$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft File: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json) Hash identifier: hGLsyE2ThNIpO94183jPVcdo+cB+1ay3Wtzo9hZyw5Q= Subject key identifier: F2:29:C8:0C:15:8A:8C:08:B2:E3:EF:A5:41:98:46:46:7E:30:AB:DF Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E Certificate issuer: /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Certificate serial: 0DBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft Manifest number: 0DB7 Signing time: Fri 22 Aug 2025 18:01:08 +0000 Manifest this update: Fri 22 Aug 2025 18:01:08 +0000 Manifest next update: Fri 29 Aug 2025 18:01:08 +0000 Files and hashes: 1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: IqNFdELJswVHQ2wU8lqDCG3NApMK4rt/spXsguvisi0=) 2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: nnMRznD8HI2Yb7yh15XfK/3vrMLq6BY/UPlfXXuokSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Validity Not Before: Aug 22 18:01:08 2025 GMT Not After : Aug 29 18:01:08 2025 GMT Subject: CN=68a8b064-d10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:8c:21:ba:01:f6:ca:56:1b:4d:99:7e:09: 69:55:c0:ae:9e:6c:72:e5:d0:1e:46:42:c1:b7:57: 56:1c:ed:34:bd:03:28:16:fe:d6:94:0b:ff:ba:41: 5b:7e:df:48:aa:14:16:87:f5:a5:67:19:2a:36:aa: 13:ee:70:ad:ad:d3:79:bd:fd:34:96:33:5d:17:03: 47:e0:b6:30:77:df:57:5b:cf:36:f0:2f:db:d9:77: 4b:7a:64:06:53:28:93:04:f0:04:bf:e7:3e:09:c0: 6d:9f:92:d4:29:8b:81:3f:15:2a:2e:af:ab:f1:48: e2:b8:85:86:0e:a4:28:25:03:88:1d:4f:bd:97:4a: a7:4f:ee:e4:33:a9:ef:4c:b5:4e:6a:42:d1:b6:da: 81:84:0c:40:89:e4:fa:2f:25:b0:a6:db:46:ca:2f: 86:40:d2:5f:6e:60:83:d0:21:92:da:2f:d6:7b:e3: 83:50:0c:74:64:05:01:83:32:c1:f0:57:d3:c1:0b: 6c:f3:51:62:c3:6c:56:47:0f:b2:d4:35:33:32:11: 00:d6:04:f1:f3:2b:a3:82:69:b3:48:aa:6d:d6:57: 89:31:fe:fc:36:d7:24:fb:14:31:66:2b:d0:b3:01: a9:70:8f:22:70:f1:da:c2:35:35:d9:63:12:50:83: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:29:C8:0C:15:8A:8C:08:B2:E3:EF:A5:41:98:46:46:7E:30:AB:DF X509v3 Authority Key Identifier: keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:60:4d:93:9d:87:eb:bf:07:34:b1:49:1b:c8:06:bf:c4:3b: 64:63:fe:59:52:b3:1f:56:37:47:fe:cc:30:3a:23:ec:5e:27: 11:7c:00:81:99:73:d8:05:0b:67:8b:48:74:3c:6c:f7:70:53: ed:6b:be:9a:19:b3:d6:dd:4b:56:9e:ee:25:5b:74:83:6b:c1: 1b:26:4d:a8:3a:c5:63:27:9f:7a:61:23:17:05:f9:26:4c:9e: 8d:9c:88:dd:6b:42:a8:10:48:c4:4f:e4:b8:16:87:04:6c:96: 0c:44:5c:4d:5c:8b:04:a9:88:81:bc:e4:6e:8f:09:38:aa:cb: 3b:63:02:9a:2b:18:59:d2:d8:8a:91:09:5d:85:b0:85:7c:5e: 01:db:c7:a4:94:79:ec:b7:ff:f4:cb:45:f5:30:bb:0f:5c:0d: 7e:a1:1a:79:ec:56:ff:2a:2d:0b:19:fd:bd:e8:fe:c5:ae:ef: 89:53:c2:96:df:44:bf:95:ff:5f:00:23:74:22:55:7d:bd:14: 1b:40:2b:12:0d:25:a9:c6:90:c9:f9:0a:65:41:59:a8:1e:02: d9:f7:24:26:d1:de:34:84:7a:2d:2f:fe:12:7c:8d:37:3d:65: a7:4a:da:ae:74:06:7b:f1:96:53:53:1c:e1:69:3a:cb:3a:f1: 2c:99:49:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRCRTYxMTAvBgNVBAUTKEM1MUY3QkZEOTQ1RDAwNzc3OUI3RjFGRjQyNURCRjI3 QjlDMjk4MkUwHhcNMjUwODIyMTgwMTA4WhcNMjUwODI5MTgwMTA4WjAYMRYwFAYD VQQDEw02OGE4YjA2NC1kMTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomWMIboB9spWG02ZfglpVcCunmxy5dAeRkLBt1dWHO00vQMoFv7WlAv/ukFb ft9IqhQWh/WlZxkqNqoT7nCtrdN5vf00ljNdFwNH4LYwd99XW8828C/b2XdLemQG UyiTBPAEv+c+CcBtn5LUKYuBPxUqLq+r8UjiuIWGDqQoJQOIHU+9l0qnT+7kM6nv TLVOakLRttqBhAxAieT6LyWwpttGyi+GQNJfbmCD0CGS2i/We+ODUAx0ZAUBgzLB 8FfTwQts81Fiw2xWRw+y1DUzMhEA1gTx8yujgmmzSKpt1leJMf78Ntck+xQxZivQ swGpcI8icPHawjU12WMSUINkMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIpyAwV iowIsuPvpUGYRkZ+MKvfMB8GA1UdIwQYMBaAFMUfe/2UXQB3ebfx/0Jdvye5wpgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEJFNi9FRThCQ0FBNEM0 ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFIZDV0X0hfUWwyX0o3bkNt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hSOTdfWlJkQUhkNXRfSF9RbDJfSjduQ21DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEJFNi9FRThCQ0FBNEM0ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFI ZDV0X0hfUWwyX0o3bkNtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCYE2TnYfrvwc0sUkbyAa/xDtkY/5ZUrMfVjdH/swwOiPsXicRfACB mXPYBQtni0h0PGz3cFPta76aGbPW3UtWnu4lW3SDa8EbJk2oOsVjJ596YSMXBfkm TJ6NnIjda0KoEEjET+S4FocEbJYMRFxNXIsEqYiBvORujwk4qss7YwKaKxhZ0tiK kQldhbCFfF4B28eklHnst//0y0X1MLsPXA1+oRp57Fb/Ki0LGf296P7Fru+JU8KW 30S/lf9fACN0IlV9vRQbQCsSDSWpxpDJ+QplQVmoHgLZ9yQm0d40hHotL/4SfI03 PWWnStqudAZ78ZZTUxzhaTrLOvEsmUnD -----END CERTIFICATE-----Generated at Sat Aug 23 16:02:21 2025 by rpki-client