$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json) Hash identifier: UH7Hq3xqySqqxa6YoFZiyc+0z7gwEmaAgUOXsP6+Upo= Subject key identifier: 4A:8F:79:0C:89:B5:AF:0D:62:55:49:BD:AE:B4:9F:A1:2D:C0:DE:36 Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft Manifest number: 0804 Signing time: Thu 24 Jul 2025 21:05:56 +0000 Manifest this update: Thu 24 Jul 2025 21:05:55 +0000 Manifest next update: Thu 31 Jul 2025 21:05:55 +0000 Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: SxfKaho81qHTpGxQpMNqydcXT/eXJ3LBudSPVmhNOKQ=) 2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: 8MctpWGtN4TB9CaLOxK2lVRFp6WdGzpjql1y9Hz4Ctk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 21:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Validity Not Before: Jul 24 21:05:55 2025 GMT Not After : Jul 31 21:05:55 2025 GMT Subject: CN=6882a034-bb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:ba:57:21:43:cd:21:db:ea:13:8e:6b:69: 20:b7:3d:29:cd:a3:cb:a8:3d:6e:d9:55:bc:ba:4c: a7:9e:c7:9c:00:d8:49:52:8c:26:e8:14:68:be:7b: e9:7e:3c:a0:62:5d:12:0d:69:45:18:c7:e1:43:46: ed:2c:db:eb:98:11:58:c1:0a:cb:c9:19:d4:3c:a2: c0:86:36:ee:8a:35:90:1b:3b:8f:80:e1:ed:29:1a: d9:61:af:8c:f5:9e:b3:63:e3:be:ce:7f:d2:2e:48: ce:42:2e:21:32:80:fd:dc:fe:a3:aa:ec:b2:cf:44: c9:75:94:51:fd:fa:b9:7b:20:46:bd:43:65:10:92: 3f:53:8a:cf:2e:e1:a2:7e:3a:7e:ff:fd:de:63:eb: 36:05:41:4b:dd:a5:9f:f3:bc:54:e0:6f:06:42:a5: 9d:a8:14:d7:1c:46:50:7a:50:de:76:c4:11:f3:30: 61:41:43:6d:34:fb:c5:76:d6:23:1a:06:43:95:ea: e2:c9:69:a8:e1:fd:bc:25:69:55:63:80:c1:7a:55: 55:e8:42:5f:cb:fa:c9:98:35:c8:dc:b9:a5:a4:1e: 8e:df:74:8a:89:b3:cf:fd:1b:5a:07:3b:af:38:15: 62:3f:9f:90:57:7e:70:9b:f2:e3:c0:2c:f4:af:ea: 52:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8F:79:0C:89:B5:AF:0D:62:55:49:BD:AE:B4:9F:A1:2D:C0:DE:36 X509v3 Authority Key Identifier: keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d0:e2:b9:3d:79:00:f0:21:d5:b9:33:0f:b6:d0:b7:02:2a: b0:ac:e3:9e:cc:be:77:eb:a8:1f:1c:ae:be:a2:3f:72:f6:e7: bf:7e:03:61:00:56:a2:e8:97:36:56:59:42:65:74:ba:ee:1a: ce:5d:df:c0:91:43:b8:cf:a4:96:80:18:37:c2:3d:e3:de:e2: 11:2b:f7:8e:3f:2b:eb:ca:57:01:1c:29:d8:2e:aa:13:5d:0c: 76:4c:8e:16:83:77:a4:bf:55:0b:4a:5f:37:b3:51:15:52:a7: e5:8e:87:77:bd:09:90:77:b6:bd:df:26:9c:98:85:80:55:31: 4f:b1:87:71:79:9f:7f:2b:c4:bf:79:e9:6b:eb:e7:db:ea:6f: 08:18:56:5c:2e:70:28:f7:d2:c0:42:85:82:27:6a:57:b7:7e: 39:17:72:c2:a8:e6:7e:c2:81:90:0c:bc:98:d0:34:71:36:a9: e9:dd:d4:39:b1:32:0a:8b:0c:4f:65:23:7e:f8:04:53:b4:74: e0:40:66:b3:b9:80:83:85:0f:c1:58:20:0e:e4:9f:08:f0:48: eb:2e:e3:75:57:1d:da:29:8a:ac:18:3a:a6:ae:2f:30:52:f6: 7b:8a:ab:e4:ea:ca:35:8c:d9:cc:6e:08:83:1b:bf:27:ba:8f: ec:ba:95:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG QjA3NEE1OEUwHhcNMjUwNzI0MjEwNTU1WhcNMjUwNzMxMjEwNTU1WjAYMRYwFAYD VQQDEw02ODgyYTAzNC1iYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHW6VyFDzSHb6hOOa2kgtz0pzaPLqD1u2VW8ukynnsecANhJUowm6BRovnvp fjygYl0SDWlFGMfhQ0btLNvrmBFYwQrLyRnUPKLAhjbuijWQGzuPgOHtKRrZYa+M 9Z6zY+O+zn/SLkjOQi4hMoD93P6jquyyz0TJdZRR/fq5eyBGvUNlEJI/U4rPLuGi fjp+//3eY+s2BUFL3aWf87xU4G8GQqWdqBTXHEZQelDedsQR8zBhQUNtNPvFdtYj GgZDleriyWmo4f28JWlVY4DBelVV6EJfy/rJmDXI3LmlpB6O33SKibPP/RtaBzuv OBViP5+QV35wm/LjwCz0r+pSzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqPeQyJ ta8NYlVJva60n6EtwN42MB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VBRC9FOUI3MDY2NkVBMjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1RO M2ZMei1iNkM0eF83QjBwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL0OK5PXkA8CHVuTMPttC3AiqwrOOezL5366gfHK6+oj9y9ue/fgNh AFai6Jc2VllCZXS67hrOXd/AkUO4z6SWgBg3wj3j3uIRK/eOPyvrylcBHCnYLqoT XQx2TI4Wg3ekv1ULSl83s1EVUqfljod3vQmQd7a93yacmIWAVTFPsYdxeZ9/K8S/ eelr6+fb6m8IGFZcLnAo99LAQoWCJ2pXt345F3LCqOZ+woGQDLyY0DRxNqnp3dQ5 sTIKiwxPZSN++ARTtHTgQGazuYCDhQ/BWCAO5J8I8EjrLuN1Vx3aKYqsGDqmri8w UvZ7iqvk6so1jNnMbgiDG78nuo/supXw -----END CERTIFICATE-----Generated at Sat Jul 26 02:01:23 2025 by rpki-client