$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json) Hash identifier: 3nrrhzxMRs/qmQBz5hVr8g0W1IHjt3y6Zl5Aj7seLyE= Subject key identifier: 85:3B:7A:C0:B9:3C:AC:F9:6D:8D:84:97:FA:2E:3E:73:B1:17:B2:9D Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Certificate serial: 34E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft Manifest number: 34CD Signing time: Fri 22 Aug 2025 14:19:44 +0000 Manifest this update: Fri 22 Aug 2025 14:19:44 +0000 Manifest next update: Fri 29 Aug 2025 14:19:44 +0000 Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: oydqf8EobNBVrmmNye4XmeJEYGPVxQwXk2QTTPvCpZM=) 2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: PJCdta/4Q6f57KQKAkTotBkGcFV1WNt4V36v9eyDoQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13541 (0x34e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Validity Not Before: Aug 22 14:19:44 2025 GMT Not After : Aug 29 14:19:44 2025 GMT Subject: CN=68a87c80-e432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:14:53:0e:24:c1:8b:16:7b:c0:da:00:d7: 46:6b:26:30:9b:d4:f1:24:fc:3b:5f:c6:3d:16:66: c8:78:b5:6d:23:70:03:39:fc:6e:5a:b7:27:73:38: 02:3a:50:27:76:41:6b:05:46:6d:0f:cd:4e:bb:92: 2e:87:3f:9a:e5:13:fc:b9:be:3a:99:68:a3:e6:6d: ad:6b:5d:eb:a2:cf:6b:7c:4e:7e:62:c0:a9:1f:cf: e1:1c:2d:4f:51:8c:2c:03:09:7a:d9:58:52:f2:6b: bc:f7:2e:88:1d:3b:0d:ad:c1:72:7e:10:76:62:d3: 29:4a:8e:f6:e6:0d:66:d8:1f:46:aa:82:03:7e:63: b7:ce:f1:2b:b5:4e:7f:a9:37:a6:f6:e7:d4:02:29: 34:64:80:54:5b:1c:5d:a1:cf:a1:67:21:b9:d3:ab: 90:cd:f5:fb:23:d5:45:50:f3:02:1a:2b:01:1f:03: d9:26:9e:f5:f8:3d:a9:e7:97:b2:2a:96:23:ca:c7: c2:44:7e:11:9d:bf:91:95:e2:9a:7c:a5:d1:00:a6: 47:77:5b:ba:90:d1:f5:4e:40:6d:a5:d5:75:96:81: f8:88:47:9c:01:1b:0a:43:c9:87:fd:e5:53:08:8b: 8b:a2:f1:a7:5d:ad:2f:62:30:7d:73:4a:80:70:01: cd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3B:7A:C0:B9:3C:AC:F9:6D:8D:84:97:FA:2E:3E:73:B1:17:B2:9D X509v3 Authority Key Identifier: keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:19:5c:be:1e:f3:d6:69:4d:3c:18:8e:f6:5a:8e:29:88:31: bc:49:d0:06:2a:ed:ca:1a:33:29:32:8a:a2:95:8e:65:1f:a2: 7d:6e:a3:9b:c9:b4:94:ad:51:4a:8f:f8:bd:0d:cd:d3:06:a4: 68:4c:13:29:6c:f8:6b:3e:68:ba:23:3c:08:16:02:c3:2f:8b: c7:30:c0:fa:bd:d4:c2:f0:1f:1e:f3:23:00:a5:fe:ff:63:b5: 8c:f6:45:63:50:ad:75:d1:67:15:31:95:d7:18:e3:d3:84:59: 4f:db:c8:32:dc:b7:a0:8e:8a:65:6c:88:a4:3f:61:25:32:ea: 9b:6d:89:b6:79:c4:29:1a:56:c5:3f:2e:dd:31:d4:54:fe:00: ba:c4:01:08:df:c6:fb:43:e6:1c:4d:da:c1:97:77:1e:a1:53: 2b:d4:aa:b6:fd:68:00:cc:0e:69:d2:5c:dc:e4:86:8f:e9:55: 30:70:f9:fe:c7:6b:ea:44:ac:27:a9:d5:06:69:a5:66:2a:16: da:be:b1:24:98:d2:7f:1c:15:46:96:a4:10:90:87:a2:10:d7: f4:0b:3d:88:0e:99:05:88:af:c1:10:bc:24:26:7d:e7:cd:37: 72:c1:c0:ed:eb:58:47:be:bd:ec:f5:f4:de:8e:ba:30:fd:e3: 05:37:7d:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3 N0RGQjIxQTMwHhcNMjUwODIyMTQxOTQ0WhcNMjUwODI5MTQxOTQ0WjAYMRYwFAYD VQQDEw02OGE4N2M4MC1lNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbQUUw4kwYsWe8DaANdGayYwm9TxJPw7X8Y9FmbIeLVtI3ADOfxuWrcnczgC OlAndkFrBUZtD81Ou5Iuhz+a5RP8ub46mWij5m2ta13ros9rfE5+YsCpH8/hHC1P UYwsAwl62VhS8mu89y6IHTsNrcFyfhB2YtMpSo725g1m2B9GqoIDfmO3zvErtU5/ qTem9ufUAik0ZIBUWxxdoc+hZyG506uQzfX7I9VFUPMCGisBHwPZJp71+D2p55ey KpYjysfCRH4Rnb+RleKafKXRAKZHd1u6kNH1TkBtpdV1loH4iEecARsKQ8mH/eVT CIuLovGnXa0vYjB9c0qAcAHNZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIU7esC5 PKz5bY2El/ouPnOxF7KdMB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx U0cybVFfajVOaHQzMzdJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDGVy+HvPWaU08GI72Wo4piDG8SdAGKu3KGjMpMoqilY5lH6J9bqOb ybSUrVFKj/i9Dc3TBqRoTBMpbPhrPmi6IzwIFgLDL4vHMMD6vdTC8B8e8yMApf7/ Y7WM9kVjUK110WcVMZXXGOPThFlP28gy3LegjoplbIikP2ElMuqbbYm2ecQpGlbF Py7dMdRU/gC6xAEI38b7Q+YcTdrBl3ceoVMr1Kq2/WgAzA5p0lzc5IaP6VUwcPn+ x2vqRKwnqdUGaaVmKhbavrEkmNJ/HBVGlqQQkIeiENf0Cz2IDpkFiK/BELwkJn3n zTdywcDt61hHvr3s9fTejrow/eMFN334 -----END CERTIFICATE-----Generated at Sun Aug 24 05:01:31 2025 by rpki-client