$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: otEx+ARAzfGxB+BkJ4LhoXu5FokYezgaLnk00fXwGwk= Subject key identifier: 74:2B:10:F1:B1:74:33:77:E4:9F:C6:43:FB:9E:FE:B3:87:81:21:6A Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 07D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 07CC Signing time: Sun 20 Jul 2025 21:13:56 +0000 Manifest this update: Sun 20 Jul 2025 21:13:56 +0000 Manifest next update: Sun 27 Jul 2025 21:13:56 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: GKOPc/ch+4a8aFp8wqWjUhVKnJ36njLfHGCwlR+QFD8=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: pS3E0icAhyYawyxkXSLUFbWuAzA0NV/jlalvE1DTh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Jul 20 21:13:56 2025 GMT Not After : Jul 27 21:13:56 2025 GMT Subject: CN=687d5c14-2e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:43:4c:33:35:6d:04:d6:65:e8:93:5f:84:07: 2c:4f:c7:7b:a8:1d:bd:76:54:8f:85:6f:c2:9a:59: ca:44:6e:74:da:99:fc:68:6b:e6:c5:36:bc:ff:c1: 84:77:87:e3:81:8d:bc:51:8f:97:e6:fe:b2:12:db: 86:b1:e7:11:32:29:4a:ba:fd:49:53:40:83:f8:a1: 86:8d:58:74:82:29:08:b3:9d:8e:ee:00:41:40:ab: e9:3d:37:d5:7c:17:e5:c1:6f:f5:54:27:d8:e4:76: 6b:b3:6a:e6:15:b1:f9:84:23:c8:a5:37:97:b0:d0: 9c:d1:5c:9a:1a:83:be:df:b1:91:01:da:a2:04:49: a3:26:ae:8c:3b:94:ee:77:25:e1:2a:07:68:d4:f7: 94:30:47:43:6d:90:43:22:ff:2a:f9:cd:e5:ba:1b: 96:32:2d:17:41:d8:d0:6b:99:a5:e5:e8:42:7f:98: 30:8b:db:86:8a:64:4f:2f:90:09:a8:ce:60:fb:7d: 1b:da:58:a6:5d:68:01:af:15:e3:5b:c7:87:b5:2d: f3:9d:54:1d:54:6b:c8:e3:c2:cf:b4:4a:2c:d3:bd: 04:91:70:20:86:4a:7d:f2:ab:c0:53:76:d3:d8:08: cc:25:be:81:d7:c4:b2:af:31:3d:22:c7:24:76:7b: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2B:10:F1:B1:74:33:77:E4:9F:C6:43:FB:9E:FE:B3:87:81:21:6A X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:81:ff:40:d0:17:a5:0f:db:5d:98:77:2b:11:ac:8c:ab:ce: 88:0e:a3:6a:65:41:0a:d3:2d:30:66:7b:c0:fd:7a:03:2f:80: 88:ed:20:80:e0:8d:79:bd:a4:7f:fc:a0:2b:62:3d:36:64:c0: 62:78:8f:5a:20:48:12:a2:e6:d8:c3:f3:78:c5:1d:a6:85:2e: b7:63:dd:20:56:61:7f:bc:9d:5a:c5:f0:74:a2:80:6e:67:ba: d8:f5:4e:48:ca:5d:28:9d:23:ce:fd:00:e5:96:aa:c0:ea:af: e4:a1:f3:ed:fa:de:66:e1:ec:0c:63:8a:a9:dc:7a:07:18:6c: 7f:47:e7:ae:23:5d:1c:9a:cf:fa:34:4c:3e:42:2f:6e:87:8a: f1:c8:5d:5b:99:63:4c:5a:e3:5f:7b:a7:64:6e:a2:d1:36:53: 6c:88:76:30:f2:8e:6e:40:06:b0:4d:52:ce:b3:2e:97:04:f5: 2d:48:8d:5b:1e:cf:4c:3c:8b:d6:7a:54:9d:7d:f0:9f:c2:b3: 3d:3e:aa:70:dc:1b:f9:22:c9:ad:f5:4f:42:51:56:0a:0c:05: 02:ed:54:a7:af:92:d3:2a:e3:02:66:25:2d:48:c8:fb:45:5c: 1c:a6:ef:76:b8:a1:a5:66:51:ca:8d:02:c1:07:5b:a9:fb:83: 05:00:36:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUwNzIwMjExMzU2WhcNMjUwNzI3MjExMzU2WjAYMRYwFAYD VQQDEw02ODdkNWMxNC0yZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10NMMzVtBNZl6JNfhAcsT8d7qB29dlSPhW/CmlnKRG502pn8aGvmxTa8/8GE d4fjgY28UY+X5v6yEtuGsecRMilKuv1JU0CD+KGGjVh0gikIs52O7gBBQKvpPTfV fBflwW/1VCfY5HZrs2rmFbH5hCPIpTeXsNCc0VyaGoO+37GRAdqiBEmjJq6MO5Tu dyXhKgdo1PeUMEdDbZBDIv8q+c3luhuWMi0XQdjQa5ml5ehCf5gwi9uGimRPL5AJ qM5g+30b2limXWgBrxXjW8eHtS3znVQdVGvI48LPtEos070EkXAghkp98qvAU3bT 2AjMJb6B18SyrzE9IsckdnsS4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQrEPGx dDN35J/GQ/ue/rOHgSFqMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3gf9A0BelD9tdmHcrEayMq86IDqNqZUEK0y0wZnvA/XoDL4CI7SCA 4I15vaR//KArYj02ZMBieI9aIEgSoubYw/N4xR2mhS63Y90gVmF/vJ1axfB0ooBu Z7rY9U5Iyl0onSPO/QDllqrA6q/kofPt+t5m4ewMY4qp3HoHGGx/R+euI10cms/6 NEw+Qi9uh4rxyF1bmWNMWuNfe6dkbqLRNlNsiHYw8o5uQAawTVLOsy6XBPUtSI1b Hs9MPIvWelSdffCfwrM9Pqpw3Bv5Ismt9U9CUVYKDAUC7VSnr5LTKuMCZiUtSMj7 RVwcpu92uKGlZlHKjQLBB1up+4MFADaz -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:25 2025 by rpki-client