$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: XAx2dIhbqOwoOSPiEJxYSyKJmEp5muonFoc5Y8YJaUg= Subject key identifier: 0C:D8:EB:B3:75:B7:AE:97:8C:78:2C:4C:D6:F7:4A:7E:99:40:4F:EB Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 014E Signing time: Sat 23 Aug 2025 04:21:43 +0000 Manifest this update: Sat 23 Aug 2025 04:21:43 +0000 Manifest next update: Sat 30 Aug 2025 04:21:43 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: sFPlqgMiJ3kTXTfNN47WW3VKyBLy4vSQcaLUmpOZqm8=) 2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: x3typY+Rz1v7YQKoz8/eFq0vzVSoB9fMyJducWo5h8o=) 3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: Zs0S8blgDDMs3jrlGY37AkPWRyP83xeb73R0yUfKf24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Validity Not Before: Aug 23 04:21:43 2025 GMT Not After : Aug 30 04:21:43 2025 GMT Subject: CN=68a941d7-165b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bc:65:ec:17:d5:bd:62:93:ef:a3:86:1f:f6: 0a:ea:71:e3:b2:f4:70:08:39:90:0c:15:91:2e:25: ea:a5:0d:5b:63:43:e1:84:6f:45:e5:d8:54:57:20: 5d:3d:45:12:ef:b4:c2:c5:b7:f6:df:99:f2:b1:ff: 03:65:49:73:1e:03:a2:88:56:8c:b9:7a:de:35:66: 68:62:7d:16:1c:4e:d0:9a:35:95:2c:9e:8e:53:dd: 8e:42:8f:c4:e7:69:d6:99:5c:a1:27:54:75:13:a7: 48:26:b2:54:e1:a6:53:5c:56:20:a6:77:22:e1:9b: 4b:94:b6:28:f0:93:8d:79:b2:2b:9c:d7:3a:43:14: ba:00:64:65:b4:ee:55:7b:44:2a:a3:7b:1d:f7:1e: ad:b7:e2:43:2a:26:21:0d:4f:8c:92:14:ec:cf:ae: 54:9f:4c:58:31:40:97:3f:d1:c1:66:46:67:36:48: f3:cc:0e:66:ed:29:7b:fb:bb:65:28:53:59:cc:7e: 20:9f:ea:6a:d5:b3:f1:a7:10:cb:bf:41:32:d2:6f: 1c:e3:9e:74:2f:4c:78:45:25:ea:d0:88:65:4e:7e: 89:20:ef:74:bd:c6:13:19:6c:c0:45:11:bc:6a:ee: 66:0e:0e:1c:cc:58:73:61:74:86:89:69:e3:86:9a: a8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D8:EB:B3:75:B7:AE:97:8C:78:2C:4C:D6:F7:4A:7E:99:40:4F:EB X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ee:18:42:6a:d6:96:4e:79:1b:a8:77:e0:8b:d5:d9:2e:1c: aa:df:c8:2e:2f:07:a8:80:8b:16:f6:ff:2d:f2:e2:b5:51:10: e1:25:bb:33:c7:43:f7:47:05:7d:a0:75:fa:61:76:80:f6:4d: 6e:a3:7e:05:c2:b8:97:5f:6e:27:92:0f:26:08:ac:76:a3:43: 6a:a1:75:5f:0f:64:8c:4b:34:e3:84:44:e0:c0:7f:a6:2d:11: 9c:5a:36:36:f1:5b:ca:f7:80:8c:df:12:8a:a2:54:51:01:f0: ca:8f:19:ec:a2:68:34:6d:7e:ff:fa:34:c3:11:1a:fa:f6:6c: fe:34:c3:46:ae:3b:ed:15:ca:59:27:7b:8d:0f:3a:16:b2:5f: b7:d3:93:a1:69:d5:e9:67:b6:59:19:3b:0d:74:83:4d:eb:cb: 12:d9:af:51:b7:c7:44:0a:43:92:46:cc:d5:e1:72:ad:8b:48: 23:06:e1:12:89:27:b6:ef:98:3a:17:d5:1a:2f:5f:34:a9:50: 57:8a:3c:e4:c8:45:c6:64:50:59:cb:fb:32:1d:05:e8:f3:23: d7:e9:c3:14:25:b3:3b:b9:b6:fc:4d:d1:ef:3d:80:3c:3c:f2: 84:7e:46:a9:e4:44:88:bd:ab:44:47:eb:35:17:20:a6:bb:69: 1e:69:3a:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjUwODIzMDQyMTQzWhcNMjUwODMwMDQyMTQzWjAYMRYwFAYD VQQDEw02OGE5NDFkNy0xNjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrxl7BfVvWKT76OGH/YK6nHjsvRwCDmQDBWRLiXqpQ1bY0PhhG9F5dhUVyBd PUUS77TCxbf235nysf8DZUlzHgOiiFaMuXreNWZoYn0WHE7QmjWVLJ6OU92OQo/E 52nWmVyhJ1R1E6dIJrJU4aZTXFYgpnci4ZtLlLYo8JONebIrnNc6QxS6AGRltO5V e0Qqo3sd9x6tt+JDKiYhDU+MkhTsz65Un0xYMUCXP9HBZkZnNkjzzA5m7Sl7+7tl KFNZzH4gn+pq1bPxpxDLv0Ey0m8c4550L0x4RSXq0IhlTn6JIO90vcYTGWzARRG8 au5mDg4czFhzYXSGiWnjhpqokwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzY67N1 t66XjHgsTNb3Sn6ZQE/rMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG7hhCataWTnkbqHfgi9XZLhyq38guLweogIsW9v8t8uK1URDhJbsz x0P3RwV9oHX6YXaA9k1uo34FwriXX24nkg8mCKx2o0NqoXVfD2SMSzTjhETgwH+m LRGcWjY28VvK94CM3xKKolRRAfDKjxnsomg0bX7/+jTDERr69mz+NMNGrjvtFcpZ J3uNDzoWsl+305OhadXpZ7ZZGTsNdINN68sS2a9Rt8dECkOSRszV4XKti0gjBuES iSe275g6F9UaL180qVBXijzkyEXGZFBZy/syHQXo8yPX6cMUJbM7ubb8TdHvPYA8 PPKEfkap5ESIvatER+s1FyCmu2keaTro -----END CERTIFICATE-----Generated at Sat Aug 23 13:38:42 2025 by rpki-client