$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: rnG+4AQXQweq3hLXtuhZtS5Jpy674wafFIVPwFuyShA= Subject key identifier: 7B:D9:24:9B:5F:38:17:C1:71:2F:FA:7B:B2:57:3B:96:42:70:87:7E Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 34C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 34B9 Signing time: Fri 22 Aug 2025 14:39:11 +0000 Manifest this update: Fri 22 Aug 2025 14:39:11 +0000 Manifest next update: Fri 29 Aug 2025 14:39:11 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: vuGkrOn2fHPeJGLea3T5tTaITDGJZtWiwu0hqXZmlCc=) 2: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: m1Ja+K+BQF88h58Y18w9A7vu3WiRuOsB65pKsql8BvI=) 3: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: Zl4gUZhHt66LNUFLaLmernm+th1hHU0/5O3LszjxBds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13506 (0x34c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Aug 22 14:39:11 2025 GMT Not After : Aug 29 14:39:11 2025 GMT Subject: CN=68a8810f-4493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:c9:38:a4:3f:36:3c:c4:85:ab:8a:1e:a4: 91:72:3a:72:59:50:09:92:7b:3e:cd:7e:85:fb:8d: cd:73:03:e6:4f:fd:11:0e:7e:8a:6d:a0:b0:14:7f: 84:b7:62:cb:04:b8:d3:8a:76:16:fb:eb:d7:b5:45: f9:7a:c4:b8:c2:f5:1b:a7:01:51:ef:71:3a:0f:1f: 49:61:a5:4c:f3:21:a8:ac:5d:97:fb:35:ae:c8:1f: 55:6a:59:e6:0f:55:81:d6:66:02:8c:d0:fc:84:ac: 17:d7:7a:d0:f4:6c:74:47:31:93:fa:71:db:67:de: 68:db:46:5b:f5:2f:f3:ff:43:bb:27:f8:a3:3d:60: e1:ea:85:ac:d2:2c:88:ac:3b:27:d1:d0:c7:00:e4: 2b:9c:85:9e:ec:7e:0b:44:d0:8d:92:3f:e0:f9:43: c9:43:4a:48:24:e8:49:2a:8d:2f:77:6d:d6:19:72: 51:0f:e7:a5:63:0b:00:7a:7c:d2:a0:0e:90:50:ac: 8c:20:e6:d2:7b:3f:67:cd:e8:e6:9d:fb:5d:19:cb: c4:09:ec:df:d1:72:e9:be:37:44:9e:24:16:3c:ef: 77:b9:fc:c1:93:fc:6d:23:e2:cd:7d:e2:2f:a5:e6: 3d:48:cd:73:f3:53:52:59:87:9a:3d:55:2e:18:4e: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:24:9B:5F:38:17:C1:71:2F:FA:7B:B2:57:3B:96:42:70:87:7E X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c9:33:84:84:d0:76:c1:58:53:55:ab:14:d0:3c:71:dc:66: cc:3d:d9:c2:a8:c2:43:a8:a9:3e:1c:0f:bb:81:4c:b6:12:ce: 27:3d:1b:93:ad:70:49:91:6f:0a:be:67:8f:d3:9f:d6:bc:35: 4b:01:f9:39:18:07:54:c7:e4:41:b1:5a:25:f0:26:6a:84:46: fb:a4:56:11:af:32:26:ef:2a:ea:c5:d3:12:47:53:99:a5:51: 96:5d:cf:46:1a:1e:90:ae:f4:2f:e5:bd:50:b2:86:c9:a6:17: 89:e9:75:85:a4:b5:7f:70:30:ed:19:f1:50:4a:85:6b:e6:6c: 19:14:08:51:df:0d:93:84:e3:1a:a6:7c:33:82:ed:44:7f:db: 34:07:26:08:ac:79:c6:ce:bc:e2:be:0a:15:da:2c:da:76:a9: f3:74:34:ff:1e:f6:66:ee:0d:66:4b:3b:76:c4:1c:91:e9:81: db:66:6f:3c:2d:91:9b:d7:dc:64:87:0f:f0:5a:52:22:24:6c: e6:d6:80:f4:dd:8f:dd:7c:d4:bb:6f:a7:63:77:b0:c7:fe:ae: 2a:4c:87:1d:c8:87:7e:c8:ab:1e:d8:4a:34:82:37:36:d3:b8: b2:a6:bc:23:0d:ff:c3:8a:4f:05:c5:61:c7:77:af:ca:02:8f: 77:b2:3c:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjUwODIyMTQzOTExWhcNMjUwODI5MTQzOTExWjAYMRYwFAYD VQQDEw02OGE4ODEwZi00NDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E/JOKQ/NjzEhauKHqSRcjpyWVAJkns+zX6F+43NcwPmT/0RDn6KbaCwFH+E t2LLBLjTinYW++vXtUX5esS4wvUbpwFR73E6Dx9JYaVM8yGorF2X+zWuyB9Valnm D1WB1mYCjND8hKwX13rQ9Gx0RzGT+nHbZ95o20Zb9S/z/0O7J/ijPWDh6oWs0iyI rDsn0dDHAOQrnIWe7H4LRNCNkj/g+UPJQ0pIJOhJKo0vd23WGXJRD+elYwsAenzS oA6QUKyMIObSez9nzejmnftdGcvECezf0XLpvjdEniQWPO93ufzBk/xtI+LNfeIv peY9SM1z81NSWYeaPVUuGE6NXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvZJJtf OBfBcS/6e7JXO5ZCcId+MB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTyTOEhNB2wVhTVasU0Dxx3GbMPdnCqMJDqKk+HA+7gUy2Es4nPRuT rXBJkW8KvmeP05/WvDVLAfk5GAdUx+RBsVol8CZqhEb7pFYRrzIm7yrqxdMSR1OZ pVGWXc9GGh6QrvQv5b1QsobJpheJ6XWFpLV/cDDtGfFQSoVr5mwZFAhR3w2ThOMa pnwzgu1Ef9s0ByYIrHnGzrzivgoV2izadqnzdDT/HvZm7g1mSzt2xByR6YHbZm88 LZGb19xkhw/wWlIiJGzm1oD03Y/dfNS7b6djd7DH/q4qTIcdyId+yKse2Eo0gjc2 07iyprwjDf/Dik8FxWHHd6/KAo93sjxQ -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:21 2025 by rpki-client