$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: ceo4ZVgwlL1uOAVJouygKpW/DiUf7Fuyp5Qw8bkU34Q= Subject key identifier: B2:FB:2B:F9:5C:69:8B:EF:B8:5D:2B:CC:53:F0:46:B9:95:7D:74:57 Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 71 Signing time: Sat 23 Aug 2025 07:08:56 +0000 Manifest this update: Sat 23 Aug 2025 07:08:55 +0000 Manifest next update: Sat 30 Aug 2025 07:08:55 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: aK52OaVqoT23TdryqfpkraZ/WtF7/jN3LPBJesawRbg=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Aug 23 07:08:55 2025 GMT Not After : Aug 30 07:08:55 2025 GMT Subject: CN=68a96907-f86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:22:5e:3e:33:9a:c9:13:e0:dc:6c:08:37: ab:c5:2e:52:6c:79:19:02:f5:12:18:ac:6c:60:04: 88:60:55:7f:18:08:72:37:82:ce:d1:f4:b4:33:cb: 45:86:5d:db:71:71:3c:34:ae:4d:42:58:49:01:71: 31:99:af:e7:cc:5a:29:27:86:a4:c7:fe:9f:b3:d7: a0:d5:8f:95:39:1a:67:0d:64:2d:ca:9a:6a:b9:90: 5e:55:b7:3f:71:32:c1:3a:fc:25:43:ac:2d:51:49: 62:d4:ef:d1:30:dc:a7:c6:d4:d1:69:2b:95:24:59: 64:4d:94:80:e7:37:11:7e:3c:e8:80:6d:87:8c:b7: 26:27:37:2c:59:70:f9:04:6a:ff:c7:81:43:03:5d: a2:9e:17:23:29:e0:db:6d:22:16:d4:e8:6e:e9:23: 77:56:b9:72:33:9a:5f:49:0b:85:f8:5e:6d:38:c6: 24:6d:fe:c7:c7:6c:d1:48:ba:71:d1:be:7d:e6:7a: 13:d5:c6:dc:c3:1a:6f:33:3d:47:db:39:8b:eb:91: 02:ae:b6:ed:fe:5d:c7:64:86:9d:24:83:f1:ba:b0: 9a:17:ad:d2:ab:76:4f:e5:34:84:b6:3b:12:c3:ce: 4f:da:87:76:a7:70:76:54:0c:16:55:e3:7d:77:3b: 4a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FB:2B:F9:5C:69:8B:EF:B8:5D:2B:CC:53:F0:46:B9:95:7D:74:57 X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:89:77:64:38:6a:a7:7c:fc:f9:e2:83:92:d0:4d:15:0f:e6: ea:7b:ca:8a:07:a3:b0:25:f8:71:f4:37:31:63:0f:13:1a:ba: 69:18:0c:cc:3b:ba:37:ce:34:7c:40:8d:82:08:2b:83:d9:7b: c6:0a:89:e5:0b:04:6b:9f:42:2a:59:0a:e0:52:54:4e:e5:53: 8b:b6:2d:49:4e:9d:a7:e5:3f:08:3d:59:f8:c2:d4:c2:50:9f: 0a:46:4a:91:d4:2b:e3:c9:f3:9f:46:c1:c8:48:2a:c3:2c:d1: 51:50:b5:ba:5f:48:b7:3f:40:95:6d:7d:6f:83:48:af:0a:98: 9f:38:f5:10:fe:c5:09:df:9d:61:25:40:ab:89:85:be:d1:e0: 2d:fa:7e:eb:b7:27:ba:2b:69:fb:be:47:78:24:3d:6b:95:ac: 25:ed:f2:62:70:d8:71:e6:96:bb:bc:72:ce:94:58:f7:02:1e: 3a:ec:47:8c:1a:6e:77:41:e4:0b:b8:d3:0a:8c:3c:25:4c:d1: 77:24:0f:10:5e:a1:cb:58:e0:29:68:6c:ef:58:0a:d8:97:43: 21:95:16:ce:30:3e:cc:65:43:ae:9c:46:21:56:2e:83:b8:a1: 72:c9:b8:63:77:f2:d4:1b:ee:ae:3b:eb:c7:7f:f4:69:db:58: f7:89:75:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThFQkM4MUYwNjI1 QjI5MzE2MDAeFw0yNTA4MjMwNzA4NTVaFw0yNTA4MzAwNzA4NTVaMBgxFjAUBgNV BAMTDTY4YTk2OTA3LWY4NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAACJePjOayRPg3GwIN6vFLlJseRkC9RIYrGxgBIhgVX8YCHI3gs7R9LQzy0WG XdtxcTw0rk1CWEkBcTGZr+fMWiknhqTH/p+z16DVj5U5GmcNZC3Kmmq5kF5Vtz9x MsE6/CVDrC1RSWLU79Ew3KfG1NFpK5UkWWRNlIDnNxF+POiAbYeMtyYnNyxZcPkE av/HgUMDXaKeFyMp4NttIhbU6G7pI3dWuXIzml9JC4X4Xm04xiRt/sfHbNFIunHR vn3mehPVxtzDGm8zPUfbOYvrkQKutu3+Xcdkhp0kg/G6sJoXrdKrdk/lNIS2OxLD zk/ah3ancHZUDBZV4313O0rfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsvsr+Vxp i++4XSvMU/BGuZV9dFcwHwYDVR0jBBgwFoAUXv3pjE+/jRGHtoWOvIHwYlspMWAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzIwQkUxQTMwRDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1X QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHYzcGpFLV9qUkdIdG9XT3ZJSHdZbHNwTVdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzIwQkUxQTMwRDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJH SHRvV092SUh3WWxzcE1XQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOJd2Q4aqd8/Pnig5LQTRUP5up7yooHo7Al+HH0NzFjDxMaumkYDMw7 ujfONHxAjYIIK4PZe8YKieULBGufQipZCuBSVE7lU4u2LUlOnaflPwg9WfjC1MJQ nwpGSpHUK+PJ859GwchIKsMs0VFQtbpfSLc/QJVtfW+DSK8KmJ849RD+xQnfnWEl QKuJhb7R4C36fuu3J7orafu+R3gkPWuVrCXt8mJw2HHmlru8cs6UWPcCHjrsR4wa bndB5Au40wqMPCVM0XckDxBeoctY4ClobO9YCtiXQyGVFs4wPsxlQ66cRiFWLoO4 oXLJuGN38tQb7q4768d/9GnbWPeJdbg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:53 2025 by rpki-client