB:E3:EF:C5:BB:B6:B3:98 X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:95:42:96:50:23:09:23:0a:1a:73:a9:65:51:f0:8a:fe:bd: 14:7a:46:b8:a9:c7:25:41:6d:41:a4:2c:b4:8f:1b:5f:9d:7c: 09:65:88:3a:e2:f8:d4:0b:3a:cb:54:e6:57:ca:78:6c:81:c0: 7f:4b:0d:8d:40:2f:f3:4f:12:2e:c2:ef:a7:ed:9d:2c:26:d5: 1d:b3:c8:75:90:ae:92:c1:64:d1:d7:22:b9:a2:94:26:75:4f: dc:60:65:7f:1f:c8:38:89:ed:cc:c6:a3:c5:f9:97:39:f9:ec: 50:e5:c5:0d:4c:02:64:4f:9b:6d:17:de:1b:10:c9:29:14:a7: 67:07:85:6f:dd:27:e2:38:26:a6:01:98:f1:6f:7f:63:4a:5a: 5d:9e:b5:08:8f:b4:5a:cd:29:91:cf:37:6e:4a:66:d5:03:48: d1:5a:ea:b3:3c:25:70:2c:a0:9d:b9:d3:84:52:13:80:75:08: b3:6a:23:d8:db:0a:61:4b:32:a0:3a:d7:a7:02:36:95:fb:4a: 4a:28:c2:e4:b2:ac:6c:97:34:91:c3:b2:cd:48:d9:15:43:84: 2d:89:95:be:45:1a:c4:8b:69:63:58:bf:1e:fe:a1:ae:f0:3c: 0f:94:2d:0d:2d:75:27:a5:5f:cd:70:b8:cf:61:ef:29:40:00: 6e:32:24:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjUwODA4MjI0MzA2WhcNMjUwODE1MjI0MzA2WjAYMRYwFAYD VQQDEw02ODk2N2Q3Yi04MTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWe9hi++ZcOTjqd7jM7PmQAeJCPzqdHda4lw+8B/ZwquLorpH1uU+1J+UBFC vWbvZrCvMWrn2I8cGbF6DgmxnCdI065CuaRxeoeL1Cr9C95SPcj4c/ZdyzF6sq/l inPhIwZHml3G9gqP3tZ/IAaUbGT0HtK/KifNQqo56VfjSq74MeYWiGy1qCGirMlt RQlnoLYYI1yWKzzQZ5ZS/bDECuN+u3kueZH/FJHianic+52tVhm1k3hF4Rcxnvgd Scxw88Yy3LPeYZvUjcRjfaMzaUX4NloK28NZyNBnedUQb0XJC6hMbRZhjyU05Sl+ 2LulzKHzSuIHsRKTBjozb9fLLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAGtAS2 5//g2RTZUfvj78W7trOYMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL Y1BrNlhMY0xabWdLVW83Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzlUKWUCMJIwoac6llUfCK/r0Ueka4qcclQW1BpCy0jxtfnXwJZYg6 4vjUCzrLVOZXynhsgcB/Sw2NQC/zTxIuwu+n7Z0sJtUds8h1kK6SwWTR1yK5opQm dU/cYGV/H8g4ie3MxqPF+Zc5+exQ5cUNTAJkT5ttF94bEMkpFKdnB4Vv3SfiOCam AZjxb39jSlpdnrUIj7RazSmRzzduSmbVA0jRWuqzPCVwLKCdudOEUhOAdQizaiPY 2wphSzKgOtenAjaV+0pKKMLksqxslzSRw7LNSNkVQ4QtiZW+RRrEi2ljWL8e/qGu 8DwPlC0NLXUnpV/NcLjPYe8pQABuMiTu -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:05 2025 by rpki-client