$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft File: xWFyqoU5BINNkF08MAE0TdKhjp4.mft (raw, json) Hash identifier: mJp/1nopqUjf5qbMWnVYH72LCs8DAK9wLJdkb6UQmzQ= Subject key identifier: 57:19:ED:58:49:D1:14:DB:38:94:FD:12:F4:71:11:16:E7:AE:EE:59 Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft Manifest number: 01A9 Signing time: Sat 23 Aug 2025 03:24:21 +0000 Manifest this update: Sat 23 Aug 2025 03:24:21 +0000 Manifest next update: Sat 30 Aug 2025 03:24:20 +0000 Files and hashes: 1: xWFyqoU5BINNkF08MAE0TdKhjp4.crl (hash: J44hkDdmbIeojmdAxjPJeskqZzpXFWw6w9Id9bh4t6w=) 2: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (hash: QJic5b/HC6ZO9L9AzouyI1f/AhHlKpyjlXdUDRpV06s=) 3: 6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (hash: fvrvhYuIB4wEmKs1ycLwW/A4j4ALVpjcmKJeAfUulIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Validity Not Before: Aug 23 03:24:21 2025 GMT Not After : Aug 30 03:24:20 2025 GMT Subject: CN=68a93465-cf23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:73:e5:0a:7a:4a:04:f0:d5:39:c6:22:f9: 4a:3f:08:54:b8:0e:f3:cf:de:be:1c:12:f6:54:ac: 0e:ae:86:a5:20:6d:e0:29:7d:ea:80:29:37:a6:3d: 7b:13:d1:47:f9:3c:2c:1f:d5:2a:9c:67:24:32:39: f4:90:0d:3e:fb:96:ec:39:b5:b2:61:30:cf:27:7b: 7a:d0:00:f3:cd:e9:21:81:bc:d1:53:6c:0e:91:64: 81:06:7f:98:97:b7:42:c3:3c:e6:6c:47:10:7a:d3: 36:78:5e:cc:7b:50:c1:0c:ac:a7:b7:bc:67:42:28: b7:46:16:6b:5b:f3:d4:b5:bd:2b:71:02:b2:31:8a: c2:e0:ae:ca:40:e2:11:4a:5e:c9:61:0b:cc:fd:9e: 5b:fe:67:d7:7e:7b:5b:33:a1:3b:94:5b:41:3a:4b: 4b:92:8e:35:84:ab:49:7a:bf:f7:2a:66:76:37:1b: 93:97:21:f2:6b:04:b0:c6:87:01:d1:11:6c:f5:26: 16:f8:1b:c6:70:01:a8:39:4e:23:54:82:e5:f1:ce: ad:01:08:f6:ea:0d:79:00:97:f4:d5:56:d7:88:22: 92:d4:bf:4c:ef:68:c6:64:47:e3:a6:aa:a7:56:6d: 3f:17:09:2e:f8:ce:d0:0e:fc:b9:fc:f3:30:05:0f: c3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:19:ED:58:49:D1:14:DB:38:94:FD:12:F4:71:11:16:E7:AE:EE:59 X509v3 Authority Key Identifier: keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:6b:9d:7f:91:a3:50:19:7c:25:b3:f1:46:6e:52:46:1e:a1: 9f:7a:f6:d1:7d:79:bb:40:f0:3d:f7:78:bd:5c:1b:a8:5e:44: ef:fb:07:cf:d4:f9:43:07:24:74:d3:5b:54:ce:88:dd:49:9e: 6d:18:89:24:04:27:a8:d2:17:04:45:09:8a:ac:ea:9d:f0:61: 29:33:04:ed:e4:63:e8:4d:0e:41:41:0b:0c:7f:7d:54:5d:04: 50:d9:dc:df:5c:b7:ba:db:f8:25:aa:dc:11:f1:d8:f1:b6:74: 21:39:fe:14:d3:35:b6:da:55:79:a6:db:69:6d:41:29:a9:a2: 73:8a:26:3c:d2:f2:42:f5:da:f0:17:09:74:24:63:7e:3c:20: 17:a2:40:b8:25:b5:40:16:8f:55:34:85:7c:ee:17:0a:94:34: db:a4:9f:c3:47:51:f5:15:d6:e2:b3:69:3a:4d:16:6a:68:07: 51:1a:e4:69:f7:78:51:f1:ec:aa:1b:2f:61:47:42:d4:52:91: 09:8c:58:71:62:e4:31:b7:9a:5b:52:08:c8:2f:ed:4b:a1:a8: f2:6b:c8:3d:00:50:46:15:12:81:75:43:f8:5d:28:f6:10:0f: c8:7a:f0:9d:48:5b:15:f7:06:1d:e2:1a:8e:f1:6e:ea:a6:23: c1:1f:e2:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzMjExMTAvBgNVBAUTKEM1NjE3MkFBODUzOTA0ODM0RDkwNUQzQzMwMDEzNDRE RDJBMThFOUUwHhcNMjUwODIzMDMyNDIxWhcNMjUwODMwMDMyNDIwWjAYMRYwFAYD VQQDEw02OGE5MzQ2NS1jZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vhz5Qp6SgTw1TnGIvlKPwhUuA7zz96+HBL2VKwOroalIG3gKX3qgCk3pj17 E9FH+TwsH9UqnGckMjn0kA0++5bsObWyYTDPJ3t60ADzzekhgbzRU2wOkWSBBn+Y l7dCwzzmbEcQetM2eF7Me1DBDKynt7xnQii3RhZrW/PUtb0rcQKyMYrC4K7KQOIR Sl7JYQvM/Z5b/mfXfntbM6E7lFtBOktLko41hKtJer/3KmZ2NxuTlyHyawSwxocB 0RFs9SYW+BvGcAGoOU4jVILl8c6tAQj26g15AJf01VbXiCKS1L9M72jGZEfjpqqn Vm0/Fwku+M7QDvy5/PMwBQ/DiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcZ7VhJ 0RTbOJT9EvRxERbnru5ZMB8GA1UdIwQYMBaAFMVhcqqFOQSDTZBdPDABNE3SoY6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDMyMS81MkIyRTAxNjAw QzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJTk5rRjA4TUFFMFRkS2hq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hXRnlxb1U1QklOTmtGMDhNQUUwVGRLaGpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDMyMS81MkIyRTAxNjAwQzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJ Tk5rRjA4TUFFMFRkS2hqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2a51/kaNQGXwls/FGblJGHqGfevbRfXm7QPA993i9XBuoXkTv+wfP 1PlDByR001tUzojdSZ5tGIkkBCeo0hcERQmKrOqd8GEpMwTt5GPoTQ5BQQsMf31U XQRQ2dzfXLe62/glqtwR8djxtnQhOf4U0zW22lV5pttpbUEpqaJziiY80vJC9drw Fwl0JGN+PCAXokC4JbVAFo9VNIV87hcKlDTbpJ/DR1H1Fdbis2k6TRZqaAdRGuRp 93hR8eyqGy9hR0LUUpEJjFhxYuQxt5pbUgjIL+1Loajya8g9AFBGFRKBdUP4XSj2 EA/IevCdSFsV9wYd4hqO8W7qpiPBH+JD -----END CERTIFICATE-----Generated at Sun Aug 24 11:13:02 2025 by rpki-client