$ rpki-client -vvf rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft File: _XRQsRgVCpshTxoL7t8-Oyb-0Es.mft (raw, json) Hash identifier: JzgNSGUvrbIaOpFYQ+oLXp0VUtVTWpulu/EUidL97Yk= Subject key identifier: 6C:7D:7A:D0:85:CD:99:1D:ED:1A:EE:5A:E0:67:FC:36:5D:00:A1:BB Authority key identifier: FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B Certificate issuer: /CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Certificate serial: 100A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft Manifest number: 1002 Signing time: Fri 08 Aug 2025 17:38:46 +0000 Manifest this update: Fri 08 Aug 2025 17:38:46 +0000 Manifest next update: Fri 15 Aug 2025 17:38:46 +0000 Files and hashes: 1: _XRQsRgVCpshTxoL7t8-Oyb-0Es.crl (hash: o9sV1gw3NMrfxQYgWCY7Nj26O9HBMefjoUig7sVd3fM=) 2: 378459525C6511E989D03610C4F9AE02.roa (hash: IiQprXM45ceBxjHWm+F/2TXqvKDyfsIZ5gHCOtJkT5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4106 (0x100a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144160, serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Validity Not Before: Aug 8 17:38:46 2025 GMT Not After : Aug 15 17:38:46 2025 GMT Subject: CN=68963626-391c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8a:89:94:ba:48:f0:4e:4e:55:94:6b:95:92: 0b:cc:07:46:9e:c0:eb:3a:45:b9:aa:bb:89:a6:f4: e2:1f:e2:58:6d:37:32:53:6a:48:93:b6:79:2a:7a: 01:d2:3e:7d:43:3d:23:af:57:1e:95:23:36:04:25: bf:0d:e7:2d:f3:71:25:9d:3a:35:39:1e:a8:86:ea: dc:c8:4a:9f:b5:73:95:f6:36:16:86:46:6c:88:80: 33:1b:c1:c0:ae:1c:3a:bc:39:e1:9c:55:e0:ef:b0: 23:6f:3f:3f:ea:6e:f0:09:bb:68:c8:4d:4f:10:c4: 7a:2b:4c:5a:bd:35:aa:a6:3f:2c:d3:93:b6:04:6e: 9c:3e:23:e2:be:44:67:11:55:73:e7:d6:56:31:c1: 46:ef:71:ea:27:8e:43:75:37:71:5b:f4:8c:be:a4: 29:41:91:1f:d0:18:ad:5b:76:1a:9d:92:37:3d:96: b5:03:b0:d4:ea:98:a6:c8:e0:b3:55:c9:7b:99:f7: fc:ec:b3:76:e3:8e:05:9b:09:ae:03:23:fa:48:26: 4d:23:58:a1:fc:c5:30:f4:ce:33:4b:19:43:d8:cb: 84:e3:48:c7:61:88:98:95:6e:e4:b4:27:c7:e4:7b: 4c:cb:2c:35:cf:66:36:fc:ca:50:b8:9d:ab:e4:66: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7D:7A:D0:85:CD:99:1D:ED:1A:EE:5A:E0:67:FC:36:5D:00:A1:BB X509v3 Authority Key Identifier: keyid:FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e0:67:e7:0a:25:b9:dd:17:37:76:cd:ce:b7:4e:a0:94:a8: e5:88:2f:0e:44:c6:38:6d:68:30:25:84:44:82:64:98:ff:91: 40:87:a1:19:88:c2:56:35:77:3d:54:b6:bb:02:1d:89:98:c0: d6:ca:ec:fb:ea:d9:bf:7a:22:a2:42:3f:0c:8e:d9:0d:7a:b0: aa:f8:ba:41:5b:23:40:b6:f7:0f:b9:0e:c2:67:2e:79:d1:c3: f6:e0:ab:c1:a4:61:8a:e1:11:2b:a0:ec:bd:45:46:51:ef:db: 98:41:39:92:e1:4c:39:2c:b2:78:0b:41:50:6e:26:be:69:63: a4:9f:ed:e5:8a:35:68:a9:b6:ff:9d:22:82:89:ea:bb:d6:e8: 29:70:44:c7:99:56:e0:90:3f:43:fc:ce:6e:ac:b6:36:02:74: a0:43:bd:16:76:41:57:cb:1a:e0:b6:be:28:b0:ec:13:3a:e7: ac:ce:16:a8:99:0d:12:13:f5:89:58:89:e6:1e:f4:1b:da:b8: 95:35:17:6a:f6:aa:b0:86:15:c4:44:06:7d:ec:da:f1:1b:36: 65:2d:92:d8:6c:69:a0:bc:bf:ec:cb:96:8e:3e:49:4a:ce:de: 7f:b6:df:dc:ba:e8:de:0e:8e:37:5f:1e:dc:aa:7e:45:8f:aa: 13:1f:63:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQxNjAxMTAvBgNVBAUTKEZENzQ1MEIxMTgxNTBBOUIyMTRGMUEwQkVFREYzRTNC MjZGRUQwNEIwHhcNMjUwODA4MTczODQ2WhcNMjUwODE1MTczODQ2WjAYMRYwFAYD VQQDEw02ODk2MzYyNi0zOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7oqJlLpI8E5OVZRrlZILzAdGnsDrOkW5qruJpvTiH+JYbTcyU2pIk7Z5KnoB 0j59Qz0jr1celSM2BCW/Dect83ElnTo1OR6ohurcyEqftXOV9jYWhkZsiIAzG8HA rhw6vDnhnFXg77Ajbz8/6m7wCbtoyE1PEMR6K0xavTWqpj8s05O2BG6cPiPivkRn EVVz59ZWMcFG73HqJ45DdTdxW/SMvqQpQZEf0BitW3YanZI3PZa1A7DU6pimyOCz Vcl7mff87LN2444FmwmuAyP6SCZNI1ih/MUw9M4zSxlD2MuE40jHYYiYlW7ktCfH 5HtMyyw1z2Y2/MpQuJ2r5GYECQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGx9etCF zZkd7RruWuBn/DZdAKG7MB8GA1UdIwQYMBaAFP10ULEYFQqbIU8aC+7fPjsm/tBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDE2MC9ERDY1NzFBNjRG OTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNwc2hUeG9MN3Q4LU95Yi0w RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YUlFzUmdWQ3BzaFR4b0w3dDgtT3liLTBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDE2MC9ERDY1NzFBNjRGOTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNw c2hUeG9MN3Q4LU95Yi0wRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd4GfnCiW53Rc3ds3Ot06glKjliC8ORMY4bWgwJYREgmSY/5FAh6EZ iMJWNXc9VLa7Ah2JmMDWyuz76tm/eiKiQj8MjtkNerCq+LpBWyNAtvcPuQ7CZy55 0cP24KvBpGGK4REroOy9RUZR79uYQTmS4Uw5LLJ4C0FQbia+aWOkn+3lijVoqbb/ nSKCieq71ugpcETHmVbgkD9D/M5urLY2AnSgQ70WdkFXyxrgtr4osOwTOueszhao mQ0SE/WJWInmHvQb2riVNRdq9qqwhhXERAZ97NrxGzZlLZLYbGmgvL/sy5aOPklK zt5/tt/cuujeDo43Xx7cqn5Fj6oTH2NV -----END CERTIFICATE-----Generated at Sat Aug 9 23:13:58 2025 by rpki-client