$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json) Hash identifier: 6MtIF+c0Dcos3GCxNE8IXWbAB65XYpjriDXaxLJiAbY= Subject key identifier: 3F:A8:B0:E5:93:10:34:5F:22:B6:53:43:A2:02:74:46:31:51:9D:5F Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft Manifest number: 68 Signing time: Mon 11 Aug 2025 07:14:41 +0000 Manifest this update: Mon 11 Aug 2025 07:14:41 +0000 Manifest next update: Mon 18 Aug 2025 07:14:41 +0000 Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: d6Tbqyu0CcYUIQs6RLXLsL4FowQDAjrKEslzrCpjSJQ=) 2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: OADH0Zf3ANJ0fVSGo4++5SGmG3UFA33H5Jy/cHOt0/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC Validity Not Before: Aug 11 07:14:41 2025 GMT Not After : Aug 18 07:14:41 2025 GMT Subject: CN=68999861-6980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:9a:62:11:b8:43:93:96:56:a5:8f:8b:c7: 62:5f:e3:e9:cf:22:c5:4d:63:b4:39:fa:c7:5e:30: 0d:c5:f1:82:c8:76:65:85:80:68:b6:ad:ef:ca:2f: 7b:32:92:0d:01:fd:71:12:c6:d1:24:1d:d1:aa:ae: 5b:01:c3:43:40:c1:8a:93:6b:88:1f:10:93:27:51: 50:9b:b5:8c:8e:5e:8d:fa:73:5e:b7:37:58:4f:4f: 52:48:ca:b5:51:90:b7:c4:b5:02:91:86:43:a2:7f: d9:e9:5e:82:c2:4d:c1:14:3a:44:22:91:49:b9:65: 71:37:f5:50:c4:d9:90:92:bb:38:86:aa:d3:13:e0: 88:7a:fe:c1:ad:4b:38:e2:46:28:e9:0b:0e:de:22: 06:45:99:5c:60:09:cf:e3:64:ff:1d:8b:f3:cf:70: f6:f5:e3:87:8e:12:04:15:74:7e:9b:7c:98:ed:f6: 3c:6f:a4:c2:9c:d1:e3:9b:e3:24:4b:81:72:8f:10: 81:18:d8:f8:15:f3:34:b5:4f:d9:47:f2:f7:85:c4: 5c:44:f5:cf:78:cd:d3:d9:b5:19:f0:8e:38:04:03: 1c:a1:01:46:2b:2f:15:76:1f:13:db:76:81:85:36: 56:17:90:c4:cb:64:e1:48:de:c5:8a:21:3f:e2:40: 77:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A8:B0:E5:93:10:34:5F:22:B6:53:43:A2:02:74:46:31:51:9D:5F X509v3 Authority Key Identifier: keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ce:0c:77:74:ca:e3:31:f6:02:b5:7d:b4:63:ab:a2:df:8f: f5:66:15:6e:24:6d:5a:53:37:67:15:46:7f:db:f2:83:08:78: f2:d3:6b:23:5c:bf:9b:68:0d:4c:ce:d0:4c:39:a5:9e:09:ae: a4:d7:c8:b1:88:42:03:ee:b4:3f:b2:ca:45:f4:b4:a3:6b:e4: 89:35:c3:be:d8:ed:f9:7f:15:13:5f:41:db:10:fa:68:5d:c7: ef:e2:4c:0f:82:f4:81:b3:56:83:b1:1e:6c:db:26:42:bf:03: d4:c6:c6:47:2c:37:80:35:78:b9:9c:ce:d5:81:86:c2:17:9b: 7a:61:ed:bf:c9:2f:4f:f1:ef:e8:f9:cf:9d:98:d2:52:e9:70: 82:8b:b6:c0:a0:63:a0:4b:4e:fb:ec:1f:71:fa:ff:c4:4c:4b: 61:bd:b1:fb:29:9a:d0:4d:15:08:0d:35:21:ef:28:a5:2b:d4: 3f:7e:4b:70:0c:42:0c:2c:08:a5:f8:e5:2d:ff:24:5e:89:56: c0:48:7c:ad:cf:bf:20:7a:61:47:f9:b4:73:57:1a:fb:18:ac: 06:53:d4:c1:b5:f0:24:73:5f:1f:e0:b3:e6:12:0d:9e:8e:bf: b4:89:e4:28:a5:0f:f2:4b:f3:7a:8a:b8:71:3c:e8:6f:0d:be: 2d:51:8a:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Rjg3MDExMC8GA1UEBRMoNUQ1NUYxNTA5QjZGMDM0MjREMjk0NEY4MTFGODY5OTM4 MDk5QkJCQzAeFw0yNTA4MTEwNzE0NDFaFw0yNTA4MTgwNzE0NDFaMBgxFjAUBgNV BAMTDTY4OTk5ODYxLTY5ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHQppiEbhDk5ZWpY+Lx2Jf4+nPIsVNY7Q5+sdeMA3F8YLIdmWFgGi2re/KL3sy kg0B/XESxtEkHdGqrlsBw0NAwYqTa4gfEJMnUVCbtYyOXo36c163N1hPT1JIyrVR kLfEtQKRhkOif9npXoLCTcEUOkQikUm5ZXE39VDE2ZCSuziGqtMT4Ih6/sGtSzji RijpCw7eIgZFmVxgCc/jZP8di/PPcPb144eOEgQVdH6bfJjt9jxvpMKc0eOb4yRL gXKPEIEY2PgV8zS1T9lH8veFxFxE9c94zdPZtRnwjjgEAxyhAUYrLxV2HxPbdoGF NlYXkMTLZOFI3sWKIT/iQHftAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP6iw5ZMQ NF8itlNDogJ0RjFRnV8wHwYDVR0jBBgwFoAUXVXxUJtvA0JNKUT4Efhpk4CZu7ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGODcwL0M5MjQyNDZBRDdF MjExRUZBRjBCM0I3REM0RjlBRTAyL1hWWHhVSnR2QTBKTktVVDRFZmhwazRDWnU3 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFZYeFVKdHZBMEpOS1VUNEVmaHBrNENadTd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG ODcwL0M5MjQyNDZBRDdFMjExRUZBRjBCM0I3REM0RjlBRTAyL1hWWHhVSnR2QTBK TktVVDRFZmhwazRDWnU3dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKvODHd0yuMx9gK1fbRjq6Lfj/VmFW4kbVpTN2cVRn/b8oMIePLTayNc v5toDUzO0Ew5pZ4JrqTXyLGIQgPutD+yykX0tKNr5Ik1w77Y7fl/FRNfQdsQ+mhd x+/iTA+C9IGzVoOxHmzbJkK/A9TGxkcsN4A1eLmcztWBhsIXm3ph7b/JL0/x7+j5 z52Y0lLpcIKLtsCgY6BLTvvsH3H6/8RMS2G9sfspmtBNFQgNNSHvKKUr1D9+S3AM QgwsCKX45S3/JF6JVsBIfK3PvyB6YUf5tHNXGvsYrAZT1MG18CRzXx/gs+YSDZ6O v7SJ5CilD/JL83qKuHE86G8Nvi1RilM= -----END CERTIFICATE-----Generated at Tue Aug 12 14:44:25 2025 by rpki-client