$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: 9FZZLXhydUkwn6jEP4pLuTbGAtEEeua+niwfjMNUPTs= Subject key identifier: AE:23:B6:40:D3:F3:EC:D8:C9:16:27:B9:A9:2F:D7:9F:86:B4:D7:BB Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0B1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0B0B Signing time: Wed 02 Jul 2025 19:35:36 +0000 Manifest this update: Wed 02 Jul 2025 19:35:36 +0000 Manifest next update: Wed 09 Jul 2025 19:35:36 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: P7IpnCusS4SlQ3vG7lNrtiCd+UgRC9LQOLzWw77eOjU=) 2: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: 2cXl/5f431sLYOEV9wOGgPMtNZFFmZ0haqZGiKbsEGE=) 3: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: UpMy5YvHwAoOrHu9/2m6YmhC+FBzuF02PJm6nhV30kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Jul 2 19:35:36 2025 GMT Not After : Jul 9 19:35:36 2025 GMT Subject: CN=68658a08-ac41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:25:b8:fa:88:14:a3:b5:2e:8c:c7:51:c2: ce:fa:4c:9c:63:f4:d6:15:55:6b:62:7d:93:e2:c9: 55:4b:b6:04:27:63:a7:3b:67:a4:7a:d5:76:b8:d2: 4b:ba:a1:65:ef:30:57:ac:25:40:b4:d4:bf:45:7f: 1e:04:5e:84:3c:e6:0e:85:e0:c6:f3:cd:1c:44:02: 4e:24:ed:b6:98:9b:8e:21:d2:cd:9c:4c:29:71:fd: 86:be:de:37:5b:7e:cd:a1:0b:8e:94:77:af:69:9d: 0c:71:8e:c9:7b:86:27:56:30:6a:97:43:c8:56:3c: 89:70:bd:1e:01:88:3b:05:3f:7d:2a:82:0e:06:c4: 66:a4:2e:12:63:0a:08:eb:d2:1d:89:91:99:c7:82: 4b:0a:8c:4d:a7:de:d6:70:b4:8d:bb:13:93:98:d2: d9:61:2d:a2:e1:d6:18:b7:0d:fa:d8:31:95:b5:f7: ec:88:d9:5d:96:ec:fc:47:a8:e5:5d:77:c7:65:fe: 4d:ef:a9:9b:4b:32:5e:e2:df:07:38:7f:77:bf:f3: 39:6f:4d:4e:ea:7c:35:30:ab:5d:74:79:29:5b:7e: 51:7c:09:d6:14:0a:9b:a0:f3:f4:60:59:5d:34:cb: 91:83:09:19:18:4c:2c:81:aa:a0:20:65:34:fb:83: 35:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:23:B6:40:D3:F3:EC:D8:C9:16:27:B9:A9:2F:D7:9F:86:B4:D7:BB X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:94:ce:33:79:65:ac:75:2a:e7:30:05:db:c9:ae:ea:3b:0f: 72:67:bc:55:35:4b:61:ac:a7:eb:44:76:8a:5a:04:e1:8d:ce: dd:c9:20:0d:a9:92:60:0b:39:b9:bd:12:c7:26:c9:f3:04:1f: f0:af:63:12:28:11:01:8b:18:29:72:16:11:af:5c:b6:6c:77: 27:45:a2:20:6b:a2:15:02:f1:61:94:da:67:c2:72:0e:86:0e: 03:7f:5e:f8:88:bc:b6:4c:14:45:51:92:4e:48:76:5e:ff:81: 76:89:7e:f2:a2:8e:6b:62:48:fd:b7:6c:82:f0:0e:d0:6c:12: 6c:5c:87:4e:4f:b4:68:a8:2f:a2:ce:6a:0b:3d:44:6d:9e:be: f3:18:fc:89:d2:ce:db:1c:37:8a:6e:f7:09:7b:74:ed:d7:b1: 02:5e:e7:91:cc:ae:6b:49:f0:fa:23:4c:a5:ec:1e:43:3f:e7: 48:a5:a0:97:18:79:e4:44:0e:cb:e7:d9:77:28:04:6d:c9:04: 02:cf:09:20:06:f9:72:10:ca:4b:3b:ff:56:4b:49:df:f5:52: d3:44:be:8f:10:e5:2e:6a:ad:cf:dc:c7:a5:ca:1a:a6:f4:b5: 0f:c4:0e:7a:44:c6:7a:a1:f7:54:0e:11:b8:24:82:4e:25:a1: b0:3a:26:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjUwNzAyMTkzNTM2WhcNMjUwNzA5MTkzNTM2WjAYMRYwFAYD VQQDEw02ODY1OGEwOC1hYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+kluPqIFKO1LozHUcLO+kycY/TWFVVrYn2T4slVS7YEJ2OnO2eketV2uNJL uqFl7zBXrCVAtNS/RX8eBF6EPOYOheDG880cRAJOJO22mJuOIdLNnEwpcf2Gvt43 W37NoQuOlHevaZ0McY7Je4YnVjBql0PIVjyJcL0eAYg7BT99KoIOBsRmpC4SYwoI 69IdiZGZx4JLCoxNp97WcLSNuxOTmNLZYS2i4dYYtw362DGVtffsiNldluz8R6jl XXfHZf5N76mbSzJe4t8HOH93v/M5b01O6nw1MKtddHkpW35RfAnWFAqboPP0YFld NMuRgwkZGEwsgaqgIGU0+4M1RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4jtkDT 8+zYyRYnuakv15+GtNe7MB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2lM4zeWWsdSrnMAXbya7qOw9yZ7xVNUthrKfrRHaKWgThjc7dySAN qZJgCzm5vRLHJsnzBB/wr2MSKBEBixgpchYRr1y2bHcnRaIga6IVAvFhlNpnwnIO hg4Df174iLy2TBRFUZJOSHZe/4F2iX7yoo5rYkj9t2yC8A7QbBJsXIdOT7RoqC+i zmoLPURtnr7zGPyJ0s7bHDeKbvcJe3Tt17ECXueRzK5rSfD6I0yl7B5DP+dIpaCX GHnkRA7L59l3KARtyQQCzwkgBvlyEMpLO/9WS0nf9VLTRL6PEOUuaq3P3Melyhqm 9LUPxA56RMZ6ofdUDhG4JIJOJaGwOiY0 -----END CERTIFICATE-----Generated at Fri Jul 4 19:15:19 2025 by rpki-client