$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft File: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft (raw, json) Hash identifier: V7xENNjXZ8XLiCcJnuhbs/nvkgf55P+Qer8N78BKjp8= Subject key identifier: 07:57:D2:AB:7D:16:1A:12:44:54:4A:19:7E:C7:1E:21:AD:55:FD:CA Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48 Certificate issuer: /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft Manifest number: 02 Signing time: Sat 05 Jul 2025 13:19:58 +0000 Manifest this update: Sat 05 Jul 2025 13:19:57 +0000 Manifest next update: Sat 12 Jul 2025 13:19:57 +0000 Files and hashes: 1: XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl (hash: +P1kL0DSNwdS9ZxyqK4wwNTX4pWagi6N7tB6EvQW0DA=) 2: BD71164A59A211F09EC86C38C4F9AE02.roa (hash: LzVxtpFkoDUrbmBrIAWx2A82oGmfgpKdIsb6/8/yXfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 13:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348 Validity Not Before: Jul 5 13:19:57 2025 GMT Not After : Jul 12 13:19:57 2025 GMT Subject: CN=6869267e-c549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:33:e1:26:28:3f:1a:ee:39:97:dd:86:ab:7b: 49:db:87:27:3f:ae:13:c5:8b:e7:a9:e7:ae:f4:d7: 1d:28:ae:71:04:fb:65:80:75:ec:51:c1:01:f1:f6: a4:95:83:de:03:50:fe:dc:03:2e:d5:25:19:be:fa: 65:7f:0a:94:ee:3b:fb:48:cd:31:d2:50:ff:30:70: 40:40:18:90:5f:a3:ce:47:e1:82:c9:46:5d:71:77: 92:64:61:1b:57:ec:1e:8a:1c:ce:d8:fc:f2:5d:24: 5f:8e:a5:42:c5:08:c7:62:b8:73:a7:7f:f8:91:ff: cf:a8:17:fb:09:c8:b8:47:d7:9e:0d:47:3b:8c:67: c0:c5:40:06:80:9b:af:e9:b5:a4:a1:7f:e1:8d:cf: be:37:77:3c:7e:50:9b:03:5c:4a:8f:00:6f:b5:0e: 7d:79:1c:6d:e5:c6:58:48:43:c5:d1:94:77:14:46: bc:8b:15:c5:b8:31:6e:cb:ab:95:e8:9c:5c:54:82: 88:ea:69:97:4d:d1:35:d0:b0:a7:6d:e6:2e:41:3f: 0c:b4:83:35:06:15:78:a2:16:f0:33:2f:ee:09:cb: c5:1a:93:7a:7b:89:f0:c5:94:50:3a:e4:00:5e:67: 65:7f:e0:58:0e:38:09:44:76:67:a0:cf:28:96:d3: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:57:D2:AB:7D:16:1A:12:44:54:4A:19:7E:C7:1E:21:AD:55:FD:CA X509v3 Authority Key Identifier: keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:01:38:69:a7:c2:c8:50:e2:a3:1d:f8:83:17:99:41:b4:a3: 1c:41:ef:22:b9:6d:17:62:40:53:d0:ca:f4:85:04:bf:80:9b: 48:f1:0b:16:07:aa:3c:c7:67:de:fa:c8:f1:04:17:86:69:cd: 39:c1:3c:af:f1:11:0f:7b:49:da:19:12:6a:74:8c:a3:3f:d7: bd:8c:54:61:0a:04:c9:13:eb:18:54:bf:1d:f0:9e:62:77:05: 78:f3:d0:aa:2e:40:8f:db:64:69:e6:39:15:a3:1f:6a:6c:26: 83:ab:53:a5:14:9a:df:d6:c2:29:46:7b:ca:a5:c6:bb:56:3f: cf:f4:98:ba:db:5a:24:b0:a7:4b:2c:9f:7d:56:c5:df:07:f7: 66:f0:47:d3:a4:46:32:dd:be:48:28:ba:e3:12:16:2d:57:1e: 9c:13:08:4e:dd:db:ed:e7:a4:a2:48:68:fb:17:b9:9e:8a:4b: 36:84:f9:a2:d9:c5:26:fd:a9:dd:92:5f:3a:7a:c9:03:cc:fe: f6:23:da:30:f3:3e:62:9b:bd:5e:50:d2:1d:29:ac:ff:94:64: 8c:5b:9d:9d:f9:51:2b:2f:35:a0:b0:8f:25:21:1b:8d:47:02: ef:63:fc:dc:0d:1c:64:37:41:cc:06:ee:9c:b7:1f:15:03:b5: 0f:f2:26:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjM3MjExMC8GA1UEBRMoNUU2MEI4NERCOTFCNkMwODY1MDIwQ0UwRjIwNkM1MzQ5 RTRCODM0ODAeFw0yNTA3MDUxMzE5NTdaFw0yNTA3MTIxMzE5NTdaMBgxFjAUBgNV BAMTDTY4NjkyNjdlLWM1NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYM+EmKD8a7jmX3Yare0nbhyc/rhPFi+ep56701x0ornEE+2WAdexRwQHx9qSV g94DUP7cAy7VJRm++mV/CpTuO/tIzTHSUP8wcEBAGJBfo85H4YLJRl1xd5JkYRtX 7B6KHM7Y/PJdJF+OpULFCMdiuHOnf/iR/8+oF/sJyLhH154NRzuMZ8DFQAaAm6/p taShf+GNz743dzx+UJsDXEqPAG+1Dn15HG3lxlhIQ8XRlHcURryLFcW4MW7Lq5Xo nFxUgojqaZdN0TXQsKdt5i5BPwy0gzUGFXiiFvAzL+4Jy8Uak3p7ifDFlFA65ABe Z2V/4FgOOAlEdmegzyiW07wDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB1fSq30W GhJEVEoZfsceIa1V/cowHwYDVR0jBBgwFoAUXmC4TbkbbAhlAgzg8gbFNJ5Lg0gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MzcyL0U2RDk1MjYwNTlB MDExRjA4Mjg2RDMzMkM0RjlBRTAyL1htQzRUYmtiYkFobEFnemc4Z2JGTko1TGcw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWG1DNFRia2JiQWhsQWd6ZzhnYkZOSjVMZzBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 MzcyL0U2RDk1MjYwNTlBMDExRjA4Mjg2RDMzMkM0RjlBRTAyL1htQzRUYmtiYkFo bEFnemc4Z2JGTko1TGcwZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI8BOGmnwshQ4qMd+IMXmUG0oxxB7yK5bRdiQFPQyvSFBL+Am0jxCxYH qjzHZ976yPEEF4ZpzTnBPK/xEQ97SdoZEmp0jKM/172MVGEKBMkT6xhUvx3wnmJ3 BXjz0KouQI/bZGnmORWjH2psJoOrU6UUmt/WwilGe8qlxrtWP8/0mLrbWiSwp0ss n31Wxd8H92bwR9OkRjLdvkgouuMSFi1XHpwTCE7d2+3npKJIaPsXuZ6KSzaE+aLZ xSb9qd2SXzp6yQPM/vYj2jDzPmKbvV5Q0h0prP+UZIxbnZ35USsvNaCwjyUhG41H Au9j/NwNHGQ3QcwG7py3HxUDtQ/yJs0= -----END CERTIFICATE-----Generated at Mon Jul 7 09:30:08 2025 by rpki-client