$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json) Hash identifier: lnmcYKdVJsTsZq7ld+IQLXYpuNxwst235vfJ2ouQueM= Subject key identifier: A0:19:E0:80:03:CC:6F:56:E3:E9:2D:95:0E:C8:4C:10:97:5A:06:7E Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft Manifest number: 0153 Signing time: Tue 05 Aug 2025 04:37:58 +0000 Manifest this update: Tue 05 Aug 2025 04:37:57 +0000 Manifest next update: Tue 12 Aug 2025 04:37:57 +0000 Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: 2jl3CbcU20lM7fT+/1u0iBW7fwUt8PEpitzqo5UhyAE=) 2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: B+UIB58IevJFHi1QUj4sqmfL/RMK0LGyhhucuugtqng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Validity Not Before: Aug 5 04:37:57 2025 GMT Not After : Aug 12 04:37:57 2025 GMT Subject: CN=68918aa5-5b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:17:bc:24:cb:ae:84:59:fe:4e:33:2e:14: c9:86:91:a4:ac:20:9d:92:4e:27:1f:16:b2:13:41: 1a:79:2c:d9:26:13:1c:34:aa:a7:95:78:d0:f0:7b: a1:63:7a:18:43:32:04:a5:86:08:a4:73:5b:b3:51: 64:8b:a2:41:55:23:b7:c9:d0:48:ec:d5:b5:85:37: dd:e8:7b:1a:6f:86:d7:b9:b6:cd:3d:c8:28:f6:95: 62:27:f2:61:7f:c6:d7:03:aa:e6:fc:c2:6d:eb:51: 19:59:57:00:4a:86:f8:4c:a1:a7:67:c4:32:53:6b: e5:db:2f:95:9d:b5:1f:99:4c:c1:c7:77:8c:27:97: 05:fa:38:ea:51:5e:5d:46:48:00:7c:2e:66:76:b8: a1:4e:22:3f:d0:ae:b6:52:83:49:45:93:1d:63:e3: f6:7c:a4:23:b5:1c:5d:7e:c4:33:ba:ac:b4:0d:04: 5e:00:a3:d8:b4:ef:00:61:97:e3:dc:eb:0c:03:89: 59:93:30:01:55:87:22:34:34:92:73:d1:0a:23:1d: d1:c1:46:c1:a9:6c:a5:8d:1f:3b:11:b5:b5:1d:00: 3c:6e:60:99:e3:2a:48:5a:aa:70:c1:9f:49:21:51: 31:6d:54:ec:ad:f5:3c:40:52:aa:f0:71:3e:e6:a6: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:19:E0:80:03:CC:6F:56:E3:E9:2D:95:0E:C8:4C:10:97:5A:06:7E X509v3 Authority Key Identifier: keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5c:89:b9:7c:54:86:00:f4:be:3b:8e:23:20:cd:d5:4b:26: 5a:5c:ce:a6:36:6d:5e:61:c0:b0:01:d6:5c:e5:74:d8:e5:4c: dd:34:d4:05:d1:6d:ac:28:57:3b:a9:17:12:37:2b:fe:64:7b: f9:70:10:e6:ec:af:58:90:f0:f7:16:eb:ec:1c:76:93:da:01: 3c:8d:68:ca:43:28:d8:7f:0a:13:31:92:3f:1b:e8:81:fd:f1: 51:c4:44:46:6f:ba:f1:47:b3:01:7f:ed:a3:a1:32:8c:fb:a2: 83:45:84:79:69:58:a9:6e:f3:d5:15:51:09:16:22:bd:b7:e4: 1f:8f:44:b9:fe:51:49:b0:f5:13:a4:c6:1b:50:4e:43:6a:55: e1:6e:22:b3:3f:f6:64:0e:e6:a6:1b:9f:d4:57:65:bb:af:71: f9:f7:9f:ff:4f:8a:5c:38:d4:12:f8:37:86:a0:ff:ac:49:91: 69:45:25:9e:65:fe:5c:c9:2f:2c:57:67:dd:fc:9e:f8:7b:3e: e2:e6:01:af:2d:7d:32:8a:cf:8c:2c:97:26:8c:d2:35:6c:5a: f7:48:2e:54:54:32:3b:29:7c:88:8f:89:3f:98:ce:ab:58:0a: e7:e5:f7:2c:c1:0f:c7:a0:47:78:17:56:eb:1a:26:38:f6:eb: 31:90:53:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVBRDVBRjczRTUw NkMwOENBMzgwHhcNMjUwODA1MDQzNzU3WhcNMjUwODEyMDQzNzU3WjAYMRYwFAYD VQQDEw02ODkxOGFhNS01YjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv0XvCTLroRZ/k4zLhTJhpGkrCCdkk4nHxayE0EaeSzZJhMcNKqnlXjQ8Huh Y3oYQzIEpYYIpHNbs1Fki6JBVSO3ydBI7NW1hTfd6Hsab4bXubbNPcgo9pViJ/Jh f8bXA6rm/MJt61EZWVcASob4TKGnZ8QyU2vl2y+VnbUfmUzBx3eMJ5cF+jjqUV5d RkgAfC5mdrihTiI/0K62UoNJRZMdY+P2fKQjtRxdfsQzuqy0DQReAKPYtO8AYZfj 3OsMA4lZkzABVYciNDSSc9EKIx3RwUbBqWyljR87EbW1HQA8bmCZ4ypIWqpwwZ9J IVExbVTsrfU8QFKq8HE+5qb75QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAZ4IAD zG9W4+ktlQ7ITBCXWgZ+MB8GA1UdIwQYMBaAFPl8a58Gm2wCyz2OrVr3PlBsCMo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REI2OS9EQTg2MENDODZF NUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJBTExQWTZ0V3ZjLVVHd0l5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REI2OS9EQTg2MENDODZFNUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJB TExQWTZ0V3ZjLVVHd0l5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVXIm5fFSGAPS+O44jIM3VSyZaXM6mNm1eYcCwAdZc5XTY5UzdNNQF 0W2sKFc7qRcSNyv+ZHv5cBDm7K9YkPD3FuvsHHaT2gE8jWjKQyjYfwoTMZI/G+iB /fFRxERGb7rxR7MBf+2joTKM+6KDRYR5aVipbvPVFVEJFiK9t+Qfj0S5/lFJsPUT pMYbUE5DalXhbiKzP/ZkDuamG5/UV2W7r3H595//T4pcONQS+DeGoP+sSZFpRSWe Zf5cyS8sV2fd/J74ez7i5gGvLX0yis+MLJcmjNI1bFr3SC5UVDI7KXyIj4k/mM6r WArn5fcswQ/HoEd4F1brGiY49usxkFOH -----END CERTIFICATE-----Generated at Wed Aug 6 00:35:48 2025 by rpki-client