$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: wDmFMVLMvY04+Om8sTv0PwWvx/vWi9vIlkXy/ucoL1s= Subject key identifier: A2:52:CB:AC:14:17:EF:FA:DB:C5:76:10:D1:31:B4:DA:4C:CB:10:A1 Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 07C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 07C3 Signing time: Wed 02 Jul 2025 21:23:59 +0000 Manifest this update: Wed 02 Jul 2025 21:23:58 +0000 Manifest next update: Wed 09 Jul 2025 21:23:58 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: ByaLG7akVD0hWGBNwMhRaxmSy92l/N4TzSZh0sKOowY=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: pS3E0icAhyYawyxkXSLUFbWuAzA0NV/jlalvE1DTh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Jul 2 21:23:58 2025 GMT Not After : Jul 9 21:23:58 2025 GMT Subject: CN=6865a36f-bbdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:19:08:ca:8d:a6:30:ba:ed:60:e1:29:76: 89:be:48:61:31:13:f6:8c:58:c0:25:8a:c7:d3:c7: 8e:d2:c2:eb:06:ea:04:77:db:a3:80:26:b7:52:55: 52:41:8c:e4:f8:e6:7f:d8:82:c5:8f:97:46:f7:b8: 23:97:6d:95:ff:49:2a:f6:77:f0:b0:14:49:87:76: 79:00:11:0a:a8:c3:3b:6b:ee:e3:38:ff:8c:da:56: c1:86:4b:6c:6e:c6:26:b9:df:15:c4:7c:67:95:87: 5d:03:6e:2d:d6:2f:8d:42:53:4e:8b:9f:b9:fe:08: 6a:89:99:1a:0a:63:32:8f:10:3b:01:e7:c5:46:0f: ed:05:a0:67:7c:cb:2f:20:64:a0:9f:e8:36:85:a8: 5d:6e:9b:4c:3e:17:af:77:98:ea:78:49:a5:5d:56: 9f:88:e2:82:cf:05:76:60:84:04:6f:a3:9c:77:03: 6a:e4:f6:e1:f4:a9:1f:44:29:62:fb:fd:45:3e:76: 83:41:49:c4:37:a1:27:79:dd:69:06:e0:24:df:14: 82:59:02:42:26:f4:4e:61:20:e9:3f:de:de:60:36: cf:f8:76:b6:31:89:b0:ec:c4:bd:5b:96:91:69:cd: 41:f6:98:f5:6a:20:ba:07:30:54:b0:fb:4b:27:5a: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:52:CB:AC:14:17:EF:FA:DB:C5:76:10:D1:31:B4:DA:4C:CB:10:A1 X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:16:a6:c6:5b:4d:72:51:11:12:11:83:67:7e:55:94:4e:ea: 44:06:72:bc:e9:cd:bd:04:52:98:47:6a:6a:6a:c1:73:9d:45: 6d:b8:20:cc:a6:c5:e4:cf:ae:4d:e6:1d:6e:83:51:2e:32:cd: bd:ee:17:e4:5b:f4:3f:3e:39:1f:26:22:d3:e4:59:58:93:38: e2:54:b3:39:e8:ce:0c:20:cd:85:8f:d1:ed:f6:d5:d3:9d:44: 1a:a6:66:98:53:4e:d2:c9:8a:ad:3d:68:c0:78:9a:7d:17:de: 4b:81:9a:4e:8f:18:23:c9:f9:59:cb:45:47:5e:72:77:2f:6a: d7:76:ff:e6:99:3f:95:60:88:de:54:da:99:a4:e7:5b:47:91: 3d:73:60:e7:fe:38:8b:17:90:b5:7f:63:5d:48:18:6f:cb:8f: 35:cb:dc:dc:36:f5:f6:08:c6:c7:a7:51:64:3a:54:78:76:fa: 9f:0a:62:2a:a3:a7:f3:51:83:78:ba:c1:d7:50:a6:e5:fd:aa: f4:a6:c7:e4:51:b4:b8:3c:40:93:99:9b:9b:86:61:3d:1a:cc: f6:a2:71:87:5e:5a:de:97:99:5a:86:c5:17:da:1f:28:3c:af: 82:bd:d5:39:70:46:49:34:12:95:2a:26:5b:05:1a:93:48:87: ee:2c:24:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUwNzAyMjEyMzU4WhcNMjUwNzA5MjEyMzU4WjAYMRYwFAYD VQQDEw02ODY1YTM2Zi1iYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGoZCMqNpjC67WDhKXaJvkhhMRP2jFjAJYrH08eO0sLrBuoEd9ujgCa3UlVS QYzk+OZ/2ILFj5dG97gjl22V/0kq9nfwsBRJh3Z5ABEKqMM7a+7jOP+M2lbBhkts bsYmud8VxHxnlYddA24t1i+NQlNOi5+5/ghqiZkaCmMyjxA7AefFRg/tBaBnfMsv IGSgn+g2hahdbptMPhevd5jqeEmlXVafiOKCzwV2YIQEb6OcdwNq5Pbh9KkfRCli +/1FPnaDQUnEN6Ened1pBuAk3xSCWQJCJvROYSDpP97eYDbP+Ha2MYmw7MS9W5aR ac1B9pj1aiC6BzBUsPtLJ1pb5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJSy6wU F+/628V2ENExtNpMyxChMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKFqbGW01yURESEYNnflWUTupEBnK86c29BFKYR2pqasFznUVtuCDM psXkz65N5h1ug1EuMs297hfkW/Q/PjkfJiLT5FlYkzjiVLM56M4MIM2Fj9Ht9tXT nUQapmaYU07SyYqtPWjAeJp9F95LgZpOjxgjyflZy0VHXnJ3L2rXdv/mmT+VYIje VNqZpOdbR5E9c2Dn/jiLF5C1f2NdSBhvy481y9zcNvX2CMbHp1FkOlR4dvqfCmIq o6fzUYN4usHXUKbl/ar0psfkUbS4PECTmZubhmE9Gsz2onGHXlrel5lahsUX2h8o PK+CvdU5cEZJNBKVKiZbBRqTSIfuLCT0 -----END CERTIFICATE-----Generated at Fri Jul 4 15:25:51 2025 by rpki-client