$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft File: xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json) Hash identifier: vooDBO9jZosUtjyDZPWIxn0JtC7RB80CI7sTH/Ky1hs= Subject key identifier: EC:49:70:60:AD:E8:91:12:C7:99:10:69:DF:7C:24:13:C0:A1:A8:EB Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft Manifest number: 01C7 Signing time: Thu 07 Aug 2025 03:42:37 +0000 Manifest this update: Thu 07 Aug 2025 03:42:37 +0000 Manifest next update: Thu 14 Aug 2025 03:42:37 +0000 Files and hashes: 1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: SXF/K5KM5VyX4ewOnef0mFGK9f/J0wXBOtRSv/P6YXU=) 2: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: NHs0+oLxPl8uuJffLMiSnsDVJyHvtsfXj9mt3FT2mqU=) 3: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: TUo7uv4rXTA0iRyimVV1a57fjFNt5Gy9xOb0XovcHoI=) 4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: AeF6+orX99LwnbHGZiB851tFWKGqrAIMqoROhOgxFpw=) 5: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: 7c9RXUhll7RjmfKdCACTxBkSEfUtF0muR2dkJbiSbMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Validity Not Before: Aug 7 03:42:37 2025 GMT Not After : Aug 14 03:42:37 2025 GMT Subject: CN=689420ad-fd4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:76:0c:33:36:16:40:10:e0:1c:44:a6:47: 2c:5f:c5:75:dc:e6:4a:71:bc:24:3d:f3:32:b7:b0: da:fa:f9:4b:7e:35:77:43:a5:9a:aa:cd:90:fa:b3: 82:bb:f1:5d:42:3f:f4:91:98:03:04:6a:d7:b3:69: 4c:ea:e4:08:32:d4:77:cb:2f:c5:09:bf:84:ed:c0: 38:80:c5:6c:81:5d:fb:0e:10:57:71:f4:e7:49:1a: 83:42:38:bb:72:76:b3:de:c7:02:19:a0:22:e2:8e: 83:11:93:95:4f:68:ae:a7:fe:59:a7:d9:55:a0:71: 4b:40:fc:24:0b:08:30:8f:df:71:88:bf:d1:bc:0d: 4c:b4:d9:5c:5d:97:e5:d9:5d:bb:4b:47:8e:67:4f: 28:ec:95:17:a2:3c:78:3f:21:64:29:c8:38:73:b0: 2c:1d:b4:88:de:7d:26:56:a6:9b:77:c0:17:8d:35: 4a:42:dc:ac:7d:41:78:28:3f:31:87:e9:d7:22:fa: 39:c9:84:c1:64:95:93:4b:3d:c5:34:96:40:ed:86: 26:01:4f:5e:01:87:53:a5:ab:23:77:b2:8f:92:2c: 7a:34:a5:ee:e2:31:19:e3:41:6e:6c:8c:59:16:f7: 30:a7:e9:54:c0:27:7c:3b:22:c8:f7:a0:bd:b6:89: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:49:70:60:AD:E8:91:12:C7:99:10:69:DF:7C:24:13:C0:A1:A8:EB X509v3 Authority Key Identifier: keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:fe:b3:27:8e:6e:ca:f7:b8:e6:26:62:3d:29:d5:d1:0f:c8: e3:d4:55:23:74:a0:9e:07:4c:2f:b6:13:22:76:5e:89:ec:b5: a7:1c:10:99:38:18:a7:19:75:9d:e7:b9:3c:a4:70:21:22:97: c3:33:18:ae:e2:c8:e8:bd:70:bd:16:f0:25:89:d2:1f:02:46: a8:32:32:c0:4d:12:27:07:28:e5:bf:c0:cb:4f:f5:31:6f:80: cc:21:ac:d7:ac:ce:2c:c7:b6:1e:85:d4:4d:a1:7a:ea:66:f8: 45:02:96:9b:21:57:fb:82:12:60:c0:68:ec:40:59:48:27:15: cc:e6:f9:31:b8:a4:d3:ea:70:3b:f6:01:77:34:fd:ed:ec:0d: 9b:15:6b:a2:f9:9c:3c:d9:22:d1:86:85:30:df:7a:8f:2a:3e: 2f:a2:19:76:d8:24:92:61:d7:84:ad:ef:69:ef:28:0b:82:22: fa:f5:a7:5d:77:81:90:e5:d8:f4:9e:af:08:0e:70:64:76:8c: 20:8f:07:0a:10:c6:5f:49:e0:d0:d0:0c:9a:bd:53:63:b3:d0: 23:12:9a:82:a7:a5:e0:04:c5:85:a7:9d:46:02:17:9e:a3:ae: 4b:d2:b9:58:41:02:9c:f7:17:92:4b:c0:b8:0d:ed:8a:6b:0f: 6b:21:f7:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKEM2MjE4NDgxNTFGNzk3QkY3MjMxMDdGMTRENjJDNjdB MjEzQTUzRTMwHhcNMjUwODA3MDM0MjM3WhcNMjUwODE0MDM0MjM3WjAYMRYwFAYD VQQDEw02ODk0MjBhZC1mZDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6d2DDM2FkAQ4BxEpkcsX8V13OZKcbwkPfMyt7Da+vlLfjV3Q6Waqs2Q+rOC u/FdQj/0kZgDBGrXs2lM6uQIMtR3yy/FCb+E7cA4gMVsgV37DhBXcfTnSRqDQji7 cnaz3scCGaAi4o6DEZOVT2iup/5Zp9lVoHFLQPwkCwgwj99xiL/RvA1MtNlcXZfl 2V27S0eOZ08o7JUXojx4PyFkKcg4c7AsHbSI3n0mVqabd8AXjTVKQtysfUF4KD8x h+nXIvo5yYTBZJWTSz3FNJZA7YYmAU9eAYdTpasjd7KPkix6NKXu4jEZ40FubIxZ Fvcwp+lUwCd8OyLI96C9tomfpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxJcGCt 6JESx5kQad98JBPAoajrMB8GA1UdIwQYMBaAFMYhhIFR95e/cjEH8U1ixnohOlPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC81ODk4MjBDMkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3OXlNUWZ4VFdMR2VpRTZV LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hpR0VnVkgzbDc5eU1RZnhUV0xHZWlFNlUtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJDOC81ODk4MjBDMkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3 OXlNUWZ4VFdMR2VpRTZVLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF/rMnjm7K97jmJmI9KdXRD8jj1FUjdKCeB0wvthMidl6J7LWnHBCZ OBinGXWd57k8pHAhIpfDMxiu4sjovXC9FvAlidIfAkaoMjLATRInByjlv8DLT/Ux b4DMIazXrM4sx7YehdRNoXrqZvhFApabIVf7ghJgwGjsQFlIJxXM5vkxuKTT6nA7 9gF3NP3t7A2bFWui+Zw82SLRhoUw33qPKj4vohl22CSSYdeEre9p7ygLgiL69add d4GQ5dj0nq8IDnBkdowgjwcKEMZfSeDQ0AyavVNjs9AjEpqCp6XgBMWFp51GAhee o65L0rlYQQKc9xeSS8C4De2Kaw9rIfe/ -----END CERTIFICATE-----Generated at Fri Aug 8 20:40:21 2025 by rpki-client