$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json) Hash identifier: x7Bh2VJFuPlPD/cXgPZEqSKxXNKIE7hpylTLGibCPak= Subject key identifier: 45:67:9B:9C:05:93:19:65:77:07:E8:15:46:1A:CC:62:19:B8:77:1C Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft Manifest number: 0803 Signing time: Tue 22 Jul 2025 21:09:31 +0000 Manifest this update: Tue 22 Jul 2025 21:09:30 +0000 Manifest next update: Tue 29 Jul 2025 21:09:30 +0000 Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: O8GPZ1q4wxA42A8p7OhyKkEpadgcb2ypsX6U5xUMMyo=) 2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: 8MctpWGtN4TB9CaLOxK2lVRFp6WdGzpjql1y9Hz4Ctk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Validity Not Before: Jul 22 21:09:30 2025 GMT Not After : Jul 29 21:09:30 2025 GMT Subject: CN=687ffe0b-882e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:a5:43:61:75:9a:8f:3e:f6:66:f0:f9:97: bd:30:cd:bd:0f:20:d8:05:52:11:fd:8f:0d:7f:0b: 8d:af:dd:de:ab:5b:20:b5:df:20:1d:56:a6:6f:5a: cc:02:e3:fe:f9:6d:78:01:4d:d2:a0:a0:ba:4a:22: 64:73:0e:b8:ad:20:b9:36:3a:94:58:70:a8:e2:a2: f4:b9:3a:26:28:c8:af:66:d7:41:7f:64:e6:f6:bf: 59:bc:ae:20:87:cf:f5:b3:88:dc:f0:53:1f:cd:cf: 78:a3:45:48:24:a7:46:4a:f8:ef:c3:df:ad:d5:6c: 9e:e7:62:a3:2c:08:01:7f:1a:29:12:9a:26:ce:58: 26:8c:5e:94:81:e3:e2:5a:9a:01:f4:be:22:04:8a: 52:8e:71:01:03:a5:8c:c7:c7:f8:23:a4:79:34:2b: 93:c5:a5:06:f9:9f:2a:80:84:5b:57:1f:86:08:fc: 58:00:15:fb:4b:34:88:70:60:5e:b3:64:db:f2:58: 99:38:0d:24:92:7f:1b:4d:c2:13:61:fb:37:50:3c: 6e:76:30:70:1d:7f:2f:32:5f:75:ba:ed:ca:33:ef: 1b:72:be:e6:3b:0c:25:3d:4d:d4:0b:11:c7:6c:8f: f3:fb:3f:80:08:4e:46:f5:4d:dd:d0:44:39:bc:e9: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:67:9B:9C:05:93:19:65:77:07:E8:15:46:1A:CC:62:19:B8:77:1C X509v3 Authority Key Identifier: keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2a:1e:95:21:90:fa:58:ce:ef:83:27:c7:e7:74:dc:7a:4d: 71:7a:3e:0f:bf:e7:05:73:45:8e:6e:10:7c:dd:2d:b3:15:75: 6c:ee:44:47:ac:50:5a:00:17:20:3f:7c:3d:11:f1:55:8d:6e: b8:f3:4e:64:59:fb:4c:92:49:f7:3d:59:d1:90:2b:e7:2a:2e: 50:d8:30:7f:c8:b7:6a:24:a4:1b:04:97:d4:3f:46:62:24:86: 36:6d:3d:ac:3f:dc:53:30:f8:25:12:d1:d7:54:42:47:e1:1d: 78:eb:e0:31:6f:62:14:47:b2:63:0d:48:99:d3:2d:52:ff:a2: 4d:41:85:e7:a7:71:5d:85:d2:f8:a2:6f:3f:be:92:7e:f1:c2: 5e:1f:a9:f5:bc:ac:5c:a5:06:31:26:9f:dd:69:da:cc:62:03: c8:84:8c:d3:e3:ea:24:d5:63:4a:28:7e:d1:91:4f:68:7b:b2: 65:92:b3:e2:3f:e4:66:f7:51:12:69:d5:21:72:12:c7:3b:6a: 80:d1:11:e6:fd:a8:4f:ed:6e:23:74:32:de:b5:02:c4:52:3a: b6:be:6e:4d:63:79:d0:e0:bc:54:f2:cd:0d:1e:80:c3:f1:36: 9a:6c:15:56:c6:0a:6d:23:81:20:17:08:07:bc:45:e7:41:14: 44:5a:9d:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG QjA3NEE1OEUwHhcNMjUwNzIyMjEwOTMwWhcNMjUwNzI5MjEwOTMwWjAYMRYwFAYD VQQDEw02ODdmZmUwYi04ODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDWlQ2F1mo8+9mbw+Ze9MM29DyDYBVIR/Y8NfwuNr93eq1sgtd8gHVamb1rM AuP++W14AU3SoKC6SiJkcw64rSC5NjqUWHCo4qL0uTomKMivZtdBf2Tm9r9ZvK4g h8/1s4jc8FMfzc94o0VIJKdGSvjvw9+t1Wye52KjLAgBfxopEpomzlgmjF6UgePi WpoB9L4iBIpSjnEBA6WMx8f4I6R5NCuTxaUG+Z8qgIRbVx+GCPxYABX7SzSIcGBe s2Tb8liZOA0kkn8bTcITYfs3UDxudjBwHX8vMl91uu3KM+8bcr7mOwwlPU3UCxHH bI/z+z+ACE5G9U3d0EQ5vOltvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVnm5wF kxlldwfoFUYazGIZuHccMB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VBRC9FOUI3MDY2NkVBMjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1RO M2ZMei1iNkM0eF83QjBwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPKh6VIZD6WM7vgyfH53Tcek1xej4Pv+cFc0WObhB83S2zFXVs7kRH rFBaABcgP3w9EfFVjW64805kWftMkkn3PVnRkCvnKi5Q2DB/yLdqJKQbBJfUP0Zi JIY2bT2sP9xTMPglEtHXVEJH4R146+Axb2IUR7JjDUiZ0y1S/6JNQYXnp3FdhdL4 om8/vpJ+8cJeH6n1vKxcpQYxJp/dadrMYgPIhIzT4+ok1WNKKH7RkU9oe7JlkrPi P+Rm91ESadUhchLHO2qA0RHm/ahP7W4jdDLetQLEUjq2vm5NY3nQ4LxU8s0NHoDD 8TaabBVWxgptI4EgFwgHvEXnQRREWp2s -----END CERTIFICATE-----Generated at Thu Jul 24 05:04:23 2025 by rpki-client