$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json) Hash identifier: NDxl9RuQbnACFW2gbJnrZ2VGVsl+b4FwnGYZ0DVMH/s= Subject key identifier: 2A:62:8C:4E:59:82:B8:49:1D:2B:F3:BD:5F:00:F7:69:F8:85:90:52 Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft Manifest number: 0104 Signing time: Sat 23 Aug 2025 05:13:30 +0000 Manifest this update: Sat 23 Aug 2025 05:13:30 +0000 Manifest next update: Sat 30 Aug 2025 05:13:30 +0000 Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: +p/Zte8KTLSckLTq953UF2QjavWKztcsdXulud4YEFY=) 2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: 7SbZ0PPfP01/krVCYjuDJBwjpFWYv8lnua4LUAxlPx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Validity Not Before: Aug 23 05:13:30 2025 GMT Not After : Aug 30 05:13:30 2025 GMT Subject: CN=68a94dfa-8d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:eb:3e:62:d7:34:24:4a:c5:a4:f1:7d:6f:eb: 25:a6:de:87:ca:cf:19:fb:47:31:af:02:52:93:1a: 0c:50:fc:f1:91:e9:2a:36:7a:d5:2d:24:db:8e:72: 5e:e8:97:37:28:cb:d2:2d:2c:67:7b:2f:2b:46:d9: be:2f:77:16:55:77:6c:42:64:c8:9a:c6:c5:5c:12: a9:46:6e:b4:ea:86:b3:4b:7f:23:5e:82:7f:7c:40: 13:07:02:2f:67:dd:5e:d9:37:76:05:8e:83:c8:21: 6e:b4:e3:57:60:e0:81:7b:a4:21:4e:4d:6e:26:42: 12:b7:cf:f1:f1:a3:cd:c8:21:09:26:f7:9f:e9:0c: 68:12:ed:19:9b:66:fe:07:ba:79:74:db:75:d4:7e: 8d:3d:c9:32:92:55:32:96:f6:45:b2:ac:91:45:1e: f1:7b:e8:9c:ec:50:a8:f2:bd:37:cb:c3:1f:76:18: 37:8d:67:8c:ca:f1:01:13:45:e1:10:9d:32:28:6c: 8e:56:4c:67:5d:f8:c4:be:49:31:78:d9:47:3a:f0: 1b:54:52:5e:40:71:de:4e:b0:9a:77:37:ee:1a:1f: 66:eb:0f:77:30:ff:e7:8f:58:d6:00:32:c8:c1:0e: 28:9f:9d:f5:92:97:7b:45:f3:6d:af:ae:cb:cf:d7: a1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:62:8C:4E:59:82:B8:49:1D:2B:F3:BD:5F:00:F7:69:F8:85:90:52 X509v3 Authority Key Identifier: keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c8:16:fd:e9:a9:a3:ba:b7:bb:61:49:33:ff:94:8c:56:c4: 70:58:6c:45:69:1a:7c:bf:1d:b1:08:59:1e:14:1e:cd:66:45: ad:17:e5:60:e2:8e:f8:c2:99:f2:7b:03:cc:23:16:f9:64:6c: 40:8c:a1:47:8e:c5:4d:bc:f8:88:36:5c:68:ee:60:5b:5b:c4: eb:06:10:54:32:9a:6e:07:7d:ff:e0:f4:2f:70:8d:ad:99:a8: 3d:42:76:bc:c0:9f:cf:26:71:e0:49:80:f3:2e:45:91:ad:36: 7e:1a:89:0d:e9:bc:d0:a5:78:87:71:f1:91:86:05:30:b2:3b: ab:e9:cd:f3:c4:9b:fd:39:fb:30:5b:52:f2:75:cc:51:e0:08: d4:a0:86:93:e1:be:53:51:a5:65:a2:e3:37:0b:eb:f9:c8:21: c4:a6:9c:df:dc:00:46:10:23:a8:c6:d6:04:17:c5:fb:58:40: fd:1d:79:3f:1f:f6:ac:3e:cc:3f:50:e0:ea:dd:3d:dd:18:b3: 16:56:83:18:bb:f6:91:9a:a3:b1:c2:1d:82:fa:ea:5f:17:b8: f7:19:9d:92:f4:c4:6d:11:7b:da:a4:51:e9:5d:b5:7f:e4:8e: 05:10:37:01:13:a6:9b:7e:d7:1e:4c:be:91:4f:59:20:94:0c: 6f:ac:86:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy MTg1MzBDNjUwHhcNMjUwODIzMDUxMzMwWhcNMjUwODMwMDUxMzMwWjAYMRYwFAYD VQQDEw02OGE5NGRmYS04ZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+s+Ytc0JErFpPF9b+slpt6Hys8Z+0cxrwJSkxoMUPzxkekqNnrVLSTbjnJe 6Jc3KMvSLSxney8rRtm+L3cWVXdsQmTImsbFXBKpRm606oazS38jXoJ/fEATBwIv Z91e2Td2BY6DyCFutONXYOCBe6QhTk1uJkISt8/x8aPNyCEJJvef6QxoEu0Zm2b+ B7p5dNt11H6NPckyklUylvZFsqyRRR7xe+ic7FCo8r03y8Mfdhg3jWeMyvEBE0Xh EJ0yKGyOVkxnXfjEvkkxeNlHOvAbVFJeQHHeTrCadzfuGh9m6w93MP/nj1jWADLI wQ4on531kpd7RfNtr67Lz9ehvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpijE5Z grhJHSvzvV8A92n4hZBSMB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH a2t1N2xsWG40UGdoaFRER1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMyBb96amjure7YUkz/5SMVsRwWGxFaRp8vx2xCFkeFB7NZkWtF+Vg 4o74wpnyewPMIxb5ZGxAjKFHjsVNvPiINlxo7mBbW8TrBhBUMppuB33/4PQvcI2t mag9Qna8wJ/PJnHgSYDzLkWRrTZ+GokN6bzQpXiHcfGRhgUwsjur6c3zxJv9Ofsw W1LydcxR4AjUoIaT4b5TUaVlouM3C+v5yCHEppzf3ABGECOoxtYEF8X7WED9HXk/ H/asPsw/UODq3T3dGLMWVoMYu/aRmqOxwh2C+upfF7j3GZ2S9MRtEXvapFHpXbV/ 5I4FEDcBE6abftceTL6RT1kglAxvrIb6 -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:51 2025 by rpki-client