$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft File: xiGEgVH3l79yMQfxTWLGeiE6U-M.mft (raw, json) Hash identifier: p8Ifz0QOiPxJTO4TcRf2qeOcqRkYKw6GVswoRseymuU= Subject key identifier: 1E:D7:72:B7:42:39:44:AC:89:FC:D8:E3:FD:E4:40:9C:31:AF:12:F9 Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft Manifest number: 01CF Signing time: Sat 23 Aug 2025 03:16:03 +0000 Manifest this update: Sat 23 Aug 2025 03:16:02 +0000 Manifest next update: Sat 30 Aug 2025 03:16:02 +0000 Files and hashes: 1: xiGEgVH3l79yMQfxTWLGeiE6U-M.crl (hash: iMTMvncuZSwRQxL/OliVP4A6DoqGB8JDK6lsho3cqkM=) 2: 781637A8FADD11EE880BF37DC4F9AE02.roa (hash: NHs0+oLxPl8uuJffLMiSnsDVJyHvtsfXj9mt3FT2mqU=) 3: AC61350A4E3C11EF9286040CC4F9AE02.roa (hash: TUo7uv4rXTA0iRyimVV1a57fjFNt5Gy9xOb0XovcHoI=) 4: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (hash: AeF6+orX99LwnbHGZiB851tFWKGqrAIMqoROhOgxFpw=) 5: 7755D5B2FADD11EE880BF37DC4F9AE02.roa (hash: 7c9RXUhll7RjmfKdCACTxBkSEfUtF0muR2dkJbiSbMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3 Validity Not Before: Aug 23 03:16:02 2025 GMT Not After : Aug 30 03:16:02 2025 GMT Subject: CN=68a93272-7195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:b0:3b:d4:56:59:b0:96:ec:43:27:f3:4f: 8e:42:31:93:58:43:bc:79:ee:2c:1f:1a:f0:38:71: 15:8f:19:bc:a2:6e:44:a8:33:c8:0a:3e:0c:ea:7b: 01:71:42:7b:c6:b6:04:3d:f3:1f:48:70:93:28:65: 91:05:2b:76:15:8e:7c:46:82:00:e6:03:66:bb:d0: f6:f4:48:10:b3:bd:ba:41:59:42:c5:0b:16:02:96: 8b:f6:41:1e:a9:48:5b:56:13:00:a0:ab:eb:25:1b: 14:0c:dd:d0:f0:55:e9:0e:0b:11:71:3d:57:64:0e: e6:87:f2:ec:a7:1f:5a:af:42:f8:a6:be:ec:d3:46: 8d:46:7a:a4:8b:ea:f0:0f:e7:6c:4f:b8:7e:32:21: 2f:6f:bf:7b:1c:9b:c4:f4:17:76:4f:b5:e1:d7:c4: 00:c6:ab:3b:3f:61:be:d5:29:98:fd:d9:e0:01:b8: 19:c2:3b:0c:27:0e:f1:96:97:fd:ce:82:23:8b:8d: 5f:d3:16:ad:05:86:61:7b:c1:12:db:29:50:e9:23: 87:c0:68:88:16:fd:29:22:53:7f:d7:e9:1f:c0:33: 80:3c:b3:ae:e6:07:be:dc:11:7f:2f:17:c2:da:3b: ef:b6:81:39:a6:16:ff:95:01:6d:40:44:82:cb:5f: f3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D7:72:B7:42:39:44:AC:89:FC:D8:E3:FD:E4:40:9C:31:AF:12:F9 X509v3 Authority Key Identifier: keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:fa:dc:aa:39:8d:f5:0a:10:9f:cf:ea:88:5a:bb:c2:e7:ce: 40:8e:1c:8b:a3:8d:a8:6e:da:bb:ec:e0:fb:17:d7:3a:2c:18: 