$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: EjROlA2M7oS0EPJuSwBR2dLL7UrJMGezMMnCT19O82Q= Subject key identifier: 5F:B2:80:24:E5:ED:05:38:8D:49:4A:DE:4F:D3:E9:9C:C9:64:36:39 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0681 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 0648 Signing time: Fri 18 Jul 2025 23:11:18 +0000 Manifest this update: Fri 18 Jul 2025 23:11:18 +0000 Manifest next update: Fri 25 Jul 2025 23:11:18 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: uq+ERIsmDihvKDgcywQNXC4AqBY+Ek4R0o6s4K/xvBI=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: oyubRpGqXRPhXUbHGDMN11nyLcbaEyRpquXs/6vcD1s=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: kmT51UeYfwldQaeBqmjE4hyTmZuSt7H0mxT17oVrkW8=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: q5An5IejOkRYWLTS2K7o5KZUOm0z/1pEEu1xwJZBWV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Jul 18 23:11:18 2025 GMT Not After : Jul 25 23:11:18 2025 GMT Subject: CN=687ad496-73d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:00:06:03:ca:b3:b9:3b:3d:4b:31:87:4b:44: af:43:c3:3d:e4:75:1f:f1:c5:d1:16:44:28:f7:f9: f0:03:f1:b7:ee:b3:19:0c:69:4c:39:00:43:6d:b7: e4:ea:08:52:6b:df:9b:c8:00:70:ce:87:36:90:75: 6b:54:b3:a1:bc:62:26:36:b1:a4:86:58:53:6d:77: 0c:51:68:96:ec:8a:96:52:32:4d:5b:87:43:7c:75: e0:6c:6c:a6:71:75:e6:72:3a:35:4c:4a:e3:a7:3b: 1f:e2:ce:cd:8d:1d:01:cb:2f:5b:a7:46:a5:de:e5: 3c:5b:c2:45:a2:45:e8:70:5f:48:64:3c:bb:d3:b0: 48:de:da:9b:54:8f:95:89:a0:72:9b:10:5d:0c:d0: 6b:91:5c:b9:7d:9f:7c:87:58:f2:6c:2c:fc:1c:91: 71:9d:f2:73:83:e8:a1:98:b1:75:2e:c6:79:d0:36: 01:b9:d7:32:11:61:c3:73:54:a4:8d:0f:0b:82:d2: 0a:da:37:19:88:7c:c9:35:05:45:f4:81:79:61:40: 67:80:bd:3d:64:fc:b9:4d:fc:22:45:d0:c4:5b:32: 62:0e:9e:06:af:d7:18:eb:5a:57:d5:4c:d4:64:39: a5:9d:7e:17:1a:e0:b6:08:9f:3a:3d:c2:60:2b:36: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B2:80:24:E5:ED:05:38:8D:49:4A:DE:4F:D3:E9:9C:C9:64:36:39 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:01:6e:9c:df:c1:a2:a0:27:04:56:c2:82:a7:93:28:b9:79: 90:a2:51:a0:20:b8:9b:84:f2:0b:f7:55:e9:2f:48:36:8f:c3: a1:ab:5a:f4:1b:d3:6b:c9:c5:52:e2:cf:ec:92:78:ee:ab:81: 35:5c:f2:b7:86:ce:3b:79:15:02:a8:6c:de:07:ad:3d:61:ef: 6b:ec:ca:c2:13:ef:7e:20:ee:64:83:7a:ce:ee:cf:82:d3:4b: 41:27:52:39:20:31:4e:59:8f:38:fe:84:27:6c:13:7a:8c:be: 95:a0:25:86:4f:2d:ec:43:d2:d4:9a:7c:8e:44:4c:22:11:fe: 9b:b9:33:91:9e:f4:d8:1a:ea:9f:c9:e5:16:34:44:04:69:b8: d1:ce:3e:ba:6a:72:36:cb:9b:33:b3:6c:29:19:07:fd:09:bd: 70:19:26:c3:e7:61:09:c1:ef:69:b3:0b:bf:c5:fb:2a:83:16: 61:bb:06:21:aa:ab:c7:e6:b3:f4:03:59:c3:bd:6f:ae:4d:b8: cf:53:bf:20:a1:23:29:3c:25:d3:6e:06:3d:03:47:42:98:e3: b2:88:c9:da:9c:12:97:21:02:de:eb:3d:09:ea:eb:a5:78:94: 61:b6:b3:ba:32:68:56:7e:ff:84:ce:77:87:eb:6d:cb:69:2a: d7:d3:8b:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUwNzE4MjMxMTE4WhcNMjUwNzI1MjMxMTE4WjAYMRYwFAYD VQQDEw02ODdhZDQ5Ni03M2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgAGA8qzuTs9SzGHS0SvQ8M95HUf8cXRFkQo9/nwA/G37rMZDGlMOQBDbbfk 6ghSa9+byABwzoc2kHVrVLOhvGImNrGkhlhTbXcMUWiW7IqWUjJNW4dDfHXgbGym cXXmcjo1TErjpzsf4s7NjR0Byy9bp0al3uU8W8JFokXocF9IZDy707BI3tqbVI+V iaBymxBdDNBrkVy5fZ98h1jybCz8HJFxnfJzg+ihmLF1LsZ50DYBudcyEWHDc1Sk jQ8LgtIK2jcZiHzJNQVF9IF5YUBngL09ZPy5TfwiRdDEWzJiDp4Gr9cY61pX1UzU ZDmlnX4XGuC2CJ86PcJgKzZwywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+ygCTl 7QU4jUlK3k/T6ZzJZDY5MB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEAW6c38GioCcEVsKCp5MouXmQolGgILibhPIL91XpL0g2j8Ohq1r0 G9NrycVS4s/sknjuq4E1XPK3hs47eRUCqGzeB609Ye9r7MrCE+9+IO5kg3rO7s+C 00tBJ1I5IDFOWY84/oQnbBN6jL6VoCWGTy3sQ9LUmnyOREwiEf6buTORnvTYGuqf yeUWNEQEabjRzj66anI2y5szs2wpGQf9Cb1wGSbD52EJwe9pswu/xfsqgxZhuwYh qqvH5rP0A1nDvW+uTbjPU78goSMpPCXTbgY9A0dCmOOyiMnanBKXIQLe6z0J6uul eJRhtrO6MmhWfv+EzneH623LaSrX04uU -----END CERTIFICATE-----Generated at Sun Jul 20 03:19:55 2025 by rpki-client