$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: Jngtt0l8+GLJ9DE0wZ5VR3HnS5rGNdhYntVPeyHFH0s= Subject key identifier: D4:6E:DC:89:57:D9:44:C0:9E:95:6D:9E:55:D9:05:73:B2:31:10:7A Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 07E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 07DD Signing time: Fri 22 Aug 2025 21:11:41 +0000 Manifest this update: Fri 22 Aug 2025 21:11:41 +0000 Manifest next update: Fri 29 Aug 2025 21:11:41 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: C6teQ+a+y7dxz/GL9IUr6Nrt0UeEZSxLgoX70N0Gmfs=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: pS3E0icAhyYawyxkXSLUFbWuAzA0NV/jlalvE1DTh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Aug 22 21:11:41 2025 GMT Not After : Aug 29 21:11:41 2025 GMT Subject: CN=68a8dd0d-89e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:43:67:1f:c3:25:dc:4e:05:cb:57:d6:e4: 70:3a:37:0a:15:68:a4:5c:6c:0b:44:f2:31:ed:62: f5:e9:8c:b2:e9:06:df:37:10:92:27:00:7a:c0:f6: d9:4c:c5:f8:0f:b8:73:f4:aa:8e:d5:1a:ba:a2:2f: bb:b0:b9:7f:8f:9a:58:5f:17:69:c7:e8:15:ed:f5: 49:ea:fe:86:f5:19:2f:8a:66:d0:7d:22:6e:39:73: 4f:b1:f7:b8:07:ef:64:73:97:c6:a3:02:97:bc:67: 5f:14:83:f5:66:54:95:e2:aa:01:b8:ea:fd:f9:59: 4b:74:aa:65:ae:af:39:b9:4f:dc:f1:9c:2a:ee:e1: c2:b8:61:50:66:e0:39:e0:1b:51:05:6d:24:a2:b5: 2c:b9:f2:ae:02:60:e5:80:aa:41:a7:22:4b:c2:5a: cd:66:43:b4:77:dc:7c:fb:5b:e3:3a:b9:7a:29:67: 96:20:7d:12:2a:b7:8a:8d:ef:25:ae:a5:61:32:fd: f6:d1:a8:47:c2:0d:59:30:25:23:21:77:a5:e1:7a: 28:1f:3a:8c:40:81:15:eb:42:99:f0:c8:03:33:fc: d8:20:d8:ff:48:0d:15:86:a0:90:68:10:ce:2b:44: f5:e8:ad:84:bc:f3:ba:26:14:cd:da:7b:01:99:b9: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6E:DC:89:57:D9:44:C0:9E:95:6D:9E:55:D9:05:73:B2:31:10:7A X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:54:ba:0b:c4:1b:7a:5b:5d:56:93:e0:c9:c6:23:22:72:d9: e1:5d:fb:e8:8b:14:59:b6:1b:16:32:f7:b6:95:30:b8:95:29: dd:83:24:88:7b:34:2a:a2:43:bc:e7:39:15:2a:74:51:15:b8: 0b:38:74:0b:90:13:16:ab:18:98:e5:38:64:ec:af:67:2c:cc: 04:7f:23:2f:8b:fd:5f:af:84:3e:74:a6:48:09:06:32:8c:2a: 5d:de:f1:0a:00:80:79:87:5c:4b:c4:fb:82:9c:e2:0d:d8:ee: 00:37:36:20:23:c5:c2:34:eb:39:65:b4:df:18:8d:4e:28:15: 03:cb:6c:e0:7f:db:24:b0:fe:b1:38:68:e0:b8:ea:ec:03:ed: 03:68:df:ae:36:d1:02:e2:60:80:ef:8c:4e:a9:5e:e5:ea:cc: 6e:90:c9:18:fe:15:d8:8a:f8:c0:72:da:bf:25:4b:de:23:56: ed:40:c3:30:bd:da:d7:33:7a:b3:f7:eb:44:00:18:65:6d:7d: 3a:f1:02:fe:4d:47:8f:6e:3d:62:18:3f:e8:fa:a8:77:67:75: c0:2c:2b:62:b0:9b:a4:c9:fa:07:7d:03:f4:2e:f1:71:1e:82: 9e:3d:5a:6d:d5:50:61:aa:d2:b6:fb:13:79:4f:78:d6:b4:47: 83:7f:ee:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUwODIyMjExMTQxWhcNMjUwODI5MjExMTQxWjAYMRYwFAYD VQQDEw02OGE4ZGQwZC04OWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6hDZx/DJdxOBctX1uRwOjcKFWikXGwLRPIx7WL16Yyy6QbfNxCSJwB6wPbZ TMX4D7hz9KqO1Rq6oi+7sLl/j5pYXxdpx+gV7fVJ6v6G9RkvimbQfSJuOXNPsfe4 B+9kc5fGowKXvGdfFIP1ZlSV4qoBuOr9+VlLdKplrq85uU/c8Zwq7uHCuGFQZuA5 4BtRBW0korUsufKuAmDlgKpBpyJLwlrNZkO0d9x8+1vjOrl6KWeWIH0SKreKje8l rqVhMv320ahHwg1ZMCUjIXel4XooHzqMQIEV60KZ8MgDM/zYINj/SA0VhqCQaBDO K0T16K2EvPO6JhTN2nsBmbnFrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRu3IlX 2UTAnpVtnlXZBXOyMRB6MB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMVLoLxBt6W11Wk+DJxiMictnhXfvoixRZthsWMve2lTC4lSndgySI ezQqokO85zkVKnRRFbgLOHQLkBMWqxiY5Thk7K9nLMwEfyMvi/1fr4Q+dKZICQYy jCpd3vEKAIB5h1xLxPuCnOIN2O4ANzYgI8XCNOs5ZbTfGI1OKBUDy2zgf9sksP6x OGjguOrsA+0DaN+uNtEC4mCA74xOqV7l6sxukMkY/hXYivjActq/JUveI1btQMMw vdrXM3qz9+tEABhlbX068QL+TUePbj1iGD/o+qh3Z3XALCtisJukyfoHfQP0LvFx HoKePVpt1VBhqtK2+xN5T3jWtEeDf+7A -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:34 2025 by rpki-client