$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: LriwVo3rSsKP4oBd0nvm8O8GL1Vs1B4iu5f0D2hJw1E= Subject key identifier: D4:81:F0:8A:D9:B9:33:54:B7:49:C8:5F:92:49:A5:3A:E4:39:B1:9C Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 0157 Signing time: Sat 19 Jul 2025 04:15:39 +0000 Manifest this update: Sat 19 Jul 2025 04:15:38 +0000 Manifest next update: Sat 26 Jul 2025 04:15:38 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: BlpYo92EQJW9gplpP1qTD+OnzkTxCNmYG4St+bq1kmg=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: fQ0Wv2YD60Yo4ln05PtaRg2v4/R5zwKrC/7wYHWQM3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Jul 19 04:15:38 2025 GMT Not After : Jul 26 04:15:38 2025 GMT Subject: CN=687b1bea-45e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:71:b9:2b:08:17:8c:fd:84:71:7e:92:ba: 0f:2c:53:96:fd:fd:c8:6f:fa:ac:d2:ac:cc:8f:ab: 31:3b:4c:d4:c0:f4:48:26:c7:ae:64:3a:64:58:73: 1a:4b:ed:c1:6e:42:35:a9:f0:a9:95:08:3c:d4:5b: 39:2c:99:9f:19:e6:63:7c:10:d6:5a:34:85:f5:8f: 3d:1a:10:7e:0a:76:b1:52:a5:0a:af:b7:3b:94:4a: e5:d9:ce:c2:6c:ee:75:80:62:1a:f1:bd:b7:a5:32: fd:fb:0b:fb:33:b1:5f:5f:d4:d0:3a:de:74:df:4c: d4:25:ff:00:44:e7:32:09:c4:b1:ae:9c:bc:ce:3a: 58:cd:e3:e3:82:27:7f:87:33:a3:4c:ce:d3:92:3a: 8d:de:4b:e7:5a:e0:5b:7a:81:e0:5a:d9:3e:7e:2c: 09:d9:10:1d:76:0b:92:21:27:88:68:78:27:16:be: 12:85:47:ff:b5:d4:cc:a0:9f:2d:75:d1:b4:09:bb: 7a:30:5f:3e:ee:2d:c7:aa:12:1a:bf:4c:7d:b6:0d: 11:84:82:13:80:d1:03:50:30:13:50:4f:c9:a7:28: b4:89:04:4b:3c:fd:27:45:69:12:9e:f6:09:0d:f3: 09:00:a5:cf:8d:4a:8e:b8:77:4b:f3:18:2f:db:56: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:81:F0:8A:D9:B9:33:54:B7:49:C8:5F:92:49:A5:3A:E4:39:B1:9C X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4d:01:e0:66:3c:2f:0c:ca:48:41:da:97:a7:70:c9:db:b5: d1:a4:20:22:59:0d:79:e0:14:35:ba:d5:ca:a8:a1:ac:49:9d: 0b:4a:3a:1b:9d:25:b3:74:9c:16:b7:2b:e0:e2:f7:de:04:a5: 5d:75:35:83:23:90:11:f0:f5:8a:95:db:3c:f0:bf:ea:ae:99: 10:25:99:4f:bc:03:83:ed:ad:79:ba:8d:94:1f:c5:07:7d:af: de:8f:3d:0c:22:03:4a:97:6a:d5:b2:57:ad:f2:2d:ff:77:ee: 5e:e7:55:22:ad:0f:34:b8:c6:96:d9:70:e5:8e:ba:4b:ec:96: f1:c9:00:24:ef:d9:8e:9f:65:ba:1a:e5:c4:9c:b9:b9:78:41: 26:f9:f0:23:87:01:2e:85:bb:09:f4:40:e6:25:17:12:2e:45: 30:52:4c:7d:19:a1:ca:e9:e5:82:ab:37:66:75:09:06:37:05: 8c:c0:53:e1:ac:eb:01:42:e2:10:7e:50:2a:d0:27:92:a3:26: 7c:06:ff:c2:65:37:dc:fa:23:cf:a3:2a:9c:62:e3:e5:43:5a: a6:00:69:ef:ea:67:2e:ce:24:0e:a5:41:e6:50:57:eb:dc:3a: 62:af:9a:1a:23:f7:7d:22:39:2e:43:f1:cf:98:85:09:05:01: 5e:19:cb:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjUwNzE5MDQxNTM4WhcNMjUwNzI2MDQxNTM4WjAYMRYwFAYD VQQDEw02ODdiMWJlYS00NWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud1xuSsIF4z9hHF+kroPLFOW/f3Ib/qs0qzMj6sxO0zUwPRIJseuZDpkWHMa S+3BbkI1qfCplQg81Fs5LJmfGeZjfBDWWjSF9Y89GhB+CnaxUqUKr7c7lErl2c7C bO51gGIa8b23pTL9+wv7M7FfX9TQOt5030zUJf8AROcyCcSxrpy8zjpYzePjgid/ hzOjTM7TkjqN3kvnWuBbeoHgWtk+fiwJ2RAddguSISeIaHgnFr4ShUf/tdTMoJ8t ddG0Cbt6MF8+7i3HqhIav0x9tg0RhIITgNEDUDATUE/Jpyi0iQRLPP0nRWkSnvYJ DfMJAKXPjUqOuHdL8xgv21Z9EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSB8IrZ uTNUt0nIX5JJpTrkObGcMB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXTQHgZjwvDMpIQdqXp3DJ27XRpCAiWQ154BQ1utXKqKGsSZ0LSjob nSWzdJwWtyvg4vfeBKVddTWDI5AR8PWKlds88L/qrpkQJZlPvAOD7a15uo2UH8UH fa/ejz0MIgNKl2rVslet8i3/d+5e51UirQ80uMaW2XDljrpL7JbxyQAk79mOn2W6 GuXEnLm5eEEm+fAjhwEuhbsJ9EDmJRcSLkUwUkx9GaHK6eWCqzdmdQkGNwWMwFPh rOsBQuIQflAq0CeSoyZ8Bv/CZTfc+iPPoyqcYuPlQ1qmAGnv6mcuziQOpUHmUFfr 3Dpir5oaI/d9IjkuQ/HPmIUJBQFeGcs0 -----END CERTIFICATE-----Generated at Sun Jul 20 10:04:17 2025 by rpki-client