$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json) Hash identifier: PgzEWaERhEi9ddGahLM6KTAZZvY4/xSQv6q3syI0eac= Subject key identifier: 4A:42:70:EF:96:04:12:E2:95:C3:52:EF:8B:36:EE:9A:B7:89:3B:4D Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft Manifest number: 34BB Signing time: Fri 18 Jul 2025 14:19:53 +0000 Manifest this update: Fri 18 Jul 2025 14:19:52 +0000 Manifest next update: Fri 25 Jul 2025 14:19:52 +0000 Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: AG8fCShGlyzmjjH9dfys40epwh5QywsvBxDfhCojP/E=) 2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: PJCdta/4Q6f57KQKAkTotBkGcFV1WNt4V36v9eyDoQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Validity Not Before: Jul 18 14:19:52 2025 GMT Not After : Jul 25 14:19:52 2025 GMT Subject: CN=687a5809-70fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:45:ad:93:d7:37:6c:ed:18:ef:e6:5f:9d: e9:1b:4e:8b:db:2f:8b:a2:66:5f:e2:26:f0:e1:ee: 1f:9a:8f:95:92:f4:ff:d7:f9:2f:b3:a9:a4:3a:26: 2f:24:8b:e8:01:ec:a4:5f:7c:3e:9a:73:a9:83:00: 2a:ac:15:1e:fd:30:32:d0:b4:09:28:cc:2b:9e:cb: a3:a0:e3:ab:07:45:9a:7a:eb:2f:0b:76:b4:71:9c: 2c:db:3a:ca:d9:9f:1b:4e:90:9d:66:9f:4e:62:e3: 8a:0f:f1:cc:23:7e:4c:4e:59:28:48:d6:d0:54:69: 44:b2:5a:e3:fc:44:15:59:f4:b0:cf:72:23:f1:2f: a9:70:9c:7c:48:e8:a7:b3:c2:76:c5:3f:1f:9e:89: cd:93:82:f5:2c:cc:f6:74:f6:f4:0d:92:7b:a8:62: 21:5b:64:e9:86:af:0a:30:d2:bb:60:b8:1f:69:8a: e2:90:fb:81:a1:07:ce:f9:5e:86:cf:b9:e9:af:22: aa:86:35:90:a9:a9:c8:35:30:a2:0d:28:ec:fe:a0: 15:e9:de:da:1d:85:00:67:95:dd:c3:44:2d:99:41: 3e:eb:28:bf:09:b5:67:8c:8e:5b:e8:ea:fb:28:e4: 58:01:6a:fd:76:56:0e:f0:f5:7e:58:8a:9e:df:a7: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:42:70:EF:96:04:12:E2:95:C3:52:EF:8B:36:EE:9A:B7:89:3B:4D X509v3 Authority Key Identifier: keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a0:f9:29:cc:81:e2:6f:1e:fc:9a:1e:56:c7:8b:7c:1b:e5: 82:eb:09:d8:d0:ab:0a:c8:62:d8:59:f5:22:22:65:31:d0:33: 76:8a:8e:fe:14:85:6f:d6:66:4d:2c:38:68:42:ee:5f:2f:2d: 40:2c:26:c3:4a:bb:56:87:6f:e7:c9:d1:06:89:36:ab:45:c7: 2a:b3:68:6d:4f:ce:0a:e6:0f:35:d1:7a:ef:95:08:cf:5e:3a: f6:4a:0a:2e:86:49:c7:ae:23:53:16:aa:6e:7c:c0:4f:08:e3: b0:af:d3:8c:50:d3:1d:bb:28:44:6b:2d:8b:59:ba:30:a8:cf: fd:b7:38:44:6a:a1:d0:42:ad:5c:59:d1:30:7e:49:53:3c:98: 0c:09:0c:2e:47:a2:2c:98:7f:24:50:d7:a0:57:d7:16:1f:f4: 03:dc:0e:4a:3b:9e:08:e2:a2:09:46:99:12:ca:73:13:7e:22: c2:8e:65:45:3c:78:06:56:53:4a:b2:99:54:5e:b4:35:3d:f3: 83:b1:4e:45:b2:76:e8:de:c8:bb:df:49:aa:64:9b:d9:9e:18: d6:7f:8c:a4:9f:14:b7:06:40:f9:e4:18:ca:43:f9:7a:d5:54: af:68:f0:d0:3a:13:27:24:a8:00:2c:85:60:15:00:5d:d0:8f: c2:45:54:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3 N0RGQjIxQTMwHhcNMjUwNzE4MTQxOTUyWhcNMjUwNzI1MTQxOTUyWjAYMRYwFAYD VQQDEw02ODdhNTgwOS03MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vRFrZPXN2ztGO/mX53pG06L2y+LomZf4ibw4e4fmo+VkvT/1/kvs6mkOiYv JIvoAeykX3w+mnOpgwAqrBUe/TAy0LQJKMwrnsujoOOrB0WaeusvC3a0cZws2zrK 2Z8bTpCdZp9OYuOKD/HMI35MTlkoSNbQVGlEslrj/EQVWfSwz3Ij8S+pcJx8SOin s8J2xT8fnonNk4L1LMz2dPb0DZJ7qGIhW2Tphq8KMNK7YLgfaYrikPuBoQfO+V6G z7npryKqhjWQqanINTCiDSjs/qAV6d7aHYUAZ5Xdw0QtmUE+6yi/CbVnjI5b6Or7 KORYAWr9dlYO8PV+WIqe36dWbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpCcO+W BBLilcNS74s27pq3iTtNMB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx U0cybVFfajVOaHQzMzdJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCoPkpzIHibx78mh5Wx4t8G+WC6wnY0KsKyGLYWfUiImUx0DN2io7+ FIVv1mZNLDhoQu5fLy1ALCbDSrtWh2/nydEGiTarRccqs2htT84K5g810XrvlQjP Xjr2SgouhknHriNTFqpufMBPCOOwr9OMUNMduyhEay2LWbowqM/9tzhEaqHQQq1c WdEwfklTPJgMCQwuR6IsmH8kUNegV9cWH/QD3A5KO54I4qIJRpkSynMTfiLCjmVF PHgGVlNKsplUXrQ1PfODsU5Fsnbo3si730mqZJvZnhjWf4yknxS3BkD55BjKQ/l6 1VSvaPDQOhMnJKgALIVgFQBd0I/CRVRG -----END CERTIFICATE-----Generated at Sun Jul 20 03:54:11 2025 by rpki-client