$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft File: xpA79e8aQHD8mDw02cUDz0MT_Is.mft (raw, json) Hash identifier: kbIjufkCuLt7/aoLlJZRiUxU2D/MRWIgFgdJ1y5QPjo= Subject key identifier: 64:89:FD:50:A8:57:CB:71:03:8A:E6:12:29:D1:14:56:EC:54:1B:D9 Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B Certificate issuer: /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft Manifest number: 0529 Signing time: Fri 22 Aug 2025 23:44:34 +0000 Manifest this update: Fri 22 Aug 2025 23:44:34 +0000 Manifest next update: Fri 29 Aug 2025 23:44:34 +0000 Files and hashes: 1: xpA79e8aQHD8mDw02cUDz0MT_Is.crl (hash: a7L9orvnzEi+otUF8xiiwic1al4C+RQBK+DABft+Oqw=) 2: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (hash: n4qbIc5i3kLkXS9yMK9sKanURu/yHl+PFiYDGaralVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111A96, serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Validity Not Before: Aug 22 23:44:34 2025 GMT Not After : Aug 29 23:44:34 2025 GMT Subject: CN=68a900e2-0e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d5:b7:da:d1:55:03:9e:07:d9:25:63:a8:7d: 89:92:aa:74:19:ae:56:26:e2:bb:b3:b7:04:91:5a: 5e:38:50:73:30:19:35:43:06:a6:83:70:ac:47:62: 4f:d1:f7:41:ee:93:23:0d:e2:e4:cc:29:db:1d:f8: f1:88:1a:96:fd:d4:03:cc:b6:56:29:d1:2c:98:cb: 72:fb:12:55:cc:ad:d6:70:e6:0c:c9:fa:cf:d2:0a: 81:c0:45:bc:37:a7:e3:7e:d4:6d:c6:8e:b8:5d:bd: 81:b3:93:b2:89:69:f6:76:54:b6:fa:c5:bc:78:4a: c7:f9:4d:9d:3f:17:fe:7f:a2:54:9f:16:98:64:dc: db:f2:8b:89:a3:70:80:01:33:28:5b:a2:c0:df:07: d2:95:95:d6:b6:c5:04:88:5f:88:3e:53:6b:81:8e: 3b:a3:ab:f8:79:77:f3:26:79:08:61:9f:a8:4e:6e: 1f:2a:10:59:76:1b:c9:60:0b:c0:d4:5e:4c:fa:25: 7f:e3:85:6f:06:01:fb:55:4a:63:a0:9b:cb:40:c2: a2:cb:32:cd:18:ca:54:67:77:04:9d:80:86:da:b7: ef:fa:89:7f:d5:6c:00:74:ac:b3:b0:eb:42:44:e0: 07:d9:b2:98:14:2d:07:9f:16:c4:15:ab:f8:e2:65: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:89:FD:50:A8:57:CB:71:03:8A:E6:12:29:D1:14:56:EC:54:1B:D9 X509v3 Authority Key Identifier: keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:4a:18:68:42:94:15:a5:d0:f1:62:d0:4d:bf:57:bb:c5:c2: d4:48:ac:5f:4a:3b:dc:7c:ac:2e:e6:05:97:1d:1d:c5:82:cd: ba:48:1a:3a:0a:09:05:af:3b:40:b1:c0:4d:4f:3c:34:d5:8d: 42:bd:8c:64:aa:88:7e:74:e4:24:a7:86:07:9b:f1:6c:b1:75: e7:87:d4:95:15:7b:ac:28:c9:bf:60:07:95:2f:b4:f8:22:1b: 1e:c9:a4:d1:41:a0:c1:0b:e3:91:a3:2e:51:f1:d9:54:9d:64: 98:3a:a4:99:04:58:46:8b:be:15:41:b9:db:4e:5a:12:97:2d: 06:0a:0b:15:fb:2d:23:ba:e4:aa:d3:5c:07:1e:43:b1:1f:43: ef:25:2e:f4:02:54:98:da:53:aa:45:62:c6:7a:e7:56:19:82: 67:4c:7e:3a:6a:af:2d:52:4a:e6:c9:ea:ae:3d:7b:e3:ae:68: f5:69:b5:e5:36:88:c1:99:85:99:95:d2:4d:68:f6:39:7c:4b: d6:f1:7a:84:ff:a6:c9:6d:b7:fa:c2:e1:28:62:f0:ae:29:c4: 97:bc:82:90:f4:49:24:a2:ff:81:37:48:4c:3a:a2:d1:87:71: 48:b5:4c:56:be:65:e0:3b:8d:75:f7:40:2d:57:b4:fe:48:8c: c3:c4:a5:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFBOTYxMTAvBgNVBAUTKEM2OTAzQkY1RUYxQTQwNzBGQzk4M0MzNEQ5QzUwM0NG NDMxM0ZDOEIwHhcNMjUwODIyMjM0NDM0WhcNMjUwODI5MjM0NDM0WjAYMRYwFAYD VQQDEw02OGE5MDBlMi0wZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA89W32tFVA54H2SVjqH2Jkqp0Ga5WJuK7s7cEkVpeOFBzMBk1Qwamg3CsR2JP 0fdB7pMjDeLkzCnbHfjxiBqW/dQDzLZWKdEsmMty+xJVzK3WcOYMyfrP0gqBwEW8 N6fjftRtxo64Xb2Bs5OyiWn2dlS2+sW8eErH+U2dPxf+f6JUnxaYZNzb8ouJo3CA ATMoW6LA3wfSlZXWtsUEiF+IPlNrgY47o6v4eXfzJnkIYZ+oTm4fKhBZdhvJYAvA 1F5M+iV/44VvBgH7VUpjoJvLQMKiyzLNGMpUZ3cEnYCG2rfv+ol/1WwAdKyzsOtC ROAH2bKYFC0HnxbEFav44mWtnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSJ/VCo V8txA4rmEinRFFbsVBvZMB8GA1UdIwQYMBaAFMaQO/XvGkBw/Jg8NNnFA89DE/yL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUE5Ni80NTg5QzYzODBF RUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFIRDhtRHcwMmNVRHowTVRf SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwQTc5ZThhUUhEOG1EdzAyY1VEejBNVF9Jcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUE5Ni80NTg5QzYzODBFRUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFI RDhtRHcwMmNVRHowTVRfSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYShhoQpQVpdDxYtBNv1e7xcLUSKxfSjvcfKwu5gWXHR3Fgs26SBo6 CgkFrztAscBNTzw01Y1CvYxkqoh+dOQkp4YHm/FssXXnh9SVFXusKMm/YAeVL7T4 IhseyaTRQaDBC+ORoy5R8dlUnWSYOqSZBFhGi74VQbnbTloSly0GCgsV+y0juuSq 01wHHkOxH0PvJS70AlSY2lOqRWLGeudWGYJnTH46aq8tUkrmyequPXvjrmj1abXl NojBmYWZldJNaPY5fEvW8XqE/6bJbbf6wuEoYvCuKcSXvIKQ9Ekkov+BN0hMOqLR h3FItUxWvmXgO41190AtV7T+SIzDxKVP -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:54 2025 by rpki-client