$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json) Hash identifier: +WQQmm2aWwioCAJcccNm9C85rl0cUv9Xzny9imm1SaQ= Subject key identifier: C2:AD:9A:4B:98:E7:95:AB:9A:D0:6A:D6:47:1E:C7:B5:72:68:BC:39 Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft Manifest number: 0683 Signing time: Wed 02 Jul 2025 22:34:39 +0000 Manifest this update: Wed 02 Jul 2025 22:34:38 +0000 Manifest next update: Wed 09 Jul 2025 22:34:38 +0000 Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: 0Xp8nfdHtva2jPU2GRz0Q/eH3jCaDB2E3Ce6kUiJh5U=) 2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: yju+fZAWtM3RsMZrSlngexqtu4I3chkHV+7N/8ZbBdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Validity Not Before: Jul 2 22:34:38 2025 GMT Not After : Jul 9 22:34:38 2025 GMT Subject: CN=6865b3ff-4328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:13:1f:10:4a:47:e4:ec:4d:f3:09:ce:9d:b0: a8:25:2d:44:50:fc:61:a2:03:1d:69:f9:9b:a5:c7: c2:59:75:d4:fc:e0:72:a2:44:54:9e:de:ba:ca:a1: bd:ec:f8:4a:90:f5:12:e9:1b:ba:13:5e:be:2a:62: 8a:7c:85:1b:94:5a:84:2b:7b:87:6a:31:ae:81:95: 78:c4:23:ca:0b:33:a1:94:c2:72:2d:b3:1e:a3:38: ff:6d:a6:3e:02:f9:36:e4:19:a1:75:33:68:89:1d: 3e:96:5b:96:26:c7:cd:16:2b:36:d9:c5:68:5f:52: 31:3d:4a:35:06:fa:77:71:3b:44:50:3a:ca:53:bd: 3a:79:ec:fa:1b:5f:dc:91:aa:94:e4:c7:d8:9d:19: 42:29:a9:bf:39:d2:df:b6:38:9f:ec:d6:3a:e1:58: 80:7c:7b:ec:0e:20:a5:76:29:06:aa:b6:5b:20:08: ca:8f:9b:77:05:66:cf:27:fd:be:bc:1d:5e:99:24: 4c:d2:15:ed:5e:84:8a:cd:18:87:53:ec:e8:a0:64: 14:ad:f3:6f:96:93:d5:d6:74:b4:4d:e5:92:2f:33: a9:cc:6b:78:c1:04:2c:8a:a5:56:33:b1:15:df:26: af:24:56:07:f9:6d:72:1c:8e:af:da:f1:a6:2e:7b: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AD:9A:4B:98:E7:95:AB:9A:D0:6A:D6:47:1E:C7:B5:72:68:BC:39 X509v3 Authority Key Identifier: keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:26:2f:68:02:38:18:a3:d0:2a:9c:4c:d4:c0:19:dd:19:13: 76:7a:8d:5d:70:47:73:77:29:a8:34:e0:a2:75:aa:16:23:eb: d5:b7:fa:ae:2e:c0:7e:68:f7:d2:b7:f8:09:f7:82:3e:7c:98: e7:fe:0b:9f:21:ab:73:5e:9e:e8:11:04:30:19:15:f3:72:d9: 35:a7:8f:6a:ed:cc:ec:a3:39:a8:e6:7f:9d:9f:76:cd:31:21: 9d:6a:d4:f7:06:1d:b6:2d:24:23:17:a6:f1:95:0f:88:81:3f: 6c:8c:54:ea:53:f8:65:a7:cd:43:9f:94:ca:f9:22:c2:08:24: 4d:88:16:65:af:a4:0f:c0:aa:58:f9:0f:79:f6:c9:e3:05:8b: 92:b9:01:09:85:92:33:90:e5:93:0d:b2:90:28:8d:ad:28:7d: c4:2b:7c:67:2d:06:54:e8:b1:1d:a9:da:9d:81:20:fa:17:d5: 62:5c:22:e4:77:f7:7a:7d:46:34:c5:1c:04:29:c6:e3:61:35: 1e:06:62:25:20:c2:6f:7e:32:5e:5d:58:89:7c:05:ee:d8:9d: 14:7f:f9:f7:61:d1:4f:8c:f2:c0:59:67:9f:ab:aa:86:64:72: a1:58:e7:7c:5f:b3:f7:a5:5a:f3:4f:70:7a:19:34:dc:05:49: 46:3d:b2:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDVGQUQxQjM5QkU0NTU1MjYyMjA2RDE5RjVBNjY5QkM3 QjY5RjcyQzgwHhcNMjUwNzAyMjIzNDM4WhcNMjUwNzA5MjIzNDM4WjAYMRYwFAYD VQQDEw02ODY1YjNmZi00MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BMfEEpH5OxN8wnOnbCoJS1EUPxhogMdafmbpcfCWXXU/OByokRUnt66yqG9 7PhKkPUS6Ru6E16+KmKKfIUblFqEK3uHajGugZV4xCPKCzOhlMJyLbMeozj/baY+ Avk25BmhdTNoiR0+lluWJsfNFis22cVoX1IxPUo1Bvp3cTtEUDrKU706eez6G1/c kaqU5MfYnRlCKam/OdLftjif7NY64ViAfHvsDiCldikGqrZbIAjKj5t3BWbPJ/2+ vB1emSRM0hXtXoSKzRiHU+zooGQUrfNvlpPV1nS0TeWSLzOpzGt4wQQsiqVWM7EV 3yavJFYH+W1yHI6v2vGmLnvpwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKtmkuY 55WrmtBq1kcex7VyaLw5MB8GA1UdIwQYMBaAFF+tGzm+RVUmIgbRn1pmm8e2n3LI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wM0EwMTc4NDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZTWWlCdEdmV21hYng3YWZj c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1g2MGJPYjVGVlNZaUJ0R2ZXbWFieDdhZmNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wM0EwMTc4NDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZT WWlCdEdmV21hYng3YWZjc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCJi9oAjgYo9AqnEzUwBndGRN2eo1dcEdzdymoNOCidaoWI+vVt/qu LsB+aPfSt/gJ94I+fJjn/gufIatzXp7oEQQwGRXzctk1p49q7czsozmo5n+dn3bN MSGdatT3Bh22LSQjF6bxlQ+IgT9sjFTqU/hlp81Dn5TK+SLCCCRNiBZlr6QPwKpY +Q959snjBYuSuQEJhZIzkOWTDbKQKI2tKH3EK3xnLQZU6LEdqdqdgSD6F9ViXCLk d/d6fUY0xRwEKcbjYTUeBmIlIMJvfjJeXViJfAXu2J0Uf/n3YdFPjPLAWWefq6qG ZHKhWOd8X7P3pVrzT3B6GTTcBUlGPbIn -----END CERTIFICATE-----Generated at Thu Jul 3 23:26:55 2025 by rpki-client