$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: lW3Jqbz0zBQFPeRYyAQjHyE9AfEtDJ15Q4eEwiJUjsE= Subject key identifier: CC:18:6A:A2:C4:28:B6:DE:AA:E0:B4:B4:D8:07:3D:FB:85:1A:47:B2 Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 34BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 34B3 Signing time: Sun 10 Aug 2025 14:38:39 +0000 Manifest this update: Sun 10 Aug 2025 14:38:38 +0000 Manifest next update: Sun 17 Aug 2025 14:38:38 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: HN3ieKqmHDkmK1RftjGT0K4yn6rObGGucwrULArSfUg=) 2: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: m1Ja+K+BQF88h58Y18w9A7vu3WiRuOsB65pKsql8BvI=) 3: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: Zl4gUZhHt66LNUFLaLmernm+th1hHU0/5O3LszjxBds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13500 (0x34bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Aug 10 14:38:38 2025 GMT Not After : Aug 17 14:38:38 2025 GMT Subject: CN=6898aeef-82ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:5c:3d:76:ae:c1:70:0a:6e:a4:14:9c:1d: 1f:48:f7:71:37:13:7b:f2:a0:8b:3c:2c:ed:88:dc: 9a:6e:53:6b:dd:24:5c:f6:f5:df:11:67:ff:20:4b: 87:c4:ac:ea:72:42:a4:0a:a0:83:54:65:b9:01:1a: ff:15:3d:4f:1b:76:f8:c3:94:d3:3b:81:9b:08:39: b7:4a:7b:53:e4:1b:cb:0b:5c:8c:9b:b9:fd:ca:57: 0e:90:fb:cd:b6:c4:c8:e5:a6:7c:6e:d3:d1:83:c1: eb:f6:9f:ad:02:ee:b7:f8:75:a9:0c:16:9f:b6:9c: 99:3a:1c:36:90:8d:d4:01:2f:06:bd:c3:9c:08:ab: 4d:49:60:ae:43:f6:dc:36:b9:46:e2:87:3c:61:99: 2a:06:c3:6d:60:1a:d6:4d:81:ba:54:c1:02:23:b6: 23:83:79:61:45:06:2b:95:4a:a7:9f:e1:be:fd:e3: 9c:26:b3:57:71:f9:f8:64:bd:91:cd:1f:f4:5b:07: 03:e4:2e:bb:12:17:78:3f:cf:54:6e:5e:5b:06:67: 53:1f:8e:8e:ce:df:da:9c:66:c5:51:9b:19:32:7f: 39:36:d0:65:99:53:2d:b4:a3:36:29:20:b7:ab:bd: 80:ec:1f:b6:15:d3:1d:af:2e:6a:04:a1:cf:6a:78: f9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:18:6A:A2:C4:28:B6:DE:AA:E0:B4:B4:D8:07:3D:FB:85:1A:47:B2 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6d:59:2f:1d:4a:12:fc:57:1a:ec:bc:9c:98:9d:18:45:eb: 46:57:5a:dc:88:f9:90:06:db:2d:63:0f:44:4d:eb:28:f2:12: 96:6e:33:1a:06:f1:ee:9f:b9:dc:65:f0:17:d7:74:fa:39:26: 99:40:9c:eb:af:ee:62:e1:48:fc:be:f4:46:70:7e:20:a5:d2: d2:b1:67:a6:2b:b9:4b:70:42:c2:18:21:70:6a:83:64:07:b0: fb:5d:28:8b:6e:fc:a5:3b:ea:c7:08:48:a3:e9:2d:7a:f7:ab: 41:73:96:df:26:ab:51:50:c5:eb:99:02:07:ce:4c:02:4b:75: c0:7c:5c:40:85:7c:d0:0a:6f:3d:7d:81:42:15:1f:06:7b:be: ed:6b:ca:ba:72:36:31:fb:77:2d:dc:67:f5:e9:4e:6c:be:83: 71:cf:56:a8:9c:f1:84:62:19:ab:ed:3b:21:34:57:30:d5:21: 50:6e:12:a0:bd:26:5c:69:f1:fb:2c:3f:7d:73:61:20:f1:41: 6f:a6:ce:ed:e2:4d:ff:36:78:42:87:ed:0a:27:fe:b3:ed:e7: 53:fa:bd:35:b8:48:da:fd:fa:10:2f:bb:6a:08:bb:50:aa:c7: a5:9e:af:36:20:17:67:9d:1b:6d:04:41:fe:05:0e:13:bb:09: 47:89:7d:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjUwODEwMTQzODM4WhcNMjUwODE3MTQzODM4WjAYMRYwFAYD VQQDEw02ODk4YWVlZi04MmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV9cPXauwXAKbqQUnB0fSPdxNxN78qCLPCztiNyablNr3SRc9vXfEWf/IEuH xKzqckKkCqCDVGW5ARr/FT1PG3b4w5TTO4GbCDm3SntT5BvLC1yMm7n9ylcOkPvN tsTI5aZ8btPRg8Hr9p+tAu63+HWpDBaftpyZOhw2kI3UAS8GvcOcCKtNSWCuQ/bc NrlG4oc8YZkqBsNtYBrWTYG6VMECI7Yjg3lhRQYrlUqnn+G+/eOcJrNXcfn4ZL2R zR/0WwcD5C67Ehd4P89Ubl5bBmdTH46Ozt/anGbFUZsZMn85NtBlmVMttKM2KSC3 q72A7B+2FdMdry5qBKHPanj5+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwYaqLE KLbequC0tNgHPfuFGkeyMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDbVkvHUoS/Fca7LycmJ0YRetGV1rciPmQBtstYw9ETeso8hKWbjMa BvHun7ncZfAX13T6OSaZQJzrr+5i4Uj8vvRGcH4gpdLSsWemK7lLcELCGCFwaoNk B7D7XSiLbvylO+rHCEij6S1696tBc5bfJqtRUMXrmQIHzkwCS3XAfFxAhXzQCm89 fYFCFR8Ge77ta8q6cjYx+3ct3Gf16U5svoNxz1aonPGEYhmr7TshNFcw1SFQbhKg vSZcafH7LD99c2Eg8UFvps7t4k3/NnhCh+0KJ/6z7edT+r01uEja/foQL7tqCLtQ qselnq82IBdnnRttBEH+BQ4TuwlHiX0l -----END CERTIFICATE-----Generated at Mon Aug 11 07:33:42 2025 by rpki-client