$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: 1AmSwaXckNY534gUPRj+e1et4ilWQl9Mx4ShIprNZW0= Subject key identifier: 96:3C:89:EA:8F:89:73:4A:8D:D4:4C:AD:1E:BF:4F:0F:9D:63:7E:7D Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 236F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 2355 Signing time: Fri 18 Jul 2025 15:56:28 +0000 Manifest this update: Fri 18 Jul 2025 15:56:27 +0000 Manifest next update: Fri 25 Jul 2025 15:56:27 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: CEw9UiAJyh/ybQJu4Pv95NzvL2fxcTXr67ONsx0wahw=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: SVFtlSzgsbl94LKJE/MqOpvXoyEaSOVfShQjoppkD5M=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: SmF6p3k95KsM+SMEI2F1sl2qA3ioWO3N9renwiZgrBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9071 (0x236f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: Jul 18 15:56:27 2025 GMT Not After : Jul 25 15:56:27 2025 GMT Subject: CN=687a6eac-245f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:a9:61:e5:50:00:6f:0c:c6:08:15:7c:2d: a4:7c:f7:01:11:01:67:19:92:de:6a:e9:c3:a9:91: e9:4f:02:ed:9c:15:fb:a5:17:b2:b8:ca:8a:af:19: 71:81:11:97:6b:8f:1c:63:d7:54:98:6b:da:b9:91: 46:35:c2:64:05:fb:91:9e:0d:8c:8e:92:fd:73:2e: ea:9e:71:75:f0:e3:77:4e:78:76:1e:57:c6:c2:36: 6d:34:bf:34:b6:d0:d5:12:fa:61:fc:7a:37:ac:c9: 69:40:91:c5:80:e5:10:32:67:08:4b:52:7c:bb:64: a7:e7:02:e2:a9:ac:a9:02:e3:ec:c5:df:78:29:af: 9d:d7:68:86:4c:73:c6:92:c5:b1:aa:7c:9d:1d:50: a8:bd:86:83:ef:ec:f4:97:6d:a4:2c:0d:20:f4:5f: 44:de:1c:ea:7a:27:b4:3e:73:75:07:40:76:70:ef: 75:13:fc:e8:c8:62:93:e0:d4:e8:94:13:c5:c4:35: da:40:a5:3e:54:2d:1f:63:58:48:d0:85:c6:76:df: 74:a7:ac:fd:aa:e6:3f:7b:fa:1e:aa:7b:8b:07:e2: fa:88:6b:fe:db:b9:22:f5:d2:a6:9f:35:25:58:e2: bc:60:ff:b5:97:c1:8d:ac:1e:82:a7:d6:bb:3a:c6: 77:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3C:89:EA:8F:89:73:4A:8D:D4:4C:AD:1E:BF:4F:0F:9D:63:7E:7D X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d6:21:cf:75:7b:45:48:f9:31:b8:04:5f:75:29:40:d8:0a: db:68:8f:be:09:4c:2b:c9:5d:fc:a0:6b:e6:fc:d2:d5:03:a2: ce:a8:3e:a9:c5:59:a6:9c:24:b7:b2:1f:00:5d:21:8d:6d:91: a3:17:5b:c0:70:11:ec:c8:da:f3:ce:47:84:c6:7a:70:17:e7: 34:5d:f9:be:cd:39:cb:61:8c:c3:c5:16:0b:47:4a:3b:07:4b: d5:c3:78:0e:17:d7:94:38:bb:b1:dc:67:e9:28:d4:d9:11:9f: 6d:55:9d:e8:91:00:02:87:45:3b:78:4d:fd:12:d7:db:7f:85: f5:a8:25:ba:f6:4f:eb:50:37:61:10:a4:56:e3:12:9c:55:c5: c9:a0:4d:82:6b:09:37:5b:e6:9f:be:5c:10:54:5b:b2:31:01: 26:43:78:3e:20:6e:4b:9b:9a:bc:56:45:d1:9d:8a:c7:50:ba: 36:07:49:b5:5d:ea:c0:f4:c5:ab:af:4b:8b:29:00:76:f1:1f: 13:72:73:58:c1:d9:30:c1:84:dd:2d:42:54:89:fa:d3:fa:12: 5f:13:d9:94:f2:6c:7d:a2:f4:c7:3f:09:76:df:56:38:ba:02: 29:47:95:1a:90:40:ad:d5:03:ec:3d:48:a9:17:37:4c:a0:44: 77:e4:03:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjUwNzE4MTU1NjI3WhcNMjUwNzI1MTU1NjI3WjAYMRYwFAYD VQQDEw02ODdhNmVhYy0yNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvypYeVQAG8MxggVfC2kfPcBEQFnGZLeaunDqZHpTwLtnBX7pReyuMqKrxlx gRGXa48cY9dUmGvauZFGNcJkBfuRng2MjpL9cy7qnnF18ON3Tnh2HlfGwjZtNL80 ttDVEvph/Ho3rMlpQJHFgOUQMmcIS1J8u2Sn5wLiqaypAuPsxd94Ka+d12iGTHPG ksWxqnydHVCovYaD7+z0l22kLA0g9F9E3hzqeie0PnN1B0B2cO91E/zoyGKT4NTo lBPFxDXaQKU+VC0fY1hI0IXGdt90p6z9quY/e/oeqnuLB+L6iGv+27ki9dKmnzUl WOK8YP+1l8GNrB6Cp9a7OsZ3ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJY8ieqP iXNKjdRMrR6/Tw+dY359MB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX1iHPdXtFSPkxuARfdSlA2ArbaI++CUwryV38oGvm/NLVA6LOqD6p xVmmnCS3sh8AXSGNbZGjF1vAcBHsyNrzzkeExnpwF+c0Xfm+zTnLYYzDxRYLR0o7 B0vVw3gOF9eUOLux3GfpKNTZEZ9tVZ3okQACh0U7eE39Etfbf4X1qCW69k/rUDdh EKRW4xKcVcXJoE2Cawk3W+afvlwQVFuyMQEmQ3g+IG5Lm5q8VkXRnYrHULo2B0m1 XerA9MWrr0uLKQB28R8TcnNYwdkwwYTdLUJUifrT+hJfE9mU8mx9ovTHPwl231Y4 ugIpR5UakECt1QPsPUipFzdMoER35APM -----END CERTIFICATE-----Generated at Sun Jul 20 02:49:04 2025 by rpki-client