$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json) Hash identifier: uCnPBZDl3R1YWMBrBAGYiqWHLDSYPH/0/8v7HHoMbqo= Subject key identifier: C5:EE:A9:27:14:AF:B1:A7:32:A0:E3:9E:DC:19:F9:F4:4C:D7:F7:BE Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft Manifest number: 067F Signing time: Fri 18 Jul 2025 22:38:27 +0000 Manifest this update: Fri 18 Jul 2025 22:38:26 +0000 Manifest next update: Fri 25 Jul 2025 22:38:26 +0000 Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: PI7cHPjQ78sbGLbKvtmEUBcK4t7lAxl34adau21EfLU=) 2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: Ode9C1rjZZ48xy/QuIzg9S8zoYsoG2CKnN/yX25u2gs=) 3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Validity Not Before: Jul 18 22:38:26 2025 GMT Not After : Jul 25 22:38:26 2025 GMT Subject: CN=687acce2-6dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:1d:5a:39:bd:bb:43:bc:83:34:37:7e:be: 88:8d:e8:bf:fb:bc:27:12:37:b3:4a:86:76:52:29: b2:3e:7c:f9:d9:0a:ed:88:b2:af:74:75:f7:0b:88: e7:c8:a7:ce:64:b5:ea:94:2e:4a:f9:d3:14:a4:c1: 21:ab:d8:d3:b8:5f:78:e8:73:58:68:e9:16:08:5d: d0:65:b8:1f:3b:79:0e:46:3c:29:1d:1f:df:b0:f5: 1e:91:fa:02:77:b3:49:63:67:03:50:d5:f6:dc:9e: d3:13:2d:e3:bc:af:52:9b:82:31:8a:ee:a5:26:b0: 72:28:05:ff:d2:39:55:65:a4:8c:fb:46:22:d9:fb: 83:59:1f:ba:c6:88:f9:42:41:15:a6:a8:ac:e5:70: d0:80:08:d5:e0:31:20:d4:8f:dd:55:8a:7d:88:c0: 65:94:e9:cf:4d:75:14:be:b3:65:06:7d:c6:c7:fc: fc:ea:fc:4b:e5:26:86:34:05:8d:10:b3:25:21:f6: a9:66:ac:8f:58:81:35:cd:82:df:04:82:2b:60:dd: b1:3c:34:ea:87:27:6f:7b:65:1f:cc:0a:c8:c3:f9: 77:4d:e8:e4:95:48:a0:3d:1d:96:52:f5:02:1e:1b: 0b:d7:ab:4c:5c:b8:1f:68:0e:12:60:e8:70:7b:f9: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EE:A9:27:14:AF:B1:A7:32:A0:E3:9E:DC:19:F9:F4:4C:D7:F7:BE X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:fa:c6:d8:5d:01:82:f2:41:89:39:72:2d:8f:ae:9c:e0:6d: d3:37:f5:fd:5c:a2:3e:0f:09:87:92:4f:66:02:fe:dd:8d:f3: cf:6d:b2:6a:6c:4b:79:8b:aa:8d:6f:ed:1e:f4:08:b5:f9:72: 0c:d3:f9:b6:31:28:fc:cf:4c:6f:ee:f8:28:1e:fe:44:df:f3: 92:9b:d2:fd:66:5d:c2:3e:dc:99:e2:82:eb:c4:47:d5:bf:35: fb:59:0c:ff:b0:e2:26:b3:3e:50:78:c0:5b:26:c0:2e:76:40: 8c:3f:2a:f2:64:f2:35:7b:e4:c1:ce:1a:e2:c4:1e:db:75:ba: 7f:51:99:da:c6:25:af:82:20:14:ce:47:ea:37:db:c2:12:51: 90:32:c3:3e:64:0e:69:2c:d9:6f:3b:3a:a0:09:c5:04:79:ac: 72:e0:37:a6:40:3c:d2:c4:5d:d8:be:c4:1c:11:48:35:6d:90: 28:76:3f:7e:44:a4:dc:63:22:10:77:16:6a:eb:cb:6f:85:aa: f4:c1:66:5c:ba:4e:9d:77:04:bd:ac:23:2b:5c:8f:a7:7e:db: 1b:21:3e:20:25:86:67:4c:c0:4a:b9:1e:15:33:8e:74:ce:fc: a7:8d:99:81:21:4e:2f:6d:c6:d3:12:d5:d4:c9:f5:02:74:80: 58:34:54:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjUwNzE4MjIzODI2WhcNMjUwNzI1MjIzODI2WjAYMRYwFAYD VQQDEw02ODdhY2NlMi02ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjcdWjm9u0O8gzQ3fr6Ijei/+7wnEjezSoZ2UimyPnz52QrtiLKvdHX3C4jn yKfOZLXqlC5K+dMUpMEhq9jTuF946HNYaOkWCF3QZbgfO3kORjwpHR/fsPUekfoC d7NJY2cDUNX23J7TEy3jvK9Sm4Ixiu6lJrByKAX/0jlVZaSM+0Yi2fuDWR+6xoj5 QkEVpqis5XDQgAjV4DEg1I/dVYp9iMBllOnPTXUUvrNlBn3Gx/z86vxL5SaGNAWN ELMlIfapZqyPWIE1zYLfBIIrYN2xPDTqhydve2UfzArIw/l3TejklUigPR2WUvUC HhsL16tMXLgfaA4SYOhwe/m2TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXuqScU r7GnMqDjntwZ+fRM1/e+MB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL Y1BrNlhMY0xabWdLVW83Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV+sbYXQGC8kGJOXItj66c4G3TN/X9XKI+DwmHkk9mAv7djfPPbbJq bEt5i6qNb+0e9Ai1+XIM0/m2MSj8z0xv7vgoHv5E3/OSm9L9Zl3CPtyZ4oLrxEfV vzX7WQz/sOImsz5QeMBbJsAudkCMPyryZPI1e+TBzhrixB7bdbp/UZnaxiWvgiAU zkfqN9vCElGQMsM+ZA5pLNlvOzqgCcUEeaxy4DemQDzSxF3YvsQcEUg1bZAodj9+ RKTcYyIQdxZq68tvhar0wWZcuk6ddwS9rCMrXI+nftsbIT4gJYZnTMBKuR4VM450 zvynjZmBIU4vbcbTEtXUyfUCdIBYNFRm -----END CERTIFICATE-----Generated at Sun Jul 20 18:57:02 2025 by rpki-client