$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft File: X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json) Hash identifier: dTFc2RKWwL9XbHu5Ulyh7iNQzq1rFXUqjvJie87Z7Fo= Subject key identifier: 20:F4:18:85:D6:6C:42:01:56:28:5E:6A:C8:C0:A9:E2:35:E6:9E:49 Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft Manifest number: 0205 Signing time: Fri 25 Jul 2025 02:29:12 +0000 Manifest this update: Fri 25 Jul 2025 02:29:11 +0000 Manifest next update: Fri 01 Aug 2025 02:29:11 +0000 Files and hashes: 1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: hET5Nx6M4kKCCduPakMNYUwYrnE435K/2mVqiL045AY=) 2: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: EH2CgKpJsudgq4d5ghs/SJTUKeHCisdiJwkRQRkot80=) 3: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: Js88dwnU0hyC4RLKD1NQ44jyQxJzu0X07dqPCT3Ukh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 02:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76 Validity Not Before: Jul 25 02:29:11 2025 GMT Not After : Aug 1 02:29:11 2025 GMT Subject: CN=6882ebf7-f650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0f:99:fc:07:f7:55:8d:57:3c:0a:31:f8:9b: 8c:44:d6:05:0a:cb:ec:eb:b5:a8:02:01:ec:96:9f: f8:9c:36:4d:f2:e7:73:cc:a1:4f:3e:aa:b0:9c:fd: e2:cd:2d:a3:b0:d8:8d:a2:98:a7:92:d1:04:2f:2e: b8:48:1a:b7:06:c9:56:04:d9:20:6a:23:80:4a:40: bc:9b:70:02:d0:2e:b0:9a:a3:35:4f:e1:7f:b3:af: 46:d4:32:96:a3:e5:1e:7b:b0:22:8c:3c:b3:be:47: a8:cf:17:75:d6:f3:dd:51:cd:37:2b:ea:f4:d0:d8: 5a:ee:c5:d3:ef:22:ba:61:b1:bb:71:d9:a4:f1:08: 9f:1d:f1:7e:98:68:e5:2b:4a:09:0d:7b:f1:f3:0c: 20:cc:cd:a4:56:b7:87:b2:6a:39:cd:b6:bd:43:76: 77:97:82:af:55:98:76:3c:7c:04:8e:d3:9c:1d:f6: e1:42:e0:9a:6e:aa:80:b0:29:27:b3:08:b4:c5:df: b2:20:97:a7:df:17:45:b0:fc:d8:90:d9:4b:e4:97: 8f:76:63:7f:74:24:61:5a:85:ad:8f:bb:c6:e7:98: 7b:46:6e:e8:af:5a:bc:88:7f:dc:b4:e8:4e:bc:c2: 57:ce:ca:3f:aa:53:62:49:78:33:4c:35:b1:fd:bb: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F4:18:85:D6:6C:42:01:56:28:5E:6A:C8:C0:A9:E2:35:E6:9E:49 X509v3 Authority Key Identifier: keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:25:e2:c7:f9:02:f9:71:7e:14:d9:56:16:1e:59:0e:0a:80: 60:c2:72:b8:a2:fc:93:64:e2:82:ea:1e:48:ba:93:04:57:2b: bd:e4:41:1a:ba:2b:f0:70:d2:12:cc:1c:56:e2:fd:93:98:be: 7a:14:8a:a8:99:42:da:32:6d:5c:f6:dd:de:2e:13:a4:05:d1: 46:e5:62:5c:fd:2e:e9:70:52:89:8e:80:c1:18:85:e6:98:d4: 2e:b1:eb:25:32:8e:4e:93:1f:43:17:29:66:cc:a2:7b:e6:0c: 80:d5:87:e4:0e:03:fd:47:9d:08:0f:01:40:28:e4:0c:e3:9f: c2:29:65:38:bd:1e:28:08:6f:ab:c0:fd:8a:00:2b:b3:c6:ae: 91:6d:0e:29:9b:fa:55:e5:d8:a5:d4:e5:ea:c4:bd:8f:76:1c: 06:28:98:08:71:b2:31:82:b0:60:83:1b:2f:8a:76:8f:aa:a2: 97:13:b7:8e:f4:d9:9d:6d:e9:ce:62:47:4d:67:81:1d:b6:6d: 15:a8:e0:08:a4:90:55:4d:e9:75:f2:e0:85:32:7e:14:67:c4: 89:02:20:6f:f0:a0:e7:3e:2a:1e:82:fe:95:3a:af:cd:0d:93: 9a:72:0c:39:71:71:fa:79:f1:42:76:bb:0a:3a:02:4e:84:31: 66:8e:6d:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRCMTM0ODFCRTEx NTAwQURDNzYwHhcNMjUwNzI1MDIyOTExWhcNMjUwODAxMDIyOTExWjAYMRYwFAYD VQQDEw02ODgyZWJmNy1mNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3A+Z/Af3VY1XPAox+JuMRNYFCsvs67WoAgHslp/4nDZN8udzzKFPPqqwnP3i zS2jsNiNopinktEELy64SBq3BslWBNkgaiOASkC8m3AC0C6wmqM1T+F/s69G1DKW o+Uee7AijDyzvkeozxd11vPdUc03K+r00Nha7sXT7yK6YbG7cdmk8QifHfF+mGjl K0oJDXvx8wwgzM2kVreHsmo5zba9Q3Z3l4KvVZh2PHwEjtOcHfbhQuCabqqAsCkn swi0xd+yIJen3xdFsPzYkNlL5JePdmN/dCRhWoWtj7vG55h7Rm7or1q8iH/ctOhO vMJXzso/qlNiSXgzTDWx/btGdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCD0GIXW bEIBViheasjAqeI15p5JMB8GA1UdIwQYMBaAFF9sj6OmWHQCMbLEsTSBvhFQCtx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjI1NS85MTYyMDg0QzUw NzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRBSXhzc1N4TklHLUVWQUsz SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gyeVBvNlpZZEFJeHNzU3hOSUctRVZBSzNIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjI1NS85MTYyMDg0QzUwNzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRB SXhzc1N4TklHLUVWQUszSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGJeLH+QL5cX4U2VYWHlkOCoBgwnK4ovyTZOKC6h5IupMEVyu95EEa uivwcNISzBxW4v2TmL56FIqomULaMm1c9t3eLhOkBdFG5WJc/S7pcFKJjoDBGIXm mNQuseslMo5Okx9DFylmzKJ75gyA1YfkDgP9R50IDwFAKOQM45/CKWU4vR4oCG+r wP2KACuzxq6RbQ4pm/pV5dil1OXqxL2PdhwGKJgIcbIxgrBggxsvinaPqqKXE7eO 9NmdbenOYkdNZ4Edtm0VqOAIpJBVTel18uCFMn4UZ8SJAiBv8KDnPioegv6VOq/N DZOacgw5cXH6efFCdrsKOgJOhDFmjm3w -----END CERTIFICATE-----Generated at Sat Jul 26 15:22:17 2025 by rpki-client