$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft File: xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json) Hash identifier: WkDgky/GTmad5Ds6r2bCIb+1hZKsDsESLWDwkJw/Dio= Subject key identifier: 61:87:81:D1:E6:7E:42:A1:F8:07:A9:1C:4E:D2:DA:EB:E9:46:6B:4C Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D Certificate issuer: /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft Manifest number: 9D Signing time: Sat 23 Aug 2025 06:35:29 +0000 Manifest this update: Sat 23 Aug 2025 06:35:28 +0000 Manifest next update: Sat 30 Aug 2025 06:35:28 +0000 Files and hashes: 1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: fYaiZzdZ03+FMc6v/dPgQkc8lAlDVhsu6Vhp/CPvWe4=) 2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ijUv0+puTZ+N4j9fhEKBY9wHAWPDCsnAi/IUGHnumK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Validity Not Before: Aug 23 06:35:28 2025 GMT Not After : Aug 30 06:35:28 2025 GMT Subject: CN=68a96131-0e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:ab:d3:2a:fc:ff:35:e7:03:2b:54:31:04: 59:6d:50:c0:51:0f:17:5d:2d:3d:c6:0b:16:57:d2: 26:90:d4:0f:55:e6:e3:a7:b5:bf:b4:52:ea:17:5e: dd:40:ce:f0:ba:0a:ee:58:66:6c:0c:6e:e3:cc:3c: af:18:2c:c8:1f:61:31:2b:39:3d:42:4c:1f:35:1b: fd:ae:c9:6f:e4:66:00:98:2b:ac:ef:f3:be:14:01: d4:83:11:09:08:ac:63:62:ea:0e:bd:af:ab:75:4c: b2:0c:c0:36:ee:a9:ef:43:ef:77:b6:ff:49:24:2f: 39:0b:b5:b8:98:d4:ff:24:2e:72:c9:31:f4:96:34: bb:2f:f5:7c:26:be:50:f7:21:c5:56:79:64:e9:22: ee:7d:6f:f3:a3:70:5c:97:66:71:15:23:73:ba:3c: 6e:d1:e4:1d:05:0f:18:37:7c:5f:ee:59:2d:0e:70: 54:a8:c1:48:f0:e4:53:7a:55:40:bc:7d:06:0d:3b: f4:89:2c:fb:aa:68:04:f5:49:d5:fe:38:f6:71:a9: 5e:2f:f5:21:75:10:96:0f:37:93:bf:7e:95:87:96: d8:ca:f2:e6:9a:a8:4f:ea:29:2e:c4:4b:eb:7b:4c: 74:1a:c0:0e:0d:67:15:f4:73:49:38:d4:26:14:15: 8c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:87:81:D1:E6:7E:42:A1:F8:07:A9:1C:4E:D2:DA:EB:E9:46:6B:4C X509v3 Authority Key Identifier: keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2b:33:6f:2e:ec:18:55:ec:a5:75:37:5f:f9:74:33:bc:c2: bd:01:67:c0:85:67:ef:01:99:f8:8c:d2:99:82:a8:01:fa:24: c8:0d:06:61:02:4c:4c:cd:0e:30:a8:24:7b:d8:f9:09:08:46: 00:3b:02:fa:6a:ba:4c:0e:67:0a:e9:4a:1e:c1:0e:59:f3:cd: 53:b1:70:d8:08:55:61:2c:6e:11:de:7b:85:9b:51:71:6d:06: 00:ec:0e:46:bd:6c:3e:ae:01:97:83:a2:c5:6c:5c:0f:75:91: 45:85:93:21:5d:87:26:c4:76:06:85:3e:45:76:8a:ff:da:d9: 20:22:8a:3b:6b:02:ca:c7:ac:76:24:04:52:68:ca:29:2c:8b: e4:02:68:7a:cb:56:95:ad:bc:6a:5b:31:8a:05:b7:c2:8e:28: 14:f7:8f:91:7f:89:94:ce:41:a9:1e:da:5f:5d:c5:5c:fb:85: 13:f6:4c:fe:5f:6c:3e:2e:e7:85:ff:6a:d0:f8:14:8b:95:2e: 4b:a6:49:5b:9c:2a:f1:f7:3b:b8:73:72:9a:92:d6:69:95:77: 01:a5:e9:ff:0b:7d:8c:b7:59:47:59:6e:47:0f:5f:1d:a5:bf: e8:2b:fc:e7:64:0a:33:fa:88:a9:1e:06:ef:d8:43:56:b7:0f: 65:3c:e4:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzOEExMTAvBgNVBAUTKEM0NkM0M0JBMjc3RDJDMTBFRTdEMUVGRjNERjBFMkVG Qzg4NTFBMUQwHhcNMjUwODIzMDYzNTI4WhcNMjUwODMwMDYzNTI4WjAYMRYwFAYD VQQDEw02OGE5NjEzMS0wZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgqr0yr8/zXnAytUMQRZbVDAUQ8XXS09xgsWV9ImkNQPVebjp7W/tFLqF17d QM7wugruWGZsDG7jzDyvGCzIH2ExKzk9QkwfNRv9rslv5GYAmCus7/O+FAHUgxEJ CKxjYuoOva+rdUyyDMA27qnvQ+93tv9JJC85C7W4mNT/JC5yyTH0ljS7L/V8Jr5Q 9yHFVnlk6SLufW/zo3Bcl2ZxFSNzujxu0eQdBQ8YN3xf7lktDnBUqMFI8ORTelVA vH0GDTv0iSz7qmgE9UnV/jj2caleL/UhdRCWDzeTv36Vh5bYyvLmmqhP6ikuxEvr e0x0GsAODWcV9HNJONQmFBWMawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGHgdHm fkKh+AepHE7S2uvpRmtMMB8GA1UdIwQYMBaAFMRsQ7onfSwQ7n0e/z3w4u/IhRod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4QS81QkREMkNBRTk1 NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxCRHVmUjdfUGZEaTc4aUZH aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjM4QS81QkREMkNBRTk1NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxC RHVmUjdfUGZEaTc4aUZHaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFKzNvLuwYVeyldTdf+XQzvMK9AWfAhWfvAZn4jNKZgqgB+iTIDQZh AkxMzQ4wqCR72PkJCEYAOwL6arpMDmcK6UoewQ5Z881TsXDYCFVhLG4R3nuFm1Fx bQYA7A5GvWw+rgGXg6LFbFwPdZFFhZMhXYcmxHYGhT5Fdor/2tkgIoo7awLKx6x2 JARSaMopLIvkAmh6y1aVrbxqWzGKBbfCjigU94+Rf4mUzkGpHtpfXcVc+4UT9kz+ X2w+LueF/2rQ+BSLlS5LpklbnCrx9zu4c3KaktZplXcBpen/C32Mt1lHWW5HD18d pb/oK/znZAoz+oipHgbv2ENWtw9lPOSL -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:14 2025 by rpki-client