$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft File: xWFyqoU5BINNkF08MAE0TdKhjp4.mft (raw, json) Hash identifier: OS2GJrdrbjj8eEwn8sjK/ezyhRx6I9uTvyFZYn7aTmU= Subject key identifier: 8C:B0:AD:05:5D:21:E1:02:C1:08:A3:29:0D:16:B6:D4:1B:58:43:90 Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft Manifest number: 01A8 Signing time: Thu 21 Aug 2025 03:23:37 +0000 Manifest this update: Thu 21 Aug 2025 03:23:37 +0000 Manifest next update: Thu 28 Aug 2025 03:23:37 +0000 Files and hashes: 1: xWFyqoU5BINNkF08MAE0TdKhjp4.crl (hash: Fn5HV95kbKw2Wt95j1ci7EVOxZJyxsIG2s3OUQBrcaI=) 2: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (hash: QJic5b/HC6ZO9L9AzouyI1f/AhHlKpyjlXdUDRpV06s=) 3: 6C1CD6A4A16A11EEAC7B012AC4F9AE02.roa (hash: fvrvhYuIB4wEmKs1ycLwW/A4j4ALVpjcmKJeAfUulIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E Validity Not Before: Aug 21 03:23:37 2025 GMT Not After : Aug 28 03:23:37 2025 GMT Subject: CN=68a69139-19ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:88:4f:a9:17:3f:73:f9:f4:a3:3f:0f:06: 01:e7:6a:47:9a:e7:bc:1c:13:1c:a0:05:52:78:4c: 3d:0d:99:9d:0b:37:fa:c7:8d:21:5f:14:8e:90:98: 2a:86:41:2c:7d:ac:43:4b:bd:aa:ee:83:11:24:4b: 3d:62:b1:81:8f:10:6e:3e:b6:6b:cd:93:dd:45:6d: 6f:8d:91:ac:4a:7a:38:38:7c:f8:fe:6a:dd:a2:de: 7b:25:8c:50:31:38:c2:99:06:18:53:02:26:49:ea: c5:7c:ce:c4:4d:10:f3:eb:a1:1e:50:d3:3d:cc:f8: c0:b5:4f:99:b1:e4:cc:c4:d3:2e:07:9e:c3:4f:e9: d5:6c:ea:82:ae:95:26:6d:a0:9e:08:17:45:93:ef: 5d:56:0b:4c:b6:9e:41:2a:21:9f:41:af:3c:68:0f: 1f:0c:1f:77:c0:62:64:dd:4f:ff:8f:d0:98:16:a8: 3c:7a:1b:55:84:4d:94:d5:6e:1e:32:77:5b:41:e2: 3d:cb:b7:b5:fb:0a:4a:d7:44:4f:05:b3:55:e5:03: 8e:3e:8d:2f:8d:ee:3b:a5:79:cf:c1:00:df:03:19: 4f:80:e4:3e:7e:c1:d3:f9:c2:2e:07:36:f5:1b:73: 62:df:14:3e:14:34:00:af:59:18:9b:ef:2e:77:cf: 61:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B0:AD:05:5D:21:E1:02:C1:08:A3:29:0D:16:B6:D4:1B:58:43:90 X509v3 Authority Key Identifier: keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b2:ba:44:5a:19:65:72:9e:4d:6a:7d:cf:c6:40:19:48:2a: 9b:6e:03:ad:09:67:5c:36:9b:4a:3c:26:34:11:d5:d6:ba:97: 69:16:49:7e:ca:c2:3d:c1:e8:24:92:72:26:8a:f0:5b:ca:1c: 22:7c:f8:5f:13:b2:18:7a:e4:4e:d8:b8:ff:14:78:63:88:ad: bf:d4:e8:88:ed:b3:dd:01:8a:5f:92:07:4d:64:05:6b:6c:6a: b5:63:5e:ee:96:9f:5b:38:de:cd:00:6a:28:92:3f:57:da:ae: 0d:f1:c2:51:04:fa:85:8a:99:a4:3f:3a:25:59:4f:99:f6:60: b7:69:c3:02:0f:1b:f0:cc:25:b7:4f:0b:ea:1d:df:a3:18:ab: 76:8a:93:19:5e:eb:10:9c:9f:a1:b2:57:67:05:59:6c:0a:b4: 15:e3:0d:bf:97:03:3f:dd:b2:95:1b:38:02:c3:dc:ab:03:db: 0b:f4:5f:60:0b:5d:a4:68:06:5b:d6:8c:aa:f9:4c:93:4e:09: d4:35:24:89:0a:cc:25:71:21:bf:2d:43:da:a6:de:83:6b:c8: db:da:b3:7a:83:40:ee:59:13:92:4f:13:75:7c:c5:1d:c1:09: 81:eb:72:61:c5:09:f3:91:ce:44:8d:c2:1f:79:8d:ff:36:a0: b7:ab:82:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAzMjExMTAvBgNVBAUTKEM1NjE3MkFBODUzOTA0ODM0RDkwNUQzQzMwMDEzNDRE RDJBMThFOUUwHhcNMjUwODIxMDMyMzM3WhcNMjUwODI4MDMyMzM3WjAYMRYwFAYD VQQDEw02OGE2OTEzOS0xOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdOIT6kXP3P59KM/DwYB52pHmue8HBMcoAVSeEw9DZmdCzf6x40hXxSOkJgq hkEsfaxDS72q7oMRJEs9YrGBjxBuPrZrzZPdRW1vjZGsSno4OHz4/mrdot57JYxQ MTjCmQYYUwImSerFfM7ETRDz66EeUNM9zPjAtU+ZseTMxNMuB57DT+nVbOqCrpUm baCeCBdFk+9dVgtMtp5BKiGfQa88aA8fDB93wGJk3U//j9CYFqg8ehtVhE2U1W4e MndbQeI9y7e1+wpK10RPBbNV5QOOPo0vje47pXnPwQDfAxlPgOQ+fsHT+cIuBzb1 G3Ni3xQ+FDQAr1kYm+8ud89hQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIywrQVd IeECwQijKQ0WttQbWEOQMB8GA1UdIwQYMBaAFMVhcqqFOQSDTZBdPDABNE3SoY6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDMyMS81MkIyRTAxNjAw QzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJTk5rRjA4TUFFMFRkS2hq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hXRnlxb1U1QklOTmtGMDhNQUUwVGRLaGpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDMyMS81MkIyRTAxNjAwQzMxMUVFQTRBQ0NENkVDNEY5QUUwMi94V0Z5cW9VNUJJ Tk5rRjA4TUFFMFRkS2hqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7srpEWhllcp5Nan3PxkAZSCqbbgOtCWdcNptKPCY0EdXWupdpFkl+ ysI9wegkknImivBbyhwifPhfE7IYeuRO2Lj/FHhjiK2/1OiI7bPdAYpfkgdNZAVr bGq1Y17ulp9bON7NAGookj9X2q4N8cJRBPqFipmkPzolWU+Z9mC3acMCDxvwzCW3 TwvqHd+jGKt2ipMZXusQnJ+hsldnBVlsCrQV4w2/lwM/3bKVGzgCw9yrA9sL9F9g C12kaAZb1oyq+UyTTgnUNSSJCswlcSG/LUPapt6Da8jb2rN6g0DuWROSTxN1fMUd wQmB63JhxQnzkc5EjcIfeY3/NqC3q4IG -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:10 2025 by rpki-client