$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: I4yICCcAd98utPPe0zeUsaqIQ2V38JfpREPIXyDRHGI= Subject key identifier: C0:F0:06:DE:8E:9F:10:D0:EB:E4:3C:2B:00:7D:B9:EA:5B:19:AF:7C Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0B24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0B14 Signing time: Sun 20 Jul 2025 19:26:56 +0000 Manifest this update: Sun 20 Jul 2025 19:26:56 +0000 Manifest next update: Sun 27 Jul 2025 19:26:56 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: XebwyZ6tIdeg//Irr3lNtcS5ar764VeJ9ITrO4Ui1v4=) 2: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: 2cXl/5f431sLYOEV9wOGgPMtNZFFmZ0haqZGiKbsEGE=) 3: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: UpMy5YvHwAoOrHu9/2m6YmhC+FBzuF02PJm6nhV30kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2852 (0xb24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: Jul 20 19:26:56 2025 GMT Not After : Jul 27 19:26:56 2025 GMT Subject: CN=687d4300-5378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:41:0c:44:ca:9c:6b:ff:ca:0f:6d:3c:61: f2:14:e6:99:d7:cf:cb:ce:e2:e2:a8:ee:3c:a0:14: e4:b5:bf:2a:b4:7b:3b:6a:bd:bd:c2:04:db:22:a0: f8:34:3d:4e:3e:b2:7a:bb:48:54:60:2d:ae:77:7d: 39:a7:04:f6:fb:79:6e:29:06:ba:1e:fe:a9:72:61: 02:e2:df:5c:e9:70:9f:c5:e9:f0:61:23:42:dd:68: 51:15:f4:c0:36:50:5b:37:57:fa:ab:a5:c8:0e:6a: b2:34:bf:3e:63:83:1b:26:87:e1:e3:2a:1a:00:ad: 91:70:5b:f7:84:cf:5a:2a:2c:27:4e:b0:e8:46:2e: 7a:98:0c:d8:6a:d4:68:de:b3:96:9b:51:eb:1d:52: 6d:f5:31:b9:64:f3:1e:3b:ae:5c:ce:ed:25:29:07: 5d:26:04:68:79:98:95:f9:89:7f:57:2e:f5:c3:9b: ae:33:62:aa:1a:ea:eb:06:28:43:dd:d7:e0:9d:e0: c7:ef:4f:41:95:82:80:c0:81:ed:99:57:7a:82:b4: 71:75:69:9b:b6:86:ab:e9:62:be:8b:2f:52:ec:d5: 3e:ac:c9:9f:b3:4d:6d:c5:10:75:85:21:93:63:a7: a1:58:8c:e4:d1:63:dd:46:47:05:fe:3f:88:a9:66: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F0:06:DE:8E:9F:10:D0:EB:E4:3C:2B:00:7D:B9:EA:5B:19:AF:7C X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d0:cc:3c:8f:b3:58:70:59:bb:6b:42:a3:45:b7:f3:38:5f: 81:22:c1:83:db:8b:47:01:eb:eb:f2:c9:a0:88:73:fa:57:08: d8:6b:b6:d9:d4:d6:0a:85:32:8e:15:58:cf:15:27:8a:85:36: 51:37:7f:1d:8c:cd:09:e5:57:e0:37:d8:f6:66:1e:67:ca:32: ab:12:9e:a6:b6:2e:d1:eb:04:08:ea:a0:a9:b2:29:e9:6c:ad: 5c:46:ca:fd:85:50:34:84:57:f4:a9:ad:11:16:c0:9b:d4:59: 6d:4d:b1:6f:67:c1:3e:ef:4a:83:bc:42:b2:70:01:79:57:46: 0d:a9:af:5c:93:b8:c8:76:b7:7b:67:f3:33:11:f4:0c:69:2d: 46:6f:8d:8c:86:14:fc:43:94:fb:99:f3:e4:07:8b:d6:72:d2: b0:38:d2:f7:77:10:13:c9:99:90:7c:62:fc:3a:ed:4a:2a:23: bc:79:95:33:a2:87:f8:d0:39:5e:49:be:ae:7e:e3:e7:2c:d5: c3:9b:08:8f:ff:65:05:2b:ec:31:a0:31:d5:4b:c6:28:ce:e6: 24:52:f1:57:d9:6f:12:de:1b:26:fd:a4:2e:9c:82:b8:00:a8: 35:99:d9:4b:39:c9:a4:24:7e:3d:56:00:a2:85:84:66:65:ce: b2:f6:44:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjUwNzIwMTkyNjU2WhcNMjUwNzI3MTkyNjU2WjAYMRYwFAYD VQQDEw02ODdkNDMwMC01Mzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3hBDETKnGv/yg9tPGHyFOaZ18/LzuLiqO48oBTktb8qtHs7ar29wgTbIqD4 ND1OPrJ6u0hUYC2ud305pwT2+3luKQa6Hv6pcmEC4t9c6XCfxenwYSNC3WhRFfTA NlBbN1f6q6XIDmqyNL8+Y4MbJofh4yoaAK2RcFv3hM9aKiwnTrDoRi56mAzYatRo 3rOWm1HrHVJt9TG5ZPMeO65czu0lKQddJgRoeZiV+Yl/Vy71w5uuM2KqGurrBihD 3dfgneDH709BlYKAwIHtmVd6grRxdWmbtoar6WK+iy9S7NU+rMmfs01txRB1hSGT Y6ehWIzk0WPdRkcF/j+IqWYb3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDwBt6O nxDQ6+Q8KwB9uepbGa98MB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN0Mw8j7NYcFm7a0KjRbfzOF+BIsGD24tHAevr8smgiHP6VwjYa7bZ 1NYKhTKOFVjPFSeKhTZRN38djM0J5VfgN9j2Zh5nyjKrEp6mti7R6wQI6qCpsinp bK1cRsr9hVA0hFf0qa0RFsCb1FltTbFvZ8E+70qDvEKycAF5V0YNqa9ck7jIdrd7 Z/MzEfQMaS1Gb42MhhT8Q5T7mfPkB4vWctKwONL3dxATyZmQfGL8Ou1KKiO8eZUz oof40DleSb6ufuPnLNXDmwiP/2UFK+wxoDHVS8YozuYkUvFX2W8S3hsm/aQunIK4 AKg1mdlLOcmkJH49VgCihYRmZc6y9kTB -----END CERTIFICATE-----Generated at Sun Jul 20 22:57:08 2025 by rpki-client