$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft File: R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json) Hash identifier: uNLgztJCQmjEnxKC76jj/GESeyk8bKqX6BE6bbCkVYQ= Subject key identifier: A3:8E:B2:69:9B:00:19:06:97:F7:98:CF:B9:AC:9C:2B:C8:FF:87:7A Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft Manifest number: 067D Signing time: Fri 22 Aug 2025 22:38:57 +0000 Manifest this update: Fri 22 Aug 2025 22:38:57 +0000 Manifest next update: Fri 29 Aug 2025 22:38:57 +0000 Files and hashes: 1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: BKa07OAhoR3driNBfg6MxDIszvWeSbyxcaTJ7Y4j0zc=) 2: A6556900C0DF11EE9BA7B27AC4F9AE02.roa (hash: 7GVgrXEYxEaDjdpBVuH7XCTs4tFbULYhuD4DnoFUT20=) 3: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: UrlgPQXsb4gQDscf1nttcVc31km04Zvk2KGgC6tLDaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Validity Not Before: Aug 22 22:38:57 2025 GMT Not After : Aug 29 22:38:57 2025 GMT Subject: CN=68a8f181-a2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:19:63:9c:a6:a3:48:e5:68:d1:a3:ac:18: e1:c9:54:8d:af:ea:9d:a1:2a:c4:2c:40:81:96:e5: 32:59:0e:7a:5d:44:cf:3f:01:ea:72:aa:cb:5f:84: 83:2b:70:4b:ff:be:46:fe:ed:cb:3a:5f:d8:9b:08: 82:5c:57:43:a7:06:77:ce:8d:9c:ff:42:9f:01:60: 53:0d:ab:4c:3b:28:26:f7:0e:23:41:3f:ed:fd:58: 8b:7b:77:9e:b9:de:63:4d:59:41:0d:12:4e:4d:b3: aa:42:57:04:4f:6f:1b:0a:1e:8f:ab:7a:5a:ce:28: e0:1b:8b:94:d1:35:97:74:0d:f9:21:47:3a:17:3f: 55:72:e6:d1:84:83:37:90:61:ff:90:8b:da:b5:27: 95:01:69:01:87:a0:c0:b8:34:fa:cd:a2:24:2a:da: 69:23:ee:14:a5:a2:75:ea:e3:a2:e7:59:9e:ef:12: 1e:4a:9a:c6:a6:0d:e5:1a:fc:15:d8:21:be:97:35: ee:d6:f2:ef:eb:86:ee:94:7a:21:6c:67:14:5d:8b: a0:61:db:88:52:c9:16:71:3c:6e:0f:1c:69:95:e1: 32:0f:d5:00:c2:a7:c5:0c:18:f4:08:d2:4c:86:cd: 46:43:22:a5:8d:6d:cf:f5:73:d1:80:2a:a0:70:bd: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8E:B2:69:9B:00:19:06:97:F7:98:CF:B9:AC:9C:2B:C8:FF:87:7A X509v3 Authority Key Identifier: keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:de:a8:67:d4:e0:51:2d:69:fd:c3:5b:29:5d:ce:b3:a4:63: db:58:81:02:88:56:f1:af:35:3a:d1:4e:71:08:af:c2:c2:72: e4:5b:71:a8:48:e1:db:96:ce:8a:89:f1:dc:2c:c6:31:75:1b: 2e:19:64:f5:1b:4c:92:8d:94:c0:0d:15:60:7d:2c:b7:60:38: 88:e3:19:f3:95:af:a0:1d:fc:ee:f8:74:d6:9a:27:db:8f:47: ff:89:ac:b1:6e:34:04:3d:66:52:14:bf:15:ec:3b:c0:f5:46: e6:b9:34:44:a4:a2:da:e2:6f:24:05:f5:38:e9:dc:cc:ca:80: 2a:01:be:4c:8c:d9:cd:d0:da:83:a4:04:4e:dd:b8:8b:93:ba: 15:e1:b7:49:4a:a0:c5:ef:59:04:6b:0a:68:8f:f0:c9:ba:04: 09:86:70:aa:b7:e9:a2:e8:5b:f0:ed:07:c1:ad:72:9c:91:c2: b3:a9:34:26:b0:4d:a3:97:00:7c:c0:87:c4:ec:b1:42:c5:03: 60:6b:ce:ec:49:14:1e:63:2c:b9:54:6f:1c:55:8d:3d:0b:fa: 16:b1:33:34:8b:e2:9e:c3:39:f3:13:77:21:06:19:da:b7:90: 16:4e:53:1f:0f:43:1c:25:2f:24:13:3d:aa:ce:bf:3a:3f:30: 34:aa:34:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEQjUxMTAvBgNVBAUTKDQ3RUM1M0JGREQzNTEzMjBFODlCMkM1NDFCQUNERDRE OEQ1MkEwQjMwHhcNMjUwODIyMjIzODU3WhcNMjUwODI5MjIzODU3WjAYMRYwFAYD VQQDEw02OGE4ZjE4MS1hMmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbEZY5ymo0jlaNGjrBjhyVSNr+qdoSrELECBluUyWQ56XUTPPwHqcqrLX4SD K3BL/75G/u3LOl/YmwiCXFdDpwZ3zo2c/0KfAWBTDatMOygm9w4jQT/t/ViLe3ee ud5jTVlBDRJOTbOqQlcET28bCh6Pq3pazijgG4uU0TWXdA35IUc6Fz9VcubRhIM3 kGH/kIvatSeVAWkBh6DAuDT6zaIkKtppI+4UpaJ16uOi51me7xIeSprGpg3lGvwV 2CG+lzXu1vLv64bulHohbGcUXYugYduIUskWcTxuDxxpleEyD9UAwqfFDBj0CNJM hs1GQyKljW3P9XPRgCqgcL2rzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOOsmmb ABkGl/eYz7msnCvI/4d6MB8GA1UdIwQYMBaAFEfsU7/dNRMg6JssVBus3U2NUqCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0RCNS8wQzk5OUVDMDhG QTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5RG9teXhVRzZ6ZFRZMVNv TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IteFR2OTAxRXlEb215eFVHNnpkVFkxU29MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0RCNS8wQzk5OUVDMDhGQTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5 RG9teXhVRzZ6ZFRZMVNvTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB3qhn1OBRLWn9w1spXc6zpGPbWIECiFbxrzU60U5xCK/CwnLkW3Go SOHbls6KifHcLMYxdRsuGWT1G0ySjZTADRVgfSy3YDiI4xnzla+gHfzu+HTWmifb j0f/iayxbjQEPWZSFL8V7DvA9UbmuTREpKLa4m8kBfU46dzMyoAqAb5MjNnN0NqD pARO3biLk7oV4bdJSqDF71kEawpoj/DJugQJhnCqt+mi6Fvw7QfBrXKckcKzqTQm sE2jlwB8wIfE7LFCxQNga87sSRQeYyy5VG8cVY09C/oWsTM0i+KewznzE3chBhna t5AWTlMfD0McJS8kEz2qzr86PzA0qjQW -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:43 2025 by rpki-client