$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json) Hash identifier: RHTToOeXbUD1jNj8iq+8LlkJAHqrGeaRgXhiAVVkSdw= Subject key identifier: 40:07:5D:03:86:3A:2B:26:52:D8:88:FC:0E:18:C5:CC:CB:9E:62:34 Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft Manifest number: 019D Signing time: Sat 09 Aug 2025 03:41:59 +0000 Manifest this update: Sat 09 Aug 2025 03:41:59 +0000 Manifest next update: Sat 16 Aug 2025 03:41:59 +0000 Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: K6PxBRE51cPw/1kY1gRNR/du2IkSmnRlcJxkOd0JOto=) 2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Validity Not Before: Aug 9 03:41:59 2025 GMT Not After : Aug 16 03:41:59 2025 GMT Subject: CN=6896c387-c755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:77:23:58:fb:75:53:ed:f8:fa:b2:b2:16: 49:4a:dc:85:91:56:29:da:b7:17:f8:df:f1:82:e9: 44:58:3a:75:ec:96:b7:ef:f9:60:5d:99:9a:1d:eb: 34:d2:0f:8a:59:c8:67:77:e0:c6:ab:8c:c3:74:cd: 8f:d9:35:c7:04:fe:ee:d6:d9:76:6c:ec:9e:4b:10: 04:2d:cd:61:cc:9f:a9:24:60:11:f8:fe:74:c2:4f: 24:b9:01:6a:71:1d:2d:56:43:0c:ae:25:cc:bb:5a: cc:87:6b:39:af:19:f3:4c:11:52:90:f3:64:f4:08: 76:97:53:20:bd:ea:e9:59:1d:f5:4a:63:a8:2f:58: 43:6f:19:a2:4d:0a:93:26:dc:e6:6d:18:52:82:e1: e3:18:03:42:ac:77:a3:76:d6:f0:7b:ab:1f:52:1f: f2:4b:af:25:19:93:4b:68:1b:e0:80:6f:aa:da:0f: d2:46:16:e0:9f:9f:6e:60:40:0f:1e:6e:5e:35:5d: e5:5a:44:c3:cf:51:f6:49:75:b8:b8:bb:72:fb:fc: 7d:1e:65:a4:4f:11:c4:7a:b7:57:55:84:c2:38:37: 52:84:bc:93:f2:4b:2f:56:8d:85:68:77:9d:2b:95: b4:d7:81:3c:e8:d9:a7:25:e1:07:57:74:96:fa:d5: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:07:5D:03:86:3A:2B:26:52:D8:88:FC:0E:18:C5:CC:CB:9E:62:34 X509v3 Authority Key Identifier: keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a0:10:f1:a2:6b:2d:a5:4b:65:98:72:91:76:3c:4c:8c:3b: d6:92:69:4a:12:a4:7b:33:1d:03:08:68:70:f0:d6:2c:13:a9: fa:15:e9:4d:f8:c1:83:66:f4:1d:c2:7b:06:68:61:9c:fd:14: a9:77:cf:22:2d:9c:b4:12:0c:55:a6:d2:53:cd:64:7d:40:cc: 95:cf:b9:a3:31:64:1b:66:e1:10:71:ec:a3:38:04:0b:8b:dd: a6:df:68:4d:22:b2:e0:06:be:a5:7d:82:a3:bf:38:c2:6f:64: 60:c0:fe:64:d2:4a:3a:f5:34:7a:12:ec:d5:51:ea:d6:3f:9b: bd:ed:6d:66:24:6d:af:b0:bf:ba:b7:5c:dd:f3:0d:ed:fa:9b: 3c:60:59:57:2f:cc:61:f3:58:02:fd:9f:69:0c:83:68:d9:57: 03:91:e8:03:e3:5b:a1:3d:61:d7:0b:bf:07:44:81:e1:c5:6a: e6:bf:43:1c:51:f3:fc:07:aa:40:95:34:7b:bf:07:05:42:77: 85:38:50:39:99:a9:b9:90:dc:89:e9:a9:ac:b6:f1:90:fd:50: 71:e8:50:80:83:ca:32:5f:78:f9:2b:06:d0:de:5e:70:fe:83: 4e:6a:87:59:c3:0e:0f:7c:72:74:93:47:52:44:ae:6d:01:cb: 16:d6:db:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3 ODkxN0UwRkQwHhcNMjUwODA5MDM0MTU5WhcNMjUwODE2MDM0MTU5WjAYMRYwFAYD VQQDEw02ODk2YzM4Ny1jNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZZ3I1j7dVPt+PqyshZJStyFkVYp2rcX+N/xgulEWDp17Ja37/lgXZmaHes0 0g+KWchnd+DGq4zDdM2P2TXHBP7u1tl2bOyeSxAELc1hzJ+pJGAR+P50wk8kuQFq cR0tVkMMriXMu1rMh2s5rxnzTBFSkPNk9Ah2l1MgverpWR31SmOoL1hDbxmiTQqT JtzmbRhSguHjGANCrHejdtbwe6sfUh/yS68lGZNLaBvggG+q2g/SRhbgn59uYEAP Hm5eNV3lWkTDz1H2SXW4uLty+/x9HmWkTxHEerdXVYTCODdShLyT8ksvVo2FaHed K5W014E86NmnJeEHV3SW+tUofwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAHXQOG OismUtiI/A4YxczLnmI0MB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXoBDxomstpUtlmHKRdjxMjDvWkmlKEqR7Mx0DCGhw8NYsE6n6FelN +MGDZvQdwnsGaGGc/RSpd88iLZy0EgxVptJTzWR9QMyVz7mjMWQbZuEQceyjOAQL i92m32hNIrLgBr6lfYKjvzjCb2RgwP5k0ko69TR6EuzVUerWP5u97W1mJG2vsL+6 t1zd8w3t+ps8YFlXL8xh81gC/Z9pDINo2VcDkegD41uhPWHXC78HRIHhxWrmv0Mc UfP8B6pAlTR7vwcFQneFOFA5mam5kNyJ6amstvGQ/VBx6FCAg8oyX3j5KwbQ3l5w /oNOaodZww4PfHJ0k0dSRK5tAcsW1tvI -----END CERTIFICATE-----Generated at Sun Aug 10 13:50:08 2025 by rpki-client