$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft File: xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json) Hash identifier: Ay9LnmqyrGkSDqp2OsMfW6SeB3W/56i8MIrh6RBCmI0= Subject key identifier: 20:5A:7F:F0:D2:CA:AD:D3:0E:46:E6:3F:B1:A8:32:8E:DB:13:C0:75 Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Certificate serial: 075A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft Manifest number: 074E Signing time: Fri 22 Aug 2025 21:52:58 +0000 Manifest this update: Fri 22 Aug 2025 21:52:57 +0000 Manifest next update: Fri 29 Aug 2025 21:52:57 +0000 Files and hashes: 1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: 24QeVo0CBxIRfAsgw33gVm45EaEaQRE6LaU2aaQ0XUk=) 2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: Xmj6Hu3XamtN1TfoLFF4zTOGMT8EY6KW6APUipxbG/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1882 (0x75a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Validity Not Before: Aug 22 21:52:57 2025 GMT Not After : Aug 29 21:52:57 2025 GMT Subject: CN=68a8e6ba-3569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:a1:73:39:b1:36:d2:cf:37:92:c3:57:07: fe:1b:b4:b4:46:4a:50:85:1c:34:8c:e7:49:b4:9d: f9:41:1c:11:09:27:10:44:0f:94:4a:27:b7:51:81: 9f:dc:04:60:c8:47:a4:5a:b9:83:dd:0c:ff:3d:90: ab:64:9c:44:70:58:e9:ce:31:cc:d8:29:aa:dd:22: da:34:47:d7:a6:3d:d3:c8:41:dc:5c:c3:df:c1:8b: 9a:71:96:11:f6:05:cd:4f:d0:8f:fc:ee:90:74:ff: 8a:dd:f6:0b:0f:92:5e:73:70:14:68:e0:ee:58:23: 4a:9e:fe:08:3a:4f:45:99:15:a9:9b:4b:7a:97:c3: bd:ac:51:c1:1a:19:fd:13:22:d8:c5:b8:12:44:68: af:12:2f:d2:a1:63:7e:d3:49:2c:97:bf:cb:a3:a2: 05:ef:4e:26:79:02:77:ac:06:f4:24:eb:7e:a6:31: 92:a2:81:50:46:d3:97:2e:37:04:d5:75:4d:50:99: 98:30:37:80:8e:33:89:c7:60:dc:05:62:e2:c6:06: 6b:2f:b8:05:f7:b4:bb:5c:d1:8c:49:66:f1:6c:5b: 1f:21:2e:55:f0:0e:9e:b1:da:f1:ee:e7:ae:e5:09: be:64:91:f2:44:4f:eb:cb:87:d9:1b:db:2c:d3:a7: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5A:7F:F0:D2:CA:AD:D3:0E:46:E6:3F:B1:A8:32:8E:DB:13:C0:75 X509v3 Authority Key Identifier: keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:8e:c0:d4:55:21:d1:b8:57:4a:f9:01:55:34:09:d2:d0:d3: 4a:52:4c:61:8e:79:7b:89:a8:0c:e8:d0:95:f3:a0:bf:81:ee: 75:47:bf:d7:88:66:b9:64:14:76:78:1f:5e:1a:e3:a4:d8:82: ee:28:14:88:98:9d:64:ae:31:12:6d:9d:02:a7:8c:bb:f8:bf: 6c:a3:49:14:8f:39:fe:d8:be:3e:08:9c:1f:a4:0a:4e:b4:63: 58:ba:3c:10:63:5d:dc:3e:f7:a4:13:9c:d3:f7:f8:69:ff:88: 70:11:4d:0a:b1:f9:ab:a3:cc:91:3e:0c:ed:2d:6a:aa:9b:59: d0:96:6b:81:d8:58:b2:e7:43:c5:6d:c4:5f:69:a1:30:04:af: 97:70:9b:30:25:0c:74:e4:60:cc:42:a7:88:03:6f:2b:81:19: 73:9f:ee:68:e5:92:63:33:b7:c9:70:4a:a6:a0:46:ac:b1:ba: 43:12:15:1e:7d:c4:cf:fc:89:e8:b0:96:35:b9:7f:4e:0a:8f: 12:9a:39:0f:48:e7:66:b8:17:f3:ff:a3:31:97:b2:29:f7:15: d8:54:75:1e:d4:f4:b3:ef:33:06:23:b8:7f:2c:a6:6d:60:84: 4d:cc:01:47:dc:11:0e:50:3c:a4:27:b2:5a:3a:8e:02:de:a4: 93:60:e9:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBREYxMTAvBgNVBAUTKEM3MEJGNzlFODhFMzExOUFFOTZCQjc2MUEyOTNCQjUx QTQ4NjE3M0MwHhcNMjUwODIyMjE1MjU3WhcNMjUwODI5MjE1MjU3WjAYMRYwFAYD VQQDEw02OGE4ZTZiYS0zNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC+hczmxNtLPN5LDVwf+G7S0RkpQhRw0jOdJtJ35QRwRCScQRA+USie3UYGf 3ARgyEekWrmD3Qz/PZCrZJxEcFjpzjHM2Cmq3SLaNEfXpj3TyEHcXMPfwYuacZYR 9gXNT9CP/O6QdP+K3fYLD5Jec3AUaODuWCNKnv4IOk9FmRWpm0t6l8O9rFHBGhn9 EyLYxbgSRGivEi/SoWN+00ksl7/Lo6IF704meQJ3rAb0JOt+pjGSooFQRtOXLjcE 1XVNUJmYMDeAjjOJx2DcBWLixgZrL7gF97S7XNGMSWbxbFsfIS5V8A6esdrx7ueu 5Qm+ZJHyRE/ry4fZG9ss06coiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBaf/DS yq3TDkbmP7GoMo7bE8B1MB8GA1UdIwQYMBaAFMcL956I4xGa6Wu3YaKTu1Gkhhc8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFERi9CODVGMEU4QzNB Q0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVacnBhN2Rob3BPN1VhU0dG encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3djNub2pqRVpycGE3ZGhvcE83VWFTR0Z6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFERi9CODVGMEU4QzNBQ0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVa cnBhN2Rob3BPN1VhU0dGencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRjsDUVSHRuFdK+QFVNAnS0NNKUkxhjnl7iagM6NCV86C/ge51R7/X iGa5ZBR2eB9eGuOk2ILuKBSImJ1krjESbZ0Cp4y7+L9so0kUjzn+2L4+CJwfpApO tGNYujwQY13cPvekE5zT9/hp/4hwEU0Ksfmro8yRPgztLWqqm1nQlmuB2Fiy50PF bcRfaaEwBK+XcJswJQx05GDMQqeIA28rgRlzn+5o5ZJjM7fJcEqmoEassbpDEhUe fcTP/InosJY1uX9OCo8SmjkPSOdmuBfz/6Mxl7Ip9xXYVHUe1PSz7zMGI7h/LKZt YIRNzAFH3BEOUDykJ7JaOo4C3qSTYOmo -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:50 2025 by rpki-client