$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft File: xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json) Hash identifier: zn6jV5LEPseOlj+ViNExiTRyy8W+4WOs9eNLr258VGY= Subject key identifier: 40:F1:47:07:C5:2F:E8:33:D6:6B:8E:1A:BB:DF:AD:E4:C9:82:11:99 Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Certificate serial: 0754 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft Manifest number: 0748 Signing time: Sun 10 Aug 2025 21:48:15 +0000 Manifest this update: Sun 10 Aug 2025 21:48:15 +0000 Manifest next update: Sun 17 Aug 2025 21:48:15 +0000 Files and hashes: 1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: 8MHE6tb+G6LZHXRyJBeeJdjGZOdHtkPO+oK3SnUwvfk=) 2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: Xmj6Hu3XamtN1TfoLFF4zTOGMT8EY6KW6APUipxbG/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Validity Not Before: Aug 10 21:48:15 2025 GMT Not After : Aug 17 21:48:15 2025 GMT Subject: CN=6899139f-302c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cb:e2:d4:44:f0:1a:44:26:76:e7:cb:e9:be: 7e:02:b5:49:79:88:2a:18:4f:b5:81:50:ce:fb:ee: 88:0b:d2:ff:6d:b7:1e:a0:cd:cc:63:fe:59:8d:06: 68:87:07:50:4d:69:ed:45:20:6f:c9:ef:7e:32:e4: 82:0e:f4:52:53:c9:f1:4e:88:71:e4:5d:96:39:c4: f2:ac:be:d8:5b:a2:41:36:7e:14:5b:19:bb:1a:ef: 73:41:c0:a8:d8:70:da:51:45:27:e2:17:74:3e:35: 8a:19:2a:2d:ca:ac:6b:b2:7b:f8:69:9a:77:8f:2f: 1b:6c:8e:e0:2f:20:07:c7:75:22:f1:a8:4c:27:1a: c0:49:46:34:12:1b:3d:d5:4b:c5:fa:a4:83:51:f7: 78:af:fe:5c:42:92:ad:98:55:b2:f3:e4:a0:f4:6c: 16:93:11:b8:79:a6:32:e1:90:02:0a:3f:d4:b1:d6: 82:74:3d:8f:8c:61:16:0f:95:31:30:2b:a0:e2:a4: 26:48:22:6b:2f:1a:13:6e:c8:36:e9:7b:05:8d:3f: 25:3a:55:2c:18:d3:8b:75:0b:ee:4c:6d:50:60:da: 15:9b:93:ea:f7:ec:86:a4:63:97:eb:ae:9d:8b:ee: 87:b2:b1:cf:4e:9e:a0:26:ff:37:b7:14:fe:b4:75: de:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F1:47:07:C5:2F:E8:33:D6:6B:8E:1A:BB:DF:AD:E4:C9:82:11:99 X509v3 Authority Key Identifier: keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6a:97:ee:b6:33:4e:0d:51:ed:48:37:dc:ca:b8:4d:f8:af: 31:75:4a:44:f8:88:e9:40:f7:ab:08:f3:6e:5e:2c:7a:f6:85: f4:85:be:5e:9a:b7:e5:02:a5:b3:15:13:8c:3b:6c:ad:1e:18: 47:1c:b9:f7:bf:b0:a3:93:24:85:22:eb:40:2a:86:2e:30:d1: 60:58:51:30:dc:e8:f0:b8:3b:91:a7:8d:2f:b9:70:51:4d:63: a2:69:03:d6:39:91:eb:ab:20:8f:83:f7:33:57:fc:b9:85:8f: 6d:2e:ce:4b:9a:43:d3:f3:74:b8:f3:30:a3:9a:93:6d:d1:78: 07:a1:96:2a:6c:ba:85:c3:21:b6:6d:44:71:88:9a:03:75:aa: 7b:d7:7d:22:84:23:06:9c:e4:d2:3d:0a:15:18:55:ad:bc:3e: 39:74:d9:97:a4:c3:e5:fa:a6:b3:42:25:86:b8:c4:1b:c7:9f: 35:f2:6e:ae:a1:9a:d9:bc:74:c9:a3:1b:87:63:1e:9c:94:d0: 36:2e:00:55:57:ad:31:d7:32:3c:26:62:86:52:1d:1a:8f:37: f6:26:cd:d3:e8:0e:e2:b8:6e:03:ff:4a:5d:cb:82:e1:b5:e3: d7:a8:9a:01:13:0b:6d:c4:0b:6b:b3:72:38:81:8a:e5:d1:7d: b5:d8:83:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBREYxMTAvBgNVBAUTKEM3MEJGNzlFODhFMzExOUFFOTZCQjc2MUEyOTNCQjUx QTQ4NjE3M0MwHhcNMjUwODEwMjE0ODE1WhcNMjUwODE3MjE0ODE1WjAYMRYwFAYD VQQDEw02ODk5MTM5Zi0zMDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cvi1ETwGkQmdufL6b5+ArVJeYgqGE+1gVDO++6IC9L/bbceoM3MY/5ZjQZo hwdQTWntRSBvye9+MuSCDvRSU8nxTohx5F2WOcTyrL7YW6JBNn4UWxm7Gu9zQcCo 2HDaUUUn4hd0PjWKGSotyqxrsnv4aZp3jy8bbI7gLyAHx3Ui8ahMJxrASUY0Ehs9 1UvF+qSDUfd4r/5cQpKtmFWy8+Sg9GwWkxG4eaYy4ZACCj/UsdaCdD2PjGEWD5Ux MCug4qQmSCJrLxoTbsg26XsFjT8lOlUsGNOLdQvuTG1QYNoVm5Pq9+yGpGOX666d i+6HsrHPTp6gJv83txT+tHXelQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDxRwfF L+gz1muOGrvfreTJghGZMB8GA1UdIwQYMBaAFMcL956I4xGa6Wu3YaKTu1Gkhhc8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFERi9CODVGMEU4QzNB Q0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVacnBhN2Rob3BPN1VhU0dG encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3djNub2pqRVpycGE3ZGhvcE83VWFTR0Z6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFERi9CODVGMEU4QzNBQ0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVa cnBhN2Rob3BPN1VhU0dGencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaapfutjNODVHtSDfcyrhN+K8xdUpE+IjpQPerCPNuXix69oX0hb5e mrflAqWzFROMO2ytHhhHHLn3v7CjkySFIutAKoYuMNFgWFEw3OjwuDuRp40vuXBR TWOiaQPWOZHrqyCPg/czV/y5hY9tLs5LmkPT83S48zCjmpNt0XgHoZYqbLqFwyG2 bURxiJoDdap7130ihCMGnOTSPQoVGFWtvD45dNmXpMPl+qazQiWGuMQbx5818m6u oZrZvHTJoxuHYx6clNA2LgBVV60x1zI8JmKGUh0ajzf2Js3T6A7iuG4D/0pdy4Lh tePXqJoBEwttxAtrs3I4gYrl0X212IP4 -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:06 2025 by rpki-client