$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json) Hash identifier: Gmaki39SlTyFrpiZFh+/pSxAtvjEe07BboQZWeae9TQ= Subject key identifier: 4F:27:3A:56:7E:62:BD:5F:26:67:84:17:53:D5:03:35:E5:9F:C7:6C Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft Manifest number: 010D Signing time: Sat 23 Aug 2025 05:09:47 +0000 Manifest this update: Sat 23 Aug 2025 05:09:46 +0000 Manifest next update: Sat 30 Aug 2025 05:09:46 +0000 Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: zdhVWw/S+GFx+kLm7Lk2eqw+z9ruhbG/0fL+wL2k1dM=) 2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: w8SNcu2W86NVWJqOd27to5fWU6al9qmk5VnBP7mMOjs=) 3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: q12pisfHJtoL9XkqG0on+CXyPl8Ax23nksmjhCAQXBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Validity Not Before: Aug 23 05:09:46 2025 GMT Not After : Aug 30 05:09:46 2025 GMT Subject: CN=68a94d1b-5f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:0c:1a:7b:83:98:d2:f6:5f:bf:ef:55:1c: 30:8f:b7:7d:de:21:4e:fa:94:07:f9:d9:55:12:68: 8c:71:b8:a8:fb:a5:a3:0b:bb:2e:1c:f7:f6:99:cd: b4:57:1a:14:ed:e2:e4:d2:4c:8b:d7:b0:73:e8:76: 00:0e:20:bf:06:ac:4b:05:a3:d9:6b:72:e0:70:a8: 52:e3:d4:90:1a:92:8f:30:5b:b2:3a:e5:31:ac:f1: b5:dc:6c:d5:d4:46:06:c5:9b:70:a2:71:89:a3:43: af:b1:c9:c3:f4:4e:ec:3a:4b:58:3d:79:aa:5a:d9: f5:b3:95:0d:97:78:16:7d:91:9d:f1:e7:ac:c8:f0: fe:45:5f:db:32:91:59:ad:5d:cf:af:e4:f1:00:75: be:ca:a5:a0:6e:2c:d7:b8:6b:d5:72:f2:64:c3:2b: ed:60:a3:34:61:a7:ef:20:1b:66:a6:b7:46:41:4a: b9:b0:5a:8f:45:6c:56:3b:63:0f:95:b3:1e:cd:04: 01:44:01:5a:8a:2b:a2:e2:2c:67:77:a2:b1:85:22: ed:0b:43:07:e8:dc:f2:72:4d:01:59:65:01:22:6e: 51:4a:47:88:29:81:36:24:61:fb:9a:81:cb:12:75: 83:85:be:1f:80:92:73:b5:a8:bc:5d:7f:f7:8d:e9: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:27:3A:56:7E:62:BD:5F:26:67:84:17:53:D5:03:35:E5:9F:C7:6C X509v3 Authority Key Identifier: keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:95:be:15:0c:ec:df:89:56:d0:89:b3:e6:65:10:34:be:3b: e3:09:78:3b:2e:79:46:88:e5:22:ca:76:f4:15:26:dc:07:83: 4d:0e:63:ca:75:bf:00:b2:24:07:6f:41:3f:7c:2a:38:a8:1a: 6a:d2:aa:17:51:fb:fa:07:ca:6b:6c:7c:33:e3:b0:96:a6:dc: ee:36:fc:2c:69:ef:dd:2f:ef:5a:0b:63:e3:d3:8a:6a:2c:f0: 7e:fe:1b:91:31:d4:64:aa:8c:9c:d3:11:38:45:4a:b4:48:db: 0f:98:b7:68:55:b6:a8:e5:c2:9b:ed:7d:8d:ca:75:b6:c6:dd: 9f:d5:2f:1c:eb:92:e5:c6:32:e1:12:ce:f2:e8:fa:03:b2:83: ef:b6:98:4e:fe:fa:48:7e:7c:2c:a9:0c:fd:aa:ab:46:c7:c3: 80:d5:59:7d:0f:c6:81:23:d1:49:6e:d6:f8:4c:32:e8:aa:55: e5:b7:90:8c:dd:f8:5f:65:bb:f7:27:c7:2b:1b:ea:64:37:0b: 88:f8:ce:45:21:e3:bd:f1:59:2e:d5:9c:18:03:eb:f0:ff:c1: 27:32:46:57:dc:d3:76:68:1e:e4:0e:94:77:4c:50:85:b4:e1: 97:b6:9d:e6:f2:e6:4a:02:27:35:84:79:01:80:28:a4:05:73: 9a:ee:0a:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF RTFEOTM1Q0YwHhcNMjUwODIzMDUwOTQ2WhcNMjUwODMwMDUwOTQ2WjAYMRYwFAYD VQQDEw02OGE5NGQxYi01ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvAMGnuDmNL2X7/vVRwwj7d93iFO+pQH+dlVEmiMcbio+6WjC7suHPf2mc20 VxoU7eLk0kyL17Bz6HYADiC/BqxLBaPZa3LgcKhS49SQGpKPMFuyOuUxrPG13GzV 1EYGxZtwonGJo0OvscnD9E7sOktYPXmqWtn1s5UNl3gWfZGd8eesyPD+RV/bMpFZ rV3Pr+TxAHW+yqWgbizXuGvVcvJkwyvtYKM0YafvIBtmprdGQUq5sFqPRWxWO2MP lbMezQQBRAFaiiui4ixnd6KxhSLtC0MH6Nzyck0BWWUBIm5RSkeIKYE2JGH7moHL EnWDhb4fgJJztai8XX/3jek0EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8nOlZ+ Yr1fJmeEF1PVAzXln8dsMB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4 MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0IyOS82MTdFOTQ0OEU4MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6 ZGZoRmFJWDJvUWZ1SFpOYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAflb4VDOzfiVbQibPmZRA0vjvjCXg7LnlGiOUiynb0FSbcB4NNDmPK db8AsiQHb0E/fCo4qBpq0qoXUfv6B8prbHwz47CWptzuNvwsae/dL+9aC2Pj04pq LPB+/huRMdRkqoyc0xE4RUq0SNsPmLdoVbao5cKb7X2NynW2xt2f1S8c65LlxjLh Es7y6PoDsoPvtphO/vpIfnwsqQz9qqtGx8OA1Vl9D8aBI9FJbtb4TDLoqlXlt5CM 3fhfZbv3J8crG+pkNwuI+M5FIeO98Vku1ZwYA+vw/8EnMkZX3NN2aB7kDpR3TFCF tOGXtp3m8uZKAic1hHkBgCikBXOa7gq/ -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:58 2025 by rpki-client