$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: ClQF0cBxKB+ZizXEhPK6QaIfTd7T8BOCAUKgZGx84cc= Subject key identifier: 2A:CA:3F:5C:DD:51:E2:C8:1D:51:B1:D1:C7:C5:6A:E3:0E:06:BF:6A Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 07C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 07B5 Signing time: Fri 22 Aug 2025 21:25:43 +0000 Manifest this update: Fri 22 Aug 2025 21:25:42 +0000 Manifest next update: Fri 29 Aug 2025 21:25:42 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: ohRuqBVZ98rELlkkT97A/0oSK5wd/G7EJLUba5yawGA=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: Z1uRbBBo1ykDesKGyzNhoAS+Q0kH4ecEfYyBIro/My0=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: RDAuo0ukbkiW2gxiKwesJ3g1zTBr8ESAl1lXLcl6ncU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1985 (0x7c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Aug 22 21:25:42 2025 GMT Not After : Aug 29 21:25:42 2025 GMT Subject: CN=68a8e057-d060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:67:43:cb:08:c0:de:1b:b5:33:5c:5b:c2: 24:6b:ba:32:89:c3:38:91:52:1b:b3:5b:00:7b:3d: 03:ae:b3:21:20:30:43:c1:14:36:8c:6d:81:3a:3d: 2a:fe:40:5c:5c:72:89:ef:4b:b7:38:22:68:60:b2: 13:68:8c:ee:6a:bc:41:2f:8f:4c:a3:51:5f:f3:0a: 06:87:eb:38:ac:20:f2:e4:2b:53:b6:19:e5:c3:d1: be:0f:11:78:88:f1:d4:46:e5:a1:cf:0c:51:e9:04: 49:72:09:89:6c:e3:e2:e5:6e:a1:4e:a4:62:1e:b4: 7f:2b:83:2d:bb:51:b6:ba:ea:4f:16:08:d8:14:97: 45:8a:a0:a8:8b:ab:ca:cd:e5:8a:47:7d:bd:02:37: 09:ef:96:60:79:fd:c7:a1:72:2e:3a:dc:74:17:f8: fd:f0:89:99:61:1e:e9:27:9e:2d:6f:e6:3d:d4:e9: fa:f8:ba:70:5b:eb:69:be:3a:96:0c:1a:03:74:18: 34:ab:ee:c9:bf:5b:62:e4:a8:d3:ea:9b:ff:9c:5d: c1:99:82:4c:c0:88:19:5c:e5:25:c7:3c:b8:ab:19: d5:7d:63:de:35:94:c2:bf:49:d9:3c:3b:f9:b5:14: 45:a3:5a:0a:ec:80:57:1e:59:34:2f:f3:70:7d:25: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CA:3F:5C:DD:51:E2:C8:1D:51:B1:D1:C7:C5:6A:E3:0E:06:BF:6A X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:1c:63:9c:95:fd:d9:58:da:d8:3a:4a:fc:a7:4d:c2:b9:19: 8a:3f:21:cd:f1:ff:ea:6b:7d:37:52:98:47:da:de:b7:3b:13: 54:29:61:13:ad:17:f0:bf:9d:76:eb:59:d6:ce:26:84:05:f3: 5e:a8:6a:61:65:4b:62:7b:15:9c:66:d1:63:84:d7:85:35:99: 25:5a:9f:80:bd:75:bf:7e:e6:43:fd:08:f4:d0:a7:9d:45:f8: 90:f7:b3:52:8f:89:81:2d:63:d6:2f:21:ef:15:f1:4d:22:5b: 36:d7:bb:f3:fd:d4:3c:df:45:e6:c9:87:1a:48:37:70:e6:47: fc:35:a7:e3:fa:3d:dd:a7:2e:35:f6:a7:cd:9b:f4:bd:f7:d5: e0:f3:22:b5:68:6a:81:dd:27:0b:8a:60:26:47:8f:a5:1a:86: c4:f3:1c:7d:25:1c:3f:3a:1a:9b:90:a5:04:ad:2d:0d:b8:12: c8:e8:01:15:2f:a2:e6:58:3e:f4:1f:56:ee:5c:8b:03:3e:82: 9b:0c:da:48:b4:3b:cf:d0:ee:4d:53:3d:9c:87:05:7d:c3:d1: d4:ad:8c:b8:22:b0:59:cc:41:94:c4:c3:34:47:fd:8a:81:cc: ad:a5:30:f9:8c:f5:88:26:b2:f4:b5:47:7c:ab:aa:2e:d9:00: 89:d3:12:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwODIyMjEyNTQyWhcNMjUwODI5MjEyNTQyWjAYMRYwFAYD VQQDEw02OGE4ZTA1Ny1kMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp55nQ8sIwN4btTNcW8Ika7oyicM4kVIbs1sAez0DrrMhIDBDwRQ2jG2BOj0q /kBcXHKJ70u3OCJoYLITaIzuarxBL49Mo1Ff8woGh+s4rCDy5CtTthnlw9G+DxF4 iPHURuWhzwxR6QRJcgmJbOPi5W6hTqRiHrR/K4Mtu1G2uupPFgjYFJdFiqCoi6vK zeWKR329AjcJ75Zgef3HoXIuOtx0F/j98ImZYR7pJ54tb+Y91On6+LpwW+tpvjqW DBoDdBg0q+7Jv1ti5KjT6pv/nF3BmYJMwIgZXOUlxzy4qxnVfWPeNZTCv0nZPDv5 tRRFo1oK7IBXHlk0L/NwfSW8kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrKP1zd UeLIHVGx0cfFauMOBr9qMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvHGOclf3ZWNrYOkr8p03CuRmKPyHN8f/qa303UphH2t63OxNUKWET rRfwv51261nWziaEBfNeqGphZUtiexWcZtFjhNeFNZklWp+AvXW/fuZD/Qj00Ked RfiQ97NSj4mBLWPWLyHvFfFNIls217vz/dQ830XmyYcaSDdw5kf8Nafj+j3dpy41 9qfNm/S999Xg8yK1aGqB3ScLimAmR4+lGobE8xx9JRw/OhqbkKUErS0NuBLI6AEV L6LmWD70H1buXIsDPoKbDNpItDvP0O5NUz2chwV9w9HUrYy4IrBZzEGUxMM0R/2K gcytpTD5jPWIJrL0tUd8q6ou2QCJ0xIK -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:39 2025 by rpki-client