$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: hIRwX+CHvvo2keXMgRgezE9MUOISElOc/05HHJcTSZA= Subject key identifier: 02:0D:7C:F5:64:21:91:4A:BC:FB:4D:EB:59:31:C6:7D:4C:70:DA:27 Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 34A8 Signing time: Sun 20 Jul 2025 14:41:00 +0000 Manifest this update: Sun 20 Jul 2025 14:40:59 +0000 Manifest next update: Sun 27 Jul 2025 14:40:59 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: 0P14DfEZ/SHGCFzi+a5VoL3/BtxfI3EkHkYRAy8Ei28=) 2: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: m1Ja+K+BQF88h58Y18w9A7vu3WiRuOsB65pKsql8BvI=) 3: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: Zl4gUZhHt66LNUFLaLmernm+th1hHU0/5O3LszjxBds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Jul 20 14:40:59 2025 GMT Not After : Jul 27 14:40:59 2025 GMT Subject: CN=687cfffb-9be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:b2:ec:f9:e5:85:5c:97:2f:55:64:22:00: f8:fd:c5:e1:25:c2:63:a6:39:ab:1a:db:82:a1:7b: 36:be:e1:37:02:79:ba:e5:cc:74:de:1c:35:f6:ee: 11:10:ca:13:7d:b6:06:de:da:48:ab:80:db:7a:76: 41:38:56:9e:71:9b:a5:1d:73:92:a1:39:7b:8a:ce: 14:d6:ea:31:ba:19:92:f9:4f:05:44:c5:e9:9f:79: 7a:af:bc:13:8c:06:8b:75:ed:62:bc:e2:1b:03:8f: e3:d2:0a:13:6b:bf:93:2a:f0:1a:00:70:fa:5b:ba: 81:30:4f:26:ab:cb:6d:07:0e:60:9e:61:21:ac:8e: 67:d9:48:7c:1c:4d:2b:79:d8:1b:7d:7a:15:48:b9: 88:ca:33:e6:e0:8c:14:fb:62:bd:b1:5d:50:78:17: 57:82:4d:1d:a6:91:70:d3:9b:94:ba:95:b8:bf:a3: b9:cb:ec:d3:07:53:f8:1d:cd:d7:a4:e0:d5:b9:2b: 45:63:8b:de:33:fb:34:5e:bf:35:a6:9b:a6:10:73: 56:0f:f7:b2:40:bd:fe:ea:3e:4a:b0:3b:f9:13:50: 31:dc:2f:15:b8:08:15:d2:61:34:1a:3d:9a:62:03: 34:90:6a:73:48:f9:8e:a4:2f:d2:80:ae:ff:dd:c3: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0D:7C:F5:64:21:91:4A:BC:FB:4D:EB:59:31:C6:7D:4C:70:DA:27 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:68:c9:18:38:14:2b:e0:dd:d6:25:e2:76:a9:91:a9:ac:68: a9:cc:44:bd:00:5f:dc:18:b4:8d:be:60:6a:1e:9f:24:51:35: 44:e7:db:8b:42:23:a0:02:26:e5:8a:63:dc:0c:25:38:e1:44: c8:17:19:bf:93:b9:03:fc:f4:a6:3d:15:bd:4f:31:e3:75:40: 1a:40:18:6f:43:8d:03:fe:40:01:b8:75:85:39:bf:c9:a6:43: 94:59:5c:25:3f:53:01:66:ba:bb:09:e5:35:90:38:25:1f:74: 64:81:89:07:ee:80:08:01:bd:44:10:b6:35:50:05:d9:6f:ee: db:16:7e:61:77:5b:eb:ff:e4:6b:fa:7a:45:64:59:02:da:c4: cd:07:4f:85:90:15:06:9c:62:4e:07:9e:6d:9e:0b:8f:b6:17: 88:12:5c:a6:84:2e:10:19:96:b1:f4:af:02:91:ad:2f:64:bc: 8a:dd:78:c3:65:b8:de:51:76:60:cf:fc:e9:c7:eb:e6:3c:52: 9f:72:82:d9:6d:53:30:30:42:32:8c:a7:9e:91:2c:c4:56:88: ac:e3:fc:49:db:7c:2a:f7:cc:6d:ad:4b:13:44:c4:89:b2:21: e2:c2:cd:da:48:1c:33:da:1f:86:72:06:dd:23:e2:e8:a0:d2: be:82:8c:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjUwNzIwMTQ0MDU5WhcNMjUwNzI3MTQ0MDU5WjAYMRYwFAYD VQQDEw02ODdjZmZmYi05YmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv96y7PnlhVyXL1VkIgD4/cXhJcJjpjmrGtuCoXs2vuE3Anm65cx03hw19u4R EMoTfbYG3tpIq4DbenZBOFaecZulHXOSoTl7is4U1uoxuhmS+U8FRMXpn3l6r7wT jAaLde1ivOIbA4/j0goTa7+TKvAaAHD6W7qBME8mq8ttBw5gnmEhrI5n2Uh8HE0r edgbfXoVSLmIyjPm4IwU+2K9sV1QeBdXgk0dppFw05uUupW4v6O5y+zTB1P4Hc3X pODVuStFY4veM/s0Xr81ppumEHNWD/eyQL3+6j5KsDv5E1Ax3C8VuAgV0mE0Gj2a YgM0kGpzSPmOpC/SgK7/3cM6kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAINfPVk IZFKvPtN61kxxn1McNonMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8aMkYOBQr4N3WJeJ2qZGprGipzES9AF/cGLSNvmBqHp8kUTVE59uL QiOgAiblimPcDCU44UTIFxm/k7kD/PSmPRW9TzHjdUAaQBhvQ40D/kABuHWFOb/J pkOUWVwlP1MBZrq7CeU1kDglH3RkgYkH7oAIAb1EELY1UAXZb+7bFn5hd1vr/+Rr +npFZFkC2sTNB0+FkBUGnGJOB55tnguPtheIElymhC4QGZax9K8Cka0vZLyK3XjD ZbjeUXZgz/zpx+vmPFKfcoLZbVMwMEIyjKeekSzEVois4/xJ23wq98xtrUsTRMSJ siHiws3aSBwz2h+GcgbdI+LooNK+goy6 -----END CERTIFICATE-----Generated at Mon Jul 21 13:24:10 2025 by rpki-client