$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: +GQysjNF7LkGK8PwQ9AVB9/kRAGSDI7Jv3e6UGrRZ9E= Subject key identifier: F8:D2:3E:16:A2:5E:0B:D0:E5:3C:40:65:B6:B8:BF:13:61:5C:28:C3 Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 27 Signing time: Thu 07 Aug 2025 08:27:35 +0000 Manifest this update: Thu 07 Aug 2025 08:27:34 +0000 Manifest next update: Thu 14 Aug 2025 08:27:34 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: /KhTu0nVbR+AEpjPyZp0ZgapPhYs/MvWoVYZdSgya00=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: rIKd0p3e0QLGiCh3oOuC0PziP82slPgSfQtsZGWJI0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Aug 7 08:27:34 2025 GMT Not After : Aug 14 08:27:34 2025 GMT Subject: CN=68946377-561f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:01:71:f1:bb:61:7d:2d:cd:68:0a:64:a0:7b: 76:d6:7d:27:60:8a:00:40:9b:fa:06:1a:96:9e:59: 22:12:6c:e2:bb:e9:37:93:59:3b:8b:af:65:92:2e: 0b:78:1f:ca:49:88:38:da:23:5f:88:65:60:58:2b: 22:7e:11:2a:f9:53:fc:cc:23:e9:88:cc:47:b2:8d: 28:1e:b7:68:fd:f3:c2:33:13:e4:d7:f7:71:79:14: b6:9d:83:c5:4f:90:91:fb:ad:71:7e:f8:8d:30:f9: cc:7a:fe:f7:2e:62:98:e3:f2:6a:e4:8c:83:c7:c0: ed:41:32:3c:a9:8d:b9:b8:cf:3c:59:12:e3:68:c1: 7b:af:8c:3c:b2:8e:29:77:a6:26:7e:c9:a2:68:11: dd:13:c8:82:e0:71:1f:9d:94:62:dd:b3:98:40:f3: c5:2d:98:0f:ac:f5:4d:89:c5:dd:1f:9b:26:1b:25: 9d:aa:c6:77:56:96:38:1a:88:1f:7f:f5:54:d8:1f: 51:d0:5a:34:9a:6e:76:39:8e:21:d1:9a:d2:ca:18: c7:76:92:c3:31:c0:90:12:0e:62:16:f4:c6:a9:3e: 5c:05:7a:2a:e1:a8:1c:41:db:52:20:4e:79:a5:f5: 17:9f:a0:66:61:22:48:62:20:68:bd:5a:3c:2b:17: e8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D2:3E:16:A2:5E:0B:D0:E5:3C:40:65:B6:B8:BF:13:61:5C:28:C3 X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:99:0d:d1:df:73:2b:4e:7d:56:e9:fb:9a:92:65:d8:6e:12: 58:5f:73:02:2f:7a:21:b1:7f:bf:91:9d:c4:a9:52:40:be:9c: 55:b7:12:ba:a5:b4:a4:d2:89:d5:74:f8:d4:3f:99:5e:ec:f2: f3:3a:c4:e0:29:5d:e8:f6:91:3f:74:29:0b:84:57:6e:e6:71: 82:5a:17:f8:43:db:e1:64:74:6b:7d:61:2d:06:06:2c:e2:08: 3e:94:d6:8e:45:d6:3b:21:0c:76:d2:7e:24:ce:a8:ee:bb:b4: 79:8f:4e:2e:c7:83:9b:2c:a4:5e:07:41:1d:55:44:76:32:e0: b5:62:66:26:15:d5:2e:01:1a:dc:e0:36:2f:d6:82:f5:db:75: 12:73:12:db:7c:1b:1e:d9:41:d5:d9:ef:2d:f6:1a:70:bf:13: 76:ae:1e:f8:fa:df:e3:78:8b:da:74:26:34:30:2c:50:c2:f9: 9d:39:20:95:92:78:e4:72:ef:47:2a:f1:c6:81:3d:f5:7a:5c: 4b:e7:26:8f:99:fb:6e:b9:c6:cc:e8:39:c0:32:95:4c:2a:d4: fc:6e:b0:0d:72:7b:a4:6f:a7:4f:d0:72:07:42:87:b9:32:63: 4d:df:ae:19:17:f6:b0:5f:de:ff:f6:96:b8:98:fe:31:78:b2: f7:66:8c:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoQzQyNkQ0MjY0MDA2NzY1NTU5NzNERkVERTRFQjI2NDRC RUVEMjg3MzAeFw0yNTA4MDcwODI3MzRaFw0yNTA4MTQwODI3MzRaMBgxFjAUBgNV BAMTDTY4OTQ2Mzc3LTU2MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD/AXHxu2F9Lc1oCmSge3bWfSdgigBAm/oGGpaeWSISbOK76TeTWTuLr2WSLgt4 H8pJiDjaI1+IZWBYKyJ+ESr5U/zMI+mIzEeyjSget2j988IzE+TX93F5FLadg8VP kJH7rXF++I0w+cx6/vcuYpjj8mrkjIPHwO1BMjypjbm4zzxZEuNowXuvjDyyjil3 piZ+yaJoEd0TyILgcR+dlGLds5hA88UtmA+s9U2Jxd0fmyYbJZ2qxndWljgaiB9/ 9VTYH1HQWjSabnY5jiHRmtLKGMd2ksMxwJASDmIW9MapPlwFeirhqBxB21IgTnml 9RefoGZhIkhiIGi9WjwrF+jvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+NI+FqJe C9DlPEBltri/E2FcKMMwHwYDVR0jBBgwFoAUxCbUJkAGdlVZc9/t5OsmRL7tKHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0MxRjczMDcyM0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveENiVUprQUdkbFZaYzlfdDVPc21STDd0S0hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0MxRjczMDcyM0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxW WmM5X3Q1T3NtUkw3dEtITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2ZDdHfcytOfVbp+5qSZdhuElhfcwIveiGxf7+RncSpUkC+nFW3Erql tKTSidV0+NQ/mV7s8vM6xOApXej2kT90KQuEV27mcYJaF/hD2+FkdGt9YS0GBizi CD6U1o5F1jshDHbSfiTOqO67tHmPTi7Hg5sspF4HQR1VRHYy4LViZiYV1S4BGtzg Ni/WgvXbdRJzEtt8Gx7ZQdXZ7y32GnC/E3auHvj63+N4i9p0JjQwLFDC+Z05IJWS eORy70cq8caBPfV6XEvnJo+Z+265xszoOcAylUwq1PxusA1ye6Rvp0/QcgdCh7ky Y03frhkX9rBf3v/2lriY/jF4svdmjMI= -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:28 2025 by rpki-client