$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: X5IPdkywZL6hc2uUcc+9qS+0PFEs5ybHEBokgwarIqI= Subject key identifier: 8F:8D:D0:8D:63:4A:D3:AD:E3:04:A8:BA:E3:A7:A3:6C:66:93:FC:E7 Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0E66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0E48 Signing time: Sun 20 Jul 2025 17:48:15 +0000 Manifest this update: Sun 20 Jul 2025 17:48:14 +0000 Manifest next update: Sun 27 Jul 2025 17:48:14 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: jZXbYSIvv8eXEiiB6MSlKiJU2trPJAbSf4Leoogwub8=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=) 4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3686 (0xe66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Jul 20 17:48:14 2025 GMT Not After : Jul 27 17:48:14 2025 GMT Subject: CN=687d2bde-67ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:23:0f:54:2f:ff:04:19:31:74:a1:81:c4: df:9c:04:74:dd:75:0a:6f:d9:66:96:15:ce:27:f2: 61:2d:04:cd:f8:6e:17:f5:bd:6a:1f:e7:04:47:cc: d9:48:b0:b6:f5:26:0f:1a:b2:4d:d3:4a:db:0e:d7: 06:bc:07:3c:7c:69:56:af:11:9f:a4:34:70:b3:e3: 44:cd:da:1c:43:a5:b1:bf:19:89:58:0a:68:73:71: 14:04:5e:95:25:f0:52:70:8e:6c:fd:c1:12:78:1e: ee:76:52:6d:90:b7:61:e0:41:e9:82:d6:87:ae:57: 70:3a:eb:05:66:c4:6d:73:76:01:49:9b:19:bf:5b: a3:92:df:0f:de:b3:5f:13:0f:ba:f4:93:15:1a:d8: 2b:7d:45:81:3a:b7:b0:aa:12:fa:8f:4b:6d:28:4d: 5e:c8:26:06:ce:50:4b:0e:97:09:b2:fe:d2:b1:da: 7a:1c:70:0d:f9:a2:86:d8:90:f4:3f:9a:86:88:20: 68:d2:aa:08:bc:54:9a:aa:43:67:d8:31:a4:38:7b: e1:44:17:db:25:21:20:8a:ba:8c:24:e5:50:58:d8: 7a:59:3f:95:62:a4:5b:fb:40:83:66:7f:bb:29:12: e5:45:85:cf:52:3d:0b:bc:cd:ac:84:d2:9a:fc:13: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8D:D0:8D:63:4A:D3:AD:E3:04:A8:BA:E3:A7:A3:6C:66:93:FC:E7 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:2c:db:85:23:15:44:f3:0c:b2:a8:6b:19:5e:45:9f:e5:de: 54:36:3a:d0:15:fe:f9:ed:27:ce:44:1f:79:cd:ab:a6:c9:78: 72:80:a8:6a:98:7e:45:74:e6:09:68:f6:16:25:7c:4f:cf:87: 0e:97:b7:eb:8a:cf:2d:a0:d4:73:d6:1c:b3:cc:95:0a:5f:40: 44:2a:36:b6:7c:00:d7:ec:df:84:be:a3:c1:1a:f4:7a:5e:ac: 62:b5:95:bc:e7:e1:2d:07:87:47:b6:4f:1f:13:cc:52:50:4e: 73:8c:6a:95:f6:eb:2e:c0:7f:d0:22:b0:de:79:44:47:04:e5: ef:3c:fe:e8:bf:fd:4b:ec:b4:72:90:78:70:f7:22:da:6c:92: c6:d0:57:11:68:c0:48:48:52:e8:82:8a:55:1e:f0:39:9d:56: 18:2d:80:56:a4:4f:e1:00:e5:3b:04:05:bd:e1:1b:76:0c:35: 2d:34:05:56:a9:93:74:0d:95:9e:54:92:be:5f:69:13:79:28: 7e:b3:ba:d7:f1:ba:d7:0d:8d:77:43:8b:32:72:cb:ad:f0:03: 78:d5:da:02:8e:24:99:a1:93:1e:3d:f9:ab:71:34:ab:18:55: 99:39:9c:f9:84:1f:0a:da:d7:34:4b:3e:2d:c5:06:c8:5d:5a: 50:b8:af:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjUwNzIwMTc0ODE0WhcNMjUwNzI3MTc0ODE0WjAYMRYwFAYD VQQDEw02ODdkMmJkZS02N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnp4jD1Qv/wQZMXShgcTfnAR03XUKb9lmlhXOJ/JhLQTN+G4X9b1qH+cER8zZ SLC29SYPGrJN00rbDtcGvAc8fGlWrxGfpDRws+NEzdocQ6WxvxmJWApoc3EUBF6V JfBScI5s/cESeB7udlJtkLdh4EHpgtaHrldwOusFZsRtc3YBSZsZv1ujkt8P3rNf Ew+69JMVGtgrfUWBOrewqhL6j0ttKE1eyCYGzlBLDpcJsv7Ssdp6HHAN+aKG2JD0 P5qGiCBo0qoIvFSaqkNn2DGkOHvhRBfbJSEgirqMJOVQWNh6WT+VYqRb+0CDZn+7 KRLlRYXPUj0LvM2shNKa/BPfVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+N0I1j StOt4wSouuOno2xmk/znMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8LNuFIxVE8wyyqGsZXkWf5d5UNjrQFf757SfORB95zaumyXhygKhq mH5FdOYJaPYWJXxPz4cOl7fris8toNRz1hyzzJUKX0BEKja2fADX7N+EvqPBGvR6 XqxitZW85+EtB4dHtk8fE8xSUE5zjGqV9usuwH/QIrDeeURHBOXvPP7ov/1L7LRy kHhw9yLabJLG0FcRaMBISFLogopVHvA5nVYYLYBWpE/hAOU7BAW94Rt2DDUtNAVW qZN0DZWeVJK+X2kTeSh+s7rX8brXDY13Q4sycsut8AN41doCjiSZoZMePfmrcTSr GFWZOZz5hB8K2tc0Sz4txQbIXVpQuK+U -----END CERTIFICATE-----Generated at Tue Jul 22 01:24:17 2025 by rpki-client