$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json) Hash identifier: D5iqxACUg3XktVdMEQ8j6s1+DCxrZxCn7Saru0wCZsE= Subject key identifier: 4C:5E:5A:AD:D9:0B:C3:FA:18:E2:24:9B:36:13:DE:CA:33:AE:AF:29 Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft Manifest number: 0695 Signing time: Fri 08 Aug 2025 22:38:01 +0000 Manifest this update: Fri 08 Aug 2025 22:38:01 +0000 Manifest next update: Fri 15 Aug 2025 22:38:01 +0000 Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: AnB5lyfO4u4AZrIUo4+MQ1OlMS58i/Wn820PjNIMhWE=) 2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: LymCYpP9ODjDnMZgIvd8/QCM8E6rGc1JYF+pBCdV8o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Validity Not Before: Aug 8 22:38:01 2025 GMT Not After : Aug 15 22:38:01 2025 GMT Subject: CN=68967c49-9cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:cd:81:80:de:c2:cd:e6:69:89:60:5c:07: f1:aa:4f:d3:09:b7:56:21:af:85:49:0c:18:19:61: 49:5b:07:51:43:b3:8b:ae:e9:47:c3:66:b6:80:37: 2d:3c:69:56:0f:ac:0c:ab:ae:96:a8:46:72:ef:15: 6c:9e:8e:43:f9:9b:6c:87:15:bf:f0:23:ba:6b:a8: a4:4c:0f:21:a8:4a:10:c0:5b:41:be:58:73:bd:e3: e0:34:84:cc:b0:3d:46:7a:47:a8:d6:48:2a:db:da: 5a:aa:d0:5c:93:e6:5e:01:66:ef:39:fc:32:a6:36: 6c:b9:ee:74:76:16:9e:4c:07:d6:18:09:4f:fd:9d: 67:2e:48:0e:49:10:89:75:e9:90:14:03:54:b8:7d: 32:95:74:07:d1:e3:87:63:b3:9a:fb:62:20:21:43: 4e:d6:d2:98:4c:27:15:03:83:fb:f0:28:03:3a:dd: ed:cf:dd:ef:91:b6:54:c8:5f:a0:e6:88:f0:e7:ae: a0:d1:8d:57:8b:3d:93:73:fb:c2:46:1a:90:72:db: 8e:88:b6:cf:31:ac:8d:46:e6:ab:83:22:c1:b6:de: 68:7b:5a:7d:bb:05:39:ad:dd:e7:a2:6a:07:49:53: 31:c0:3e:36:3b:68:61:ff:d5:ac:6c:a5:bb:6e:76: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5E:5A:AD:D9:0B:C3:FA:18:E2:24:9B:36:13:DE:CA:33:AE:AF:29 X509v3 Authority Key Identifier: keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:38:df:34:3e:c7:f9:aa:43:50:a0:12:41:3f:fa:c9:02:38: 45:9a:13:e0:eb:8c:16:0c:5f:11:12:41:a8:bc:14:7e:96:23: 70:99:87:bc:b3:e5:1d:54:94:5b:c7:e3:cf:7f:38:21:99:71: 31:35:90:eb:66:5b:a3:75:01:61:6b:6d:f8:68:75:b1:3d:79: 18:3b:cc:7f:4d:6b:b7:3e:9a:b4:bd:f1:35:57:02:1c:f8:44: 46:f1:77:af:ad:cb:23:e3:5c:5f:9d:cf:14:0d:0d:8e:8f:7d: 9e:6f:2b:17:13:c1:56:67:c3:52:a5:0c:19:b4:45:eb:3a:e5: fc:df:45:78:c9:91:db:cf:de:cb:75:7b:32:d1:2b:a9:d6:70: 9c:79:89:13:4c:7e:3d:5c:3b:6a:cc:21:5d:99:e2:40:ab:10: b6:c9:83:ea:0d:67:03:7f:c4:eb:28:1e:b1:ff:84:8f:df:a2: 5d:ca:b4:1b:ca:c2:7a:0a:5f:c7:53:d2:b1:bc:c2:ab:f4:a2: 7c:30:61:e2:d9:7d:0d:a0:ee:a9:4d:91:5f:84:e4:7d:6e:d3: a4:65:85:1e:8e:8a:b0:1f:74:f9:a1:a6:f3:74:fd:f7:a9:ad: 22:16:fb:ca:65:70:cf:f8:95:2f:41:5e:3c:b1:63:15:e8:21: 1d:ba:69:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2RTE0QjEwMDFD MDgxOUREQTkwHhcNMjUwODA4MjIzODAxWhcNMjUwODE1MjIzODAxWjAYMRYwFAYD VQQDEw02ODk2N2M0OS05Y2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BDNgYDews3maYlgXAfxqk/TCbdWIa+FSQwYGWFJWwdRQ7OLrulHw2a2gDct PGlWD6wMq66WqEZy7xVsno5D+ZtshxW/8CO6a6ikTA8hqEoQwFtBvlhzvePgNITM sD1Gekeo1kgq29paqtBck+ZeAWbvOfwypjZsue50dhaeTAfWGAlP/Z1nLkgOSRCJ demQFANUuH0ylXQH0eOHY7Oa+2IgIUNO1tKYTCcVA4P78CgDOt3tz93vkbZUyF+g 5ojw566g0Y1Xiz2Tc/vCRhqQctuOiLbPMayNRuargyLBtt5oe1p9uwU5rd3nomoH SVMxwD42O2hh/9WsbKW7bnZR9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExeWq3Z C8P6GOIkmzYT3sozrq8pMB8GA1UdIwQYMBaAFMaTmbEy4a5rLqMRbhSxABwIGd2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDA1Qy9ERUNFMEYwQTdC RDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJtc3VveEZ1RkxFQUhBZ1oz YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwT1pzVExocm1zdW94RnVGTEVBSEFnWjNhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJt c3VveEZ1RkxFQUhBZ1ozYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCION80Psf5qkNQoBJBP/rJAjhFmhPg64wWDF8REkGovBR+liNwmYe8 s+UdVJRbx+PPfzghmXExNZDrZlujdQFha234aHWxPXkYO8x/TWu3Ppq0vfE1VwIc +ERG8Xevrcsj41xfnc8UDQ2Oj32ebysXE8FWZ8NSpQwZtEXrOuX830V4yZHbz97L dXsy0Sup1nCceYkTTH49XDtqzCFdmeJAqxC2yYPqDWcDf8TrKB6x/4SP36JdyrQb ysJ6Cl/HU9KxvMKr9KJ8MGHi2X0NoO6pTZFfhOR9btOkZYUejoqwH3T5oabzdP33 qa0iFvvKZXDP+JUvQV48sWMV6CEdumnP -----END CERTIFICATE-----Generated at Sun Aug 10 10:37:30 2025 by rpki-client