$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: BUH7S1WkXaa2QzcjMuu0TxOANhiCWrojDkMkIRQOfwo= Subject key identifier: 4D:E5:2D:66:6B:16:CC:37:6B:1A:BB:49:5B:95:AC:D4:36:3E:97:2A Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 68 Signing time: Tue 05 Aug 2025 07:37:12 +0000 Manifest this update: Tue 05 Aug 2025 07:37:11 +0000 Manifest next update: Tue 12 Aug 2025 07:37:11 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: ywikBtTjrcvCQD+F5Q2Bv41lfgzycBxZ8PcpWLrxbHg=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Aug 5 07:37:11 2025 GMT Not After : Aug 12 07:37:11 2025 GMT Subject: CN=6891b4a7-eb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1c:84:65:dd:d2:41:fd:d6:f1:f5:25:a7:36: 3a:5c:ec:76:8a:73:7f:0e:a4:0a:b3:e6:d3:8f:65: 2f:11:f9:26:bb:5b:e8:3e:3e:0e:76:45:3e:b4:9d: 8b:63:23:32:ed:da:d4:9e:98:5a:88:29:78:ab:65: 58:d2:22:44:38:79:e1:f6:0f:09:e3:45:3c:2b:7e: f3:0e:16:25:b0:9f:16:8c:42:8b:a8:df:22:77:12: 6c:70:b0:85:86:cf:96:c6:2f:ea:4f:a0:cd:cb:95: f4:0a:13:18:c2:0d:93:48:59:5c:ae:e8:f2:92:b2: a5:aa:ca:86:05:54:08:8e:cf:af:11:2a:ca:4a:f3: ff:0c:6c:dc:1e:4b:ba:6b:7d:5f:d2:a0:f2:64:6a: 89:d6:17:12:a4:15:ae:b2:10:f8:4b:86:d8:ba:1a: 46:95:5b:ae:0c:21:c3:be:06:99:b3:84:fb:d0:73: 7d:f4:72:de:c2:cf:30:a2:86:78:e9:4f:a5:b7:22: fa:81:4f:7c:68:d6:d2:d9:1d:d4:48:48:dd:af:fb: 18:28:cf:f4:73:f1:d9:77:37:70:9c:6a:a8:1a:a2: d4:ac:35:61:f5:95:98:d5:bb:9f:92:e4:e6:52:ea: 64:e6:27:d6:1b:31:9e:ed:8b:60:a3:67:70:50:78: 4c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E5:2D:66:6B:16:CC:37:6B:1A:BB:49:5B:95:AC:D4:36:3E:97:2A X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:42:6c:c7:4d:0a:72:30:91:10:bf:ef:62:d2:69:b6:82:73: 12:83:e8:3c:b8:76:05:f6:1c:5e:7b:92:0b:66:63:ba:be:6b: 67:c9:b6:3e:90:4d:99:70:3a:79:c0:58:5c:54:0d:46:19:92: 57:e0:3d:2d:2d:b5:64:bf:f1:7a:aa:52:21:59:ed:b3:5f:f3: 10:d9:c5:a1:3e:9a:80:11:5b:6b:21:4a:84:5a:49:5f:c8:ed: 44:26:6b:2d:ed:52:a8:2a:e3:5a:75:19:a2:fd:80:22:96:41: 58:62:d0:3c:0e:4f:cb:c8:78:a3:01:98:cf:90:fd:72:db:e3: ce:9e:af:ea:65:75:2c:c6:75:0f:97:96:46:d7:a4:15:7a:83: b6:9a:e1:41:cf:2d:10:a5:55:51:8a:f7:34:37:33:b2:78:61: 56:5d:ca:da:18:97:d2:41:59:dd:a2:d9:2f:3c:53:79:09:75: d8:9c:52:77:d1:e4:2c:29:c1:30:52:d7:92:2f:81:82:b9:df: 78:19:e2:55:ed:43:4d:c4:53:1e:1f:49:c4:73:22:bd:89:88: 9e:e4:7f:ab:41:d9:c7:c4:1f:5b:37:41:d5:50:51:f4:5d:13: 89:f8:3b:78:ce:6c:f3:33:db:44:2b:73:3f:74:54:e8:af:bd: d4:91:91:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThFQkM4MUYwNjI1 QjI5MzE2MDAeFw0yNTA4MDUwNzM3MTFaFw0yNTA4MTIwNzM3MTFaMBgxFjAUBgNV BAMTDTY4OTFiNGE3LWViNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxHIRl3dJB/dbx9SWnNjpc7HaKc38OpAqz5tOPZS8R+Sa7W+g+Pg52RT60nYtj IzLt2tSemFqIKXirZVjSIkQ4eeH2DwnjRTwrfvMOFiWwnxaMQouo3yJ3EmxwsIWG z5bGL+pPoM3LlfQKExjCDZNIWVyu6PKSsqWqyoYFVAiOz68RKspK8/8MbNweS7pr fV/SoPJkaonWFxKkFa6yEPhLhti6GkaVW64MIcO+BpmzhPvQc330ct7CzzCihnjp T6W3IvqBT3xo1tLZHdRISN2v+xgoz/Rz8dl3N3CcaqgaotSsNWH1lZjVu5+S5OZS 6mTmJ9YbMZ7ti2CjZ3BQeEzjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTeUtZmsW zDdrGrtJW5Ws1DY+lyowHwYDVR0jBBgwFoAUXv3pjE+/jRGHtoWOvIHwYlspMWAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzIwQkUxQTMwRDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1X QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHYzcGpFLV9qUkdIdG9XT3ZJSHdZbHNwTVdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzIwQkUxQTMwRDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJH SHRvV092SUh3WWxzcE1XQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFZCbMdNCnIwkRC/72LSabaCcxKD6Dy4dgX2HF57kgtmY7q+a2fJtj6Q TZlwOnnAWFxUDUYZklfgPS0ttWS/8XqqUiFZ7bNf8xDZxaE+moARW2shSoRaSV/I 7UQmay3tUqgq41p1GaL9gCKWQVhi0DwOT8vIeKMBmM+Q/XLb486er+pldSzGdQ+X lkbXpBV6g7aa4UHPLRClVVGK9zQ3M7J4YVZdytoYl9JBWd2i2S88U3kJddicUnfR 5CwpwTBS15IvgYK533gZ4lXtQ03EUx4fScRzIr2JiJ7kf6tB2cfEH1s3QdVQUfRd E4n4O3jObPMz20Qrcz90VOivvdSRkc8= -----END CERTIFICATE-----Generated at Wed Aug 6 12:42:23 2025 by rpki-client