$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json) Hash identifier: cWT9j6tK1jy+G1qzdqNjU1dLtfQCxRXl87onfep2EFI= Subject key identifier: 27:BE:12:DF:25:D6:D6:9D:06:65:98:B6:0D:8B:72:09:15:F2:0E:E0 Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Certificate serial: 0691 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft Manifest number: 068D Signing time: Fri 18 Jul 2025 22:33:12 +0000 Manifest this update: Fri 18 Jul 2025 22:33:11 +0000 Manifest next update: Fri 25 Jul 2025 22:33:11 +0000 Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: 1/wWOh2VYXoucoy4iBWiyDlSN+LOu/hNgqiq16GcnDM=) 2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: QJpUBqNgws3PM1RQ/YpxcOLuHjSbFEKESqjd/lkWkNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Validity Not Before: Jul 18 22:33:11 2025 GMT Not After : Jul 25 22:33:11 2025 GMT Subject: CN=687acba7-04c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:0f:70:2e:72:97:2c:3a:e4:55:c4:e9:ca: a4:f9:a1:d4:ef:c9:df:b1:47:0e:b9:d6:6b:f6:e6: 9d:17:c8:5a:8c:41:e1:b6:1f:37:c4:8e:26:9f:58: 1a:d0:4d:93:62:96:55:1f:fc:1f:17:51:97:6c:28: a4:4b:ef:0b:b9:0e:8a:c2:3a:36:e7:92:be:89:59: c0:3b:7c:2f:9c:91:a5:52:c6:95:22:49:77:ee:1a: 6e:80:91:ae:50:6f:72:77:d8:c4:54:57:2f:c6:39: 6c:02:25:85:83:05:44:d2:07:0d:b4:6e:fe:6c:c0: fa:92:9a:58:84:f4:a2:41:52:e7:32:b0:93:f0:4a: b5:4e:fd:9d:a3:5b:99:58:1a:8c:36:8c:13:9d:aa: 88:63:a4:c3:e2:22:64:d3:97:9a:b8:25:00:88:1c: bb:da:56:2e:8c:bb:4d:e8:a0:e4:d8:4e:ed:71:8f: 8f:15:82:91:3f:92:a7:57:b1:ac:d3:95:b7:50:1c: a0:a3:87:1d:06:4c:cc:27:9c:ef:e3:9b:54:12:04: 0c:6b:67:f5:e5:b8:7d:80:a9:b8:db:d7:a0:32:d3: 21:9a:9a:11:fb:a1:3b:a2:6e:29:27:c6:ac:68:92: f3:56:38:e9:d6:fa:9a:33:cc:8c:02:bc:a4:ef:f1: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BE:12:DF:25:D6:D6:9D:06:65:98:B6:0D:8B:72:09:15:F2:0E:E0 X509v3 Authority Key Identifier: keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:64:9f:a0:42:14:b6:6e:8a:82:0d:b0:a4:01:91:4f:06:30: fc:04:02:f1:bd:b1:cd:a3:f6:0b:b0:09:e9:07:08:2d:eb:a9: 82:43:f5:65:9f:10:2d:d9:aa:7b:5b:50:97:99:37:4d:ce:d1: b7:a0:9a:70:fe:72:56:86:d9:47:4a:28:71:a2:da:29:79:bf: 01:1b:60:1a:c0:77:0a:b2:74:e2:d5:f5:5a:72:b1:52:45:5e: 5d:83:aa:2e:10:10:43:71:30:04:b1:ba:d4:64:be:2e:8b:09: bf:32:71:7a:e6:e1:7a:a6:fb:e3:5f:37:32:e0:63:98:5e:e1: a5:62:4a:62:63:6d:28:08:19:49:a9:ea:e2:00:3f:f2:ae:52: c1:80:f7:e2:41:3c:15:7c:4c:1f:93:62:22:cd:29:cb:84:c6: 55:6a:9d:60:74:62:eb:16:bc:33:4c:32:00:69:40:0c:17:9f: 12:67:e6:bd:0c:df:2c:83:41:e6:36:27:5f:06:fc:bb:dc:fb: 50:c2:4c:88:e4:a9:65:b8:5a:98:e4:35:af:3c:c6:79:72:4c: a5:1c:93:c1:43:c5:8d:ec:63:b5:7f:18:b8:99:59:12:d0:1e: 97:98:86:7c:72:8f:22:29:bc:69:fc:e6:23:e0:cc:0a:0b:14: 08:75:c3:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDVGQUQxQjM5QkU0NTU1MjYyMjA2RDE5RjVBNjY5QkM3 QjY5RjcyQzgwHhcNMjUwNzE4MjIzMzExWhcNMjUwNzI1MjIzMzExWjAYMRYwFAYD VQQDEw02ODdhY2JhNy0wNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfIPcC5ylyw65FXE6cqk+aHU78nfsUcOudZr9uadF8hajEHhth83xI4mn1ga 0E2TYpZVH/wfF1GXbCikS+8LuQ6Kwjo255K+iVnAO3wvnJGlUsaVIkl37hpugJGu UG9yd9jEVFcvxjlsAiWFgwVE0gcNtG7+bMD6kppYhPSiQVLnMrCT8Eq1Tv2do1uZ WBqMNowTnaqIY6TD4iJk05eauCUAiBy72lYujLtN6KDk2E7tcY+PFYKRP5KnV7Gs 05W3UBygo4cdBkzMJ5zv45tUEgQMa2f15bh9gKm429egMtMhmpoR+6E7om4pJ8as aJLzVjjp1vqaM8yMAryk7/H8wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe+Et8l 1tadBmWYtg2LcgkV8g7gMB8GA1UdIwQYMBaAFF+tGzm+RVUmIgbRn1pmm8e2n3LI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wM0EwMTc4NDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZTWWlCdEdmV21hYng3YWZj c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1g2MGJPYjVGVlNZaUJ0R2ZXbWFieDdhZmNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wM0EwMTc4NDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZT WWlCdEdmV21hYng3YWZjc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCZJ+gQhS2boqCDbCkAZFPBjD8BALxvbHNo/YLsAnpBwgt66mCQ/Vl nxAt2ap7W1CXmTdNztG3oJpw/nJWhtlHSihxotopeb8BG2AawHcKsnTi1fVacrFS RV5dg6ouEBBDcTAEsbrUZL4uiwm/MnF65uF6pvvjXzcy4GOYXuGlYkpiY20oCBlJ qeriAD/yrlLBgPfiQTwVfEwfk2IizSnLhMZVap1gdGLrFrwzTDIAaUAMF58SZ+a9 DN8sg0HmNidfBvy73PtQwkyI5KlluFqY5DWvPMZ5ckylHJPBQ8WN7GO1fxi4mVkS 0B6XmIZ8co8iKbxp/OYj4MwKCxQIdcM9 -----END CERTIFICATE-----Generated at Sun Jul 20 11:29:04 2025 by rpki-client