$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json) Hash identifier: ZK9DDrDpedwX8oBtzodeahJ1GtwVU+SqKjdX0qRmrls= Subject key identifier: FE:B7:16:64:52:44:03:74:33:27:68:06:EF:7A:1C:B9:F3:9D:3C:D7 Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Certificate serial: 069E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft Manifest number: 069A Signing time: Tue 12 Aug 2025 22:35:23 +0000 Manifest this update: Tue 12 Aug 2025 22:35:22 +0000 Manifest next update: Tue 19 Aug 2025 22:35:22 +0000 Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: p1BHfr6ggXpkMp3uS2x03oZRFqqbzmW8R8AXqzcIsk8=) 2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: QJpUBqNgws3PM1RQ/YpxcOLuHjSbFEKESqjd/lkWkNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1694 (0x69e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Validity Not Before: Aug 12 22:35:22 2025 GMT Not After : Aug 19 22:35:22 2025 GMT Subject: CN=689bc1ab-d022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:8e:73:ae:9e:e9:b9:60:1b:f3:c7:0b:9d: de:ce:91:f6:ca:bb:ff:8f:33:9a:25:7f:d9:be:14: c4:67:8f:63:fe:bd:ff:4c:de:eb:68:44:e0:ab:f9: e9:4c:63:66:df:37:27:75:63:2c:34:3c:f6:d3:78: 10:cd:68:27:b6:58:fb:d1:40:1e:55:d7:40:33:fc: bf:a8:be:61:6a:72:5f:12:a7:04:2a:50:a7:2d:51: 42:ba:aa:b1:ca:6a:dc:2c:bb:a0:e7:05:f7:81:1d: 2f:a2:fb:2e:55:2f:48:24:01:3b:7a:a2:a9:8e:22: f1:aa:17:f0:37:b4:ea:b2:e9:1a:d6:ec:85:8f:6e: 90:a7:2a:72:3a:7f:5d:3b:bc:0f:6d:70:41:2b:11: b1:27:1a:6d:2e:5e:8f:a8:6e:5b:cf:ee:a6:c3:cd: 15:b1:b0:6a:92:4a:38:29:c0:46:f7:e6:86:cd:ec: ff:a9:26:d7:04:ff:2d:d7:64:40:90:f8:c8:47:e8: 9a:0c:08:e8:4a:f0:e6:5d:3c:a1:e9:77:c2:ca:aa: bd:af:36:69:d1:f4:0a:7b:64:4b:51:46:aa:c5:8b: 65:21:c3:42:1f:4c:ae:ed:6d:97:8c:f3:3f:39:8c: 37:20:8b:c3:45:29:a4:e0:94:58:29:60:c0:8e:b4: 48:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B7:16:64:52:44:03:74:33:27:68:06:EF:7A:1C:B9:F3:9D:3C:D7 X509v3 Authority Key Identifier: keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e5:89:93:96:47:f4:bc:f2:59:61:b3:0f:49:c4:6c:7a:bc: 04:ab:a2:cd:a2:72:65:a2:80:99:fe:aa:f4:3b:fc:35:75:ce: 51:4a:78:09:ec:67:ab:b8:13:bf:ce:fa:f2:01:32:32:b0:b2: 1a:07:ad:fb:d9:7d:85:8e:27:91:2f:bf:85:9b:47:c5:cf:bc: d8:8f:40:60:bd:a9:c6:9e:c6:a4:70:bd:73:b6:6a:8e:a9:07: 75:33:a8:5d:4b:70:00:cc:83:35:c0:ef:82:68:c2:2f:6b:4c: d0:a9:83:f8:f0:94:84:47:b4:0d:e6:c9:b8:1e:df:c5:01:f9: 45:06:bd:84:7b:c8:cd:c6:f4:e5:80:ad:96:7b:74:01:ae:b9: e9:fa:df:3f:82:6f:3d:14:3e:2f:61:6e:5b:89:db:29:ef:cf: 68:8e:74:90:5d:7a:fe:85:09:86:f3:ec:54:91:9b:55:67:fc: 3f:3d:15:a1:65:d8:9e:b2:f2:71:1d:e7:9c:a2:4e:2b:d9:20: fd:1e:4e:90:3e:e6:f9:1e:b8:31:c5:40:c4:b2:71:19:0e:af: 8a:9d:09:36:f0:ac:75:2d:22:78:5a:8e:77:84:92:59:9f:e8: 20:06:55:86:a2:ed:7c:56:a9:1f:c4:7b:7c:15:9a:16:83:c8: 13:5e:d0:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDVGQUQxQjM5QkU0NTU1MjYyMjA2RDE5RjVBNjY5QkM3 QjY5RjcyQzgwHhcNMjUwODEyMjIzNTIyWhcNMjUwODE5MjIzNTIyWjAYMRYwFAYD VQQDEw02ODliYzFhYi1kMDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwCOc66e6blgG/PHC53ezpH2yrv/jzOaJX/ZvhTEZ49j/r3/TN7raETgq/np TGNm3zcndWMsNDz203gQzWgntlj70UAeVddAM/y/qL5hanJfEqcEKlCnLVFCuqqx ymrcLLug5wX3gR0vovsuVS9IJAE7eqKpjiLxqhfwN7Tqsuka1uyFj26QpypyOn9d O7wPbXBBKxGxJxptLl6PqG5bz+6mw80VsbBqkko4KcBG9+aGzez/qSbXBP8t12RA kPjIR+iaDAjoSvDmXTyh6XfCyqq9rzZp0fQKe2RLUUaqxYtlIcNCH0yu7W2XjPM/ OYw3IIvDRSmk4JRYKWDAjrRIxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP63FmRS RAN0MydoBu96HLnznTzXMB8GA1UdIwQYMBaAFF+tGzm+RVUmIgbRn1pmm8e2n3LI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wM0EwMTc4NDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZTWWlCdEdmV21hYng3YWZj c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1g2MGJPYjVGVlNZaUJ0R2ZXbWFieDdhZmNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wM0EwMTc4NDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZT WWlCdEdmV21hYng3YWZjc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA5YmTlkf0vPJZYbMPScRserwEq6LNonJlooCZ/qr0O/w1dc5RSngJ 7GeruBO/zvryATIysLIaB6372X2FjieRL7+Fm0fFz7zYj0BgvanGnsakcL1ztmqO qQd1M6hdS3AAzIM1wO+CaMIva0zQqYP48JSER7QN5sm4Ht/FAflFBr2Ee8jNxvTl gK2We3QBrrnp+t8/gm89FD4vYW5bidsp789ojnSQXXr+hQmG8+xUkZtVZ/w/PRWh ZdiesvJxHeecok4r2SD9Hk6QPub5HrgxxUDEsnEZDq+KnQk28Kx1LSJ4Wo53hJJZ n+ggBlWGou18VqkfxHt8FZoWg8gTXtAQ -----END CERTIFICATE-----Generated at Thu Aug 14 14:53:51 2025 by rpki-client