$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft File: xPfznmL0ydeMXhL9wVGuTjK8mkI.mft (raw, json) Hash identifier: MjCv7CGM+PFmK0C/fjxJmx9RkByU0NzYYTiJCkCLGX0= Subject key identifier: 4C:13:16:36:DF:1B:90:60:EC:F2:38:22:83:32:09:07:45:AD:39:81 Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft Manifest number: F6 Signing time: Sat 23 Aug 2025 05:25:07 +0000 Manifest this update: Sat 23 Aug 2025 05:25:06 +0000 Manifest next update: Sat 30 Aug 2025 05:25:06 +0000 Files and hashes: 1: xPfznmL0ydeMXhL9wVGuTjK8mkI.crl (hash: 8L6O23pIufmoMm0nqJF8D8+xbVe+aNpAihXF+ewZbHI=) 2: 127604E20F8B11EF87FC5918C4F9AE02.roa (hash: 5edOTZ9WpkItw4RWOBwB3WoAQbD4XzuXBzAkLSr3s8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B29B, serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Validity Not Before: Aug 23 05:25:06 2025 GMT Not After : Aug 30 05:25:06 2025 GMT Subject: CN=68a950b2-d390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:02:3d:03:8b:1c:42:6e:16:36:f8:70:8a: 06:a7:92:9c:8a:5c:4b:65:73:b9:3c:72:59:f6:df: 63:85:60:0e:1f:53:4c:bd:25:cf:19:1c:14:97:cb: 81:a6:e4:76:db:30:a9:01:4f:2d:bb:44:c2:51:92: 53:51:23:a5:1a:de:ef:95:96:9d:9d:a6:21:61:e2: bc:34:0d:6b:3f:4a:86:35:f8:7a:5d:60:5f:84:5c: 6d:e8:2e:5b:fc:0f:f8:7c:e7:fc:c4:db:1f:47:1a: 74:d2:4a:31:98:d5:0a:bd:7a:29:d7:75:fd:07:49: 28:fe:24:59:d7:6c:0e:6f:da:16:f6:46:26:ae:fd: b4:fb:2f:d5:77:60:96:f7:0b:88:ce:25:6b:f5:37: 81:65:89:67:bf:af:b8:f1:32:5a:5a:d3:8a:54:89: bf:69:b1:2e:df:ed:71:0c:03:79:71:7e:aa:6e:ff: 8a:06:4e:49:c3:78:c4:66:a4:a8:ea:86:a5:0c:0e: 8e:08:b7:17:5a:22:9f:6e:90:26:5d:4b:31:f0:c3: e7:31:04:85:5a:96:6d:a7:f0:98:30:c6:3f:1c:11: cc:dc:5e:62:ab:93:b8:5e:2a:8c:9e:9b:aa:db:fc: 8f:1c:7c:7e:f5:0f:59:4a:38:a4:60:33:af:d2:8c: eb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:13:16:36:DF:1B:90:60:EC:F2:38:22:83:32:09:07:45:AD:39:81 X509v3 Authority Key Identifier: keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:91:b8:8f:dc:f9:15:7c:46:c2:ba:92:83:63:e4:96:7f:a6: 59:7c:7d:b5:85:5f:cb:6f:23:9d:fe:ca:38:15:2f:f7:f0:81: d8:51:8a:9a:13:de:c9:d8:95:22:90:2b:8c:c0:b9:4f:58:5b: 9c:e6:26:7e:ac:cf:e2:63:e8:05:4d:7f:85:08:4e:e9:12:2b: a9:23:eb:26:65:e3:21:56:4f:3b:9f:16:db:80:04:5a:fd:3a: 3d:64:d7:6f:66:c4:41:f4:9c:b4:ab:fa:0a:16:ed:b5:14:b6: 99:01:71:0b:83:4c:b6:58:10:cf:4c:1e:7a:99:ec:ff:d7:bc: e1:ed:ae:0c:33:1e:44:27:2c:1b:40:67:4f:b8:a2:1e:75:de: a3:98:83:b5:de:1f:df:0e:15:a7:45:6f:07:26:52:6c:a4:97: 42:e6:e9:4d:f4:78:76:f1:11:09:69:0e:87:49:af:64:79:0b: b3:97:9c:dd:6f:04:36:c2:ae:43:0a:b9:5d:9b:26:6a:a8:8f: 9b:93:3b:c6:39:66:ab:87:75:a7:86:58:a8:b5:5a:98:38:51: c6:0a:7d:c0:5b:57:f9:9a:b0:cc:a0:2c:26:ba:4e:bb:f0:ae: 19:2b:f1:89:4a:ca:44:7e:92:7d:9a:5a:98:be:37:9c:2d:02: d4:88:d9:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIyOUIxMTAvBgNVBAUTKEM0RjdGMzlFNjJGNEM5RDc4QzVFMTJGREMxNTFBRTRF MzJCQzlBNDIwHhcNMjUwODIzMDUyNTA2WhcNMjUwODMwMDUyNTA2WjAYMRYwFAYD VQQDEw02OGE5NTBiMi1kMzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqk8CPQOLHEJuFjb4cIoGp5KcilxLZXO5PHJZ9t9jhWAOH1NMvSXPGRwUl8uB puR22zCpAU8tu0TCUZJTUSOlGt7vlZadnaYhYeK8NA1rP0qGNfh6XWBfhFxt6C5b /A/4fOf8xNsfRxp00koxmNUKvXop13X9B0ko/iRZ12wOb9oW9kYmrv20+y/Vd2CW 9wuIziVr9TeBZYlnv6+48TJaWtOKVIm/abEu3+1xDAN5cX6qbv+KBk5Jw3jEZqSo 6oalDA6OCLcXWiKfbpAmXUsx8MPnMQSFWpZtp/CYMMY/HBHM3F5iq5O4XiqMnpuq 2/yPHHx+9Q9ZSjikYDOv0ozr5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwTFjbf G5Bg7PI4IoMyCQdFrTmBMB8GA1UdIwQYMBaAFMT3855i9MnXjF4S/cFRrk4yvJpC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjI5Qi84QTNFMUQxQTBG ODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlkZU1YaEw5d1ZHdVRqSzht a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZnpubUwweWRlTVhoTDl3Vkd1VGpLOG1rSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjI5Qi84QTNFMUQxQTBGODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlk ZU1YaEw5d1ZHdVRqSzhta0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZkbiP3PkVfEbCupKDY+SWf6ZZfH21hV/LbyOd/so4FS/38IHYUYqa E97J2JUikCuMwLlPWFuc5iZ+rM/iY+gFTX+FCE7pEiupI+smZeMhVk87nxbbgARa /To9ZNdvZsRB9Jy0q/oKFu21FLaZAXELg0y2WBDPTB56mez/17zh7a4MMx5EJywb QGdPuKIedd6jmIO13h/fDhWnRW8HJlJspJdC5ulN9Hh28REJaQ6HSa9keQuzl5zd bwQ2wq5DCrldmyZqqI+bkzvGOWarh3WnhliotVqYOFHGCn3AW1f5mrDMoCwmuk67 8K4ZK/GJSspEfpJ9mlqYvjecLQLUiNl9 -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:17 2025 by rpki-client