$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: amwxAcZfRo5jh8yG8ZGqu+vIdH639/vkPnepMWxG1Vw= Subject key identifier: DA:D7:FA:90:70:EF:08:41:22:CC:B6:90:3D:F4:06:3B:24:15:77:5E Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 07AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 07A3 Signing time: Fri 18 Jul 2025 21:36:15 +0000 Manifest this update: Fri 18 Jul 2025 21:36:14 +0000 Manifest next update: Fri 25 Jul 2025 21:36:14 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: Uy2EXR4jQoar5XD1TYa6OjqcKGRVawl0D+2OhmGPxec=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: Z1uRbBBo1ykDesKGyzNhoAS+Q0kH4ecEfYyBIro/My0=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: RDAuo0ukbkiW2gxiKwesJ3g1zTBr8ESAl1lXLcl6ncU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1967 (0x7af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: Jul 18 21:36:14 2025 GMT Not After : Jul 25 21:36:14 2025 GMT Subject: CN=687abe4e-24c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:09:ec:56:a6:f1:2d:51:8b:b2:5d:fc:87:09: 19:4c:ce:1d:5f:8b:d4:7c:d1:bc:1a:4e:ff:00:7e: 54:74:18:fa:fd:99:4a:67:0a:50:1c:74:c6:c1:56: 53:44:12:79:c6:a6:75:11:1a:ba:39:08:0d:47:23: af:ad:e8:d6:2c:9e:70:d5:5b:41:29:22:83:67:aa: 64:f1:8b:30:04:e6:16:62:38:e1:87:ee:24:3d:ac: 2e:7f:21:d3:68:3e:56:5a:fb:3e:9f:35:6d:02:96: 08:cc:61:e2:46:1d:63:af:5e:75:e2:46:dc:ef:13: 6a:39:67:fa:47:35:15:1c:a0:87:5a:28:12:c9:a6: ec:d7:89:00:68:de:62:d1:eb:3f:6e:34:7a:da:06: 3b:3f:42:94:56:e4:92:bd:4a:88:c5:d5:e1:3c:1e: 17:39:e5:a0:cb:6c:fb:3d:3f:dd:52:18:4d:92:77: 69:e8:77:6a:a6:62:67:79:10:08:b0:59:da:98:ed: e1:d7:95:70:33:dc:d6:9b:57:72:ca:7e:45:a8:e6: 36:ae:ac:47:ba:57:c9:68:32:18:03:b8:ba:ca:0e: 0b:6d:ca:cb:7d:dc:6a:5e:b9:d2:df:1e:87:bc:40: 90:51:3b:19:a6:a3:24:e7:ee:0a:b9:8b:d5:95:13: dd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D7:FA:90:70:EF:08:41:22:CC:B6:90:3D:F4:06:3B:24:15:77:5E X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:cf:83:f6:21:65:ad:e0:c5:4d:0d:d8:31:67:99:dd:42:a2: 4b:6e:e0:03:e5:e4:d4:ca:6b:1c:26:a0:2a:50:24:59:67:6d: b3:65:06:bb:fa:12:a3:e8:cb:ef:8a:ce:45:31:25:a1:78:ce: c2:fb:2c:22:0b:3b:65:f4:0a:9a:7a:08:ad:0a:8a:c7:9c:67: d6:0f:9f:bf:59:09:44:9d:a0:94:f5:4c:8e:56:d9:b8:74:e5: fc:f8:41:6b:8a:4f:3a:fa:c9:b9:7c:06:f6:93:29:c1:50:39: e5:90:ef:3f:2e:d4:23:cc:85:d9:a5:6e:71:4d:ff:2c:31:ac: 55:f9:56:51:28:e8:4e:bc:bb:54:43:ff:69:a7:3a:75:4b:98: 18:30:7d:a4:21:c1:85:f0:54:e6:ba:c8:bb:0b:aa:99:42:ce: 33:1b:8f:39:38:16:ce:21:d9:b2:2b:17:be:9d:6d:de:25:96: 2b:3f:a5:6d:21:da:98:15:b7:2f:78:55:9b:dc:56:5c:d5:e0: b8:11:13:af:a4:a5:06:04:ca:2e:7b:94:14:73:41:e6:86:ec: f4:79:30:ae:8b:c9:aa:87:f4:5f:8e:24:e4:e6:7d:67:5f:fb: 77:3d:f7:a1:00:00:96:ec:ad:4c:d1:c7:88:ae:aa:93:b0:05: 30:eb:e8:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwNzE4MjEzNjE0WhcNMjUwNzI1MjEzNjE0WjAYMRYwFAYD VQQDEw02ODdhYmU0ZS0yNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAnsVqbxLVGLsl38hwkZTM4dX4vUfNG8Gk7/AH5UdBj6/ZlKZwpQHHTGwVZT RBJ5xqZ1ERq6OQgNRyOvrejWLJ5w1VtBKSKDZ6pk8YswBOYWYjjhh+4kPawufyHT aD5WWvs+nzVtApYIzGHiRh1jr1514kbc7xNqOWf6RzUVHKCHWigSyabs14kAaN5i 0es/bjR62gY7P0KUVuSSvUqIxdXhPB4XOeWgy2z7PT/dUhhNkndp6HdqpmJneRAI sFnamO3h15VwM9zWm1dyyn5FqOY2rqxHulfJaDIYA7i6yg4LbcrLfdxqXrnS3x6H vECQUTsZpqMk5+4KuYvVlRPdWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrX+pBw 7whBIsy2kD30BjskFXdeMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMz4P2IWWt4MVNDdgxZ5ndQqJLbuAD5eTUymscJqAqUCRZZ22zZQa7 +hKj6Mvvis5FMSWheM7C+ywiCztl9AqaegitCorHnGfWD5+/WQlEnaCU9UyOVtm4 dOX8+EFrik86+sm5fAb2kynBUDnlkO8/LtQjzIXZpW5xTf8sMaxV+VZRKOhOvLtU Q/9ppzp1S5gYMH2kIcGF8FTmusi7C6qZQs4zG485OBbOIdmyKxe+nW3eJZYrP6Vt IdqYFbcveFWb3FZc1eC4EROvpKUGBMoue5QUc0Hmhuz0eTCui8mqh/RfjiTk5n1n X/t3PfehAACW7K1M0ceIrqqTsAUw6+gX -----END CERTIFICATE-----Generated at Sun Jul 20 11:32:59 2025 by rpki-client