$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json) Hash identifier: uOWvvMbd+55Jq+uK/0IA5/cHZziOtBxNa6kIkYLOISQ= Subject key identifier: AC:28:05:77:BE:F0:F7:DC:76:E6:95:B3:B1:83:A7:74:84:FA:A0:11 Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft Manifest number: 0146 Signing time: Sun 29 Jun 2025 03:27:40 +0000 Manifest this update: Sun 29 Jun 2025 03:27:40 +0000 Manifest next update: Sun 06 Jul 2025 03:27:40 +0000 Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: IyTzEOvVKUTgn4CF2Z9hyVsaOqbNbnMznfCI6BQCC7Y=) 2: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: 1ZszVXnu+oof2agkcsw2N+1e9S9zcssyc5TigB7H1/w=) 3: 6821BAB4450C11F0A7A54A80C4F9AE02.roa (hash: cK+N9izYWqB7nJ2gb9CD89n2r86dl3xekNBy66q5a0Q=) 4: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: e26WrvOpcLVtFLCEGQEyLqc/kWvK3maBfU7Yb9x41Mg=) 5: 6911C6C6450C11F0A7A54A80C4F9AE02.roa (hash: XM9Bx/2dvSebxGit5XsfhdOhtq9u4/gFe4PEE8p0hU0=) 6: 688DF576450C11F0A7A54A80C4F9AE02.roa (hash: 4F6WXMQnkc6O0hYawZzx3De82Qtz5srkx6WGHHAwdQk=) 7: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: ejDPctxuPr+08V8pahIdV3zpYnFneVGtkqcwrd8I5VM=) 8: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: NbEb3oWP2ceJtb7zrqoj41m3/pXeHDptDVhijrcSdOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Jun 29 03:27:40 2025 GMT Not After : Jul 6 03:27:40 2025 GMT Subject: CN=6860b2ac-1ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:47:d1:dd:82:78:90:8c:5f:1e:50:a9:7a: fe:38:dc:bc:3a:3d:35:46:f5:04:b7:06:04:8a:77: 1d:ae:d9:b4:33:73:a2:18:11:ef:62:79:3e:91:d5: 76:94:4b:26:e6:80:ef:86:b3:41:ed:38:c2:62:55: 36:45:bf:8d:72:9d:e4:70:2f:31:7b:1d:6c:c8:67: 2d:b7:83:ee:2c:40:fb:c0:47:f4:43:78:bd:61:40: 0b:11:22:95:e1:67:a5:15:d2:06:f0:4e:5d:31:9a: cd:af:b4:2b:4a:45:fc:8c:d8:d3:97:34:5a:24:8a: ab:31:68:14:1b:54:91:27:72:32:3f:fd:da:5a:a0: 0b:6e:e8:d7:f7:0a:21:cd:7a:da:ee:5c:46:72:13: 35:08:ba:5e:52:97:4f:07:13:c2:e6:f3:14:f9:3c: 73:49:46:b3:f2:69:80:2a:fe:ff:e5:dc:d0:d1:db: ee:41:1e:4e:0e:1c:d4:4c:9e:bb:c2:4c:8f:8e:50: fb:c4:e9:d3:78:c5:7d:4d:72:ed:94:7b:31:e9:7e: c4:a4:81:a1:0a:5e:52:fa:19:d9:ee:b4:c0:d6:2e: ab:11:2b:5e:72:4b:da:cc:c3:fa:9a:d7:cb:9f:b6: 77:bb:0f:77:03:1a:26:46:78:59:f5:5a:54:10:23: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:05:77:BE:F0:F7:DC:76:E6:95:B3:B1:83:A7:74:84:FA:A0:11 X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:df:55:a5:41:a6:19:db:a7:18:d9:47:a9:23:b4:b6:45:b0: 41:f7:6e:22:3d:27:2c:70:f3:6f:b3:f5:8c:e1:0d:b6:6c:cc: 13:c4:f9:38:a7:2d:0e:2e:9e:f5:98:2d:80:bd:59:e9:d0:65: ac:01:bd:50:47:76:7d:79:69:08:6a:26:6c:73:bd:d9:e4:b9: 5a:fd:51:c6:68:b7:13:ce:ca:2b:c0:a8:63:cf:ad:7e:e3:5c: b8:c8:19:75:80:68:7d:d3:c3:8f:59:39:35:5d:2e:7a:9e:b9: b4:fc:e9:39:c3:4c:12:75:77:94:f8:d2:f7:8f:43:6e:c2:40: 31:78:f2:f3:94:8a:c7:12:4a:90:e8:c0:84:39:12:ef:59:17: 4b:df:9d:3d:4c:87:1c:55:2c:04:f7:b7:3a:29:07:f7:aa:36: 50:13:b2:c1:90:ff:62:18:c5:a3:6e:1f:d9:40:8f:74:ad:89: f5:19:c0:1c:38:44:34:cf:6d:ad:62:e1:c8:65:85:73:27:b2: 8c:7b:6f:2f:3e:91:b9:d9:14:42:e8:ec:4a:51:1b:00:ac:16: b2:74:19:29:24:81:74:7f:ae:5b:61:4a:cd:41:78:05:80:0f: 82:39:b2:24:7f:fc:8b:82:5c:4f:99:97:7a:67:1f:9b:8e:01: 86:61:9f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjUwNjI5MDMyNzQwWhcNMjUwNzA2MDMyNzQwWjAYMRYwFAYD VQQDEw02ODYwYjJhYy0xZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQNH0d2CeJCMXx5QqXr+ONy8Oj01RvUEtwYEincdrtm0M3OiGBHvYnk+kdV2 lEsm5oDvhrNB7TjCYlU2Rb+Ncp3kcC8xex1syGctt4PuLED7wEf0Q3i9YUALESKV 4WelFdIG8E5dMZrNr7QrSkX8jNjTlzRaJIqrMWgUG1SRJ3IyP/3aWqALbujX9woh zXra7lxGchM1CLpeUpdPBxPC5vMU+TxzSUaz8mmAKv7/5dzQ0dvuQR5ODhzUTJ67 wkyPjlD7xOnTeMV9TXLtlHsx6X7EpIGhCl5S+hnZ7rTA1i6rESteckvazMP6mtfL n7Z3uw93AxomRnhZ9VpUECNMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwoBXe+ 8PfcduaVs7GDp3SE+qARMB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM3Qy8yQjVDQUFFODY5RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4 aHd5S0FMWm91XzZWbEYtTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB331WlQaYZ26cY2UepI7S2RbBB924iPScscPNvs/WM4Q22bMwTxPk4 py0OLp71mC2AvVnp0GWsAb1QR3Z9eWkIaiZsc73Z5Lla/VHGaLcTzsorwKhjz61+ 41y4yBl1gGh908OPWTk1XS56nrm0/Ok5w0wSdXeU+NL3j0NuwkAxePLzlIrHEkqQ 6MCEORLvWRdL3509TIccVSwE97c6KQf3qjZQE7LBkP9iGMWjbh/ZQI90rYn1GcAc OEQ0z22tYuHIZYVzJ7KMe28vPpG52RRC6OxKURsArBaydBkpJIF0f65bYUrNQXgF gA+CObIkf/yLglxPmZd6Zx+bjgGGYZ9o -----END CERTIFICATE-----Generated at Sun Jun 29 13:47:15 2025 by rpki-client