$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json) Hash identifier: gW9ton6uI/GBC2huqAlVUNiBmM8OC12XVbw6Z1nLmTs= Subject key identifier: 2E:9A:25:29:60:6B:AE:82:A8:39:FF:24:15:C1:7B:BB:88:DD:C3:74 Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft Manifest number: 0162 Signing time: Sat 23 Aug 2025 04:10:30 +0000 Manifest this update: Sat 23 Aug 2025 04:10:30 +0000 Manifest next update: Sat 30 Aug 2025 04:10:30 +0000 Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: /2Ktt7DYdma1VlHFmgaAJqFOGH9Y4n68P/UkXNLF3OE=) 2: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: 1ZszVXnu+oof2agkcsw2N+1e9S9zcssyc5TigB7H1/w=) 3: 6821BAB4450C11F0A7A54A80C4F9AE02.roa (hash: cK+N9izYWqB7nJ2gb9CD89n2r86dl3xekNBy66q5a0Q=) 4: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: e26WrvOpcLVtFLCEGQEyLqc/kWvK3maBfU7Yb9x41Mg=) 5: 6911C6C6450C11F0A7A54A80C4F9AE02.roa (hash: XM9Bx/2dvSebxGit5XsfhdOhtq9u4/gFe4PEE8p0hU0=) 6: 688DF576450C11F0A7A54A80C4F9AE02.roa (hash: 4F6WXMQnkc6O0hYawZzx3De82Qtz5srkx6WGHHAwdQk=) 7: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: ejDPctxuPr+08V8pahIdV3zpYnFneVGtkqcwrd8I5VM=) 8: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: NbEb3oWP2ceJtb7zrqoj41m3/pXeHDptDVhijrcSdOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Aug 23 04:10:30 2025 GMT Not After : Aug 30 04:10:30 2025 GMT Subject: CN=68a93f36-6018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:66:89:3f:d2:42:9c:ff:20:83:66:14:0e:c9: 93:83:b2:5f:e3:f0:46:48:05:7f:75:23:d5:6a:1b: 9c:26:c1:65:aa:65:bc:48:f6:d1:fc:f4:f9:51:7a: 98:87:44:2d:ff:4d:05:56:be:14:a9:fa:87:a5:9e: 4c:92:42:c4:fa:0f:7f:60:47:c3:f0:43:33:d8:74: bb:bd:78:ab:e0:04:27:01:19:e7:0b:5d:bd:9f:88: cd:ef:2c:98:3c:2c:b1:1f:24:48:5a:fd:38:13:db: 4f:d9:6f:49:12:e0:d2:8b:3f:e1:05:9d:bf:4a:73: df:ff:70:d2:aa:57:46:21:27:6d:07:98:45:ae:5b: e0:ec:36:6f:f4:5f:45:95:86:2f:d8:64:25:c7:1b: c3:d0:8f:c3:8e:23:2f:e5:4a:49:87:7a:ce:d1:d3: 4c:38:ab:61:aa:fe:75:fc:7a:ee:70:b9:3a:61:04: ce:af:a7:d8:f1:f2:ac:79:16:74:06:f6:08:f6:5c: c1:3b:76:3d:92:6b:a8:ea:89:9c:e0:3a:46:ec:b3: da:06:02:c2:cd:ed:d9:ad:bd:69:2e:b2:79:38:ce: 43:e7:94:1c:2c:2a:ce:b7:0e:99:ce:8b:e9:2a:1f: a4:47:dd:5c:82:e0:69:b5:14:81:34:72:be:b9:fb: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9A:25:29:60:6B:AE:82:A8:39:FF:24:15:C1:7B:BB:88:DD:C3:74 X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:24:c4:45:2b:28:4d:f2:4c:b4:43:72:e2:ff:d8:64:b8:29: a2:2e:1c:84:98:f2:7a:d0:ed:34:84:3a:f4:07:ed:22:f8:28: 0f:31:94:e0:95:e3:71:37:29:e8:2a:f2:f9:81:a3:00:af:f4: a9:96:02:4f:52:c4:2d:94:02:93:f9:47:28:b1:e0:66:b3:6e: 74:aa:73:89:63:29:8f:d3:0b:77:7d:b6:b1:57:52:8b:75:b4: a8:6d:a0:ad:92:f4:69:73:63:eb:f5:5c:ff:d4:9a:e0:e8:55: e2:63:5d:16:42:3b:45:fd:91:12:f6:8d:22:52:04:09:13:51: a0:d5:73:d4:a9:c8:db:00:d4:4b:9c:e0:50:11:32:c1:9d:14: c6:12:ee:e9:e2:96:73:68:b5:46:b5:33:2c:80:95:54:b1:f8: 15:f4:d4:49:1e:a3:b3:d1:64:93:0d:ec:db:24:95:5a:e1:97: 37:1d:de:15:d0:01:f9:4c:27:e2:97:34:77:f1:5f:48:15:6e: 84:f0:01:32:66:c9:2f:cc:8e:a4:bc:2d:12:1a:83:1f:d8:c0: df:0e:6c:f5:cd:d8:e5:4f:e8:12:df:62:f6:0d:00:c8:47:54: 2d:93:7a:20:61:65:9d:c1:d7:14:3d:02:f6:3f:14:4c:4a:d8: 0c:07:9a:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjUwODIzMDQxMDMwWhcNMjUwODMwMDQxMDMwWjAYMRYwFAYD VQQDEw02OGE5M2YzNi02MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52aJP9JCnP8gg2YUDsmTg7Jf4/BGSAV/dSPVahucJsFlqmW8SPbR/PT5UXqY h0Qt/00FVr4UqfqHpZ5MkkLE+g9/YEfD8EMz2HS7vXir4AQnARnnC129n4jN7yyY PCyxHyRIWv04E9tP2W9JEuDSiz/hBZ2/SnPf/3DSqldGISdtB5hFrlvg7DZv9F9F lYYv2GQlxxvD0I/DjiMv5UpJh3rO0dNMOKthqv51/HrucLk6YQTOr6fY8fKseRZ0 BvYI9lzBO3Y9kmuo6omc4DpG7LPaBgLCze3Zrb1pLrJ5OM5D55QcLCrOtw6Zzovp Kh+kR91cguBptRSBNHK+uftAPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6aJSlg a66CqDn/JBXBe7uI3cN0MB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM3Qy8yQjVDQUFFODY5RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4 aHd5S0FMWm91XzZWbEYtTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcJMRFKyhN8ky0Q3Li/9hkuCmiLhyEmPJ60O00hDr0B+0i+CgPMZTg leNxNynoKvL5gaMAr/SplgJPUsQtlAKT+UcoseBms250qnOJYymP0wt3fbaxV1KL dbSobaCtkvRpc2Pr9Vz/1Jrg6FXiY10WQjtF/ZES9o0iUgQJE1Gg1XPUqcjbANRL nOBQETLBnRTGEu7p4pZzaLVGtTMsgJVUsfgV9NRJHqOz0WSTDezbJJVa4Zc3Hd4V 0AH5TCfilzR38V9IFW6E8AEyZskvzI6kvC0SGoMf2MDfDmz1zdjlT+gS32L2DQDI R1Qtk3ogYWWdwdcUPQL2PxRMStgMB5pu -----END CERTIFICATE-----Generated at Sat Aug 23 13:36:26 2025 by rpki-client