$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: LE9vC2GF3MWUY+CLHpRL+NyCD5jKuKE0gjseYfiBuZg= Subject key identifier: BB:9A:1C:F0:B9:CF:0F:E5:28:DB:03:B3:52:5A:8F:89:42:6C:D6:0D Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 233D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 2324 Signing time: Fri 22 Aug 2025 15:53:18 +0000 Manifest this update: Fri 22 Aug 2025 15:53:18 +0000 Manifest next update: Fri 29 Aug 2025 15:53:18 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: 2WwbvbY9gXZSuHrn3fc/bz9kXly5jfRssbMe3IubYJU=) 2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=) 3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9021 (0x233d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Aug 22 15:53:18 2025 GMT Not After : Aug 29 15:53:18 2025 GMT Subject: CN=68a8926e-659d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:bb:21:5a:0d:b4:9e:9b:9c:39:46:a9:95: 6d:13:21:16:ee:03:07:80:dd:2d:cc:ca:df:c8:d2: b8:93:a5:be:98:a3:f6:6d:c8:44:9d:2c:f6:85:b0: c6:ff:50:dc:db:49:69:05:bf:2a:05:5d:f4:8a:3e: 21:35:ce:23:9f:fa:f0:2a:a0:1e:a1:80:cf:81:cf: 4e:99:b7:52:42:cc:43:67:85:c1:70:60:7b:8b:2a: 37:9f:0b:c1:3f:18:af:80:e0:59:10:ce:a9:fe:25: 3b:06:b2:07:3c:7c:b1:07:e5:f5:8f:ac:e3:9a:b6: 09:bf:5b:a8:64:e6:69:a0:79:8d:98:bf:8d:b1:8b: c5:af:49:22:1d:5b:25:69:02:48:67:24:71:20:46: 0c:72:b3:2f:d9:23:23:d0:f4:1d:36:37:b2:cd:4a: a9:d9:df:a8:fb:4e:0b:68:77:eb:cf:e0:70:01:40: 5e:fa:cd:f7:0d:18:e0:2c:99:0d:2c:83:28:70:dd: ee:98:0e:f0:33:ee:df:65:c2:68:36:55:07:cb:74: 14:8b:4c:76:39:84:ee:04:33:cf:0d:62:70:fd:a9: 40:cb:5f:8f:55:d6:1e:4e:67:c6:ee:f0:51:2b:89: 7f:cd:8c:9c:36:66:6d:77:33:4c:a7:19:06:51:4b: 02:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9A:1C:F0:B9:CF:0F:E5:28:DB:03:B3:52:5A:8F:89:42:6C:D6:0D X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:8a:23:0b:de:d5:2f:27:99:76:c7:e0:4c:0a:12:3f:89:3f: 60:32:31:70:a0:5e:33:be:38:1d:16:56:43:b6:98:89:42:e9: 79:95:0e:e4:6c:17:8e:65:53:46:20:f3:fa:9f:67:8f:d8:b3: 8b:5b:cd:70:d8:9d:30:0b:d1:b0:06:39:b9:76:45:0f:3a:3c: 9a:c3:dd:34:d0:0f:fc:c2:bd:df:e1:21:eb:2f:90:5c:b1:ab: f4:11:7f:cf:fd:c6:3b:83:a7:b8:99:a0:0e:0c:b7:51:2a:76: bf:ab:b0:35:63:44:31:3a:af:7b:38:64:0b:44:9a:7c:c5:52: c3:ca:50:cb:35:c0:f8:a9:5a:26:6c:80:4b:b3:5b:fc:10:34: c5:64:f8:9e:a0:db:15:1f:a2:e7:9b:eb:00:5d:dc:a2:d1:f1: 1d:7e:43:ce:d0:9d:b9:db:12:bc:83:2d:55:67:a3:e3:65:67: e5:3d:97:6b:7f:b1:da:5d:d0:5b:ee:9e:47:47:46:80:18:67: f5:4c:39:ed:57:69:60:70:bc:3b:25:80:41:07:30:68:0c:fd: 09:ad:8f:b6:14:48:fe:88:1f:f8:52:d9:9a:1f:60:50:74:4e: 40:d3:c3:26:1d:47:87:e2:75:55:90:4f:b0:3d:4c:f9:cd:5c: 65:01:09:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjUwODIyMTU1MzE4WhcNMjUwODI5MTU1MzE4WjAYMRYwFAYD VQQDEw02OGE4OTI2ZS02NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDe7IVoNtJ6bnDlGqZVtEyEW7gMHgN0tzMrfyNK4k6W+mKP2bchEnSz2hbDG /1Dc20lpBb8qBV30ij4hNc4jn/rwKqAeoYDPgc9OmbdSQsxDZ4XBcGB7iyo3nwvB PxivgOBZEM6p/iU7BrIHPHyxB+X1j6zjmrYJv1uoZOZpoHmNmL+NsYvFr0kiHVsl aQJIZyRxIEYMcrMv2SMj0PQdNjeyzUqp2d+o+04LaHfrz+BwAUBe+s33DRjgLJkN LIMocN3umA7wM+7fZcJoNlUHy3QUi0x2OYTuBDPPDWJw/alAy1+PVdYeTmfG7vBR K4l/zYycNmZtdzNMpxkGUUsCGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuaHPC5 zw/lKNsDs1Jaj4lCbNYNMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmiiML3tUvJ5l2x+BMChI/iT9gMjFwoF4zvjgdFlZDtpiJQul5lQ7k bBeOZVNGIPP6n2eP2LOLW81w2J0wC9GwBjm5dkUPOjyaw9000A/8wr3f4SHrL5Bc sav0EX/P/cY7g6e4maAODLdRKna/q7A1Y0QxOq97OGQLRJp8xVLDylDLNcD4qVom bIBLs1v8EDTFZPieoNsVH6Lnm+sAXdyi0fEdfkPO0J252xK8gy1VZ6PjZWflPZdr f7HaXdBb7p5HR0aAGGf1TDntV2lgcLw7JYBBBzBoDP0JrY+2FEj+iB/4UtmaH2BQ dE5A08MmHUeH4nVVkE+wPUz5zVxlAQlk -----END CERTIFICATE-----Generated at Sat Aug 23 13:53:53 2025 by rpki-client