$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: 5PYZItXouUxI/D9L8+sruNsr6TBOIhaflmhZpn/kZPM= Subject key identifier: D6:97:B4:4B:31:27:D9:71:15:EB:B6:15:1D:45:31:87:C2:84:30:7C Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 2F Signing time: Sat 23 Aug 2025 07:56:54 +0000 Manifest this update: Sat 23 Aug 2025 07:56:54 +0000 Manifest next update: Sat 30 Aug 2025 07:56:54 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: pmhtCL92SuV6P1ryOkr7IBpgQRqRaD+LbumTk9Wp+Wo=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: rIKd0p3e0QLGiCh3oOuC0PziP82slPgSfQtsZGWJI0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Aug 23 07:56:54 2025 GMT Not After : Aug 30 07:56:54 2025 GMT Subject: CN=68a97446-7107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9f:88:d8:45:55:92:86:47:70:24:8c:1d:2f: 62:f9:29:f6:1b:ae:ee:48:fd:20:aa:16:a1:51:76: bc:af:a9:82:a3:3e:e1:c8:1e:27:8a:60:82:a3:3d: 3c:de:ab:3c:bb:1d:44:1f:ae:2b:a3:e8:ed:72:cd: 8f:f5:56:3d:2b:23:26:4a:03:90:b5:a8:2e:68:b3: 9f:f3:64:eb:02:51:47:b4:6b:7b:00:32:4f:21:5e: 54:65:00:e9:15:64:22:69:35:e2:a3:e6:f6:ac:1d: 54:7f:b5:cf:1d:88:bc:31:7e:cb:80:6d:3c:71:47: 59:19:fc:53:df:34:80:04:85:23:6b:ed:59:54:e0: 96:72:86:8f:06:17:2e:f0:37:d8:dc:0a:dc:81:ed: b9:23:b3:3d:1d:50:96:c0:79:45:80:2a:26:25:16: b4:5f:2d:3f:01:2f:9b:cd:6a:bf:33:24:53:6b:da: 0c:f2:07:71:6b:61:52:cb:37:07:68:75:7e:1a:7e: 64:48:4f:a6:69:08:c1:68:68:11:b9:c5:13:b9:a5: fa:da:eb:35:e0:7d:b7:7a:87:23:ec:dc:da:59:b6: 1b:a0:31:a8:54:61:35:a2:4c:c5:28:c4:f7:b7:f8: 8c:10:c3:bb:5a:7b:2c:de:9e:63:07:44:f1:2e:74: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:97:B4:4B:31:27:D9:71:15:EB:B6:15:1D:45:31:87:C2:84:30:7C X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:45:06:f1:f7:18:c5:c1:80:b8:d5:e5:45:ad:d6:1c:48:c7: 69:26:4c:e0:40:52:7a:8c:b7:d4:96:45:3e:a3:8e:10:ba:97: 19:5e:de:07:12:f8:6a:ab:e2:36:30:00:7a:e3:b0:3c:b8:94: 33:5f:24:5f:e6:6d:d4:56:1f:96:96:ec:86:f5:73:f5:80:56: 07:8d:39:30:5a:b5:1d:a4:28:1d:d2:cd:3a:84:37:06:a8:9e: 13:6a:68:58:77:0e:b3:4f:78:d4:b2:41:19:1c:77:2b:72:65: b2:a1:d1:5e:34:bb:b8:9c:8d:16:f1:bf:86:1d:4b:22:af:f5: af:2f:4f:79:b8:64:6e:15:ae:b9:a9:b2:81:1a:d5:d2:04:c4: 4f:3d:0d:98:3b:ba:fe:c6:b4:b2:2c:b8:07:c4:ad:4c:b1:c2: 55:92:ad:96:6f:58:5f:0c:1b:6e:9d:4c:96:07:64:4d:7d:31: c5:2b:f1:5d:ef:b5:12:08:6d:a7:54:2f:3f:61:5f:e8:a9:e4: 8c:9d:97:1b:d2:a0:20:4e:d4:bd:32:a7:ff:ad:c3:20:60:4a: 21:b6:e6:83:36:3e:b8:36:34:c1:90:1b:fd:5a:7a:ca:31:d1: f1:fb:63:e0:89:9f:c7:73:f4:40:7b:8c:34:91:7a:24:6e:6b: 5f:c4:4b:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoQzQyNkQ0MjY0MDA2NzY1NTU5NzNERkVERTRFQjI2NDRC RUVEMjg3MzAeFw0yNTA4MjMwNzU2NTRaFw0yNTA4MzAwNzU2NTRaMBgxFjAUBgNV BAMTDTY4YTk3NDQ2LTcxMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhn4jYRVWShkdwJIwdL2L5KfYbru5I/SCqFqFRdryvqYKjPuHIHieKYIKjPTze qzy7HUQfriuj6O1yzY/1Vj0rIyZKA5C1qC5os5/zZOsCUUe0a3sAMk8hXlRlAOkV ZCJpNeKj5vasHVR/tc8diLwxfsuAbTxxR1kZ/FPfNIAEhSNr7VlU4JZyho8GFy7w N9jcCtyB7bkjsz0dUJbAeUWAKiYlFrRfLT8BL5vNar8zJFNr2gzyB3FrYVLLNwdo dX4afmRIT6ZpCMFoaBG5xRO5pfra6zXgfbd6hyPs3NpZthugMahUYTWiTMUoxPe3 +IwQw7taeyzenmMHRPEudIerAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1pe0SzEn 2XEV67YVHUUxh8KEMHwwHwYDVR0jBBgwFoAUxCbUJkAGdlVZc9/t5OsmRL7tKHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0MxRjczMDcyM0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveENiVUprQUdkbFZaYzlfdDVPc21STDd0S0hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0MxRjczMDcyM0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxW WmM5X3Q1T3NtUkw3dEtITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRFBvH3GMXBgLjV5UWt1hxIx2kmTOBAUnqMt9SWRT6jjhC6lxle3gcS +Gqr4jYwAHrjsDy4lDNfJF/mbdRWH5aW7Ib1c/WAVgeNOTBatR2kKB3SzTqENwao nhNqaFh3DrNPeNSyQRkcdytyZbKh0V40u7icjRbxv4YdSyKv9a8vT3m4ZG4Vrrmp soEa1dIExE89DZg7uv7GtLIsuAfErUyxwlWSrZZvWF8MG26dTJYHZE19McUr8V3v tRIIbadULz9hX+ip5IydlxvSoCBO1L0yp/+twyBgSiG25oM2Prg2NMGQG/1aesox 0fH7Y+CJn8dz9EB7jDSReiRua1/ES9M= -----END CERTIFICATE-----Generated at Sat Aug 23 12:35:41 2025 by rpki-client