$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json) Hash identifier: 13Pinc/kHjx0P01MRtPqmZaFm6oymY1iBw+gHXJEgFs= Subject key identifier: A5:5F:12:0B:FB:90:D5:32:D4:07:4E:A0:D9:86:A0:1D:57:E5:67:28 Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft Manifest number: 0150 Signing time: Sat 19 Jul 2025 04:26:15 +0000 Manifest this update: Sat 19 Jul 2025 04:26:15 +0000 Manifest next update: Sat 26 Jul 2025 04:26:15 +0000 Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: Dj2cd1s48wkV6qI/HdYMajcLbjj3QFB00mL640jUWJ8=) 2: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: 1ZszVXnu+oof2agkcsw2N+1e9S9zcssyc5TigB7H1/w=) 3: 6821BAB4450C11F0A7A54A80C4F9AE02.roa (hash: cK+N9izYWqB7nJ2gb9CD89n2r86dl3xekNBy66q5a0Q=) 4: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: e26WrvOpcLVtFLCEGQEyLqc/kWvK3maBfU7Yb9x41Mg=) 5: 6911C6C6450C11F0A7A54A80C4F9AE02.roa (hash: XM9Bx/2dvSebxGit5XsfhdOhtq9u4/gFe4PEE8p0hU0=) 6: 688DF576450C11F0A7A54A80C4F9AE02.roa (hash: 4F6WXMQnkc6O0hYawZzx3De82Qtz5srkx6WGHHAwdQk=) 7: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: ejDPctxuPr+08V8pahIdV3zpYnFneVGtkqcwrd8I5VM=) 8: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: NbEb3oWP2ceJtb7zrqoj41m3/pXeHDptDVhijrcSdOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Jul 19 04:26:15 2025 GMT Not After : Jul 26 04:26:15 2025 GMT Subject: CN=687b1e67-06da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:1e:02:84:58:c0:14:cc:ee:5a:1c:1a:f5: ba:ed:4c:c5:04:4b:81:96:e7:f7:71:7a:a0:a2:1d: c9:7d:ae:cd:e5:df:96:5a:11:08:ba:1e:45:c6:0a: 5e:c7:a6:23:49:45:87:09:c3:e8:ad:f9:95:fc:07: 7d:5d:55:bf:fa:c7:c8:5e:d4:95:94:d8:b7:0d:ad: 75:61:93:1a:60:1f:01:ff:8f:b0:23:3c:31:83:7c: 7a:04:70:39:fb:83:2c:6f:58:43:5f:7b:15:20:53: c4:8b:af:c2:22:5d:94:ca:a9:e3:e5:1a:68:cb:9b: 65:03:40:21:fc:2e:a4:e2:45:a8:a6:39:88:40:44: 47:7b:86:8e:c4:82:66:8f:0e:d3:d7:a0:e3:6f:12: 3a:f0:4b:16:ba:90:eb:8a:27:38:29:5f:a4:30:79: d2:5c:1b:6f:44:30:c8:7e:40:2a:b9:6d:33:93:32: 47:1d:26:16:81:ef:cb:4a:4f:f7:c6:29:1c:97:54: 7c:e2:94:06:2f:1c:ab:b7:de:c9:f2:37:7f:53:09: ec:62:60:f8:fa:58:68:c7:5f:c1:71:55:85:a1:6d: 40:fd:e2:1c:1b:01:46:3e:fb:35:66:37:12:d6:3d: bd:e0:06:43:40:62:78:4d:20:53:70:4a:3d:23:3c: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5F:12:0B:FB:90:D5:32:D4:07:4E:A0:D9:86:A0:1D:57:E5:67:28 X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:59:94:8d:ff:95:3d:cb:01:c1:8c:da:3e:4b:ad:08:a9:a7: 60:04:5a:3b:93:8f:c8:81:a8:d7:58:40:b9:5a:ea:fa:7f:7e: ae:ba:c8:fb:49:34:18:c4:73:54:75:69:6a:c1:40:4b:03:5d: c9:88:89:ea:20:1c:cc:82:13:d3:59:19:b0:0b:5a:14:5c:75: 95:6f:cb:07:a4:48:90:c9:50:52:a5:8c:4e:a6:1d:cb:13:4d: df:59:14:d6:0f:6d:c4:f8:fa:66:c9:79:74:b6:9f:a0:17:d4: 0e:46:56:fc:84:19:ed:86:05:7d:70:07:bf:12:2c:3a:c5:2f: fc:a3:35:98:50:46:b7:04:b4:a6:02:9a:d7:bf:8b:02:95:bf: c6:b3:89:ca:a9:e5:39:36:25:b5:d1:dd:20:7a:05:91:28:df: 56:b8:e1:ab:d6:37:ae:8c:f0:8e:3b:ef:68:4b:10:51:6e:87: 38:6c:b8:a7:83:c5:4c:97:fc:f5:7a:36:f5:d8:74:e6:4b:64: cc:ff:eb:e7:e7:39:83:3e:b8:3b:94:c9:d1:d5:3a:17:a7:68: 9a:ce:1b:7d:80:c0:12:0e:b3:9d:92:7c:00:dd:93:f5:ec:2b: 5a:ab:41:73:11:61:16:8e:f9:78:cd:6b:34:0c:8b:2d:d4:d9: 81:16:5b:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjUwNzE5MDQyNjE1WhcNMjUwNzI2MDQyNjE1WjAYMRYwFAYD VQQDEw02ODdiMWU2Ny0wNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg8eAoRYwBTM7locGvW67UzFBEuBluf3cXqgoh3Jfa7N5d+WWhEIuh5Fxgpe x6YjSUWHCcPorfmV/Ad9XVW/+sfIXtSVlNi3Da11YZMaYB8B/4+wIzwxg3x6BHA5 +4Msb1hDX3sVIFPEi6/CIl2Uyqnj5Rpoy5tlA0Ah/C6k4kWopjmIQERHe4aOxIJm jw7T16DjbxI68EsWupDriic4KV+kMHnSXBtvRDDIfkAquW0zkzJHHSYWge/LSk/3 xikcl1R84pQGLxyrt97J8jd/UwnsYmD4+lhox1/BcVWFoW1A/eIcGwFGPvs1ZjcS 1j294AZDQGJ4TSBTcEo9Izxb2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVfEgv7 kNUy1AdOoNmGoB1X5WcoMB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM3Qy8yQjVDQUFFODY5RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4 aHd5S0FMWm91XzZWbEYtTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABWZSN/5U9ywHBjNo+S60IqadgBFo7k4/IgajXWEC5Wur6f36uusj7 STQYxHNUdWlqwUBLA13JiInqIBzMghPTWRmwC1oUXHWVb8sHpEiQyVBSpYxOph3L E03fWRTWD23E+PpmyXl0tp+gF9QORlb8hBnthgV9cAe/Eiw6xS/8ozWYUEa3BLSm AprXv4sClb/Gs4nKqeU5NiW10d0gegWRKN9WuOGr1jeujPCOO+9oSxBRboc4bLin g8VMl/z1ejb12HTmS2TM/+vn5zmDPrg7lMnR1ToXp2iazht9gMASDrOdknwA3ZP1 7Ctaq0FzEWEWjvl4zWs0DIst1NmBFlt0 -----END CERTIFICATE-----Generated at Sun Jul 20 09:54:32 2025 by rpki-client