$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json) Hash identifier: YA+k/gOWX+xU3BkfeoZl/1Ef75EZY1Mkl8pjONEnNwU= Subject key identifier: D9:E7:C5:96:0B:99:9C:A8:EC:B7:99:63:32:FA:F0:E1:67:8E:90:32 Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1CF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft Manifest number: 1CB2 Signing time: Fri 08 Aug 2025 16:19:16 +0000 Manifest this update: Fri 08 Aug 2025 16:19:15 +0000 Manifest next update: Fri 15 Aug 2025 16:19:15 +0000 Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: c9cWe/fRXtR+zLFebrvHAWhXVEUmwAjiND9PgZwjkpw=) 2: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: 20AfF76B9+g4MK13JnUrRZPbIDu/TESDofczBLuYHu0=) 3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: 6/nHCLLC7n4HaWWUGKVmTxdYoQkDB8jaG5K5D54SivA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7412 (0x1cf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: Aug 8 16:19:15 2025 GMT Not After : Aug 15 16:19:15 2025 GMT Subject: CN=68962384-1d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b8:1c:0b:74:5a:fe:63:cc:72:74:e3:2e:31: 06:cf:a9:bb:93:88:70:70:96:e0:fb:c4:e7:18:d4: ef:aa:75:e4:88:8f:dc:04:91:2f:5a:33:79:5c:24: 57:d3:84:4d:10:ae:d4:fc:16:d4:c6:4d:94:ec:82: 43:68:d0:da:fb:47:32:1c:14:2e:25:06:f5:af:4e: 5f:56:e3:65:b4:71:80:df:ed:51:ae:e2:6e:68:6d: 3c:7c:8f:2c:dd:57:b3:93:39:f7:df:8e:ff:90:e3: 9d:cc:69:ef:0d:31:fb:a7:f0:95:d9:a9:3a:cd:80: 7c:39:8b:23:1c:1f:d7:74:a0:06:56:d1:5f:32:11: ad:b7:d3:af:95:4e:10:18:3b:00:bb:9b:72:d1:fc: d9:80:59:ef:c9:6b:8b:0c:7c:2c:92:3c:97:c1:19: f2:c8:1f:c9:1e:61:21:b5:88:ad:9d:db:80:e3:f3: 5b:d3:57:36:33:74:d6:33:4a:d4:1d:95:b3:89:f9: ce:c6:f5:cd:89:77:e8:90:6e:30:6e:d9:c5:84:f4: 33:b4:1d:58:11:52:fa:ab:93:32:33:1f:17:f5:2e: 69:87:e8:33:31:cd:5a:bb:11:3a:8c:2d:e3:22:26: 89:c2:1a:6c:66:48:a6:6b:02:9d:47:35:4b:36:3f: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E7:C5:96:0B:99:9C:A8:EC:B7:99:63:32:FA:F0:E1:67:8E:90:32 X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:8e:e9:ab:f5:b6:79:14:c1:b6:55:fd:0d:74:d5:b9:7b:1f: 81:cb:1d:11:b1:b6:c7:c0:40:9a:c7:d5:b2:64:b0:2f:49:87: 1b:d1:19:3e:bc:fa:26:c2:d4:48:c5:d5:e7:c7:a3:9b:07:d6: 8a:89:f5:12:80:3a:03:33:d9:92:c5:e7:09:c0:d9:b4:9d:c0: 55:d7:c8:a2:2e:30:52:04:3e:c7:f8:96:d3:db:52:05:05:4b: a0:51:04:cc:01:45:6c:7b:83:17:ac:45:bf:b1:86:2a:7c:fa: 1f:85:d4:bc:97:9a:61:4a:f3:c4:a2:59:a0:60:67:2c:39:d5: 2d:52:47:f8:99:0f:ba:77:df:1a:3b:4e:50:f4:25:cf:bf:bc: 51:3c:f3:16:f3:bf:a9:e7:13:3f:98:73:58:06:9c:cb:4d:09: bb:30:eb:f6:3e:b7:b6:45:20:e1:30:98:d7:3d:b3:39:52:16: 74:31:de:b9:af:c3:0a:78:92:4a:9c:a7:f2:e5:02:8f:9c:4c: d8:4d:a1:e0:6a:cc:3c:9e:45:46:17:af:66:07:0d:a4:76:14: 63:cc:68:2d:cb:05:b9:9e:48:7b:92:8c:ad:82:0e:0b:18:ee: 55:93:35:10:27:e9:2c:36:17:d4:86:86:b2:53:31:f0:8e:ff: dd:d3:4d:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjUwODA4MTYxOTE1WhcNMjUwODE1MTYxOTE1WjAYMRYwFAYD VQQDEw02ODk2MjM4NC0xZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybgcC3Ra/mPMcnTjLjEGz6m7k4hwcJbg+8TnGNTvqnXkiI/cBJEvWjN5XCRX 04RNEK7U/BbUxk2U7IJDaNDa+0cyHBQuJQb1r05fVuNltHGA3+1RruJuaG08fI8s 3Vezkzn3347/kOOdzGnvDTH7p/CV2ak6zYB8OYsjHB/XdKAGVtFfMhGtt9OvlU4Q GDsAu5ty0fzZgFnvyWuLDHwskjyXwRnyyB/JHmEhtYitnduA4/Nb01c2M3TWM0rU HZWzifnOxvXNiXfokG4wbtnFhPQztB1YEVL6q5MyMx8X9S5ph+gzMc1auxE6jC3j IiaJwhpsZkimawKdRzVLNj/t+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnnxZYL mZyo7LeZYzL68OFnjpAyMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDM5MC8wRTkzNTRGQ0RDNUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJT QTFzd2ZvOTVZM1lJX3EyX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHjumr9bZ5FMG2Vf0NdNW5ex+Byx0RsbbHwECax9WyZLAvSYcb0Rk+ vPomwtRIxdXnx6ObB9aKifUSgDoDM9mSxecJwNm0ncBV18iiLjBSBD7H+JbT21IF BUugUQTMAUVse4MXrEW/sYYqfPofhdS8l5phSvPEolmgYGcsOdUtUkf4mQ+6d98a O05Q9CXPv7xRPPMW87+p5xM/mHNYBpzLTQm7MOv2Pre2RSDhMJjXPbM5UhZ0Md65 r8MKeJJKnKfy5QKPnEzYTaHgasw8nkVGF69mBw2kdhRjzGgtywW5nkh7koytgg4L GO5VkzUQJ+ksNhfUhoayUzHwjv/d003h -----END CERTIFICATE-----Generated at Sun Aug 10 04:47:02 2025 by rpki-client