$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: oJUo09YqDu7tPy4dCK2S+hzvzjyijZPfq4tK9hd4N6Q= Subject key identifier: 58:5A:1F:47:5B:22:65:0C:B5:F4:A4:B3:D0:3B:61:28:B7:B5:1C:22 Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 0169 Signing time: Sat 23 Aug 2025 04:00:06 +0000 Manifest this update: Sat 23 Aug 2025 04:00:05 +0000 Manifest next update: Sat 30 Aug 2025 04:00:05 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: MyO2LETQCXUCFb5DN2y80/30tejzUxUyE8xpI7IHDFA=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: fQ0Wv2YD60Yo4ln05PtaRg2v4/R5zwKrC/7wYHWQM3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Aug 23 04:00:05 2025 GMT Not After : Aug 30 04:00:05 2025 GMT Subject: CN=68a93cc5-93bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:af:a6:be:96:03:8b:e9:aa:67:74:b8:d5: 3e:b4:9f:e7:61:e2:f0:19:fe:60:45:4b:66:d8:57: 0f:d2:ce:c6:39:6d:dd:05:5a:d8:6b:c1:7e:fe:19: b7:20:24:37:31:76:a9:ea:e7:88:bd:8e:d1:dd:46: 60:8b:db:ba:b1:a9:f5:34:82:5a:e2:d8:45:3c:90: 69:f5:16:e1:7f:36:3a:f3:2f:4b:9d:b2:45:0f:91: 17:48:fb:66:67:0e:e0:d6:6e:c0:6b:d1:22:9f:4a: aa:a6:37:6c:d0:f1:7f:38:1e:fc:95:57:73:c0:eb: d5:c9:59:28:2e:ba:40:93:b8:a6:8f:fb:91:91:7c: 32:10:83:65:3f:02:1d:ff:44:57:c4:9e:6a:1c:ab: 1e:8a:cc:8b:83:40:9f:80:47:2f:72:b7:f5:d2:2c: b0:cc:99:d8:80:19:3f:36:c1:15:37:6c:cc:67:49: 05:4f:2e:2f:1a:1b:23:8a:e4:83:3c:d4:0d:e0:6f: 12:3d:9a:45:cc:a1:1f:06:8f:0d:23:27:88:4f:b8: 3b:8b:c1:6e:cd:6b:62:ab:52:83:80:4c:e2:06:39: a9:d4:b9:ee:5e:20:cc:e3:e9:d0:cb:7a:37:52:76: 16:5a:57:5f:eb:fc:ba:44:72:2a:c5:c4:ed:58:74: 0c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:1F:47:5B:22:65:0C:B5:F4:A4:B3:D0:3B:61:28:B7:B5:1C:22 X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:69:6f:fb:a4:4f:1b:37:dc:7a:12:66:6a:08:32:3a:21:2f: 4e:ca:53:12:74:4f:16:61:7c:6e:8e:df:ff:03:10:3c:8b:24: 87:4c:b0:30:4e:83:b9:d3:e9:a1:3f:dc:19:eb:24:10:73:a2: a8:66:6e:6c:9b:36:f7:39:d9:0a:ea:4c:50:e9:d6:3d:26:aa: 3b:8d:30:65:18:71:04:2a:68:ca:5f:9a:d2:e5:c1:28:a2:7a: 29:77:31:68:2d:b1:9d:4b:b1:1a:d5:e0:46:20:be:15:d2:95: b8:c1:51:86:89:c9:c7:71:e2:89:f4:8c:c3:cb:37:49:5e:6c: 36:80:ff:1a:06:95:d3:d8:28:96:c8:e3:56:23:08:40:51:60: 46:88:fe:ae:a6:f3:3e:ac:63:3f:10:21:cc:64:3c:c6:ca:27: ab:61:7a:bd:ec:f6:12:dd:b0:fc:cc:72:14:58:2a:70:b5:51: 2c:31:fd:8a:53:33:7c:de:3e:e7:fe:05:3f:23:69:de:72:f6: eb:8a:98:48:c1:aa:d9:f4:4f:69:e6:d8:ce:ef:5b:fa:3c:03: fb:4a:8c:2a:82:c7:47:cd:62:9c:e1:01:1a:35:bf:ea:5b:a8: e0:f8:44:86:ab:81:54:f9:76:d4:de:44:50:9b:17:d3:df:d8: 0d:13:93:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjUwODIzMDQwMDA1WhcNMjUwODMwMDQwMDA1WjAYMRYwFAYD VQQDEw02OGE5M2NjNS05M2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzqvpr6WA4vpqmd0uNU+tJ/nYeLwGf5gRUtm2FcP0s7GOW3dBVrYa8F+/hm3 ICQ3MXap6ueIvY7R3UZgi9u6san1NIJa4thFPJBp9RbhfzY68y9LnbJFD5EXSPtm Zw7g1m7Aa9Ein0qqpjds0PF/OB78lVdzwOvVyVkoLrpAk7imj/uRkXwyEINlPwId /0RXxJ5qHKseisyLg0CfgEcvcrf10iywzJnYgBk/NsEVN2zMZ0kFTy4vGhsjiuSD PNQN4G8SPZpFzKEfBo8NIyeIT7g7i8FuzWtiq1KDgEziBjmp1LnuXiDM4+nQy3o3 UnYWWldf6/y6RHIqxcTtWHQMZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhaH0db ImUMtfSks9A7YSi3tRwiMB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaaW/7pE8bN9x6EmZqCDI6IS9OylMSdE8WYXxujt//AxA8iySHTLAw ToO50+mhP9wZ6yQQc6KoZm5smzb3OdkK6kxQ6dY9Jqo7jTBlGHEEKmjKX5rS5cEo onopdzFoLbGdS7Ea1eBGIL4V0pW4wVGGicnHceKJ9IzDyzdJXmw2gP8aBpXT2CiW yONWIwhAUWBGiP6upvM+rGM/ECHMZDzGyierYXq97PYS3bD8zHIUWCpwtVEsMf2K UzN83j7n/gU/I2necvbriphIwarZ9E9p5tjO71v6PAP7SowqgsdHzWKc4QEaNb/q W6jg+ESGq4FU+XbU3kRQmxfT39gNE5NT -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:15 2025 by rpki-client