$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft File: xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft (raw, json) Hash identifier: AHD0JRQ/WKKUBB6G36JLfUgZI3w7zDF49aWnNq6M4XA= Subject key identifier: 4B:AA:A6:BE:5E:1B:6D:BB:23:B4:ED:C2:14:B2:47:91:AB:EF:6D:22 Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft Manifest number: 0668 Signing time: Fri 22 Aug 2025 22:39:07 +0000 Manifest this update: Fri 22 Aug 2025 22:39:07 +0000 Manifest next update: Fri 29 Aug 2025 22:39:07 +0000 Files and hashes: 1: xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl (hash: 4X3DfPZLKt1u8rZ9Fnfw3A21scDXijUWjq6TI76E6WM=) 2: 807CB298903A11EBA9783756C4F9AE02.roa (hash: HcRkeL0L46StqN8XUYCiDhZBU5a1szFT/RluEKL79UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Validity Not Before: Aug 22 22:39:07 2025 GMT Not After : Aug 29 22:39:07 2025 GMT Subject: CN=68a8f18b-6455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:26:4d:d3:dd:b7:21:13:bd:72:c8:64:c2:08: 5f:10:f9:e5:08:ab:e7:c1:ed:51:48:16:cd:76:38: d3:2e:c4:40:5b:87:c9:f0:ab:f0:e4:89:f9:cd:93: 03:56:44:41:4c:b0:33:d1:30:cd:26:b1:46:c7:19: ab:a1:eb:c5:70:4c:85:f5:e2:53:f0:3c:db:b8:a6: b4:7e:6f:c9:45:dd:4e:25:bf:e0:1b:c5:14:3c:38: 9a:fc:7d:09:e7:e4:ba:a5:d1:a4:a0:0a:4f:10:d5: 15:ab:8a:68:95:1c:a0:22:82:f6:55:23:67:f7:3c: bb:e3:a3:64:8b:d9:da:a9:57:27:86:c9:73:9e:d9: 81:b6:b9:b0:15:56:24:cc:4f:60:52:91:5d:ff:b7: ea:c1:64:36:91:42:85:c2:98:f9:e2:c2:02:31:b4: f6:e8:10:c7:18:da:9f:05:de:5f:18:48:7e:59:c6: 42:8d:a8:50:ad:78:f1:b7:25:1e:5a:d7:b4:68:6f: a4:ce:b9:c2:e2:47:ee:1c:b3:ff:d8:da:d4:6c:90: 0a:86:bd:e4:87:cf:10:6e:27:ff:aa:de:4f:88:66: 79:f7:f9:07:6b:ab:c8:e4:0f:1a:53:e0:76:da:2b: 37:8a:c9:68:9c:44:fa:41:ef:4c:f0:80:b9:04:5d: 19:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AA:A6:BE:5E:1B:6D:BB:23:B4:ED:C2:14:B2:47:91:AB:EF:6D:22 X509v3 Authority Key Identifier: keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:66:2c:be:05:68:47:76:fd:0e:a9:fe:e4:e8:71:db:18:be: 3c:a2:29:1e:79:2e:26:0e:48:02:fa:f5:c7:64:99:06:d7:d5: bf:7d:c4:61:10:be:1a:62:96:ff:42:17:63:f6:83:51:0d:f8: a8:75:cc:ba:3c:64:99:1a:6f:c1:ec:f6:36:21:39:1c:1b:e0: 13:9f:17:ac:09:46:c8:f0:75:70:55:42:aa:59:fd:6b:c3:ba: c8:a0:8b:63:6d:8b:77:d3:5a:1f:90:8f:5d:de:28:5b:f2:60: 96:b2:59:1e:2e:58:aa:88:24:30:9a:ec:c0:8f:ae:a4:42:01: cc:eb:45:4c:86:88:46:3e:18:39:01:fe:5a:4c:87:c9:9d:8a: 0d:c2:fe:5d:f0:c7:c3:57:7f:ee:b5:71:8e:61:86:bd:42:7f: da:b1:ac:d9:92:aa:84:4f:cf:70:fe:64:3e:f8:b2:b0:05:9b: 8f:9e:f5:e2:59:13:7b:cb:a6:c5:4d:99:aa:2e:12:c1:c6:3b: bb:c2:98:39:b9:17:9f:88:c6:0e:20:8b:29:6b:87:a3:3a:b7: 3d:f5:41:ac:9e:67:45:42:58:10:8e:ad:d0:69:8b:d0:72:48: 84:96:de:4e:69:7d:b5:8a:67:9a:fb:d5:a3:27:6d:f0:e3:b5: e2:68:05:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNjYxMTAvBgNVBAUTKEM0NTVCMDg2QkFCODY0N0NEMjUxMENBODMyNDFFNzAw MTRDRDhBNDQwHhcNMjUwODIyMjIzOTA3WhcNMjUwODI5MjIzOTA3WjAYMRYwFAYD VQQDEw02OGE4ZjE4Yi02NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniZN0923IRO9cshkwghfEPnlCKvnwe1RSBbNdjjTLsRAW4fJ8Kvw5In5zZMD VkRBTLAz0TDNJrFGxxmroevFcEyF9eJT8DzbuKa0fm/JRd1OJb/gG8UUPDia/H0J 5+S6pdGkoApPENUVq4polRygIoL2VSNn9zy746Nki9naqVcnhslzntmBtrmwFVYk zE9gUpFd/7fqwWQ2kUKFwpj54sICMbT26BDHGNqfBd5fGEh+WcZCjahQrXjxtyUe Wte0aG+kzrnC4kfuHLP/2NrUbJAKhr3kh88Qbif/qt5PiGZ59/kHa6vI5A8aU+B2 2is3islonET6Qe9M8IC5BF0Z8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuqpr5e G227I7TtwhSyR5Gr720iMB8GA1UdIwQYMBaAFMRVsIa6uGR80lEMqDJB5wAUzYpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I2Ni9FNUM0RDMyNjkw MzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpIelNVUXlvTWtIbkFCVE5p a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hGV3docnE0Wkh6U1VReW9Na0huQUJUTmlrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I2Ni9FNUM0RDMyNjkwMzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpI elNVUXlvTWtIbkFCVE5pa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Ziy+BWhHdv0Oqf7k6HHbGL48oikeeS4mDkgC+vXHZJkG19W/fcRh EL4aYpb/Qhdj9oNRDfiodcy6PGSZGm/B7PY2ITkcG+ATnxesCUbI8HVwVUKqWf1r w7rIoItjbYt301ofkI9d3ihb8mCWslkeLliqiCQwmuzAj66kQgHM60VMhohGPhg5 Af5aTIfJnYoNwv5d8MfDV3/utXGOYYa9Qn/asazZkqqET89w/mQ++LKwBZuPnvXi WRN7y6bFTZmqLhLBxju7wpg5uRefiMYOIIspa4ejOrc99UGsnmdFQlgQjq3QaYvQ ckiElt5OaX21imea+9WjJ23w47XiaAUD -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:53 2025 by rpki-client