$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft File: xCIPUDVWR7fICyzovHEmqsLiLTc.mft (raw, json) Hash identifier: UPNbRfPvjXiqOb13VVafhkPKUTGjLtv57M9uaftDGoM= Subject key identifier: 52:7F:6C:4C:F0:59:68:C9:A2:8C:AF:68:23:DD:83:56:25:91:58:52 Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Certificate serial: 34DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft Manifest number: 34C8 Signing time: Fri 22 Aug 2025 14:18:37 +0000 Manifest this update: Fri 22 Aug 2025 14:18:37 +0000 Manifest next update: Fri 29 Aug 2025 14:18:37 +0000 Files and hashes: 1: xCIPUDVWR7fICyzovHEmqsLiLTc.crl (hash: O4t8d0r70tY7sJn9fBU3PfdnFHrj2EVwc9HkT+OuPzg=) 2: 2C5F8752A10D11EFB9BE8476C4F9AE02.roa (hash: Iv390Bd/MJyqbzwOB0bqCA/PrLBJuVtYX/m4XRUDX5k=) 3: 8C2774CA0F3511EF93020023C4F9AE02.roa (hash: jfY5GTg8hmmhErbL9iwX+gxSO1reSXWac9mVO/Xqq1g=) 4: D7ABA864DFE611ED8872DE0EC4F9AE02.roa (hash: 6UO6N8yoyg6+8CvpDMt8iCmfSbV26PbG92dRF9r0otc=) 5: F8E58782A10C11EFA3C0F375C4F9AE02.roa (hash: joxi3OaPnE1De2CkoKX8c3yAH5f2DPtnnESV+trPxbM=) 6: 24C4305A7CD911EEB0B4C962C4F9AE02.roa (hash: 0Wsr5VamrOSe1PRZDclYr+ROoB9PidSlGQIwmrfuBe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13534 (0x34de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37 Validity Not Before: Aug 22 14:18:37 2025 GMT Not After : Aug 29 14:18:37 2025 GMT Subject: CN=68a87c3d-fe0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:73:99:39:fb:27:7d:e8:35:9b:74:91:1a: 95:4d:0e:a6:48:c8:23:96:8d:bf:9b:8c:c4:3c:61: d6:63:e6:90:29:1b:9b:26:78:58:d7:7f:80:34:b2: c1:20:15:e3:22:fe:2a:af:68:b5:d6:51:50:80:75: 7a:b2:c0:27:12:d5:0e:c9:fc:f2:e1:1e:c4:f9:94: ef:71:47:9b:50:db:9b:49:a0:00:a9:4f:8b:44:bb: 79:ae:3e:32:1d:19:a7:d9:86:66:9e:0e:49:57:b3: 94:55:98:8f:d6:db:11:6e:84:b3:23:4a:91:77:fb: 2c:bd:d4:02:08:a4:86:5c:91:a6:a0:d8:9f:f4:65: 7e:26:4e:b2:7b:f7:d6:64:1b:f4:6f:cc:7e:91:cc: 8d:32:2a:95:ee:02:3c:04:60:44:fe:de:c6:cf:84: b9:a6:2a:36:df:52:51:ef:f6:0c:c1:64:01:7f:8b: bb:0b:f8:29:d1:b4:89:fa:1c:6d:38:51:89:fe:f6: 41:3b:60:a4:3a:07:a6:ba:2a:a4:3f:67:a1:ad:79: d6:88:6b:64:c5:80:4b:0e:4f:08:d5:26:53:e8:40: dd:89:71:58:58:f2:f6:81:19:a5:9d:7b:6a:9c:81: 8b:e7:24:39:31:bf:fe:7f:59:36:34:b4:bd:db:76: