$ rpki-client -vvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft File: X8G2OMzN_5nWRFZVKcgHCGhomzE.mft (raw, json) Hash identifier: dpvX177bVVsIwpfENiuTTneHW3GOndEHc+RK5+/49XI= Subject key identifier: D9:93:52:48:06:1E:D4:08:41:22:2A:8E:C9:AC:CD:D1:52:06:04:C5 Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31 Certificate issuer: /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft Manifest number: 55 Signing time: Sat 09 Aug 2025 07:43:07 +0000 Manifest this update: Sat 09 Aug 2025 07:43:07 +0000 Manifest next update: Sat 16 Aug 2025 07:43:07 +0000 Files and hashes: 1: X8G2OMzN_5nWRFZVKcgHCGhomzE.crl (hash: HyVEaA04BVizT12T9sHnyd3CdKeaEwMHszypqYFUOXI=) 2: AA456842107211F09A9E631FC4F9AE02.roa (hash: BO96CEY+h3kyCGROfLPYwk1rs1fVmSzj2xY5TwnQPlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31 Validity Not Before: Aug 9 07:43:07 2025 GMT Not After : Aug 16 07:43:07 2025 GMT Subject: CN=6896fc0b-e48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:05:5d:02:52:05:58:4f:3a:4f:f8:a4:17: 97:b3:50:fd:aa:78:49:ef:9d:29:01:70:e5:b5:ee: 43:8b:fa:5b:1a:e7:42:64:84:c5:f8:d0:e1:40:fe: 16:d0:1a:fb:bb:2d:d6:a7:ba:ad:80:69:d8:2f:14: ea:d4:d9:37:0e:20:f5:4b:ad:57:2f:4e:94:30:33: bd:81:16:b6:3f:50:cd:9a:aa:ab:80:aa:bd:5c:7c: ef:50:92:39:fa:9c:38:0d:08:ef:09:1e:42:74:2d: ea:0d:fb:11:7d:48:ae:b3:5f:de:70:3a:b7:f0:f8: 7e:79:5a:c6:c3:44:23:ac:da:40:17:fe:77:a1:cd: 69:80:ac:e8:1b:22:f6:05:54:24:54:56:4c:2e:44: 34:cd:4d:0e:79:53:0c:2e:6b:08:ba:f4:a7:8e:a4: ba:11:c6:fd:22:e3:4b:46:24:75:98:d2:0c:a7:e6: 87:d0:a8:93:ed:e8:d9:1c:d7:fa:22:32:6a:95:71: 3c:e0:3c:79:20:9e:bb:d4:30:0c:d5:ce:7d:17:ac: 73:6e:21:68:49:b7:04:d3:16:77:ad:73:7c:2e:68: 40:98:36:0f:e2:1f:63:d0:2b:97:9b:e4:f3:d2:7a: c7:b2:ef:2b:f7:f4:12:b0:6d:b3:b0:0d:6a:df:cd: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:93:52:48:06:1E:D4:08:41:22:2A:8E:C9:AC:CD:D1:52:06:04:C5 X509v3 Authority Key Identifier: keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1f:99:44:08:79:0a:ae:1e:27:20:29:ad:32:54:3c:f3:f7: 55:00:5b:c9:c4:9f:53:1c:28:72:1d:3e:37:89:ca:25:7e:04: 61:8a:30:ea:ad:b1:ac:72:12:97:d4:45:08:88:91:e4:83:0f: 82:2a:eb:24:f0:49:75:b8:7d:a1:bc:4b:90:3b:41:58:23:06: fd:c2:dc:6b:56:bd:02:e9:e9:6f:9b:51:bc:0b:25:da:65:b3: 35:a2:65:e0:63:11:5c:ac:f0:5e:3f:7c:20:cb:5b:8e:cc:d3: eb:3b:4e:63:8f:62:af:14:5f:24:21:ad:e9:39:5a:d9:f2:45: 64:d4:ac:bb:c0:36:92:e0:e8:ab:ea:b7:8c:56:aa:a8:9a:48: af:43:7a:04:ec:a2:3f:d2:b1:3c:73:f5:d9:1f:2c:60:45:2c: c7:a4:0d:f6:2e:49:71:20:52:fe:7a:34:59:7b:51:b3:eb:fa: 06:ed:e5:7d:45:2a:fa:e5:55:31:51:fd:3b:09:28:94:7c:fd: cd:b6:9e:59:59:0c:62:d9:a3:45:83:2b:0d:10:6f:7d:1e:7a: 78:fa:b2:ca:48:3d:9a:bc:c7:7d:94:56:7e:74:d4:fb:76:7a: 23:26:ba:54:ad:b9:13:5a:fc:90:09:b3:d3:04:25:83:7d:48: df:b1:98:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTI4RTExMC8GA1UEBRMoNUZDMUI2MzhDQ0NERkY5OUQ2NDQ1NjU1MjlDODA3MDg2 ODY4OUIzMTAeFw0yNTA4MDkwNzQzMDdaFw0yNTA4MTYwNzQzMDdaMBgxFjAUBgNV BAMTDTY4OTZmYzBiLWU0OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo1wVdAlIFWE86T/ikF5ezUP2qeEnvnSkBcOW17kOL+lsa50JkhMX40OFA/hbQ Gvu7Ldanuq2AadgvFOrU2TcOIPVLrVcvTpQwM72BFrY/UM2aqquAqr1cfO9Qkjn6 nDgNCO8JHkJ0LeoN+xF9SK6zX95wOrfw+H55WsbDRCOs2kAX/nehzWmArOgbIvYF VCRUVkwuRDTNTQ55Uwwuawi69KeOpLoRxv0i40tGJHWY0gyn5ofQqJPt6Nkc1/oi MmqVcTzgPHkgnrvUMAzVzn0XrHNuIWhJtwTTFnetc3wuaECYNg/iH2PQK5eb5PPS esey7yv39BKwbbOwDWrfzfnDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2ZNSSAYe 1AhBIiqOyazN0VIGBMUwHwYDVR0jBBgwFoAUX8G2OMzN/5nWRFZVKcgHCGhomzEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMjhFL0NEQTNBNzFFRjU5 QjExRUZBNEY1NzEyOEM0RjlBRTAyL1g4RzJPTXpOXzVuV1JGWlZLY2dIQ0dob216 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDhHMk9Nek5fNW5XUkZaVktjZ0hDR2hvbXpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MjhFL0NEQTNBNzFFRjU5QjExRUZBNEY1NzEyOEM0RjlBRTAyL1g4RzJPTXpOXzVu V1JGWlZLY2dIQ0dob216RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0fmUQIeQquHicgKa0yVDzz91UAW8nEn1McKHIdPjeJyiV+BGGKMOqt saxyEpfURQiIkeSDD4Iq6yTwSXW4faG8S5A7QVgjBv3C3GtWvQLp6W+bUbwLJdpl szWiZeBjEVys8F4/fCDLW47M0+s7TmOPYq8UXyQhrek5WtnyRWTUrLvANpLg6Kvq t4xWqqiaSK9DegTsoj/SsTxz9dkfLGBFLMekDfYuSXEgUv56NFl7UbPr+gbt5X1F KvrlVTFR/TsJKJR8/c22nllZDGLZo0WDKw0Qb30eenj6sspIPZq8x32UVn501Pt2 eiMmulStuRNa/JAJs9MEJYN9SN+xmDk= -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:01 2025 by rpki-client