$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json) Hash identifier: vv/s6AoFKqk+94NaoEr6kRNqbk4NRWiR58S2NRVD4kw= Subject key identifier: D8:71:6A:1A:43:CB:7D:2D:4E:7F:25:EF:6C:9E:7D:1F:50:3E:ED:CE Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft Manifest number: 01AA Signing time: Sat 23 Aug 2025 03:19:51 +0000 Manifest this update: Sat 23 Aug 2025 03:19:50 +0000 Manifest next update: Sat 30 Aug 2025 03:19:50 +0000 Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: PiOY2ZEb3lj4bKh3iBNPmcdrtoqsQViv7DwGNRVV1TI=) 2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: OpoKcUWUvi3vDF/Fc3mzC49yGPnaGFfP/+Z7YSKKLhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Validity Not Before: Aug 23 03:19:50 2025 GMT Not After : Aug 30 03:19:50 2025 GMT Subject: CN=68a93356-3977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:38:b1:a6:86:c1:8c:7f:d6:76:ea:e4:64:57: bb:af:ed:1d:4f:78:13:92:b1:b8:74:dc:1e:8e:13: ac:90:28:36:86:f5:dd:f9:a5:de:f4:f7:29:64:e7: 9a:ac:1b:56:bf:9d:28:d9:d7:75:e3:34:d0:fe:1c: 85:75:50:78:3d:47:ab:f8:e0:f4:82:c8:0c:a8:27: f6:4f:50:a6:a2:9e:2d:25:cd:67:68:d6:79:e1:4b: 75:d8:2b:9e:d5:8b:1e:60:6e:27:22:10:ff:45:fd: 69:33:96:dd:ad:77:3a:87:3f:e5:45:8e:b0:00:b4: 9b:0f:63:7d:68:e9:22:33:f7:eb:31:75:93:fe:c0: 90:46:b6:4b:d5:38:35:5a:35:2f:6c:2a:12:2d:d0: e0:35:56:a6:49:42:ac:62:d1:7d:f8:3b:d3:5a:41: 90:3f:73:20:a3:bd:19:1b:61:a8:ab:7e:bb:08:19: f0:48:4a:69:3f:86:0d:4b:91:a4:79:88:29:a6:c3: e6:44:76:3e:2f:d5:1d:ea:81:39:7d:45:c2:00:6b: 08:6b:04:1c:b8:70:80:0b:ed:f5:2b:43:f5:9a:70: 29:07:85:38:93:d7:a6:ea:1c:cf:8d:0d:81:22:0e: 8d:c2:44:80:c3:e1:10:b4:d6:39:c6:43:42:3c:d3: 59:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:71:6A:1A:43:CB:7D:2D:4E:7F:25:EF:6C:9E:7D:1F:50:3E:ED:CE X509v3 Authority Key Identifier: keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b5:24:2e:d3:ce:9f:98:4a:f1:2f:d1:00:51:5d:3b:e5:38: fa:cf:7c:9d:be:3b:20:b5:23:79:5c:e9:eb:39:3b:dc:47:c9: cb:de:ea:90:20:14:b2:e4:78:b0:32:8a:94:5b:17:5e:18:b0: f6:9b:7d:ad:0b:db:d1:60:0d:69:f0:cb:2d:4b:dd:c9:08:80: a8:c8:2f:e7:43:26:de:f9:a6:e9:3c:7b:c5:46:63:c4:ab:05: f1:c1:59:dd:10:d2:9d:82:a0:bf:cb:0f:62:cc:4c:0b:58:3c: cc:32:0f:b6:0d:82:24:1e:91:42:b2:6e:0a:b2:7a:8f:b0:f3: ee:e6:54:e5:eb:f9:57:d9:0a:ad:4a:61:64:4d:6a:7d:89:40: 2e:7a:6d:09:84:f7:01:4c:a8:0b:f8:b7:ab:fe:c4:26:54:68: f2:ec:2a:89:75:56:c9:6e:41:47:bf:35:9d:ba:33:a7:62:7b: a6:21:f9:49:b6:53:17:cd:cc:52:4e:85:90:d5:0d:60:58:87: c2:48:10:b3:2c:77:bd:fc:1c:9e:b9:f9:14:d9:e8:09:c6:c7: 85:ff:0c:76:45:d4:7f:7e:87:d2:b3:a5:f0:35:a9:ec:ab:2a: 4a:24:c8:34:68:0f:85:7c:7f:06:f4:b1:66:a0:42:87:6f:72: 2d:64:2d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1MzIxMTAvBgNVBAUTKEM0RkE2QkJBQkZEMTk5N0NDOEYxRDIwRkU2QTU1NzRE RUU5QjMyNTYwHhcNMjUwODIzMDMxOTUwWhcNMjUwODMwMDMxOTUwWjAYMRYwFAYD VQQDEw02OGE5MzM1Ni0zOTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTixpobBjH/WdurkZFe7r+0dT3gTkrG4dNwejhOskCg2hvXd+aXe9PcpZOea rBtWv50o2dd14zTQ/hyFdVB4PUer+OD0gsgMqCf2T1Cmop4tJc1naNZ54Ut12Cue 1YseYG4nIhD/Rf1pM5bdrXc6hz/lRY6wALSbD2N9aOkiM/frMXWT/sCQRrZL1Tg1 WjUvbCoSLdDgNVamSUKsYtF9+DvTWkGQP3Mgo70ZG2Goq367CBnwSEppP4YNS5Gk eYgppsPmRHY+L9Ud6oE5fUXCAGsIawQcuHCAC+31K0P1mnApB4U4k9em6hzPjQ2B Ig6NwkSAw+EQtNY5xkNCPNNZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhxahpD y30tTn8l72yefR9QPu3OMB8GA1UdIwQYMBaAFMT6a7q/0Zl8yPHSD+alV03umzJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzMi85QTY2RUI5RUY2 NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Yekk4ZElQNXFWWFRlNmJN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQcHJ1cl9SbVh6SThkSVA1cVZYVGU2Yk1sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzMi85QTY2RUI5RUY2NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Y ekk4ZElQNXFWWFRlNmJNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVtSQu086fmErxL9EAUV075Tj6z3ydvjsgtSN5XOnrOTvcR8nL3uqQ IBSy5HiwMoqUWxdeGLD2m32tC9vRYA1p8MstS93JCICoyC/nQybe+abpPHvFRmPE qwXxwVndENKdgqC/yw9izEwLWDzMMg+2DYIkHpFCsm4KsnqPsPPu5lTl6/lX2Qqt SmFkTWp9iUAuem0JhPcBTKgL+Ler/sQmVGjy7CqJdVbJbkFHvzWdujOnYnumIflJ tlMXzcxSToWQ1Q1gWIfCSBCzLHe9/ByeufkU2egJxseF/wx2RdR/fofSs6XwNans qypKJMg0aA+FfH8G9LFmoEKHb3ItZC0C -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:41 2025 by rpki-client