$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json) Hash identifier: 2TJZz/Ju+XCqoX46cacF1Zah0MXsQSbzljaYBJvjWm4= Subject key identifier: DA:5A:E0:01:7E:3B:E3:91:D4:DC:2B:12:B9:E0:46:37:14:E7:9C:CD Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Certificate serial: 06A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft Manifest number: 069F Signing time: Fri 22 Aug 2025 22:21:59 +0000 Manifest this update: Fri 22 Aug 2025 22:21:58 +0000 Manifest next update: Fri 29 Aug 2025 22:21:58 +0000 Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: 8WuNWGWbEa7kSj1CMB05GsvqX3K7XL23TWOEzNjOuF0=) 2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: QJpUBqNgws3PM1RQ/YpxcOLuHjSbFEKESqjd/lkWkNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Validity Not Before: Aug 22 22:21:58 2025 GMT Not After : Aug 29 22:21:58 2025 GMT Subject: CN=68a8ed86-696d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:0a:e5:22:8f:ad:50:f9:0d:5a:0c:e2:f9: 99:9a:3a:f7:37:2f:96:e7:1a:c6:52:e8:8a:33:69: 6c:16:75:f2:f6:b9:8e:9b:69:c1:59:02:c8:f9:72: cd:c3:1b:1c:1d:ac:d5:29:f2:9e:be:79:28:fd:9e: ba:39:21:c4:f4:63:88:4f:ff:78:7c:c4:0c:00:ff: 88:f0:28:84:df:d8:86:cc:65:3c:a3:7f:96:93:d8: 22:72:f3:d4:56:7e:71:43:66:d0:c3:27:68:01:15: 2c:04:ba:d6:ed:7e:e8:f8:c7:1f:87:93:7f:75:ca: 32:38:ee:82:7e:60:de:02:cb:72:22:08:d0:99:c3: f0:22:5d:c3:ca:15:52:1d:e8:ba:ca:8c:8d:d6:1d: fc:b7:d8:cc:04:31:71:60:11:4d:d2:0f:83:53:ef: 1a:0b:fb:3b:ca:b9:95:22:a2:8d:60:c4:bf:52:19: 79:d9:c3:65:13:61:1f:e4:02:26:ee:9a:d1:fc:53: e2:14:0c:90:03:3c:78:a2:74:ea:b8:76:37:46:b3: a3:b1:3f:d9:80:0f:9d:7d:e3:9a:04:91:77:61:aa: 48:23:e4:7d:f6:31:a6:1f:26:cb:df:f3:9a:39:3c: 07:04:9d:33:b8:75:30:96:00:ff:78:93:c0:cc:8a: 62:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5A:E0:01:7E:3B:E3:91:D4:DC:2B:12:B9:E0:46:37:14:E7:9C:CD X509v3 Authority Key Identifier: keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:08:de:93:c2:de:62:d3:f1:63:2a:e8:8c:88:ab:0d:6a:6b: d6:6d:47:ad:d2:36:1c:61:20:b8:22:40:cb:2e:d3:86:55:72: a0:5e:a1:ac:ab:89:89:53:01:34:bd:54:c0:3a:c7:7b:2b:ee: 7b:62:bb:ac:49:11:fd:63:7b:71:4a:30:5a:0e:9d:3a:04:ac: a8:cf:6b:63:6c:a6:ec:32:b2:21:e7:ec:5d:da:33:94:d4:90: 12:91:35:60:a0:a9:b4:84:a3:c5:1c:e2:f8:dd:4c:41:e6:a7: 92:5a:ee:3a:86:d1:c3:19:a9:ba:de:28:84:e5:49:09:b0:be: 39:b0:49:07:73:7d:64:ab:89:3b:c4:5a:c5:77:3b:47:0b:8d: 8a:fb:92:be:c8:14:0e:eb:51:aa:5b:b0:48:7c:b7:fd:7a:da: 60:c4:9c:df:16:74:4c:10:3b:8e:5a:76:e4:2a:ea:bc:45:83: 2c:ea:e3:6d:6b:01:f6:2f:86:d1:d1:27:70:54:4f:b2:26:ec: 91:22:2f:66:73:db:61:4f:93:ca:e4:cf:9a:2a:1c:53:90:1a: f1:02:ca:c3:9f:52:d7:05:8d:58:44:31:c0:38:e7:60:c8:e7: e3:92:bd:c4:34:fd:99:a2:43:aa:33:ea:ee:3e:dc:8c:be:28: 79:c6:cf:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDVGQUQxQjM5QkU0NTU1MjYyMjA2RDE5RjVBNjY5QkM3 QjY5RjcyQzgwHhcNMjUwODIyMjIyMTU4WhcNMjUwODI5MjIyMTU4WjAYMRYwFAYD VQQDEw02OGE4ZWQ4Ni02OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/AK5SKPrVD5DVoM4vmZmjr3Ny+W5xrGUuiKM2lsFnXy9rmOm2nBWQLI+XLN wxscHazVKfKevnko/Z66OSHE9GOIT/94fMQMAP+I8CiE39iGzGU8o3+Wk9gicvPU Vn5xQ2bQwydoARUsBLrW7X7o+Mcfh5N/dcoyOO6CfmDeAstyIgjQmcPwIl3DyhVS Hei6yoyN1h38t9jMBDFxYBFN0g+DU+8aC/s7yrmVIqKNYMS/Uhl52cNlE2Ef5AIm 7prR/FPiFAyQAzx4onTquHY3RrOjsT/ZgA+dfeOaBJF3YapII+R99jGmHybL3/Oa OTwHBJ0zuHUwlgD/eJPAzIpiCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpa4AF+ O+OR1NwrErngRjcU55zNMB8GA1UdIwQYMBaAFF+tGzm+RVUmIgbRn1pmm8e2n3LI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wM0EwMTc4NDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZTWWlCdEdmV21hYng3YWZj c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1g2MGJPYjVGVlNZaUJ0R2ZXbWFieDdhZmNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wM0EwMTc4NDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZT WWlCdEdmV21hYng3YWZjc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSCN6Twt5i0/FjKuiMiKsNamvWbUet0jYcYSC4IkDLLtOGVXKgXqGs q4mJUwE0vVTAOsd7K+57YrusSRH9Y3txSjBaDp06BKyoz2tjbKbsMrIh5+xd2jOU 1JASkTVgoKm0hKPFHOL43UxB5qeSWu46htHDGam63iiE5UkJsL45sEkHc31kq4k7 xFrFdztHC42K+5K+yBQO61GqW7BIfLf9etpgxJzfFnRMEDuOWnbkKuq8RYMs6uNt awH2L4bR0SdwVE+yJuyRIi9mc9thT5PK5M+aKhxTkBrxAsrDn1LXBY1YRDHAOOdg yOfjkr3ENP2ZokOqM+ruPtyMvih5xs+s -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:27 2025 by rpki-client