$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft File: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft (raw, json) Hash identifier: oJOtPkJDJhGYJk9yrzhfN/0mO6H7NtuYj70ot4NjdX8= Subject key identifier: 0E:20:2E:B6:14:4D:1D:D1:53:AB:D6:17:90:88:06:68:BA:8C:14:F2 Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48 Certificate issuer: /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft Manifest number: 1B Signing time: Sat 23 Aug 2025 08:09:26 +0000 Manifest this update: Sat 23 Aug 2025 08:09:25 +0000 Manifest next update: Sat 30 Aug 2025 08:09:25 +0000 Files and hashes: 1: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl (hash: c4WIt0Xp8FZGEWb7a4KJHeL6O6wxJ9WApudb5ngbzo0=) 2: BD71164A59A211F09EC86C38C4F9AE02.roa (hash: LzVxtpFkoDUrbmBrIAWx2A82oGmfgpKdIsb6/8/yXfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348 Validity Not Before: Aug 23 08:09:25 2025 GMT Not After : Aug 30 08:09:25 2025 GMT Subject: CN=68a97736-270d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:e8:0e:ad:52:5e:83:5b:29:b4:08:08:32: 20:37:81:a1:b4:94:6f:40:c4:fc:85:33:aa:a8:28: 09:d5:a6:91:93:8c:df:29:fb:84:cb:02:d2:e1:7c: 5b:34:b9:f6:56:98:4f:f7:90:b9:ba:8d:76:cf:fb: e2:03:18:73:c7:66:b9:35:99:31:01:1b:86:b5:a4: 3b:32:7e:cf:69:0d:fb:25:4c:90:c6:d3:1f:00:8c: bd:b0:a3:69:e7:32:0f:31:a6:1e:d9:2f:56:a0:53: 37:24:33:3e:fd:55:26:32:b0:ec:d7:c7:e9:4a:2b: 5c:5d:8b:9e:6f:54:bc:94:14:3f:12:89:2b:fc:66: 6e:7f:e2:59:9e:10:70:18:ef:a6:b6:4b:c1:6e:c8: e7:c3:d5:47:80:49:ea:a6:5d:c2:41:3a:e5:85:04: 62:8e:d5:fc:ef:47:11:34:bd:8a:7b:2a:5a:9b:fe: a0:26:fe:e1:07:e3:64:d9:fb:1c:5d:f7:25:ea:81: f2:f3:f5:b2:a2:a0:8c:92:75:57:6b:0a:aa:15:07: 81:d8:84:9b:a7:e3:11:8c:e2:20:ef:13:47:28:f3: b4:9e:64:58:5a:89:ac:7b:84:fa:fa:0e:3b:f5:fc: 78:9e:1f:de:db:7c:fa:de:fb:da:70:2f:3f:6d:6d: d8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:20:2E:B6:14:4D:1D:D1:53:AB:D6:17:90:88:06:68:BA:8C:14:F2 X509v3 Authority Key Identifier: keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:42:b5:3c:93:22:de:70:67:4c:80:30:87:8e:0d:10:12:00: 2b:4f:3a:da:4c:ac:dd:79:ef:64:a6:1b:8b:52:ce:92:0b:ef: da:c5:cf:7d:ed:ee:ac:95:dd:47:46:84:df:e7:d1:0d:c8:cd: 42:7b:2a:d9:0d:99:20:04:3f:41:5e:ba:3d:7c:00:b0:8a:a0: b9:0d:28:fb:3f:19:f4:d0:df:da:20:9e:d9:4f:45:77:46:da: 83:17:6a:c1:ee:d3:6f:cd:3f:16:4b:e7:1d:f5:46:36:16:4a: 8c:24:30:31:a3:d3:88:87:a3:3e:ab:83:e6:a4:31:1f:74:9f: 4d:45:f0:8f:b8:46:e0:09:66:c8:7d:1f:94:8b:e2:5e:2f:c7: f5:02:e3:b9:ff:82:d3:0e:93:ce:09:9a:d2:1a:c4:9f:9c:a0: 4d:0b:35:d8:e3:6e:36:47:ab:9e:1d:43:2b:2a:85:48:b9:d2: e8:db:31:f0:78:1d:3c:66:f6:55:f2:55:59:e4:a6:ba:16:4f: 55:e6:b9:db:a6:95:13:d6:d1:07:49:39:f6:01:88:88:8c:1b: f1:55:23:05:ed:30:68:24:52:b9:38:e3:ce:9a:0f:90:5c:ce: c5:bf:94:61:ee:d3:6d:31:81:d6:10:7c:a0:8a:d0:99:51:0d: 98:8b:55:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjM3MjExMC8GA1UEBRMoNUU2MEI4NERCOTFCNkMwODY1MDIwQ0UwRjIwNkM1MzQ5 RTRCODM0ODAeFw0yNTA4MjMwODA5MjVaFw0yNTA4MzAwODA5MjVaMBgxFjAUBgNV BAMTDTY4YTk3NzM2LTI3MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdq+gOrVJeg1sptAgIMiA3gaG0lG9AxPyFM6qoKAnVppGTjN8p+4TLAtLhfFs0 ufZWmE/3kLm6jXbP++IDGHPHZrk1mTEBG4a1pDsyfs9pDfslTJDG0x8AjL2wo2nn Mg8xph7ZL1agUzckMz79VSYysOzXx+lKK1xdi55vVLyUFD8SiSv8Zm5/4lmeEHAY 76a2S8FuyOfD1UeASeqmXcJBOuWFBGKO1fzvRxE0vYp7Klqb/qAm/uEH42TZ+xxd 9yXqgfLz9bKioIySdVdrCqoVB4HYhJun4xGM4iDvE0co87SeZFhaiax7hPr6Djv1 /HieH97bfPre+9pwLz9tbdg3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDiAuthRN HdFTq9YXkIgGaLqMFPIwHwYDVR0jBBgwFoAUXmC4TbkbbAhlAgzg8gbFNJ5Lg0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MzcyL0U2RDk1MjYwNTlB MDExRjA4Mjg2RDMzMkM0RjlBRTAyL1htQzRUYmtiYkFobEFnemc4Z2JGTko1TGcw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWG1DNFRia2JiQWhsQWd6ZzhnYkZOSjVMZzBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MzcyL0U2RDk1MjYwNTlBMDExRjA4Mjg2RDMzMkM0RjlBRTAyL1htQzRUYmtiYkFo bEFnemc4Z2JGTko1TGcwZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHxCtTyTIt5wZ0yAMIeODRASACtPOtpMrN1572SmG4tSzpIL79rFz33t 7qyV3UdGhN/n0Q3IzUJ7KtkNmSAEP0Feuj18ALCKoLkNKPs/GfTQ39ogntlPRXdG 2oMXasHu02/NPxZL5x31RjYWSowkMDGj04iHoz6rg+akMR90n01F8I+4RuAJZsh9 H5SL4l4vx/UC47n/gtMOk84JmtIaxJ+coE0LNdjjbjZHq54dQysqhUi50ujbMfB4 HTxm9lXyVVnkproWT1XmudumlRPW0QdJOfYBiIiMG/FVIwXtMGgkUrk4486aD5Bc zsW/lGHu020xgdYQfKCK0JlRDZiLVZM= -----END CERTIFICATE-----Generated at Sun Aug 24 00:18:36 2025 by rpki-client