20:70:39:0a:ba:2f:20:1a:b5:44:0d:ac:7a:77:80:cb:b6:55: 31:98:3c:c8:2e:ee:ba:c1:86:f9:9a:14:f7:2b:e5:8a:4c:ce: 97:dc:f4:52:fd:3c:6a:4f:94:ee:50:90:49:66:f3:8c:ca:a6: c0:bb:1c:07:06:d4:ca:5d:f5:4d:41:0f:d3:c9:d8:c0:cf:5a: 19:94:58:a0:cd:93:0e:12:37:13:e5:52:18:f3:73:c0:ff:f5: 5f:02:8a:1f:07:fe:c8:7b:9e:85:9c:90:c0:70:01:7a:dd:30: b3:da:6c:9a:e3:bf:dc:a0:29:ec:14:b1:75:67:5d:33:02:2e: 7f:36:4e:56:4a:35:66:c3:3b:b8:75:5b:24:c0:79:81:76:6f: e3:9e:8d:15:5c:1c:a7:81:ed:c8:96:05:8f:7f:8f:b3:36:69: e0:6e:ea:ed:db:a1:b6:98:c1:ec:14:5a:21:7d:e9:b1:22:60: 31:c9:25:c0:28:41:b3:e3:c0:08:2f:00:39:df:46:ba:0c:bc: cb:d3:b0:97:7e:62:16:f2:6b:ef:2a:27:df:ef:21:d5:2a:3c: 3f:ae:3f:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKEM2MjE4NDgxNTFGNzk3QkY3MjMxMDdGMTRENjJDNjdB MjEzQTUzRTMwHhcNMjUwODIzMDMxNjAyWhcNMjUwODMwMDMxNjAyWjAYMRYwFAYD VQQDEw02OGE5MzI3Mi03MTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9WwO9RWWbCW7EMn80+OQjGTWEO8ee4sHxrwOHEVjxm8om5EqDPICj4M6nsB cUJ7xrYEPfMfSHCTKGWRBSt2FY58RoIA5gNmu9D29EgQs726QVlCxQsWApaL9kEe qUhbVhMAoKvrJRsUDN3Q8FXpDgsRcT1XZA7mh/Lspx9ar0L4pr7s00aNRnqki+rw D+dsT7h+MiEvb797HJvE9Bd2T7Xh18QAxqs7P2G+1SmY/dngAbgZwjsMJw7xlpf9 zoIji41f0xatBYZhe8ES2ylQ6SOHwGiIFv0pIlN/1+kfwDOAPLOu5ge+3BF/LxfC 2jvvtoE5phb/lQFtQESCy1/ztwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7XcrdC OUSsifzY4/3kQJwxrxL5MB8GA1UdIwQYMBaAFMYhhIFR95e/cjEH8U1ixnohOlPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC81ODk4MjBDMkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3OXlNUWZ4VFdMR2VpRTZV LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hpR0VnVkgzbDc5eU1RZnhUV0xHZWlFNlUtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJDOC81ODk4MjBDMkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi94aUdFZ1ZIM2w3 OXlNUWZ4VFdMR2VpRTZVLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX+tyqOY31ChCfz+qIWrvC585AjhyLo42obtq77OD7F9c6LBggcDkK ui8gGrVEDax6d4DLtlUxmDzILu66wYb5mhT3K+WKTM6X3PRS/TxqT5TuUJBJZvOM yqbAuxwHBtTKXfVNQQ/TydjAz1oZlFigzZMOEjcT5VIY83PA//VfAoofB/7Ie56F nJDAcAF63TCz2mya47/coCnsFLF1Z10zAi5/Nk5WSjVmwzu4dVskwHmBdm/jno0V XBynge3IlgWPf4+zNmngburt26G2mMHsFFohfemxImAxySXAKEGz48AILwA530a6 DLzL07CXfmIW8mvvKiff7yHVKjw/rj9a -----END CERTIFICATE-----Generated at Sat Aug 23 12:37:49 2025 by rpki-client