$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft File: -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json) Hash identifier: ywPzTgu0pFSCcl4QrCeYXk106JWx7Sl5GrCdQqv6wQU= Subject key identifier: 64:8B:BB:03:65:17:88:9B:AD:55:36:B1:C0:5A:05:24:E8:2D:D0:46 Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC Certificate issuer: /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft Manifest number: 01FF Signing time: Sat 23 Aug 2025 02:33:29 +0000 Manifest this update: Sat 23 Aug 2025 02:33:28 +0000 Manifest next update: Sat 30 Aug 2025 02:33:28 +0000 Files and hashes: 1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: N46uOasFX9sD5FszJ9nzdsqq70LRwr2cg5Ra0TMsBAs=) 2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: P1cDwO0JwMVyMvSRcaDGiISLVg7IuTCLj2a8HaJzNI4=) 3: 69349714157D11F0876A4D62C4F9AE02.roa (hash: spR6GzQsviRpE5kB1PAg1GtPij2DNf/T1fZFU8oARv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196629, serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Validity Not Before: Aug 23 02:33:28 2025 GMT Not After : Aug 30 02:33:28 2025 GMT Subject: CN=68a92878-7b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:cb:0e:01:43:80:5d:f5:41:c9:5c:c4:b4: d9:a6:e0:4b:00:db:d2:22:18:32:25:ae:99:41:90: f6:b0:90:24:83:a6:44:e8:5a:bd:bc:d3:05:1e:f5: cc:57:d9:8f:11:e6:94:7d:80:26:f2:2d:46:d1:e5: 1c:9c:1d:89:57:eb:fe:49:e3:b8:f3:c3:80:ca:76: 0c:d9:0d:c2:f7:48:33:1f:9b:ce:88:eb:25:ad:44: d2:4a:e4:a9:15:02:75:5a:58:2a:98:0f:f6:38:36: 6e:b5:b2:b3:fb:8d:dd:9d:e8:09:0c:e1:de:89:fd: 91:c2:4d:88:7a:d6:81:e7:de:3e:a2:21:f6:f7:26: d7:94:21:4e:06:41:af:86:99:93:b8:38:f0:bc:da: b7:dc:e5:94:7a:e7:93:72:41:d6:7d:10:5f:fb:e6: bb:ea:75:e4:95:57:3a:6e:47:ac:5c:f9:21:29:78: a5:ad:60:4f:f2:5a:81:06:94:14:46:a7:77:d6:06: 64:6e:4a:50:a7:d8:32:5c:f1:97:19:78:8c:78:d9: 8e:2f:c7:41:15:30:60:3e:11:b5:aa:00:17:6d:c3: cf:e8:61:1d:77:9f:ae:4d:1a:f4:44:2e:ea:58:29: d4:96:41:dc:07:79:0a:06:a3:f1:cc:4c:2f:41:d9: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8B:BB:03:65:17:88:9B:AD:55:36:B1:C0:5A:05:24:E8:2D:D0:46 X509v3 Authority Key Identifier: keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:fb:3b:f9:67:a1:76:28:3a:1a:1e:0f:f0:b2:d0:a1:f1:fa: d4:bc:28:32:f5:9f:48:ec:06:09:00:3f:65:45:a4:8d:51:f4: 33:c9:96:fa:d6:fb:b0:56:3c:1b:34:1a:5b:af:65:40:5e:0e: e3:ef:51:87:9a:94:a0:23:81:6d:c3:f4:64:40:74:91:e7:34: c1:b5:7c:03:9a:2a:4d:73:92:68:7e:85:81:00:fe:f3:59:29: d7:42:23:a7:df:22:e3:61:bc:40:6a:dd:09:c2:ec:8a:09:ef: aa:ff:5f:74:d4:40:1d:26:2e:64:ca:68:87:2b:67:5b:a8:d2: 8a:c5:b4:69:e0:ee:bf:76:ce:34:14:47:c1:a8:a3:87:91:40: 65:83:6d:10:5a:4f:29:25:30:bb:55:13:d0:43:f5:f7:5c:e0: 49:d3:5c:1b:3f:c2:bf:48:f7:bd:fa:77:70:d4:80:a9:2a:1a: 7e:5b:33:b0:7c:17:1f:9c:45:a5:13:85:f6:d8:30:6d:cd:18: 82:2f:40:c0:ae:eb:3b:a8:49:6d:e5:35:12:68:6e:8b:25:1e: 56:5d:5c:ac:12:36:ef:56:be:de:78:09:48:a4:f5:c8:21:c7: 35:87:ff:68:3b:bf:10:ee:b8:1f:3f:6c:3d:c1:d2:ad:18:8d: ef:24:9b:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY2MjkxMTAvBgNVBAUTKEY5Nzc5Nzc4REE3MEM1OEE1QTc5NjQ1REQyODk2MTEx QkE2RkVCQ0MwHhcNMjUwODIzMDIzMzI4WhcNMjUwODMwMDIzMzI4WjAYMRYwFAYD VQQDEw02OGE5Mjg3OC03YjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwnLDgFDgF31QclcxLTZpuBLANvSIhgyJa6ZQZD2sJAkg6ZE6Fq9vNMFHvXM V9mPEeaUfYAm8i1G0eUcnB2JV+v+SeO488OAynYM2Q3C90gzH5vOiOslrUTSSuSp FQJ1WlgqmA/2ODZutbKz+43dnegJDOHeif2Rwk2IetaB594+oiH29ybXlCFOBkGv hpmTuDjwvNq33OWUeueTckHWfRBf++a76nXklVc6bkesXPkhKXilrWBP8lqBBpQU Rqd31gZkbkpQp9gyXPGXGXiMeNmOL8dBFTBgPhG1qgAXbcPP6GEdd5+uTRr0RC7q WCnUlkHcB3kKBqPxzEwvQdmIzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSLuwNl F4ibrVU2scBaBSToLdBGMB8GA1UdIwQYMBaAFPl3l3jacMWKWnlkXdKJYRG6b+vM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjYyOS9FMDk4NDYzRTdB QkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZcGFlV1JkMG9saEVicHY2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YZVhlTnB3eFlwYWVXUmQwb2xoRWJwdjY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjYyOS9FMDk4NDYzRTdBQkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZ cGFlV1JkMG9saEVicHY2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi+zv5Z6F2KDoaHg/wstCh8frUvCgy9Z9I7AYJAD9lRaSNUfQzyZb6 1vuwVjwbNBpbr2VAXg7j71GHmpSgI4Ftw/RkQHSR5zTBtXwDmipNc5JofoWBAP7z WSnXQiOn3yLjYbxAat0JwuyKCe+q/1901EAdJi5kymiHK2dbqNKKxbRp4O6/ds40 FEfBqKOHkUBlg20QWk8pJTC7VRPQQ/X3XOBJ01wbP8K/SPe9+ndw1ICpKhp+WzOw fBcfnEWlE4X22DBtzRiCL0DArus7qElt5TUSaG6LJR5WXVysEjbvVr7eeAlIpPXI Icc1h/9oO78Q7rgfP2w9wdKtGI3vJJtN -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:44 2025 by rpki-client