$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: CzLv/SxNRtFAWYtyz2XuYj0jjtYakrt0KkB4m3orKr4= Subject key identifier: 36:4A:F2:94:BF:CF:6D:4E:4E:83:0C:11:B7:3B:60:5A:12:17:D2:BF Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 03C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 03A5 Signing time: Mon 21 Jul 2025 01:06:20 +0000 Manifest this update: Mon 21 Jul 2025 01:06:19 +0000 Manifest next update: Mon 28 Jul 2025 01:06:19 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: wA7/WQ3vFQmu6YnVszBOx8jXvrvP6rqWUmTJGlZOLKk=) 2: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: melteXR1cRharD5muHTsf70+edihxivjKNNQzAZNpLE=) 3: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: pIl/ybOSWeNJuXyu7vI+RsUvtpL0KXP/t0jEbgQtU7I=) 4: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: ImUvDtTwcm68idWdwXB7tEHKc5rG51UP9vCEMxdSyRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 969 (0x3c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Validity Not Before: Jul 21 01:06:19 2025 GMT Not After : Jul 28 01:06:19 2025 GMT Subject: CN=687d928b-2b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:2e:1c:68:75:bc:c1:45:c7:cb:e2:2d:55: 78:56:25:51:8e:94:30:03:ce:93:5f:92:47:92:85: e4:00:5b:39:4d:91:0e:d6:14:66:09:c6:3a:ea:45: 20:dd:2f:da:9a:e6:06:64:42:0d:a9:be:fa:da:c3: 10:92:f2:e8:f9:8f:6e:ac:27:24:93:df:bc:dd:6d: fc:4a:5d:95:e0:f6:49:b0:9c:bc:e7:28:01:2a:9a: 22:7e:9e:68:c1:2b:bf:36:02:11:6c:3e:c7:42:2a: 1f:6c:d3:ec:1e:7f:df:e8:82:62:fc:59:15:20:53: 07:ef:e7:bb:f2:1f:fd:f8:b5:8b:e4:8a:f6:46:44: de:a8:3e:88:59:6a:75:ee:5c:7c:23:a6:7d:87:fd: a7:a4:12:b6:6e:cf:70:0e:c1:f1:71:e8:d2:54:cf: 9c:03:d3:da:f4:63:d8:ce:8e:bd:4d:6f:49:c4:dd: 14:32:b7:16:19:d3:93:15:f9:f8:3b:d0:f1:6e:ea: 1e:79:26:01:a9:54:c9:75:6d:a6:ce:a8:5b:bc:94: 37:dc:de:e4:4b:9a:71:9a:0b:e3:10:4c:fd:fe:b0: a1:d2:4c:23:df:43:89:e2:70:70:f3:35:0c:93:a6: 3c:87:b5:17:2f:d8:02:9c:95:c4:a5:ae:20:e0:bd: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4A:F2:94:BF:CF:6D:4E:4E:83:0C:11:B7:3B:60:5A:12:17:D2:BF X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:69:df:b4:48:fb:d4:94:b3:6e:9d:b3:bb:35:d3:fc:ef:48: db:67:43:61:7b:6d:57:53:f5:0a:14:44:31:36:6e:4c:c9:db: a8:04:69:9f:c3:02:0b:d9:48:06:ff:79:98:88:e5:03:dc:1d: 30:9f:33:31:98:60:2c:09:8b:d0:7a:e5:25:c8:0c:6d:d5:f7: bf:74:3f:24:28:36:45:7d:21:2a:b1:8e:04:00:d5:ce:0f:6d: 32:50:25:5e:30:a6:6c:ce:6c:44:90:75:8f:8b:eb:18:e2:62: 22:6b:b7:f7:31:90:0f:88:6f:f6:25:8e:f9:d1:a9:61:6a:49: 78:db:ea:5e:00:39:47:72:ab:c3:22:2f:4f:db:42:b4:4c:65: 41:4f:1f:c8:7d:6b:25:8c:fc:52:8e:42:25:4f:f1:7b:75:94: 69:94:fd:1b:c3:4b:f1:7c:82:90:f1:ae:a3:14:12:28:86:40: ba:72:5c:92:ee:2b:fb:13:13:0d:7c:4f:7e:7a:77:a7:8c:02: df:f3:7e:76:c7:c4:b4:d6:39:98:d4:3b:e0:78:ac:3a:5c:c6: 1d:08:3a:7f:ec:aa:5b:58:b0:a2:0d:a8:08:86:ec:b6:43:6a: 4c:a4:5f:83:08:7d:5e:f3:f7:96:5d:f2:13:46:44:db:a0:3a: 05:59:00:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjUwNzIxMDEwNjE5WhcNMjUwNzI4MDEwNjE5WjAYMRYwFAYD VQQDEw02ODdkOTI4Yi0yYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnouHGh1vMFFx8viLVV4ViVRjpQwA86TX5JHkoXkAFs5TZEO1hRmCcY66kUg 3S/amuYGZEINqb762sMQkvLo+Y9urCckk9+83W38Sl2V4PZJsJy85ygBKpoifp5o wSu/NgIRbD7HQiofbNPsHn/f6IJi/FkVIFMH7+e78h/9+LWL5Ir2RkTeqD6IWWp1 7lx8I6Z9h/2npBK2bs9wDsHxcejSVM+cA9Pa9GPYzo69TW9JxN0UMrcWGdOTFfn4 O9DxbuoeeSYBqVTJdW2mzqhbvJQ33N7kS5pxmgvjEEz9/rCh0kwj30OJ4nBw8zUM k6Y8h7UXL9gCnJXEpa4g4L0aAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZK8pS/ z21OToMMEbc7YFoSF9K/MB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIad+0SPvUlLNunbO7NdP870jbZ0Nhe21XU/UKFEQxNm5MyduoBGmf wwIL2UgG/3mYiOUD3B0wnzMxmGAsCYvQeuUlyAxt1fe/dD8kKDZFfSEqsY4EANXO D20yUCVeMKZszmxEkHWPi+sY4mIia7f3MZAPiG/2JY750alhakl42+peADlHcqvD Ii9P20K0TGVBTx/IfWsljPxSjkIlT/F7dZRplP0bw0vxfIKQ8a6jFBIohkC6clyS 7iv7ExMNfE9+enenjALf8352x8S01jmY1DvgeKw6XMYdCDp/7KpbWLCiDagIhuy2 Q2pMpF+DCH1e8/eWXfITRkTboDoFWQBB -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:43 2025 by rpki-client