$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: 1fO3bi4ZkkfFpXNvcQ8y4gvxVnENjlMQs+KFUsBs5ZA= Subject key identifier: 82:E8:4E:44:64:8E:93:73:69:90:B5:22:84:2D:D9:32:CE:76:C3:8A Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0E5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0E3F Signing time: Wed 02 Jul 2025 17:59:43 +0000 Manifest this update: Wed 02 Jul 2025 17:59:42 +0000 Manifest next update: Wed 09 Jul 2025 17:59:42 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: yp/OBw/Hfq1dZCptAdbtpGM2ZpqAUlW8VX8oAYc66e4=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=) 4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3677 (0xe5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Jul 2 17:59:42 2025 GMT Not After : Jul 9 17:59:42 2025 GMT Subject: CN=6865738f-588e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:23:50:f2:77:8c:66:e8:3e:47:35:32:5a: a0:39:11:54:d2:dc:70:93:26:af:12:4d:fa:f0:80: 3e:98:d8:fa:0e:ea:fb:aa:99:a4:63:de:43:f0:d6: f8:94:7f:8b:ad:93:1e:4c:a2:3d:f4:19:2f:00:95: 21:c9:ba:e5:3b:b7:f0:f1:c7:64:ea:86:18:70:ab: f3:e1:ea:8d:ca:e5:b4:74:d1:5b:cb:2f:62:1e:e9: 9a:b5:61:9d:8c:9a:c4:5e:aa:26:05:8a:e7:f9:71: 59:d4:e9:72:c6:ba:bf:b8:4b:09:fd:bb:c7:a1:d5: c3:43:fd:43:bb:b3:fe:33:32:c9:74:d7:a5:f0:f8: 8d:42:3b:7d:37:ac:0c:35:01:af:8b:72:3a:ba:d3: 23:90:61:83:34:b3:de:dd:fe:f2:66:c7:3b:74:78: 5a:e6:2b:54:8e:ea:b4:55:8d:ba:66:32:8e:28:56: 4c:5b:46:95:fd:ae:1c:49:a1:86:55:35:4b:c1:7b: db:3f:f0:80:f5:db:2c:29:b7:43:93:e5:68:5a:07: af:2b:ee:04:fe:6b:4b:a1:61:cd:15:0a:ca:f3:02: 40:a7:18:58:f7:37:62:12:5f:cb:79:94:bd:ec:f5: 4e:1e:2b:52:c2:c7:bb:c7:eb:69:62:58:10:1b:05: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E8:4E:44:64:8E:93:73:69:90:B5:22:84:2D:D9:32:CE:76:C3:8A X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fc:72:49:15:fc:59:6c:92:79:79:56:f2:6b:05:f4:41:e8: 73:ea:10:4b:15:9f:5b:f4:eb:bb:dd:6c:29:11:57:b3:df:f1: bb:a3:8a:68:c6:e7:73:7d:ae:65:5f:44:eb:a1:f1:5c:65:70: d5:ab:65:0f:b7:a3:0e:c1:08:6a:43:11:79:45:ba:68:34:73: 9c:84:28:02:0f:31:e9:2b:95:f1:e4:a3:26:e9:00:2e:84:19: 82:48:e4:a9:59:3c:00:50:2a:e0:fe:51:80:bf:a9:ef:d3:13: 73:8b:41:77:16:f5:15:b2:03:77:68:c9:dd:27:0b:bd:c3:fe: 4d:be:de:55:3b:dc:ce:00:6a:2c:0d:db:6c:9b:4a:71:c8:fa: 9f:13:5b:fe:e2:e3:23:cf:de:2c:31:39:af:dc:a5:05:7c:bd: 03:a1:d0:f0:66:49:d9:eb:b1:37:1b:1f:88:a5:d4:70:e0:c7: f0:53:9f:18:5c:8f:ac:bf:84:34:10:87:f6:99:55:d4:e1:82: ab:25:80:38:39:6b:4e:5e:db:f7:f9:c8:ee:83:70:fd:02:c5: 57:b9:08:1b:26:0d:90:02:e1:da:5a:1e:b1:75:e6:22:bc:12: 70:cd:91:af:e1:7d:48:d3:cd:7d:6f:a0:1e:7e:93:23:93:2d: c2:06:1b:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjUwNzAyMTc1OTQyWhcNMjUwNzA5MTc1OTQyWjAYMRYwFAYD VQQDEw02ODY1NzM4Zi01ODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy78jUPJ3jGboPkc1MlqgORFU0txwkyavEk368IA+mNj6Dur7qpmkY95D8Nb4 lH+LrZMeTKI99BkvAJUhybrlO7fw8cdk6oYYcKvz4eqNyuW0dNFbyy9iHumatWGd jJrEXqomBYrn+XFZ1Olyxrq/uEsJ/bvHodXDQ/1Du7P+MzLJdNel8PiNQjt9N6wM NQGvi3I6utMjkGGDNLPe3f7yZsc7dHha5itUjuq0VY26ZjKOKFZMW0aV/a4cSaGG VTVLwXvbP/CA9dssKbdDk+VoWgevK+4E/mtLoWHNFQrK8wJApxhY9zdiEl/LeZS9 7PVOHitSwse7x+tpYlgQGwUQkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILoTkRk jpNzaZC1IoQt2TLOdsOKMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt/HJJFfxZbJJ5eVbyawX0Qehz6hBLFZ9b9Ou73WwpEVez3/G7o4po xudzfa5lX0TrofFcZXDVq2UPt6MOwQhqQxF5RbpoNHOchCgCDzHpK5Xx5KMm6QAu hBmCSOSpWTwAUCrg/lGAv6nv0xNzi0F3FvUVsgN3aMndJwu9w/5Nvt5VO9zOAGos Ddtsm0pxyPqfE1v+4uMjz94sMTmv3KUFfL0DodDwZknZ67E3Gx+IpdRw4MfwU58Y XI+sv4Q0EIf2mVXU4YKrJYA4OWtOXtv3+cjug3D9AsVXuQgbJg2QAuHaWh6xdeYi vBJwzZGv4X1I0819b6AefpMjky3CBhuh -----END CERTIFICATE-----Generated at Thu Jul 3 08:05:20 2025 by rpki-client