$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: V9tz2FyXLVZlxMvnhXaYrwyXpptt8dt0eKW8joffUl8= Subject key identifier: 33:CF:BD:08:E0:12:D5:6B:4F:B5:B3:87:0C:E5:E4:EC:1E:8F:47:33 Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 07E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 07E2 Signing time: Fri 22 Aug 2025 21:09:44 +0000 Manifest this update: Fri 22 Aug 2025 21:09:43 +0000 Manifest next update: Fri 29 Aug 2025 21:09:43 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: 6q1rALl2Ar6ci9p4Hu6LGU6EcQeIpMeonqd/HIAYFQI=) 2: 799C6AD8149711EFB0CB9E0AC4F9AE02.roa (hash: Z6c5AlKVKf/klPMN7KddRfh49KHTtioUb3aQg5mvfg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2020 (0x7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Aug 22 21:09:43 2025 GMT Not After : Aug 29 21:09:43 2025 GMT Subject: CN=68a8dc97-e51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5e:05:d4:54:87:55:94:13:f6:c7:f9:02:a1: 9c:df:36:4e:1c:06:8e:56:da:72:b5:fb:38:89:a8: f6:ed:b6:5e:59:64:b3:a4:bf:93:b5:2a:51:28:81: 8c:a3:4f:77:cd:f6:70:48:b8:c0:37:03:45:95:3c: df:dd:69:85:fc:20:a0:0a:07:47:76:14:0c:cd:89: 5c:d5:f6:1c:ca:17:88:e2:09:70:ca:1b:7d:ac:b1: 8f:d3:c9:5b:29:e1:96:52:71:27:d8:b8:17:42:98: 26:5a:47:3b:9d:f8:1c:37:1c:ff:a8:fa:fb:22:ba: f2:d2:e1:81:58:c4:f5:66:c7:15:ad:30:59:ee:b5: 5c:f7:22:16:d4:af:f5:d8:58:07:3f:f8:38:af:8e: 3e:67:54:35:5b:87:ac:11:7a:8a:d4:54:ca:95:53: 2b:db:8c:70:74:df:fc:ad:ca:58:5c:72:f1:7f:18: 18:87:15:79:9c:82:07:af:8f:39:c7:68:2b:fa:f4: ea:67:cd:9c:c6:b2:b6:3c:66:3e:d3:e6:dd:4d:1d: e8:b6:07:5e:bb:69:06:66:4f:4e:8e:4f:6a:d5:99: 1f:2a:9d:03:36:3d:21:89:9c:07:86:6e:83:7a:ec: 34:ef:a2:49:b0:a0:46:77:41:48:e6:64:dd:ac:25: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CF:BD:08:E0:12:D5:6B:4F:B5:B3:87:0C:E5:E4:EC:1E:8F:47:33 X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:87:c4:99:e9:eb:3f:ef:31:45:93:88:cc:d0:2f:a9:2d:c3: 06:32:66:e9:fc:b4:2c:9b:c2:36:ee:bb:66:75:dc:06:5f:52: 8d:1c:c0:e3:8f:27:3b:63:02:a5:60:a5:2c:2b:26:99:9a:cc: f7:a6:ce:30:8d:17:25:63:10:73:39:c5:c8:f7:ec:c9:64:d2: ab:4b:d8:85:78:96:52:45:12:89:46:26:5e:df:6d:2e:90:8c: 0c:44:1b:03:51:6d:df:77:19:43:b5:e6:24:20:14:13:8c:a7: b6:02:25:c9:b3:5e:9a:56:09:e7:cd:9a:1d:5d:cb:0f:45:13: 12:25:38:c5:59:81:9c:c1:29:21:b5:a0:bf:10:dc:3f:9c:c0: 06:1e:7d:6c:44:10:f6:93:d0:cc:3c:a3:b1:eb:f4:29:92:bf: ed:47:f0:f7:f3:d1:66:91:06:ea:16:b6:7a:60:ae:29:55:09: c8:58:1a:9a:7d:e9:54:b7:b0:e1:3e:bc:f4:ff:89:6c:cd:4f: f0:2c:71:72:4f:6f:2d:0b:e1:79:b4:ab:9f:ae:c0:07:29:69: c8:94:61:0b:c4:0d:88:e0:b4:df:81:45:e8:ee:3e:e9:ba:c9: b4:bf:4a:e0:dc:7a:f6:47:ad:b3:73:81:81:04:5c:b4:54:42: 30:b5:13:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjUwODIyMjEwOTQzWhcNMjUwODI5MjEwOTQzWjAYMRYwFAYD VQQDEw02OGE4ZGM5Ny1lNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1V4F1FSHVZQT9sf5AqGc3zZOHAaOVtpytfs4iaj27bZeWWSzpL+TtSpRKIGM o093zfZwSLjANwNFlTzf3WmF/CCgCgdHdhQMzYlc1fYcyheI4glwyht9rLGP08lb KeGWUnEn2LgXQpgmWkc7nfgcNxz/qPr7Irry0uGBWMT1ZscVrTBZ7rVc9yIW1K/1 2FgHP/g4r44+Z1Q1W4esEXqK1FTKlVMr24xwdN/8rcpYXHLxfxgYhxV5nIIHr485 x2gr+vTqZ82cxrK2PGY+0+bdTR3otgdeu2kGZk9Ojk9q1ZkfKp0DNj0hiZwHhm6D euw076JJsKBGd0FI5mTdrCVk6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPPvQjg EtVrT7Wzhwzl5Owej0czMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEh8SZ6es/7zFFk4jM0C+pLcMGMmbp/LQsm8I27rtmddwGX1KNHMDj jyc7YwKlYKUsKyaZmsz3ps4wjRclYxBzOcXI9+zJZNKrS9iFeJZSRRKJRiZe320u kIwMRBsDUW3fdxlDteYkIBQTjKe2AiXJs16aVgnnzZodXcsPRRMSJTjFWYGcwSkh taC/ENw/nMAGHn1sRBD2k9DMPKOx6/Qpkr/tR/D389FmkQbqFrZ6YK4pVQnIWBqa felUt7DhPrz0/4lszU/wLHFyT28tC+F5tKufrsAHKWnIlGELxA2I4LTfgUXo7j7p usm0v0rg3Hr2R62zc4GBBFy0VEIwtRNy -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:04 2025 by rpki-client