$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: Vua0QRAkwep5iZ00sa9X2z51aZWH/okd/WNZ4w9jDtI= Subject key identifier: FC:C6:0B:CC:02:23:1F:0D:98:2B:4E:DA:87:10:F5:0D:C2:90:C1:46 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0C76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0C6E Signing time: Fri 22 Aug 2025 18:31:36 +0000 Manifest this update: Fri 22 Aug 2025 18:31:35 +0000 Manifest next update: Fri 29 Aug 2025 18:31:35 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: ox5nPmS2P9cULSRkxgSknaJnQJk+GojnxzUj1G9nwUg=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3190 (0xc76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Aug 22 18:31:35 2025 GMT Not After : Aug 29 18:31:35 2025 GMT Subject: CN=68a8b787-179d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:83:8e:68:3b:73:1a:ba:83:f6:c5:93:8c: 6b:ef:bd:2e:28:96:9a:56:54:17:01:50:69:1c:75: f6:e4:e9:ce:d4:80:bf:4f:80:6f:32:4c:e8:62:f3: 03:8b:99:5c:83:c9:dc:73:bd:36:44:59:a3:14:2b: 31:83:6c:90:39:d6:b9:06:28:d1:0a:2e:e4:a2:01: 3b:97:c5:94:11:65:40:89:0f:91:cb:cb:2b:50:8e: 04:03:04:27:b0:af:26:1a:c4:82:c4:5c:f1:40:f8: dd:5e:4e:1e:9e:a9:56:02:af:a3:b5:d0:2d:3d:7d: b1:30:6e:58:59:ef:34:ec:69:fd:3e:10:7b:77:c5: b0:f8:dd:e8:32:48:4c:18:0f:c3:7f:b8:28:61:f9: a2:c2:95:5c:d2:f8:2a:a6:29:3d:52:59:f5:43:ee: 63:ad:36:55:a6:79:07:37:55:1c:1b:43:a5:13:33: 53:f9:24:3e:e9:f3:3f:2a:c0:f7:9a:e1:13:52:78: 56:27:05:d2:be:a1:44:3d:07:f9:cd:b3:96:68:bc: 3a:48:61:b6:cc:08:89:a7:30:01:45:0f:f9:97:51: ad:b8:81:1b:eb:1f:20:44:fb:fa:e3:6a:37:57:a9: c4:64:8e:31:f9:d7:6e:1b:93:31:80:d3:5d:69:0b: 2c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C6:0B:CC:02:23:1F:0D:98:2B:4E:DA:87:10:F5:0D:C2:90:C1:46 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c9:90:5e:8d:ee:6f:84:90:14:0b:5d:b1:a5:13:fb:d6:e3: 91:4f:2b:12:a9:79:30:7f:96:77:31:40:2f:54:3e:91:63:01: 53:d2:cb:30:48:3d:b9:8b:24:cc:76:81:0e:6d:0d:4f:f3:69: d9:f4:06:50:3d:a7:fa:9a:ae:fb:9a:6f:76:c3:10:6d:2f:4d: 8b:c9:10:a8:00:ee:99:15:26:b7:9d:e8:07:28:27:11:55:72: 5b:5a:23:10:22:65:0a:8f:52:7c:b2:82:be:61:c1:7c:cf:cc: 6c:a1:a2:0e:d5:60:17:e5:fa:17:b4:92:c0:b0:05:f8:3c:fb: bd:00:1b:39:ba:9a:64:3c:60:8c:c2:15:c5:d6:82:4d:a4:b0: eb:30:36:3f:49:eb:22:c5:bc:0e:4c:c5:0e:ba:8b:99:75:b7: 89:af:0e:9c:4a:0a:51:f0:b9:84:77:61:5f:d3:67:2e:2a:a2: d7:93:14:66:c4:0e:66:a8:c6:a2:85:e2:b2:fb:59:4d:f3:a5: 60:a0:b3:15:9f:04:53:2f:14:e5:1a:7c:81:fc:ab:4d:78:e7: 80:f4:59:0b:23:12:2a:ec:32:0c:9d:c5:e0:e3:fa:8d:7d:a9: 90:f1:75:6e:61:58:95:4f:0a:d5:5b:6d:47:36:e1:09:04:0b: 0a:e4:b2:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjUwODIyMTgzMTM1WhcNMjUwODI5MTgzMTM1WjAYMRYwFAYD VQQDEw02OGE4Yjc4Ny0xNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAKDjmg7cxq6g/bFk4xr770uKJaaVlQXAVBpHHX25OnO1IC/T4BvMkzoYvMD i5lcg8ncc702RFmjFCsxg2yQOda5BijRCi7kogE7l8WUEWVAiQ+Ry8srUI4EAwQn sK8mGsSCxFzxQPjdXk4enqlWAq+jtdAtPX2xMG5YWe807Gn9PhB7d8Ww+N3oMkhM GA/Df7goYfmiwpVc0vgqpik9Uln1Q+5jrTZVpnkHN1UcG0OlEzNT+SQ+6fM/KsD3 muETUnhWJwXSvqFEPQf5zbOWaLw6SGG2zAiJpzABRQ/5l1GtuIEb6x8gRPv642o3 V6nEZI4x+dduG5MxgNNdaQss+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzGC8wC Ix8NmCtO2ocQ9Q3CkMFGMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASyZBeje5vhJAUC12xpRP71uORTysSqXkwf5Z3MUAvVD6RYwFT0ssw SD25iyTMdoEObQ1P82nZ9AZQPaf6mq77mm92wxBtL02LyRCoAO6ZFSa3negHKCcR VXJbWiMQImUKj1J8soK+YcF8z8xsoaIO1WAX5foXtJLAsAX4PPu9ABs5uppkPGCM whXF1oJNpLDrMDY/SesixbwOTMUOuouZdbeJrw6cSgpR8LmEd2Ff02cuKqLXkxRm xA5mqMaiheKy+1lN86VgoLMVnwRTLxTlGnyB/KtNeOeA9FkLIxIq7DIMncXg4/qN famQ8XVuYViVTwrVW21HNuEJBAsK5LKn -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:55 2025 by rpki-client