$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json) Hash identifier: eFyIQdK38bbf1pY+kSPyEz1mAvRXEh7uN9aKeMNFA98= Subject key identifier: DA:49:A6:E4:F1:08:D4:B7:E0:05:48:36:34:59:A0:84:9A:D0:DC:0C Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Certificate serial: 1937 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft Manifest number: 192C Signing time: Fri 22 Aug 2025 16:31:28 +0000 Manifest this update: Fri 22 Aug 2025 16:31:28 +0000 Manifest next update: Fri 29 Aug 2025 16:31:28 +0000 Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: dcKTxClw8bNTuLqoyIpzND7yj58rMZiTOG82J6QosxI=) 2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: CF41fEpYfOio5+N+rdP4mHFE/1R/CEvPcYP/7UAC+WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6455 (0x1937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Validity Not Before: Aug 22 16:31:28 2025 GMT Not After : Aug 29 16:31:28 2025 GMT Subject: CN=68a89b60-0c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:e5:17:65:04:fd:e5:d8:da:c3:ef:70:64: f7:ba:c5:ce:2c:1c:94:fd:96:9b:17:bb:83:b1:ff: fb:91:a5:df:7f:b4:24:36:1d:b4:ef:32:ee:73:e6: 30:99:86:dc:e3:97:65:d5:32:9a:3c:1f:df:ac:c6: 8e:cb:b2:bf:ff:aa:6a:8c:23:48:07:f8:4f:2e:19: 60:80:1e:b1:39:f2:bf:6c:75:90:c7:a5:3f:23:de: 70:51:4e:b5:3f:65:2f:92:ef:5f:f9:31:54:7b:9a: 87:0d:b4:b9:4d:91:d5:63:a5:a7:96:74:45:68:45: dc:6d:8b:ac:f5:db:1e:45:a3:12:e1:09:85:dc:77: 0d:6d:06:12:e5:92:51:dd:d8:ab:3b:59:f0:18:05: 90:3f:44:0c:e4:da:f5:2d:4d:1e:bd:91:bc:df:52: 6c:0c:18:ef:a3:5b:43:33:50:d3:25:dc:ba:8f:7d: ee:70:ce:41:f4:22:39:40:55:30:7d:d5:8c:bd:99: 92:c7:60:79:4a:b2:04:dd:2b:f0:77:df:5d:fb:34: e4:2f:41:bb:4c:2c:66:70:b7:d6:64:32:cf:31:47: e6:95:78:a2:a4:74:dd:57:5d:6f:2e:ca:f4:db:4f: 42:cf:d6:97:e4:53:ab:04:f5:be:35:60:cf:30:43: 59:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:49:A6:E4:F1:08:D4:B7:E0:05:48:36:34:59:A0:84:9A:D0:DC:0C X509v3 Authority Key Identifier: keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8b:8d:80:ca:c2:ea:b6:d3:81:dd:7c:eb:e0:37:33:fc:3d: 5e:ff:ae:27:77:ec:00:21:0d:a7:36:88:50:2a:79:a1:5a:f7: 0d:1c:1f:62:c8:e9:12:01:95:6c:2b:d1:d9:bf:a8:f2:79:94: 08:0d:a7:73:53:0c:10:ba:00:07:f8:8c:41:de:70:fa:cb:f6: db:d5:fe:b6:88:0e:e2:32:11:8c:e8:b0:2e:db:ed:af:b4:49: b1:5d:df:aa:86:d0:61:61:9e:27:47:04:c0:71:af:01:25:aa: 03:63:0b:ed:c9:dc:0b:c4:d6:31:2d:68:0e:8a:b3:74:8e:fc: e8:63:74:a3:30:55:ba:97:96:06:c5:c7:b7:06:1e:84:f3:5d: 7f:6f:99:20:3c:2f:8b:7f:cf:bd:ed:fc:f8:95:03:cc:d3:da: 0e:ff:86:db:c0:b3:3a:28:34:63:eb:35:f4:9c:ff:14:84:e7: ab:9a:84:74:dd:15:4c:9b:3f:93:92:a0:32:ee:89:8e:ee:f6: 6a:0e:eb:36:bf:05:1d:5b:37:20:97:0f:d8:81:f4:b4:ab:b8: c7:8e:eb:34:81:a3:5f:3a:2e:d4:3f:c4:12:cf:48:bd:3e:9b: 85:b3:0d:f2:ea:95:54:e0:c3:fd:10:cd:bd:35:3f:8c:1c:7f: fb:f0:0b:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNjExMTAvBgNVBAUTKEM0OEFBQ0VCNEREQUVFM0M2MDQyRTY2MjE2QUQ3OTE1 MDdCNDdDNkIwHhcNMjUwODIyMTYzMTI4WhcNMjUwODI5MTYzMTI4WjAYMRYwFAYD VQQDEw02OGE4OWI2MC0wYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9flF2UE/eXY2sPvcGT3usXOLByU/ZabF7uDsf/7kaXff7QkNh207zLuc+Yw mYbc45dl1TKaPB/frMaOy7K//6pqjCNIB/hPLhlggB6xOfK/bHWQx6U/I95wUU61 P2Uvku9f+TFUe5qHDbS5TZHVY6WnlnRFaEXcbYus9dseRaMS4QmF3HcNbQYS5ZJR 3dirO1nwGAWQP0QM5Nr1LU0evZG831JsDBjvo1tDM1DTJdy6j33ucM5B9CI5QFUw fdWMvZmSx2B5SrIE3Svwd99d+zTkL0G7TCxmcLfWZDLPMUfmlXiipHTdV11vLsr0 209Cz9aX5FOrBPW+NWDPMENZ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpJpuTx CNS34AVINjRZoISa0NwMMB8GA1UdIwQYMBaAFMSKrOtN2u48YELmYhateRUHtHxr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY2MS8xNkE2REM2MDgz REExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdqeGdRdVppRnExNUZRZTBm R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJcXM2MDNhN2p4Z1F1WmlGcTE1RlFlMGZHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY2MS8xNkE2REM2MDgzREExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdq eGdRdVppRnExNUZRZTBmR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9i42AysLqttOB3Xzr4Dcz/D1e/64nd+wAIQ2nNohQKnmhWvcNHB9i yOkSAZVsK9HZv6jyeZQIDadzUwwQugAH+IxB3nD6y/bb1f62iA7iMhGM6LAu2+2v tEmxXd+qhtBhYZ4nRwTAca8BJaoDYwvtydwLxNYxLWgOirN0jvzoY3SjMFW6l5YG xce3Bh6E811/b5kgPC+Lf8+97fz4lQPM09oO/4bbwLM6KDRj6zX0nP8UhOermoR0 3RVMmz+TkqAy7omO7vZqDus2vwUdWzcglw/YgfS0q7jHjus0gaNfOi7UP8QSz0i9 PpuFsw3y6pVU4MP9EM29NT+MHH/78AsJ -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:01 2025 by rpki-client