$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: cn9/iCTKhfkGL2Co5Z2mTJg76muO5pmhHhqADazSM2Q= Subject key identifier: 88:FC:63:3D:EB:19:F3:5E:8C:95:E2:5C:AE:7C:89:8C:23:62:FC:13 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 065D Signing time: Fri 22 Aug 2025 22:59:30 +0000 Manifest this update: Fri 22 Aug 2025 22:59:30 +0000 Manifest next update: Fri 29 Aug 2025 22:59:30 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: TCLEJpw/9xz2gIl4TwzlBcn4AvvaFFaCuMGQzhnxGyc=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: oyubRpGqXRPhXUbHGDMN11nyLcbaEyRpquXs/6vcD1s=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: 4DBjk9RooSzZolI3F0wRR+UkFptKPPbZZIJnu5t3sTc=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: q5An5IejOkRYWLTS2K7o5KZUOm0z/1pEEu1xwJZBWV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Aug 22 22:59:30 2025 GMT Not After : Aug 29 22:59:30 2025 GMT Subject: CN=68a8f652-90cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:2f:c7:48:73:5e:50:5b:dd:aa:b8:ef:75: 78:9d:1d:e0:53:d5:e9:d2:9b:a2:d3:73:10:51:d3: b1:64:41:d6:06:68:da:d3:61:ca:e2:23:5a:e6:1e: 3a:e3:45:9f:91:35:2a:a8:45:a7:15:82:aa:6b:c1: 19:92:0e:c8:93:87:26:1f:73:3d:9b:7b:06:31:94: 54:fa:2a:f4:45:44:3d:28:c7:23:84:9d:d2:2a:6a: 65:f5:03:39:d5:ad:e6:43:13:6f:c4:fb:81:51:ba: ff:5b:72:c2:f2:a2:c9:61:6d:42:7c:a4:77:9e:55: cc:64:bf:54:fb:d6:33:c6:cc:41:5e:ff:4e:9b:0a: 83:df:85:a8:cf:aa:67:a4:a8:8d:2c:b2:1e:52:db: eb:d2:44:65:3e:34:36:15:7c:36:01:b4:d9:72:1f: 8e:29:a2:90:ea:c1:69:3a:b5:d3:1a:76:20:ed:63: a6:56:68:2d:b2:ae:1c:0a:5d:f2:2b:a0:66:dc:43: ba:95:c0:f2:12:e5:df:4c:9c:2a:6e:cb:1e:71:f5: 9b:2c:34:4c:8f:fb:7b:f8:53:29:e1:51:d0:91:7c: f6:25:c5:c2:03:2c:31:cc:62:73:78:9a:c6:16:f5: 28:bc:aa:68:5f:a5:fb:83:b5:c3:3f:e6:16:44:d0: 31:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FC:63:3D:EB:19:F3:5E:8C:95:E2:5C:AE:7C:89:8C:23:62:FC:13 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d4:4a:05:09:13:75:dc:22:8e:de:f0:2c:96:fe:5a:4d:c8: ae:17:72:05:47:c5:a5:84:54:1c:3a:59:7a:a2:73:44:18:c8: 16:95:7d:07:82:1f:d2:80:a6:a9:7c:1b:42:34:dd:15:fe:a1: ab:96:f3:6d:1e:7d:19:6b:16:25:69:3a:63:c4:71:7a:86:82: 8b:ac:9e:7b:4d:96:00:fa:e3:63:e7:94:46:d4:62:c9:95:dc: 5d:a6:5d:ae:d3:1a:dd:e6:87:13:5b:28:d5:c4:64:ff:6a:00: 68:d4:63:db:24:f6:ca:fb:17:20:a1:6a:d0:b6:c2:91:cc:b9: 2f:91:ef:aa:9c:e0:08:59:fb:66:94:88:9d:4f:5f:ae:38:a5: aa:00:2b:ef:d5:1a:fd:59:2b:79:c3:86:56:fd:86:4a:e6:d2: d2:f8:fc:0d:21:75:72:64:13:bb:4c:57:ca:ab:00:ee:2c:b7: 5c:ca:ca:e8:0d:7e:12:fc:7d:4e:4d:e0:2d:c0:10:1c:b5:43: 67:21:3b:4a:f9:83:25:b0:54:6c:cc:18:97:6c:e6:63:0d:54: 6f:59:f7:94:7b:e5:15:a8:b8:68:5b:12:62:f7:3b:c3:cd:6d: b8:25:28:56:54:01:3d:fb:89:9c:b3:25:e9:dc:de:2f:b4:11: 4e:e3:a5:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUwODIyMjI1OTMwWhcNMjUwODI5MjI1OTMwWjAYMRYwFAYD VQQDEw02OGE4ZjY1Mi05MGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSwvx0hzXlBb3aq473V4nR3gU9Xp0pui03MQUdOxZEHWBmja02HK4iNa5h46 40WfkTUqqEWnFYKqa8EZkg7Ik4cmH3M9m3sGMZRU+ir0RUQ9KMcjhJ3SKmpl9QM5 1a3mQxNvxPuBUbr/W3LC8qLJYW1CfKR3nlXMZL9U+9YzxsxBXv9OmwqD34Woz6pn pKiNLLIeUtvr0kRlPjQ2FXw2AbTZch+OKaKQ6sFpOrXTGnYg7WOmVmgtsq4cCl3y K6Bm3EO6lcDyEuXfTJwqbssecfWbLDRMj/t7+FMp4VHQkXz2JcXCAywxzGJzeJrG FvUovKpoX6X7g7XDP+YWRNAxHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIj8Yz3r GfNejJXiXK58iYwjYvwTMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX1EoFCRN13CKO3vAslv5aTciuF3IFR8WlhFQcOll6onNEGMgWlX0H gh/SgKapfBtCNN0V/qGrlvNtHn0ZaxYlaTpjxHF6hoKLrJ57TZYA+uNj55RG1GLJ ldxdpl2u0xrd5ocTWyjVxGT/agBo1GPbJPbK+xcgoWrQtsKRzLkvke+qnOAIWftm lIidT1+uOKWqACvv1Rr9WSt5w4ZW/YZK5tLS+PwNIXVyZBO7TFfKqwDuLLdcysro DX4S/H1OTeAtwBActUNnITtK+YMlsFRszBiXbOZjDVRvWfeUe+UVqLhoWxJi9zvD zW24JShWVAE9+4mcsyXp3N4vtBFO46WH -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:06 2025 by rpki-client