$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft File: X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json) Hash identifier: oa4OI9bgJ7+3/QM5686QAziEHsmYZWbEiAgDKDWXoU8= Subject key identifier: 0B:54:FF:F4:ED:B6:5F:88:DE:33:CD:0C:62:40:8B:29:4D:C1:BC:73 Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 Certificate issuer: /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft Manifest number: 074B Signing time: Fri 22 Aug 2025 21:50:57 +0000 Manifest this update: Fri 22 Aug 2025 21:50:57 +0000 Manifest next update: Fri 29 Aug 2025 21:50:57 +0000 Files and hashes: 1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: QnfIVmPgUeYvWxtdxvS2s3SpyctT0X8MqxgKPjNlhkA=) 2: FA93793637C011EB97405947C4F9AE02.roa (hash: mkvl6eYOBUcYWRwYiBwVS0K1wVeK5CC5TdYufIA/AfQ=) 3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: 1+jxf6thWYfAYYLkfgmBPO3HMtuISkV6ufCHk+IUOxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Validity Not Before: Aug 22 21:50:57 2025 GMT Not After : Aug 29 21:50:57 2025 GMT Subject: CN=68a8e641-66bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:08:09:81:57:34:a9:63:23:14:60:94:78: 1f:36:72:ee:5d:4a:13:13:6d:d3:f2:f7:50:7d:cd: d2:50:a4:4f:67:c0:82:02:7e:cd:dc:21:c4:f9:6f: 86:41:4f:21:72:6a:09:cc:13:54:e4:68:6d:45:1c: bc:82:c8:79:9d:7c:db:98:b5:20:e9:67:6d:34:a4: 3a:d9:bd:fa:09:60:02:dd:c1:0b:e2:4a:96:11:f9: 04:e1:2a:7d:60:92:33:ac:37:0b:93:e7:58:15:4d: de:87:29:f6:04:64:ee:50:91:5b:fe:1e:d4:6d:05: 2f:47:91:a0:0f:23:b3:02:10:30:1a:70:6c:68:44: 70:45:9e:f6:cd:60:5e:37:a5:da:a5:ed:3c:86:2c: aa:f5:d8:58:f0:f6:e8:db:a8:14:f5:d1:53:40:49: 6c:30:85:03:66:26:72:b8:7f:43:fa:ab:d9:18:02: cb:ae:e7:4d:b7:47:1b:8b:7e:7a:5b:7b:40:ec:b1: e3:4d:ee:83:5f:48:13:54:ec:fe:02:c7:36:b4:fb: 10:7a:1a:e6:69:3b:75:24:c9:9a:c0:20:57:59:c9: 08:0f:65:78:79:32:44:8d:e0:11:fa:82:82:85:26: ff:d6:0c:90:b6:3d:87:d4:91:64:24:69:2d:2d:f8: 45:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:54:FF:F4:ED:B6:5F:88:DE:33:CD:0C:62:40:8B:29:4D:C1:BC:73 X509v3 Authority Key Identifier: keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:94:a7:80:ca:44:c2:03:fb:71:42:2c:9a:7b:d9:62:99:a4: 12:ff:3a:8f:a3:04:e6:63:0c:f7:bd:dc:88:c1:30:2c:e2:7b: bc:22:a5:e3:5a:39:54:d9:23:d6:de:4f:6e:d4:35:62:46:7b: cf:4d:d1:b8:51:3f:27:ae:7a:9c:78:2e:77:78:61:46:94:f6: 21:3f:f3:b6:e1:dc:a6:2a:9d:49:a2:54:0b:8a:3a:2c:cf:91: 11:84:3d:00:a1:4b:65:73:b5:64:e6:e4:61:91:a7:52:0c:53: 1b:82:b6:d1:4c:09:e7:cb:62:d5:d8:96:05:77:6e:76:98:c1: 56:92:a5:17:ed:41:80:80:d2:e5:52:53:c6:d2:9b:9f:8b:4c: 00:96:4a:89:40:fb:96:7a:83:bc:7d:f1:17:a6:f0:25:02:e6: 2f:6e:ae:cd:30:e3:92:aa:c7:47:0e:9e:13:8d:04:00:93:91: f3:f5:9c:f0:e8:c7:6b:2d:c5:f9:02:29:38:ac:08:fb:e3:cd: cb:57:8f:35:6d:5a:0c:00:2b:1c:28:46:30:d5:34:a7:9f:79: 89:07:8e:d6:6b:e6:63:75:95:ac:e4:2d:71:55:f5:0a:d5:1f: 2b:76:ed:a1:54:41:d9:76:9b:ca:a2:46:10:2e:2e:70:14:23: 30:79:6a:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA0OTExMTAvBgNVBAUTKDVGQzNFODZEQUU0MzUzMTU4OEVCMDE1RDUwMUUzMTcx MjA1RjA4NTEwHhcNMjUwODIyMjE1MDU3WhcNMjUwODI5MjE1MDU3WjAYMRYwFAYD VQQDEw02OGE4ZTY0MS02NmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtn8ICYFXNKljIxRglHgfNnLuXUoTE23T8vdQfc3SUKRPZ8CCAn7N3CHE+W+G QU8hcmoJzBNU5GhtRRy8gsh5nXzbmLUg6WdtNKQ62b36CWAC3cEL4kqWEfkE4Sp9 YJIzrDcLk+dYFU3ehyn2BGTuUJFb/h7UbQUvR5GgDyOzAhAwGnBsaERwRZ72zWBe N6Xape08hiyq9dhY8Pbo26gU9dFTQElsMIUDZiZyuH9D+qvZGALLrudNt0cbi356 W3tA7LHjTe6DX0gTVOz+Asc2tPsQehrmaTt1JMmawCBXWckID2V4eTJEjeAR+oKC hSb/1gyQtj2H1JFkJGktLfhFGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtU//Tt tl+I3jPNDGJAiylNwbxzMB8GA1UdIwQYMBaAFF/D6G2uQ1MViOsBXVAeMXEgXwhR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQ5MS85MjlCREJDMjM3 QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4V0k2d0ZkVUI0eGNTQmZD RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4UG9iYTVEVXhXSTZ3RmRVQjR4Y1NCZkNGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDQ5MS85MjlCREJDMjM3QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4 V0k2d0ZkVUI0eGNTQmZDRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAilKeAykTCA/txQiyae9limaQS/zqPowTmYwz3vdyIwTAs4nu8IqXj WjlU2SPW3k9u1DViRnvPTdG4UT8nrnqceC53eGFGlPYhP/O24dymKp1JolQLijos z5ERhD0AoUtlc7Vk5uRhkadSDFMbgrbRTAnny2LV2JYFd252mMFWkqUX7UGAgNLl UlPG0pufi0wAlkqJQPuWeoO8ffEXpvAlAuYvbq7NMOOSqsdHDp4TjQQAk5Hz9Zzw 6MdrLcX5Aik4rAj7483LV481bVoMACscKEYw1TSnn3mJB47Wa+ZjdZWs5C1xVfUK 1R8rdu2hVEHZdpvKokYQLi5wFCMweWp6 -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:13 2025 by rpki-client