bf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7F:6C:4C:F0:59:68:C9:A2:8C:AF:68:23:DD:83:56:25:91:58:52 X509v3 Authority Key Identifier: keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:8f:f5:ff:5c:c7:73:05:54:f2:d5:9a:5f:f8:19:fb:d3:5e: 43:e7:f2:32:58:ec:53:dc:a4:e1:b3:3b:b2:d8:4b:06:7e:4a: bf:a0:b5:e6:6f:f5:7b:2d:02:5f:f7:f6:2a:0e:35:07:35:cd: 57:64:e8:a3:e7:85:d7:88:e9:c7:0b:01:2e:4a:a5:fa:ec:e3: 7e:fb:f9:bd:32:6b:42:5b:b5:9b:75:f2:eb:d8:ac:14:ab:ad: 78:1a:cd:1c:23:fb:8c:19:0f:2f:8b:3f:a6:1c:3a:83:07:3e: cf:d3:36:02:5f:2e:9c:95:f5:60:b1:6c:85:a0:15:92:16:d1: 31:e2:c1:74:52:ae:39:d0:70:ac:c9:f5:bf:f3:97:71:86:65: 8b:68:62:eb:05:e3:fe:d0:bc:3e:7c:f0:9b:7f:c0:c0:80:6f: d1:28:02:ef:c3:7a:d1:20:27:54:c8:5e:b1:6e:e1:36:8e:be: e8:6c:f2:8e:4a:7a:f7:a4:f9:c6:7d:56:eb:ac:4e:ad:e8:4b: cc:f1:93:67:c5:1d:ea:cb:83:b4:8f:03:76:16:60:8c:14:63: 88:d1:8d:e4:63:0d:49:96:16:1f:16:f9:56:10:83:98:9f:19: 24:24:1e:14:d7:d4:61:66:b6:6a:3f:2e:fc:f7:c5:7b:ca:ee: 5e:b4:73:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB QzJFMjJEMzcwHhcNMjUwODIyMTQxODM3WhcNMjUwODI5MTQxODM3WjAYMRYwFAYD VQQDEw02OGE4N2MzZC1mZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwalzmTn7J33oNZt0kRqVTQ6mSMgjlo2/m4zEPGHWY+aQKRubJnhY13+ANLLB IBXjIv4qr2i11lFQgHV6ssAnEtUOyfzy4R7E+ZTvcUebUNubSaAAqU+LRLt5rj4y HRmn2YZmng5JV7OUVZiP1tsRboSzI0qRd/ssvdQCCKSGXJGmoNif9GV+Jk6ye/fW ZBv0b8x+kcyNMiqV7gI8BGBE/t7Gz4S5pio231JR7/YMwWQBf4u7C/gp0bSJ+hxt OFGJ/vZBO2CkOgemuiqkP2ehrXnWiGtkxYBLDk8I1SZT6EDdiXFYWPL2gRmlnXtq nIGL5yQ5Mb/+f1k2NLS923a/JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJ/bEzw WWjJooyvaCPdg1YlkVhSMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDY0RC9EOTMzM0ZFNDFENkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3 ZklDeXpvdkhFbXFzTGlMVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzj/X/XMdzBVTy1Zpf+Bn7015D5/IyWOxT3KThszuy2EsGfkq/oLXm b/V7LQJf9/YqDjUHNc1XZOij54XXiOnHCwEuSqX67ON++/m9MmtCW7WbdfLr2KwU q614Gs0cI/uMGQ8viz+mHDqDBz7P0zYCXy6clfVgsWyFoBWSFtEx4sF0Uq450HCs yfW/85dxhmWLaGLrBeP+0Lw+fPCbf8DAgG/RKALvw3rRICdUyF6xbuE2jr7obPKO Snr3pPnGfVbrrE6t6EvM8ZNnxR3qy4O0jwN2FmCMFGOI0Y3kYw1JlhYfFvlWEIOY nxkkJB4U19RhZrZqPy7898V7yu5etHPd -----END CERTIFICATE-----Generated at Sat Aug 23 13:52:46 2025 by rpki-client