$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: 37jVwdc/8L0Xd7vVqWkLWy1MMWCm6x0f+nWfV8GsS8A= Subject key identifier: 04:7C:6F:2D:0B:8A:E9:2B:F8:28:9C:4B:93:61:C6:9D:98:D3:3D:31 Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 5F Signing time: Sat 19 Jul 2025 07:22:23 +0000 Manifest this update: Sat 19 Jul 2025 07:22:23 +0000 Manifest next update: Sat 26 Jul 2025 07:22:22 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: qwmvaogu/VKQWuCXSdM9+jcHsFNhUjLN+6xaAxYVUns=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Jul 19 07:22:23 2025 GMT Not After : Jul 26 07:22:22 2025 GMT Subject: CN=687b47af-c957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:72:3e:20:71:10:66:ca:64:3f:3f:57:c5: 2b:9e:35:0f:47:9d:56:00:78:8d:7b:e5:02:85:02: ef:23:92:9d:3f:ea:37:12:70:cb:0f:da:a2:a2:f7: 4f:be:10:49:66:82:ad:00:b6:79:d8:0d:fa:b7:f1: 21:c5:ed:49:91:24:c7:b4:98:8c:ab:a3:a8:e9:3a: 19:79:6b:d8:59:e2:da:57:25:dc:82:01:5b:32:96: 63:04:fb:05:6f:b6:ca:77:9e:7c:9b:fe:62:23:1a: 05:8f:ba:7c:8d:a8:7a:0e:85:67:8c:91:d6:12:56: d9:3d:49:7b:80:b6:14:21:c0:e4:6f:0e:86:9c:94: c6:d3:92:3b:4e:d4:3e:52:de:c7:86:ed:9a:ab:2c: 62:93:12:2d:37:90:b3:82:2e:f6:85:d8:9c:cd:c8: d4:ca:6b:36:7b:f8:14:eb:84:e9:c1:c1:a7:38:87: 40:2f:12:49:cf:3a:c1:14:1f:11:e6:fb:01:d3:c7: bb:72:4f:98:36:1b:2f:47:58:3c:93:6c:6a:ee:35: 83:b0:58:cd:49:a3:86:ba:ce:1b:54:51:0b:6e:3d: 9b:f8:38:4d:ce:c3:c6:00:9d:81:da:c5:da:ef:74: ef:58:10:62:da:cf:38:d6:55:7b:b2:76:80:06:18: 24:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7C:6F:2D:0B:8A:E9:2B:F8:28:9C:4B:93:61:C6:9D:98:D3:3D:31 X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:8b:0c:07:23:10:23:46:06:c1:09:8d:95:dd:38:37:34:40: 1a:f0:4d:62:2b:5e:d4:14:b5:50:98:37:ba:95:0f:5e:1c:d6: 1a:7f:0c:04:f3:3e:84:09:ad:7d:94:de:66:f0:a8:62:2e:02: 2c:6e:d4:12:3b:ef:7d:30:bc:87:74:49:59:5d:90:40:36:f5: 9b:22:2a:7a:8a:57:fa:d5:1b:7a:aa:18:b4:77:b2:33:e6:5e: 1b:d8:da:60:a8:45:6e:54:a3:1b:55:af:18:33:0a:f3:04:1c: 07:9a:d1:ed:11:2b:ba:02:4e:97:b9:f8:ae:f3:7a:17:0a:99: 9b:99:75:8c:28:b6:88:81:1e:95:85:29:0f:27:fd:0a:bc:67: e6:1c:0e:72:a2:10:38:84:0e:cb:60:0b:af:ef:34:04:fb:0f: c1:95:b9:22:99:0d:ce:9a:88:bc:34:08:f6:47:c0:77:c5:ad: 05:57:c4:f5:b0:2c:83:15:00:27:e9:7c:2c:81:b0:8f:ef:81: 1c:ff:02:3c:0f:ae:2e:44:ad:00:f4:87:20:e4:6b:ae:90:56: 78:4c:84:c8:12:77:2a:2c:c1:01:1f:98:41:1c:fb:da:a5:cc: 26:11:1e:80:9c:21:75:82:a6:07:12:39:0b:41:25:a1:35:b0: 1b:8b:89:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThFQkM4MUYwNjI1 QjI5MzE2MDAeFw0yNTA3MTkwNzIyMjNaFw0yNTA3MjYwNzIyMjJaMBgxFjAUBgNV BAMTDTY4N2I0N2FmLWM5NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+xHI+IHEQZspkPz9XxSueNQ9HnVYAeI175QKFAu8jkp0/6jcScMsP2qKi90++ EElmgq0AtnnYDfq38SHF7UmRJMe0mIyro6jpOhl5a9hZ4tpXJdyCAVsylmME+wVv tsp3nnyb/mIjGgWPunyNqHoOhWeMkdYSVtk9SXuAthQhwORvDoaclMbTkjtO1D5S 3seG7ZqrLGKTEi03kLOCLvaF2JzNyNTKazZ7+BTrhOnBwac4h0AvEknPOsEUHxHm +wHTx7tyT5g2Gy9HWDyTbGruNYOwWM1Jo4a6zhtUUQtuPZv4OE3Ow8YAnYHaxdrv dO9YEGLazzjWVXuydoAGGCRHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBHxvLQuK 6Sv4KJxLk2HGnZjTPTEwHwYDVR0jBBgwFoAUXv3pjE+/jRGHtoWOvIHwYlspMWAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzIwQkUxQTMwRDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1X QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHYzcGpFLV9qUkdIdG9XT3ZJSHdZbHNwTVdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzIwQkUxQTMwRDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJH SHRvV092SUh3WWxzcE1XQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACmLDAcjECNGBsEJjZXdODc0QBrwTWIrXtQUtVCYN7qVD14c1hp/DATz PoQJrX2U3mbwqGIuAixu1BI7730wvId0SVldkEA29ZsiKnqKV/rVG3qqGLR3sjPm XhvY2mCoRW5UoxtVrxgzCvMEHAea0e0RK7oCTpe5+K7zehcKmZuZdYwotoiBHpWF KQ8n/Qq8Z+YcDnKiEDiEDstgC6/vNAT7D8GVuSKZDc6aiLw0CPZHwHfFrQVXxPWw LIMVACfpfCyBsI/vgRz/AjwPri5ErQD0hyDka66QVnhMhMgSdyoswQEfmEEc+9ql zCYRHoCcIXWCpgcSOQtBJaE1sBuLiUY= -----END CERTIFICATE-----Generated at Sun Jul 20 03:15:59 2025 by rpki-client