$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json) Hash identifier: oNEWYSxauIc1S9gSJt+CDtTVAcWB0hZw9iQ+H/VSkPA= Subject key identifier: A9:30:88:4F:A9:32:13:CC:5A:AB:41:F0:1E:B6:F3:E5:11:E4:19:52 Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft Manifest number: 98 Signing time: Sat 23 Aug 2025 04:25:26 +0000 Manifest this update: Sat 23 Aug 2025 04:25:25 +0000 Manifest next update: Sat 30 Aug 2025 04:25:25 +0000 Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: Iy7bhy+ZxNQ3o0XIbBcPL4cpWIrP3m2Z0yL7K7V+Gtg=) 2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=) 3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Validity Not Before: Aug 23 04:25:25 2025 GMT Not After : Aug 30 04:25:25 2025 GMT Subject: CN=68a942b5-df50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:91:bf:93:d2:55:fc:ed:c7:42:f4:6a:e7: 9a:67:82:c4:b8:4c:83:68:4a:86:99:e8:65:18:7b: e5:f6:a9:ae:78:9a:c4:c6:1b:cc:58:f1:68:d7:a6: 22:66:35:68:dd:c1:c3:d4:27:c3:09:89:f7:6b:25: e2:b8:70:e5:ce:f6:48:0f:cb:cb:72:23:b0:31:e6: e2:56:c7:f7:f2:83:e8:71:95:a4:87:18:44:c3:05: cb:07:55:76:32:97:96:3b:70:a8:ee:dc:7a:84:95: 58:0f:d1:ed:eb:74:76:96:1a:e3:af:21:3e:91:cd: 3a:08:87:59:e9:6b:c9:8c:65:87:cb:73:c0:b5:93: fc:fa:a1:0c:de:ac:b8:3d:62:1e:57:f0:fc:3e:ae: 10:03:e1:47:9e:9a:46:33:a2:25:23:7b:45:b3:40: f4:bd:15:a9:56:8b:f3:e5:15:18:4a:1e:aa:de:d3: 41:9d:2e:17:03:c1:6c:18:a3:aa:fb:a2:da:96:f5: b3:c3:ec:da:fb:ac:6e:5b:09:f0:e2:33:89:77:40: 32:31:bc:a7:dc:30:ce:2c:aa:25:c1:a8:7e:f4:93: fc:71:fd:92:3f:96:b5:e4:34:f8:39:73:3a:3b:87: 55:ff:65:96:4c:76:3b:6d:89:a4:74:11:ad:e8:b4: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:30:88:4F:A9:32:13:CC:5A:AB:41:F0:1E:B6:F3:E5:11:E4:19:52 X509v3 Authority Key Identifier: keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:42:bc:4f:df:ce:bd:d0:f3:dc:97:25:b2:37:c0:db:32:72: fb:27:80:c0:f4:eb:c6:31:1d:09:ee:7c:85:d1:6b:e3:70:0c: 5f:7b:66:49:e9:f3:29:5e:f1:35:50:d5:1f:47:43:c2:39:8a: 62:99:7a:c8:e0:9b:04:59:8f:8b:aa:be:31:16:0f:e5:7e:0c: ed:23:59:18:a1:5f:1c:ad:53:8b:7b:b3:d8:c4:b6:f4:51:8b: 48:29:d6:2e:b5:80:36:42:2b:26:a8:1e:30:b7:08:99:bc:84: b9:1c:6b:5e:35:71:c4:6f:81:77:a6:c8:d6:a5:4d:19:46:ad: 77:12:4e:42:9f:3b:69:99:2d:ea:56:85:ac:09:0f:b4:0b:c5: d8:ba:33:b6:e7:c3:d8:c8:9a:45:45:02:34:ba:3a:73:b8:31: e0:b3:95:92:4a:61:6e:9f:88:32:56:1e:66:16:f8:9c:38:35: cc:e7:11:13:d9:08:9e:3d:c6:8a:60:dc:7e:c7:53:ce:5e:e9: b4:10:fc:aa:22:be:2f:3f:8f:57:87:66:a1:cd:5e:8f:0a:f6: 98:50:79:20:0f:b7:4d:d2:7d:be:cd:e2:56:0f:af:c4:75:b7: 22:f8:83:e3:73:ed:4d:a7:4f:27:21:57:7b:59:fc:d0:ec:d6: be:b8:cc:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCODUxMTAvBgNVBAUTKEM1NTY0REVDMTAxNjYzQkY0M0QzRjJFMzQwMzk0QzAw NzY2QTYzRTMwHhcNMjUwODIzMDQyNTI1WhcNMjUwODMwMDQyNTI1WjAYMRYwFAYD VQQDEw02OGE5NDJiNS1kZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQWRv5PSVfztx0L0aueaZ4LEuEyDaEqGmehlGHvl9qmueJrExhvMWPFo16Yi ZjVo3cHD1CfDCYn3ayXiuHDlzvZID8vLciOwMebiVsf38oPocZWkhxhEwwXLB1V2 MpeWO3Co7tx6hJVYD9Ht63R2lhrjryE+kc06CIdZ6WvJjGWHy3PAtZP8+qEM3qy4 PWIeV/D8Pq4QA+FHnppGM6IlI3tFs0D0vRWpVovz5RUYSh6q3tNBnS4XA8FsGKOq +6LalvWzw+za+6xuWwnw4jOJd0AyMbyn3DDOLKolwah+9JP8cf2SP5a15DT4OXM6 O4dV/2WWTHY7bYmkdBGt6LTpHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkwiE+p MhPMWqtB8B628+UR5BlSMB8GA1UdIwQYMBaAFMVWTewQFmO/Q9Py40A5TAB2amPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS9DQ0JCQUJFQTlG NjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3OUQwX0xqUURsTUFIWnFZ LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkI4NS9DQ0JCQUJFQTlGNjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3 OUQwX0xqUURsTUFIWnFZLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClQrxP38690PPclyWyN8DbMnL7J4DA9OvGMR0J7nyF0WvjcAxfe2ZJ 6fMpXvE1UNUfR0PCOYpimXrI4JsEWY+Lqr4xFg/lfgztI1kYoV8crVOLe7PYxLb0 UYtIKdYutYA2QismqB4wtwiZvIS5HGteNXHEb4F3psjWpU0ZRq13Ek5CnztpmS3q VoWsCQ+0C8XYujO258PYyJpFRQI0ujpzuDHgs5WSSmFun4gyVh5mFvicODXM5xET 2QiePcaKYNx+x1POXum0EPyqIr4vP49Xh2ahzV6PCvaYUHkgD7dN0n2+zeJWD6/E dbci+IPjc+1Np08nIVd7WfzQ7Na+uMxb -----END CERTIFICATE-----Generated at Sat Aug 23 12:37:36 2025 by rpki-client