$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft File: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json) Hash identifier: XRomhV7xoEmsDJpZ+8EAsu7LHoi61gtxe1xd+mRi93E= Subject key identifier: BC:31:D5:1F:09:2E:56:AE:66:35:71:55:64:EE:7B:C0:62:89:0C:21 Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E Certificate issuer: /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Certificate serial: 0DB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft Manifest number: 0DAE Signing time: Mon 04 Aug 2025 18:07:09 +0000 Manifest this update: Mon 04 Aug 2025 18:07:08 +0000 Manifest next update: Mon 11 Aug 2025 18:07:08 +0000 Files and hashes: 1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: 3t0JG4g+zvio3EvHhLGYXs6kiiKxmu9opqae39Swvok=) 2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: nnMRznD8HI2Yb7yh15XfK/3vrMLq6BY/UPlfXXuokSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3509 (0xdb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Validity Not Before: Aug 4 18:07:08 2025 GMT Not After : Aug 11 18:07:08 2025 GMT Subject: CN=6890f6cc-5ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:fc:0a:e6:48:7b:06:b9:3a:1f:fc:29:2c: d1:5b:c7:a8:31:3c:95:73:c2:bc:41:90:2c:d7:f2: 89:ba:80:6f:7c:1e:67:30:ea:a4:cd:6c:63:54:fe: fc:7b:04:7b:11:a8:a3:5e:13:b2:44:f6:3f:d4:5c: 8b:8b:b1:37:61:56:dd:7b:05:22:a1:4d:0b:5b:5a: dc:91:95:6a:dc:3d:f8:5a:98:9d:49:2b:2e:c6:bd: 14:e1:ca:cc:1c:2e:84:4c:60:0c:0b:79:6f:ee:86: cd:0d:f4:81:c2:be:74:d9:42:2a:e8:25:ea:87:d1: 43:8e:76:16:5b:5e:4a:cc:86:02:8f:0e:53:c4:81: 4f:7b:b3:28:8b:4d:22:d1:fe:2c:93:bd:98:a4:af: 33:df:32:ed:8f:da:50:95:3d:57:bc:1e:3a:d9:6d: 3d:f9:b0:6b:e4:99:76:a9:d2:d9:8f:8d:50:ca:34: 73:d7:1b:52:44:c3:ce:44:24:04:41:76:c0:82:7a: ab:1b:8d:d8:3d:c7:ad:1b:0d:a3:dc:5e:82:f0:98: fe:2d:18:26:b2:bf:af:dc:49:37:c3:0e:ad:45:35: 16:5a:70:18:1e:29:0b:a9:f2:c6:70:56:33:48:37: 29:f9:66:fd:c4:e0:0c:ce:c7:db:f1:c8:a8:7c:1f: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:31:D5:1F:09:2E:56:AE:66:35:71:55:64:EE:7B:C0:62:89:0C:21 X509v3 Authority Key Identifier: keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:6a:18:ad:db:a5:a9:9d:9c:5e:a3:fd:42:60:b6:fb:45:68: 7b:32:89:27:80:36:9d:e1:54:8c:cb:15:5f:44:e6:0f:1d:76: 43:a3:a9:1a:27:bb:20:9a:6f:de:95:50:dd:19:06:77:fc:a5: 6d:3e:02:37:eb:bc:1c:c9:75:c0:c8:67:14:a5:a8:d2:51:80: 02:ac:d2:1c:74:69:34:5a:c7:85:75:78:a6:e2:b7:c8:e2:37: 1e:de:63:c9:c9:ba:09:f0:fa:69:dd:f1:4a:ac:70:f4:24:be: 1f:93:4f:51:73:d8:2e:40:e9:da:01:cc:13:ab:38:85:eb:d5: b4:ba:6c:a6:47:7b:b1:77:bc:64:16:f5:07:04:39:0b:c4:00: 1a:d9:0d:c6:20:44:61:38:26:48:86:a5:44:80:07:60:31:50: c0:ff:25:8f:97:51:4c:c1:93:ca:71:9f:61:2e:1b:be:d5:cb: 67:8f:ef:93:ed:be:43:76:c1:e1:fc:2c:57:61:9c:60:49:fa: 57:d3:9c:0e:22:9b:eb:ef:2b:f2:28:f3:77:ed:2e:91:da:c1: 69:7c:61:95:c3:37:73:ae:2a:93:96:fc:25:be:8c:b7:eb:39: 37:59:05:2a:bb:32:a2:c3:40:b1:dd:6a:24:8f:f5:bb:d1:48: 72:0f:db:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRCRTYxMTAvBgNVBAUTKEM1MUY3QkZEOTQ1RDAwNzc3OUI3RjFGRjQyNURCRjI3 QjlDMjk4MkUwHhcNMjUwODA0MTgwNzA4WhcNMjUwODExMTgwNzA4WjAYMRYwFAYD VQQDEw02ODkwZjZjYy01YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bv8CuZIewa5Oh/8KSzRW8eoMTyVc8K8QZAs1/KJuoBvfB5nMOqkzWxjVP78 ewR7EaijXhOyRPY/1FyLi7E3YVbdewUioU0LW1rckZVq3D34WpidSSsuxr0U4crM HC6ETGAMC3lv7obNDfSBwr502UIq6CXqh9FDjnYWW15KzIYCjw5TxIFPe7Moi00i 0f4sk72YpK8z3zLtj9pQlT1XvB462W09+bBr5Jl2qdLZj41QyjRz1xtSRMPORCQE QXbAgnqrG43YPcetGw2j3F6C8Jj+LRgmsr+v3Ek3ww6tRTUWWnAYHikLqfLGcFYz SDcp+Wb9xOAMzsfb8ciofB9UKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwx1R8J LlauZjVxVWTue8BiiQwhMB8GA1UdIwQYMBaAFMUfe/2UXQB3ebfx/0Jdvye5wpgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEJFNi9FRThCQ0FBNEM0 ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFIZDV0X0hfUWwyX0o3bkNt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hSOTdfWlJkQUhkNXRfSF9RbDJfSjduQ21DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEJFNi9FRThCQ0FBNEM0ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFI ZDV0X0hfUWwyX0o3bkNtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpahit26WpnZxeo/1CYLb7RWh7MokngDad4VSMyxVfROYPHXZDo6ka J7sgmm/elVDdGQZ3/KVtPgI367wcyXXAyGcUpajSUYACrNIcdGk0WseFdXim4rfI 4jce3mPJyboJ8Ppp3fFKrHD0JL4fk09Rc9guQOnaAcwTqziF69W0umymR3uxd7xk FvUHBDkLxAAa2Q3GIERhOCZIhqVEgAdgMVDA/yWPl1FMwZPKcZ9hLhu+1ctnj++T 7b5DdsHh/CxXYZxgSfpX05wOIpvr7yvyKPN37S6R2sFpfGGVwzdzriqTlvwlvoy3 6zk3WQUquzKiw0Cx3Wokj/W70UhyD9vk -----END CERTIFICATE-----Generated at Wed Aug 6 13:06:03 2025 by rpki-client