$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: GFFldQJ6Y1XuSHUqoD8nX/aH/hr+9/ahXNpVEypWGa4= Subject key identifier: 63:A8:BF:0B:7E:3F:6B:F8:8C:B2:1D:13:BD:79:24:E9:F6:DD:7A:62 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0C67 Signing time: Fri 08 Aug 2025 18:38:42 +0000 Manifest this update: Fri 08 Aug 2025 18:38:41 +0000 Manifest next update: Fri 15 Aug 2025 18:38:41 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: 1iQzsdQXad8ulLZz/xCGXmdnAixpAqwqWAdE9ux41Lw=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Aug 8 18:38:41 2025 GMT Not After : Aug 15 18:38:41 2025 GMT Subject: CN=68964432-8359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0e:d9:cb:72:4a:31:2d:6e:76:19:fb:a9:ef: 1a:b8:e6:d1:47:75:0b:cb:44:63:8e:2a:90:b6:4c: 83:62:3f:87:fc:7c:b9:af:d0:e1:80:4d:64:2e:3e: 86:d9:f9:f5:02:a6:87:04:4d:47:7b:40:d9:46:ea: 6c:c2:84:9f:b6:6b:31:0d:7d:5d:92:cb:19:10:da: 1c:8c:f6:5b:64:1f:01:c8:2f:dc:05:19:ac:40:50: d6:93:03:09:dc:3a:44:6f:38:d5:9f:33:17:db:21: 61:63:f7:12:29:c0:10:02:5e:6d:12:18:26:0b:54: aa:4e:76:5d:1f:b4:75:c0:96:2b:da:87:b2:49:24: e3:5f:53:8b:42:6f:66:55:fc:7f:96:b4:c8:a3:f6: 41:57:1e:16:ce:30:be:e1:a4:7c:5f:3f:70:ce:3c: dc:ef:e3:8b:66:e2:51:c7:bc:0f:17:ab:0d:62:9f: 92:b9:ad:ae:9f:ca:32:89:86:c1:4a:a8:17:12:5e: d8:e0:ac:9d:ee:c4:c6:b1:3c:8d:65:7f:ab:af:e6: 1b:05:7f:ac:f3:ad:a4:d6:94:79:fd:43:fd:3b:ee: d4:53:b2:11:ef:b4:3d:de:8e:d2:e1:76:ac:c0:54: 4e:aa:82:c2:d0:8e:7a:96:e3:b9:8d:68:55:78:ec: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A8:BF:0B:7E:3F:6B:F8:8C:B2:1D:13:BD:79:24:E9:F6:DD:7A:62 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:24:ee:97:72:48:85:0b:cd:bd:4e:a7:dd:30:24:29:a7:b6: be:56:4d:38:a8:9d:38:e9:36:75:a2:a1:c6:24:36:32:b5:39: 8f:fd:df:45:c4:bf:35:b4:d3:63:cd:e7:b9:9b:27:6a:ce:41: b8:1c:23:0c:da:7b:76:ff:73:55:a0:b2:7f:1e:b5:3c:ee:a1: b3:b5:32:83:8d:41:65:e9:f5:ee:b9:52:81:18:4a:98:72:3c: 08:0e:74:e9:c3:41:20:e5:5f:da:0b:27:2f:e0:31:6c:f7:8f: 1e:a1:95:71:b5:a3:3a:cd:25:19:e6:82:d0:9c:83:53:60:34: 7b:e7:4b:8e:f0:78:4e:f0:82:89:85:7c:07:47:5b:06:96:ab: 9b:0b:37:eb:c4:dd:7d:e3:6d:4a:b1:94:ea:4b:72:63:a8:ac: 60:13:14:26:24:ec:19:f3:51:20:db:59:6d:1e:3b:41:d6:9e: 32:05:8f:b2:2e:df:57:33:91:5e:4c:56:b5:12:53:68:c6:67: 96:88:40:90:65:f1:17:03:93:da:55:7a:38:df:00:ec:0a:4d: 71:9a:e3:eb:f1:72:1a:18:67:8e:9b:d2:41:9b:a0:02:92:47: bf:3e:5e:af:c9:42:44:17:17:f9:c1:0b:e5:1e:03:c8:1f:d5: 1e:51:4b:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjUwODA4MTgzODQxWhcNMjUwODE1MTgzODQxWjAYMRYwFAYD VQQDEw02ODk2NDQzMi04MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7g7Zy3JKMS1udhn7qe8auObRR3ULy0RjjiqQtkyDYj+H/Hy5r9DhgE1kLj6G 2fn1AqaHBE1He0DZRupswoSftmsxDX1dkssZENocjPZbZB8ByC/cBRmsQFDWkwMJ 3DpEbzjVnzMX2yFhY/cSKcAQAl5tEhgmC1SqTnZdH7R1wJYr2oeySSTjX1OLQm9m Vfx/lrTIo/ZBVx4WzjC+4aR8Xz9wzjzc7+OLZuJRx7wPF6sNYp+Sua2un8oyiYbB SqgXEl7Y4Kyd7sTGsTyNZX+rr+YbBX+s862k1pR5/UP9O+7UU7IR77Q93o7S4Xas wFROqoLC0I56luO5jWhVeOy87wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOovwt+ P2v4jLIdE715JOn23XpiMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpJO6XckiFC829TqfdMCQpp7a+Vk04qJ046TZ1oqHGJDYytTmP/d9F xL81tNNjzee5mydqzkG4HCMM2nt2/3NVoLJ/HrU87qGztTKDjUFl6fXuuVKBGEqY cjwIDnTpw0Eg5V/aCycv4DFs948eoZVxtaM6zSUZ5oLQnINTYDR750uO8HhO8IKJ hXwHR1sGlqubCzfrxN19421KsZTqS3JjqKxgExQmJOwZ81Eg21ltHjtB1p4yBY+y Lt9XM5FeTFa1ElNoxmeWiECQZfEXA5PaVXo43wDsCk1xmuPr8XIaGGeOm9JBm6AC kke/Pl6vyUJEFxf5wQvlHgPIH9UeUUtr -----END CERTIFICATE-----Generated at Sat Aug 9 23:28:35 2025 by rpki-client