$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: yCBPxT5es3jpmsEO1zHF0i1wWhgvR/tlTnNz2PiVhpA= Subject key identifier: 40:F5:11:97:4B:27:E7:11:59:8D:69:1A:B1:EB:88:0C:93:98:FD:81 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 2367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 234D Signing time: Wed 02 Jul 2025 15:56:59 +0000 Manifest this update: Wed 02 Jul 2025 15:56:59 +0000 Manifest next update: Wed 09 Jul 2025 15:56:59 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: J/54kgrfJ1GJgrEuKg6qXIhgE4hLD1I76tFOiWPONmQ=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: SVFtlSzgsbl94LKJE/MqOpvXoyEaSOVfShQjoppkD5M=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: SmF6p3k95KsM+SMEI2F1sl2qA3ioWO3N9renwiZgrBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9063 (0x2367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Jul 2 15:56:59 2025 GMT Not After : Jul 9 15:56:59 2025 GMT Subject: CN=686556cb-92b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:9a:51:94:1e:3a:07:c8:1c:dc:24:bd:a5: 4d:60:c9:d3:cf:21:e4:c3:20:4f:0d:78:6d:d3:0b: 22:d5:10:13:6f:a6:95:fe:82:93:b8:5f:18:18:1d: 49:e9:01:52:8c:12:39:ef:ac:11:80:76:92:e1:e8: 23:96:f5:12:6c:2b:59:db:62:90:22:f4:09:5b:79: 96:cb:7d:1f:cc:22:18:e9:f1:55:9d:e2:85:28:5e: 20:e3:16:35:b0:58:c3:3f:1d:47:be:11:0a:94:d3: eb:10:cf:1e:73:99:c8:ab:aa:83:db:57:62:58:dc: 35:e9:c0:87:9c:bf:f4:79:1a:70:cc:9e:73:de:74: 63:c9:1a:f5:fe:c8:09:1d:a0:d7:22:14:20:ae:7e: 91:c7:7e:bf:21:dc:5b:d5:50:d2:70:fc:b5:3c:69: 0f:cc:9c:79:40:67:76:0b:20:c7:81:24:46:fc:d9: 5f:fd:e7:5f:df:2d:73:f3:2b:5a:dc:cf:53:39:7c: 57:3c:76:51:7f:93:78:2d:12:a9:cb:1d:e6:e6:a0: f1:af:bd:58:62:67:48:80:74:a6:9b:f1:cb:ce:5f: fa:ba:2a:1a:50:b8:87:d8:49:a4:b4:f0:03:2b:02: af:a5:ab:72:cf:cd:e0:b3:f8:ff:b6:b9:1b:c5:25: 23:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F5:11:97:4B:27:E7:11:59:8D:69:1A:B1:EB:88:0C:93:98:FD:81 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:2b:23:e0:15:93:a5:41:e7:56:43:3c:23:51:01:b0:7e:0d: 93:67:9c:d0:10:82:35:3d:b8:b8:b4:c9:c7:14:23:5b:63:bb: 71:1d:cd:9c:90:34:98:2c:9f:8b:a0:bb:cb:89:08:ba:29:37: 7b:4a:48:5f:42:e1:2e:c0:d0:5d:4e:41:36:7a:10:fb:85:2e: 04:16:aa:b2:ef:66:7d:21:f7:5c:ee:1f:dd:78:01:49:86:62: 5e:14:4b:e9:af:0c:9a:bf:58:15:d4:50:8f:54:11:62:52:08: 72:1f:0b:1e:88:ef:be:d6:16:1c:2b:7c:a8:db:fb:d4:d2:50: ed:9c:1e:64:ac:a4:19:f3:7d:70:dd:4e:4b:a1:7b:2c:50:5d: e1:c8:c4:c1:81:64:df:87:74:d6:da:5e:16:9a:a4:98:31:6e: c6:21:10:72:74:82:ee:02:10:1f:ee:6c:6d:9b:d1:ed:67:20: e1:44:57:03:20:be:98:57:35:ca:e7:57:8f:9d:d8:63:e7:98: ad:29:97:a7:67:9e:53:26:38:87:fb:94:03:f8:4a:6d:4b:1f: c6:bf:65:e1:f5:2d:6c:ee:a6:4f:b8:38:cd:b9:cc:03:75:46: 6e:50:4e:e4:f9:5b:59:15:91:8a:0b:50:e7:d1:52:f1:c3:5f: eb:e8:80:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjUwNzAyMTU1NjU5WhcNMjUwNzA5MTU1NjU5WjAYMRYwFAYD VQQDEw02ODY1NTZjYi05MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWiaUZQeOgfIHNwkvaVNYMnTzyHkwyBPDXht0wsi1RATb6aV/oKTuF8YGB1J 6QFSjBI576wRgHaS4egjlvUSbCtZ22KQIvQJW3mWy30fzCIY6fFVneKFKF4g4xY1 sFjDPx1HvhEKlNPrEM8ec5nIq6qD21diWNw16cCHnL/0eRpwzJ5z3nRjyRr1/sgJ HaDXIhQgrn6Rx36/Idxb1VDScPy1PGkPzJx5QGd2CyDHgSRG/Nlf/edf3y1z8yta 3M9TOXxXPHZRf5N4LRKpyx3m5qDxr71YYmdIgHSmm/HLzl/6uioaULiH2EmktPAD KwKvpatyz83gs/j/trkbxSUj6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFED1EZdL J+cRWY1pGrHriAyTmP2BMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4KyPgFZOlQedWQzwjUQGwfg2TZ5zQEII1Pbi4tMnHFCNbY7txHc2c kDSYLJ+LoLvLiQi6KTd7SkhfQuEuwNBdTkE2ehD7hS4EFqqy72Z9Ifdc7h/deAFJ hmJeFEvprwyav1gV1FCPVBFiUghyHwseiO++1hYcK3yo2/vU0lDtnB5krKQZ831w 3U5LoXssUF3hyMTBgWTfh3TW2l4WmqSYMW7GIRBydILuAhAf7mxtm9HtZyDhRFcD IL6YVzXK51ePndhj55itKZenZ55TJjiH+5QD+EptSx/Gv2Xh9S1s7qZPuDjNucwD dUZuUE7k+VtZFZGKC1Dn0VLxw1/r6IBx -----END CERTIFICATE-----Generated at Thu Jul 3 01:03:06 2025 by rpki-client