$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: d+HNPUCSEbom1HiP1nh/n7DkZ4ir0u0Xidy0j02X9AE= Subject key identifier: 85:DF:BB:C1:5F:98:D2:62:57:A1:3E:C6:90:3B:1B:6F:B3:3B:6E:0D Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0E70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0E52 Signing time: Fri 08 Aug 2025 17:58:35 +0000 Manifest this update: Fri 08 Aug 2025 17:58:35 +0000 Manifest next update: Fri 15 Aug 2025 17:58:35 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: p15JMkCkVuqt2Kr/zODB+DBSrNm+ARLHgYeN8B7XUh4=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=) 4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3696 (0xe70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Aug 8 17:58:35 2025 GMT Not After : Aug 15 17:58:35 2025 GMT Subject: CN=68963acb-b24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:eb:3b:94:1c:e4:de:79:ad:98:16:27:6c:5d: 1a:27:f3:54:5d:5d:ec:0e:ab:6b:54:af:ec:cd:cf: d3:45:48:40:f7:bb:25:1d:00:e1:de:1f:b9:b5:e1: be:8e:ba:e5:65:bd:97:c7:33:74:30:2b:00:21:f3: 03:f4:99:7f:42:30:ed:00:f6:fb:be:c4:64:c9:e6: cf:e8:b3:89:31:85:3c:92:83:4b:26:70:50:0b:65: 11:87:85:f8:96:f4:4c:a3:81:21:6d:b4:a7:c2:c2: be:cb:01:34:d1:c6:cf:04:ed:70:5d:da:6b:02:29: cd:ca:39:e2:8f:e0:22:f9:0f:69:0c:82:87:fe:a5: fc:d7:c9:bb:4c:be:b7:9c:70:26:4e:cf:d0:4b:31: 1a:e0:19:d3:f5:1a:b2:e0:d5:70:9e:76:b0:31:73: 33:1b:fe:65:69:0c:f1:be:80:53:67:23:37:f8:01: 51:9c:f5:c2:e2:c3:a7:f6:dc:a0:6f:62:7a:ef:0b: 9b:76:b4:ca:a9:e2:ce:6f:e9:2a:11:9e:aa:a3:88: fd:3d:2e:9e:7d:ca:f0:8b:d7:8c:a0:0e:ab:5c:17: 13:67:20:38:cd:f7:4e:f3:bd:5c:58:a3:27:df:ca: b6:3c:0b:97:a2:f9:19:25:4d:0d:a7:78:e3:44:db: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DF:BB:C1:5F:98:D2:62:57:A1:3E:C6:90:3B:1B:6F:B3:3B:6E:0D X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:59:5c:a8:32:68:ee:14:a3:92:b5:59:5c:e7:ca:1c:fb:3a: 2f:82:e7:48:c6:36:42:e5:6b:3c:37:b6:23:b2:1b:5e:8f:b3: b4:34:15:6b:18:70:21:13:79:60:f7:c1:e1:05:39:26:7d:3b: 1d:a9:e2:31:ae:16:d4:89:72:6f:72:1d:09:1b:2e:c0:f7:47: 31:84:f1:1f:75:c7:bc:e5:c6:1a:61:3e:5c:36:e7:de:72:01: 60:03:bf:24:77:67:2e:f6:ac:ff:4a:a7:a3:a2:5c:c3:70:5e: e5:6b:e1:cc:a5:a4:ac:01:9b:47:06:66:da:7f:8a:49:fd:65: 82:73:f1:e2:a5:c9:6d:5b:72:26:1a:41:ee:c0:d4:01:19:cd: 7e:a3:7c:4b:13:b0:4a:e5:d6:e2:a4:d0:95:1d:56:77:c4:b5: 33:bb:68:90:49:a4:53:85:cd:9b:c6:ba:e1:eb:31:a3:17:89: 96:fd:08:5d:59:c1:77:98:75:df:9c:47:19:69:1c:70:45:f9: f4:8e:c2:a0:76:a7:2b:bb:e1:15:84:b4:fd:a5:6c:ca:0f:15: 1d:71:a6:02:0d:95:19:94:c1:64:46:02:12:e9:d5:a4:da:22: 21:96:84:af:77:10:76:37:c8:bd:e9:02:c5:f6:28:cb:63:31: 40:6f:5d:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjUwODA4MTc1ODM1WhcNMjUwODE1MTc1ODM1WjAYMRYwFAYD VQQDEw02ODk2M2FjYi1iMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/Os7lBzk3nmtmBYnbF0aJ/NUXV3sDqtrVK/szc/TRUhA97slHQDh3h+5teG+ jrrlZb2XxzN0MCsAIfMD9Jl/QjDtAPb7vsRkyebP6LOJMYU8koNLJnBQC2URh4X4 lvRMo4EhbbSnwsK+ywE00cbPBO1wXdprAinNyjnij+Ai+Q9pDIKH/qX818m7TL63 nHAmTs/QSzEa4BnT9Rqy4NVwnnawMXMzG/5laQzxvoBTZyM3+AFRnPXC4sOn9tyg b2J67wubdrTKqeLOb+kqEZ6qo4j9PS6efcrwi9eMoA6rXBcTZyA4zfdO871cWKMn 38q2PAuXovkZJU0Np3jjRNseWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXfu8Ff mNJiV6E+xpA7G2+zO24NMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4WVyoMmjuFKOStVlc58oc+zovgudIxjZC5Ws8N7Yjshtej7O0NBVr GHAhE3lg98HhBTkmfTsdqeIxrhbUiXJvch0JGy7A90cxhPEfdce85cYaYT5cNufe cgFgA78kd2cu9qz/SqejolzDcF7la+HMpaSsAZtHBmbaf4pJ/WWCc/HipcltW3Im GkHuwNQBGc1+o3xLE7BK5dbipNCVHVZ3xLUzu2iQSaRThc2bxrrh6zGjF4mW/Qhd WcF3mHXfnEcZaRxwRfn0jsKgdqcru+EVhLT9pWzKDxUdcaYCDZUZlMFkRgIS6dWk 2iIhloSvdxB2N8i96QLF9ijLYzFAb12h -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:57 2025 by rpki-client