$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: Zkxm4PtP9vIsh7qdpQ5evsPnznXDHr05kVFXkOr2AuI= Subject key identifier: DB:EB:B2:D0:68:02:B0:03:7F:D9:32:A0:5F:0D:CA:88:04:7A:F4:13 Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 02A1 Signing time: Sat 23 Aug 2025 01:49:48 +0000 Manifest this update: Sat 23 Aug 2025 01:49:47 +0000 Manifest next update: Sat 30 Aug 2025 01:49:47 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: yLzgz1Tijs/IuuBij5y9awT1166rQ35gcGj1M4ojOtk=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: ipAHoMEeSi68f+rJDCwmxc6LIwQCY1InwnKCCeoYyk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: Aug 23 01:49:47 2025 GMT Not After : Aug 30 01:49:47 2025 GMT Subject: CN=68a91e3b-b36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:19:fa:e9:e9:85:eb:57:73:55:54:4b:6b: 0e:1d:7b:d8:ba:be:51:32:c3:58:2c:6b:d8:65:01: 4c:c7:31:4c:41:a9:b0:9c:c4:3f:99:aa:d3:82:46: 4c:a8:d1:a6:c4:75:5d:d8:2f:23:60:b5:52:51:c6: c5:a4:bb:cd:c6:1c:97:a2:ab:c6:4c:78:fc:8b:7c: 55:c3:bf:c3:7f:d4:88:08:a5:2f:d6:31:62:4a:93: 53:49:f4:12:65:6e:10:5c:47:69:b7:a3:f9:16:c3: d7:24:0e:fe:ef:4e:2e:42:ae:42:45:03:b1:6e:21: e7:37:81:18:62:e1:5d:45:24:be:0a:22:3a:c6:af: 0d:33:ca:bb:a7:5b:41:8f:ff:cd:7f:23:08:b5:da: 25:5e:c5:a4:af:12:98:d5:65:d0:5f:9d:ea:3a:09: 21:9e:74:2d:a6:a2:0d:2b:2c:88:c1:af:e0:0d:8c: 73:69:1e:f6:55:38:c3:bb:44:c7:de:8d:10:f4:c4: 32:0e:35:c7:3b:b6:4a:22:e9:75:42:0f:4e:02:86: 6b:88:53:36:51:97:1c:44:87:d4:fa:65:67:89:65: 4f:bb:95:d8:7c:1a:70:54:3c:ab:29:fa:b5:5d:ed: 51:10:78:ce:84:fb:42:79:4a:3f:06:94:2b:71:77: 67:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EB:B2:D0:68:02:B0:03:7F:D9:32:A0:5F:0D:CA:88:04:7A:F4:13 X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:77:b9:7d:96:31:6a:2b:0a:8c:cf:94:9d:f8:9e:19:b2:96: 5d:9e:f6:08:ad:21:40:bc:58:15:eb:44:85:d8:22:a6:68:39: 0c:d1:28:d0:42:3f:d9:3c:f0:f2:9c:be:7c:dd:7d:1d:0a:a8: 19:f6:51:af:a6:a4:39:75:4b:29:6a:00:b0:d5:f3:8f:da:af: cd:c2:ef:5b:aa:c2:56:ea:71:e4:ad:d5:06:13:b5:74:c7:95: 3f:53:77:bd:dd:55:b9:97:94:b8:ad:5a:f2:06:ea:19:e9:5c: 55:1a:f1:d6:93:a3:3f:ee:d7:0f:15:89:83:be:92:3f:32:32: 82:f9:9a:2e:1f:eb:35:fe:99:d9:22:53:8e:52:3c:24:36:bb: 73:f2:af:2a:be:73:59:57:78:f7:5f:77:79:25:41:8a:19:b5: 11:8b:16:3a:6f:0d:77:47:24:e9:83:a8:74:e1:ab:1d:b8:b4: 3f:d8:4e:ae:20:9b:21:77:48:18:62:22:01:b3:fd:49:2a:42: e0:6c:a2:56:2b:96:5f:7f:6b:06:44:12:12:4d:78:60:92:fe: 10:bb:43:f0:88:f3:31:a4:3c:eb:5b:a6:09:58:50:39:b0:6d: 18:ca:ca:e7:ac:b5:ee:5a:29:93:c1:fc:ad:3d:fc:85:a8:c0: eb:7d:d6:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjUwODIzMDE0OTQ3WhcNMjUwODMwMDE0OTQ3WjAYMRYwFAYD VQQDEw02OGE5MWUzYi1iMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPEZ+unphetXc1VUS2sOHXvYur5RMsNYLGvYZQFMxzFMQamwnMQ/marTgkZM qNGmxHVd2C8jYLVSUcbFpLvNxhyXoqvGTHj8i3xVw7/Df9SICKUv1jFiSpNTSfQS ZW4QXEdpt6P5FsPXJA7+704uQq5CRQOxbiHnN4EYYuFdRSS+CiI6xq8NM8q7p1tB j//NfyMItdolXsWkrxKY1WXQX53qOgkhnnQtpqINKyyIwa/gDYxzaR72VTjDu0TH 3o0Q9MQyDjXHO7ZKIul1Qg9OAoZriFM2UZccRIfU+mVniWVPu5XYfBpwVDyrKfq1 Xe1REHjOhPtCeUo/BpQrcXdn7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvrstBo ArADf9kyoF8NyogEevQTMB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYd7l9ljFqKwqMz5Sd+J4ZspZdnvYIrSFAvFgV60SF2CKmaDkM0SjQ Qj/ZPPDynL583X0dCqgZ9lGvpqQ5dUspagCw1fOP2q/Nwu9bqsJW6nHkrdUGE7V0 x5U/U3e93VW5l5S4rVryBuoZ6VxVGvHWk6M/7tcPFYmDvpI/MjKC+ZouH+s1/pnZ IlOOUjwkNrtz8q8qvnNZV3j3X3d5JUGKGbURixY6bw13RyTpg6h04asduLQ/2E6u IJshd0gYYiIBs/1JKkLgbKJWK5Zff2sGRBISTXhgkv4Qu0PwiPMxpDzrW6YJWFA5 sG0YysrnrLXuWimTwfytPfyFqMDrfdZa -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:10 2025 by rpki-client