$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft File: xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json) Hash identifier: teG+3EnRnJhdTaift6Zs0G+ISxuMfxAuc5O+f2ymTH4= Subject key identifier: 37:75:C6:AD:E7:C2:AE:08:72:AD:F1:59:A1:AD:EC:20:E8:00:BB:C9 Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D Certificate issuer: /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft Manifest number: 8E Signing time: Fri 25 Jul 2025 06:53:14 +0000 Manifest this update: Fri 25 Jul 2025 06:53:13 +0000 Manifest next update: Fri 01 Aug 2025 06:53:13 +0000 Files and hashes: 1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: H7q7HKAZeLl+wKphYhUA68uS1633ZD7t5pm4i92cr+w=) 2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ijUv0+puTZ+N4j9fhEKBY9wHAWPDCsnAi/IUGHnumK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 06:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Validity Not Before: Jul 25 06:53:13 2025 GMT Not After : Aug 1 06:53:13 2025 GMT Subject: CN=688329da-7d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:69:26:d7:af:63:2c:2e:71:75:55:39:93: b5:17:8c:8e:df:12:ee:5f:51:75:82:b5:02:a9:64: 40:5c:59:4c:67:16:45:93:03:af:f6:16:75:58:3b: 64:81:8c:c4:5b:0e:f8:ca:c5:0e:7b:c6:d9:52:76: b6:91:df:a9:66:52:07:f5:a7:e3:8a:4a:f0:02:25: 5a:61:ff:2f:d1:f1:6b:04:00:e0:07:24:b8:6d:72: 80:98:6b:9b:2f:91:01:95:5a:53:08:10:1c:c0:6b: e3:41:4e:f7:0e:3a:dc:64:bb:8b:41:86:26:ee:21: 30:43:47:7d:05:06:fa:01:1d:d4:a3:bd:b5:a5:9d: 3f:cb:c9:d3:c7:fe:63:fa:9e:8b:bd:61:91:1f:06: 0b:6f:86:08:46:16:ac:90:ee:e5:1a:2d:53:38:1b: 52:b0:c2:36:69:49:ec:a7:36:69:cf:33:c7:d4:08: 0b:c9:58:e6:b2:91:de:63:a2:5e:b7:c1:bf:fd:77: 07:a4:d4:e8:70:6f:d1:88:23:2c:cd:6e:7d:26:10: f4:34:a9:24:34:c4:4e:ff:ed:d1:b5:6c:ad:89:e0: 4c:1b:4f:cc:c2:c4:ce:c8:f4:7f:87:57:c7:eb:82: bb:5a:9e:9c:bb:fe:2e:c6:9d:d2:aa:c6:f3:5d:98: 83:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:75:C6:AD:E7:C2:AE:08:72:AD:F1:59:A1:AD:EC:20:E8:00:BB:C9 X509v3 Authority Key Identifier: keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:94:c3:c2:86:76:07:a6:86:57:7a:56:31:15:51:7d:7d:2c: a5:92:13:bc:48:57:dc:2d:be:91:3a:14:f9:89:8d:c1:d8:6d: 69:42:b6:83:a9:39:8a:73:1e:36:fb:72:4d:06:13:f9:4a:19: 86:38:7b:06:9a:18:e6:dd:5b:75:4e:0e:e2:79:b7:de:0f:19: 2f:17:d3:d7:b5:3b:28:2d:21:ee:c0:6d:54:dc:53:33:62:5d: 0d:c3:63:b0:2e:1f:13:01:ab:04:16:ba:ce:0f:8b:0f:b4:f6: 72:8c:41:4c:6b:33:b3:e5:fd:3f:c4:9f:32:dc:b2:55:cb:44: 1d:b5:ba:9b:3e:ff:ff:60:79:42:31:5c:ad:c5:5d:84:f5:b3: 69:b4:4f:ef:71:db:f0:4d:a7:56:bb:75:bf:a6:44:40:a7:ad: 8c:d8:22:ea:99:1b:4e:1d:79:ac:1e:e6:0b:a7:4c:01:66:e6: 31:b7:34:2c:cd:e3:9c:ae:ce:3f:25:2d:11:1d:a7:55:fb:59: 48:21:31:a3:37:42:41:ab:f7:65:58:ea:5f:e3:3c:10:67:8e: 56:cf:e1:02:97:20:bd:72:11:55:34:d9:75:1c:d4:22:c2:f1: 4c:66:95:ba:fe:66:9a:ac:16:91:7d:86:5f:1a:91:d3:22:29: f8:28:41:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYzOEExMTAvBgNVBAUTKEM0NkM0M0JBMjc3RDJDMTBFRTdEMUVGRjNERjBFMkVG Qzg4NTFBMUQwHhcNMjUwNzI1MDY1MzEzWhcNMjUwODAxMDY1MzEzWjAYMRYwFAYD VQQDEw02ODgzMjlkYS03ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQBpJtevYywucXVVOZO1F4yO3xLuX1F1grUCqWRAXFlMZxZFkwOv9hZ1WDtk gYzEWw74ysUOe8bZUna2kd+pZlIH9afjikrwAiVaYf8v0fFrBADgByS4bXKAmGub L5EBlVpTCBAcwGvjQU73DjrcZLuLQYYm7iEwQ0d9BQb6AR3Uo721pZ0/y8nTx/5j +p6LvWGRHwYLb4YIRhaskO7lGi1TOBtSsMI2aUnspzZpzzPH1AgLyVjmspHeY6Je t8G//XcHpNTocG/RiCMszW59JhD0NKkkNMRO/+3RtWytieBMG0/MwsTOyPR/h1fH 64K7Wp6cu/4uxp3SqsbzXZiDywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDd1xq3n wq4Icq3xWaGt7CDoALvJMB8GA1UdIwQYMBaAFMRsQ7onfSwQ7n0e/z3w4u/IhRod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4QS81QkREMkNBRTk1 NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxCRHVmUjdfUGZEaTc4aUZH aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjM4QS81QkREMkNBRTk1NDcxMUVGOTY4MDhGMkNDNEY5QUUwMi94R3hEdWlkOUxC RHVmUjdfUGZEaTc4aUZHaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCElMPChnYHpoZXelYxFVF9fSylkhO8SFfcLb6ROhT5iY3B2G1pQraD qTmKcx42+3JNBhP5ShmGOHsGmhjm3Vt1Tg7iebfeDxkvF9PXtTsoLSHuwG1U3FMz Yl0Nw2OwLh8TAasEFrrOD4sPtPZyjEFMazOz5f0/xJ8y3LJVy0QdtbqbPv//YHlC MVytxV2E9bNptE/vcdvwTadWu3W/pkRAp62M2CLqmRtOHXmsHuYLp0wBZuYxtzQs zeOcrs4/JS0RHadV+1lIITGjN0JBq/dlWOpf4zwQZ45Wz+EClyC9chFVNNl1HNQi wvFMZpW6/maarBaRfYZfGpHTIin4KEEV -----END CERTIFICATE-----Generated at Sat Jul 26 01:59:05 2025 by rpki-client