$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: EmOafZNnzsAyW3CC8DVyHCZ/cMCb9Hby1Hss+jJnG4E= Subject key identifier: A4:26:45:B9:7C:C0:A4:FE:D3:2C:89:18:FF:91:69:48:C0:E1:C9:11 Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0B35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0B25 Signing time: Fri 22 Aug 2025 19:27:17 +0000 Manifest this update: Fri 22 Aug 2025 19:27:16 +0000 Manifest next update: Fri 29 Aug 2025 19:27:16 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: MFxmO5na6UGVgtu+6D1Yr3sDskzajFqgw43X3NXp4VM=) 2: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: 2cXl/5f431sLYOEV9wOGgPMtNZFFmZ0haqZGiKbsEGE=) 3: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: UpMy5YvHwAoOrHu9/2m6YmhC+FBzuF02PJm6nhV30kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2869 (0xb35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Aug 22 19:27:16 2025 GMT Not After : Aug 29 19:27:16 2025 GMT Subject: CN=68a8c494-7a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:3a:ab:f0:25:ce:8a:9e:f4:25:f1:8d:b3: 99:a1:c7:6a:4f:2d:99:6f:58:07:67:95:b4:b6:a8: 6d:41:4b:b4:a5:44:b1:61:66:9a:2d:a6:cd:9f:03: 05:ac:b0:84:af:1e:36:d7:2f:9e:14:e1:0a:06:1a: c6:3c:ce:bf:d3:ba:e2:b2:1c:03:3a:16:3b:1d:94: 01:01:94:bf:63:87:ff:8f:94:ff:fc:42:70:76:2b: a7:8b:d8:fc:05:b8:f9:17:58:1d:f1:22:4b:7e:63: e4:7b:31:a7:b4:1a:98:01:0a:40:9a:25:08:27:ef: fa:80:b8:bb:cf:52:24:88:c0:fe:70:c4:fc:0a:d3: b1:04:aa:28:89:2e:6e:7f:bc:2b:5f:41:bb:9b:af: 4b:54:22:9a:ba:c8:2b:1a:a8:67:05:4d:a6:60:ed: 62:90:6b:4e:f1:7c:d0:84:04:42:70:ed:0a:15:05: 74:c6:55:fb:ce:e3:00:69:00:57:10:af:51:2a:ab: f2:6b:f2:a8:b9:05:dc:cc:1d:e3:4c:31:e3:58:ad: 7c:67:2c:7f:c5:07:52:82:b4:5f:c7:51:42:64:77: 42:ef:ab:2f:64:65:63:af:a0:71:0d:f9:3e:42:c8: dc:13:c4:00:29:eb:54:a3:57:91:f0:6b:f4:79:99: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:26:45:B9:7C:C0:A4:FE:D3:2C:89:18:FF:91:69:48:C0:E1:C9:11 X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:bf:0a:f2:4d:88:2b:a1:50:b7:d9:25:92:42:06:0e:f0:9f: cd:16:65:28:55:48:71:36:41:9e:93:2b:86:8f:53:2e:ff:dd: 06:ed:b2:88:31:c7:4f:85:64:a8:7e:3c:d2:a4:75:9a:31:3c: a4:dd:9d:ca:68:1c:57:38:4a:3c:7b:06:d6:84:10:c8:2d:86: 04:df:2a:32:46:12:97:1d:41:4b:02:59:76:68:a7:99:b3:5a: ac:d9:f1:c8:1b:3b:8d:f2:54:d2:e8:64:d8:c0:16:ec:0e:b9: 66:e9:97:2f:fc:3f:41:c6:ed:5b:ec:c3:9f:2b:0e:43:30:32: 95:58:b6:cd:8c:a4:ec:30:71:67:18:f8:d6:7a:b6:af:97:70: a1:e6:8f:8c:24:23:19:21:ff:a0:48:15:22:d4:35:3f:5a:28: 81:23:6b:65:c2:cb:ae:39:c9:63:90:22:19:fa:db:53:d8:6e: fc:4c:31:13:0b:a8:1b:6e:3c:e9:e4:12:06:7d:73:24:1a:20: 11:41:a7:9e:c0:75:cf:0f:3b:d5:b5:e6:df:d4:66:75:e1:9d: 11:56:92:84:30:6d:72:f1:d5:ae:6f:13:b2:8f:8f:46:f6:f5: d6:5c:d5:a7:06:c3:16:aa:4b:43:87:ff:c7:c4:ab:63:74:cc: bb:ac:45:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjUwODIyMTkyNzE2WhcNMjUwODI5MTkyNzE2WjAYMRYwFAYD VQQDEw02OGE4YzQ5NC03YTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fA6q/Alzoqe9CXxjbOZocdqTy2Zb1gHZ5W0tqhtQUu0pUSxYWaaLabNnwMF rLCErx421y+eFOEKBhrGPM6/07rishwDOhY7HZQBAZS/Y4f/j5T//EJwdiuni9j8 Bbj5F1gd8SJLfmPkezGntBqYAQpAmiUIJ+/6gLi7z1IkiMD+cMT8CtOxBKooiS5u f7wrX0G7m69LVCKausgrGqhnBU2mYO1ikGtO8XzQhARCcO0KFQV0xlX7zuMAaQBX EK9RKqvya/KouQXczB3jTDHjWK18Zyx/xQdSgrRfx1FCZHdC76svZGVjr6BxDfk+ QsjcE8QAKetUo1eR8Gv0eZlbSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQmRbl8 wKT+0yyJGP+RaUjA4ckRMB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmvwryTYgroVC32SWSQgYO8J/NFmUoVUhxNkGekyuGj1Mu/90G7bKI McdPhWSofjzSpHWaMTyk3Z3KaBxXOEo8ewbWhBDILYYE3yoyRhKXHUFLAll2aKeZ s1qs2fHIGzuN8lTS6GTYwBbsDrlm6Zcv/D9Bxu1b7MOfKw5DMDKVWLbNjKTsMHFn GPjWeravl3Ch5o+MJCMZIf+gSBUi1DU/WiiBI2tlwsuuOcljkCIZ+ttT2G78TDET C6gbbjzp5BIGfXMkGiARQaeewHXPDzvVtebf1GZ14Z0RVpKEMG1y8dWubxOyj49G 9vXWXNWnBsMWqktDh//HxKtjdMy7rEUP -----END CERTIFICATE-----Generated at Sun Aug 24 09:40:10 2025 by rpki-client