$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: a08q+Qmb5T5StmLOoxT8MgHGde6JQt5suHvD9g2qEIQ= Subject key identifier: FF:2D:96:E3:3D:F4:99:EF:A1:B6:DA:79:D1:3A:B5:B3:03:88:5B:15 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 0667 Signing time: Fri 22 Aug 2025 22:43:10 +0000 Manifest this update: Fri 22 Aug 2025 22:43:10 +0000 Manifest next update: Fri 29 Aug 2025 22:43:10 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: xn0y4q9gfEZbvqnZN4aSLUsb8K8f53n2XBctWWIrr7s=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xnj1+DqNRGp1sU91Z+zGlbx4vpo9U2+YWkznSk4BLXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Aug 22 22:43:10 2025 GMT Not After : Aug 29 22:43:10 2025 GMT Subject: CN=68a8f27e-8ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8b:85:45:c3:cb:01:a5:55:a7:cf:93:b6:ac: 09:f9:bc:ea:b5:45:44:c2:9a:e3:10:29:75:09:36: 53:82:8a:04:1b:c6:62:5e:f6:d0:cc:d1:db:cf:73: d0:d1:b6:de:25:ab:3e:07:34:eb:61:f7:6b:2b:6e: d7:75:40:10:27:55:e4:77:b5:58:69:dc:85:9b:42: 54:0a:0d:4d:46:d0:79:cd:66:aa:5e:2f:7b:3c:65: c0:4a:67:4e:a3:bb:e8:eb:68:53:b4:91:8f:60:51: 25:e5:5b:35:a9:f7:c5:48:d3:e2:72:09:0d:dd:23: 79:a2:cf:92:15:80:94:99:ea:18:42:7d:c0:d0:09: d9:90:37:28:df:60:c2:91:f8:9e:d2:39:1b:8a:92: 24:67:91:fb:c1:97:38:cb:a5:22:69:3a:4c:bf:c8: 4f:13:46:92:b4:91:93:7c:e6:5b:53:5a:3f:df:29: f8:dd:b6:bd:00:7b:59:4b:65:25:c8:65:e3:57:3e: 9b:d7:41:12:df:94:02:aa:0f:b8:a8:c1:e7:6e:f3: 04:f4:89:0e:d2:7d:34:0c:40:66:8c:5f:f1:5e:88: de:5f:db:1b:6e:65:bd:15:b5:66:1d:62:a4:96:52: 04:92:74:1c:78:7b:8d:eb:b1:7f:e3:40:75:5b:80: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2D:96:E3:3D:F4:99:EF:A1:B6:DA:79:D1:3A:B5:B3:03:88:5B:15 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fd:19:d8:4d:87:40:a9:57:35:cf:1c:a8:9d:59:3c:f0:44: ed:e0:b4:21:b7:56:f7:59:6a:b3:82:97:bd:ba:6c:58:30:e8: 9c:27:f4:3c:50:39:e9:31:01:4f:a7:4e:f4:d3:4d:37:42:03: 11:b1:0a:f6:2b:3d:6b:b9:cd:4b:05:b4:e3:dd:7e:82:f0:98: 4c:4b:62:d2:43:5b:c8:67:5f:46:00:71:8c:cc:45:89:08:2f: c9:8c:96:2e:c7:ec:51:8a:29:d8:45:0d:c7:ce:97:84:68:79: e8:82:62:0d:a4:bc:b1:66:d7:93:be:63:ad:76:af:b9:50:70: e2:9b:7a:1e:d7:ab:01:8d:4e:c0:9c:3a:10:b2:ff:6c:25:75: 19:ce:2b:e6:35:42:f8:62:3b:f8:d5:45:e9:67:2a:02:3d:1e: 21:3e:b2:4a:df:24:fb:2d:5b:9c:3b:40:13:e8:b8:58:b6:9b: 6f:ec:c4:38:1d:d2:f7:02:56:76:26:3e:fc:b8:a5:ae:3c:64: 7d:2b:da:96:f5:d9:6f:2a:da:08:d5:16:70:5c:4a:f3:f9:0c: 58:98:4d:6a:a6:93:a3:14:d0:b6:e6:c5:b9:92:42:79:4c:fe: 2e:02:e6:24:49:33:20:47:d8:66:f5:b4:92:bd:55:fa:47:ee: 49:63:2a:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjUwODIyMjI0MzEwWhcNMjUwODI5MjI0MzEwWjAYMRYwFAYD VQQDEw02OGE4ZjI3ZS04Y2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YuFRcPLAaVVp8+TtqwJ+bzqtUVEwprjECl1CTZTgooEG8ZiXvbQzNHbz3PQ 0bbeJas+BzTrYfdrK27XdUAQJ1Xkd7VYadyFm0JUCg1NRtB5zWaqXi97PGXASmdO o7vo62hTtJGPYFEl5Vs1qffFSNPicgkN3SN5os+SFYCUmeoYQn3A0AnZkDco32DC kfie0jkbipIkZ5H7wZc4y6UiaTpMv8hPE0aStJGTfOZbU1o/3yn43ba9AHtZS2Ul yGXjVz6b10ES35QCqg+4qMHnbvME9IkO0n00DEBmjF/xXojeX9sbbmW9FbVmHWKk llIEknQceHuN67F/40B1W4CtCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8tluM9 9JnvobbaedE6tbMDiFsVMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb/RnYTYdAqVc1zxyonVk88ETt4LQht1b3WWqzgpe9umxYMOicJ/Q8 UDnpMQFPp0700003QgMRsQr2Kz1ruc1LBbTj3X6C8JhMS2LSQ1vIZ19GAHGMzEWJ CC/JjJYux+xRiinYRQ3HzpeEaHnogmINpLyxZteTvmOtdq+5UHDim3oe16sBjU7A nDoQsv9sJXUZzivmNUL4Yjv41UXpZyoCPR4hPrJK3yT7LVucO0AT6LhYtptv7MQ4 HdL3AlZ2Jj78uKWuPGR9K9qW9dlvKtoI1RZwXErz+QxYmE1qppOjFNC25sW5kkJ5 TP4uAuYkSTMgR9hm9bSSvVX6R+5JYypr -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:30 2025 by rpki-client