$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: gz4Yz5pXQkW/VgyWRZ5p+tRxvfFHN4oDDEZus6XJEDY= Subject key identifier: AC:04:4B:9C:7C:48:29:4C:B2:67:BA:A9:46:2D:E8:A9:E2:35:3D:19 Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 016C Signing time: Mon 21 Jul 2025 03:56:28 +0000 Manifest this update: Mon 21 Jul 2025 03:56:28 +0000 Manifest next update: Mon 28 Jul 2025 03:56:28 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: IqUvfGX8BzZ7eDjgpdS/wA2+r5TMs9inKpCYoVk8Miw=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: 40lvaLr1gKHAad8xOy7yfS2hh56AhlCYkcilzIpf0Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: Jul 21 03:56:28 2025 GMT Not After : Jul 28 03:56:28 2025 GMT Subject: CN=687dba6c-42d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:39:06:c7:72:f2:63:25:50:21:9a:d3:da:94: eb:f7:72:2c:d2:64:8f:8e:bb:89:16:0b:0d:21:5f: 35:25:25:92:35:57:23:84:80:0f:e6:7d:ae:d0:e1: c7:46:0e:6d:23:de:92:85:6d:f7:7f:ff:54:9e:48: bb:32:6a:3b:ed:d1:08:b7:98:de:e3:ca:1c:29:ef: b3:82:f2:fb:13:c5:82:61:e9:d6:ad:ae:fb:23:dd: 00:f6:17:74:bc:0b:10:a1:76:97:65:6d:2f:8d:3e: 83:b6:96:8b:7d:c9:51:51:a9:32:96:97:7d:a0:01: 6d:88:8d:1e:35:27:6b:25:21:98:26:e9:c2:40:53: 6a:b0:61:f8:a7:d0:8e:8e:13:96:19:3d:6f:9c:3b: 94:db:af:94:02:ba:37:cc:43:67:7c:c3:84:6a:22: 61:1b:02:c4:b3:72:5e:10:bd:9d:6f:98:4f:60:2b: 49:30:f7:6d:02:f1:6e:c9:35:5b:bc:1f:cc:dc:f4: e5:a2:df:45:7d:26:f8:dd:fd:7c:20:24:5e:73:74: 70:55:c1:49:43:2a:48:04:c1:ed:eb:b2:13:55:32: fd:f1:cc:21:2d:0c:9e:8f:9f:60:9d:bc:d1:73:a8: e8:b5:77:c0:7b:14:c9:a1:70:43:2e:3e:29:3c:ad: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:04:4B:9C:7C:48:29:4C:B2:67:BA:A9:46:2D:E8:A9:E2:35:3D:19 X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:06:82:49:3a:13:20:d4:ee:c6:85:b4:97:95:cf:be:1d:ef: 29:13:14:ea:d4:e3:ad:ba:68:1d:65:22:59:b7:d3:82:e4:b5: 15:93:b8:11:f0:28:8d:51:23:74:ea:e2:a0:fb:3c:4a:49:52: fe:c0:8c:99:4f:24:60:99:34:2c:09:50:71:47:52:04:b7:73: b3:7e:c2:dd:b4:da:d3:fa:32:02:1f:1f:7b:93:7a:b5:c6:89: 63:89:4a:4f:97:f5:36:60:2b:a9:5f:77:0b:c1:9e:e1:3d:31: 3f:f3:6a:a4:46:57:ec:0c:79:53:4a:5a:f5:35:cc:76:a4:f2: 32:13:28:18:d9:4d:44:fa:e6:c1:a6:5e:db:bb:64:99:ec:65: 31:c6:8e:87:60:ae:25:cf:06:dc:08:e2:d6:01:7f:7b:27:05: f1:7c:4a:12:ba:73:0c:3b:d8:82:95:f3:be:b3:2f:d3:b8:ef: 9c:0c:3e:4b:77:04:36:0a:e3:a2:00:f7:2c:cc:42:5c:05:5a: 8b:31:d7:5e:0d:69:c9:53:13:42:56:d5:97:8b:d8:31:b3:0e: 0e:ed:b8:be:e1:00:cd:1f:51:28:8f:38:18:c8:a0:ee:17:d7: 97:85:35:2c:c7:f4:a1:d8:12:f2:d2:8a:87:bd:1f:02:2c:1f: fb:c8:2b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjUwNzIxMDM1NjI4WhcNMjUwNzI4MDM1NjI4WjAYMRYwFAYD VQQDEw02ODdkYmE2Yy00MmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+DkGx3LyYyVQIZrT2pTr93Is0mSPjruJFgsNIV81JSWSNVcjhIAP5n2u0OHH Rg5tI96ShW33f/9Unki7Mmo77dEIt5je48ocKe+zgvL7E8WCYenWra77I90A9hd0 vAsQoXaXZW0vjT6DtpaLfclRUakylpd9oAFtiI0eNSdrJSGYJunCQFNqsGH4p9CO jhOWGT1vnDuU26+UAro3zENnfMOEaiJhGwLEs3JeEL2db5hPYCtJMPdtAvFuyTVb vB/M3PTlot9FfSb43f18ICRec3RwVcFJQypIBMHt67ITVTL98cwhLQyej59gnbzR c6jotXfAexTJoXBDLj4pPK1P7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwES5x8 SClMsme6qUYt6KniNT0ZMB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBABoJJOhMg1O7GhbSXlc++He8pExTq1OOtumgdZSJZt9OC5LUVk7gR 8CiNUSN06uKg+zxKSVL+wIyZTyRgmTQsCVBxR1IEt3OzfsLdtNrT+jICHx97k3q1 xoljiUpPl/U2YCupX3cLwZ7hPTE/82qkRlfsDHlTSlr1Ncx2pPIyEygY2U1E+ubB pl7bu2SZ7GUxxo6HYK4lzwbcCOLWAX97JwXxfEoSunMMO9iClfO+sy/TuO+cDD5L dwQ2CuOiAPcszEJcBVqLMddeDWnJUxNCVtWXi9gxsw4O7bi+4QDNH1EojzgYyKDu F9eXhTUsx/Sh2BLy0oqHvR8CLB/7yCtH -----END CERTIFICATE-----Generated at Mon Jul 21 12:38:17 2025 by rpki-client