$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json) Hash identifier: QuOaBh7Hr9lVblNajB/ndkMWFsFmPCGiJF2f4sdELIg= Subject key identifier: 59:CE:E2:E0:16:FB:A2:18:8E:D6:FA:D0:D9:66:04:68:AB:B9:2F:77 Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Certificate serial: 0894 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft Manifest number: 17C6 Signing time: Thu 18 Sep 2025 17:45:48 +0000 Manifest this update: Thu 18 Sep 2025 17:45:48 +0000 Manifest next update: Thu 25 Sep 2025 17:45:48 +0000 Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: jBWXSmQBxR7XIzPMmUIa9VC0gT0gZ9PyNKZJ2wXJt6w=) 2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: t2aB2zeGB7GLVJUFKuYwNrlRUrrBiilMq9C3DO3eLYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:45:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2196 (0x894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Validity Not Before: Sep 18 17:45:48 2025 GMT Not After : Sep 25 17:45:48 2025 GMT Subject: CN=68cc454c-9d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:97:2d:21:2c:1c:79:74:21:2c:62:ee:44:ec: 57:68:6d:76:a9:fb:f4:4e:ec:ae:25:51:4d:09:8f: ec:60:f5:f5:ed:5c:67:29:67:80:14:4d:aa:46:b0: 3a:f4:f0:cc:0e:b0:18:8b:46:43:4b:2f:66:67:b7: ae:f0:af:c6:65:f5:87:c5:54:d2:6e:8a:95:1b:75: 2c:b0:bc:a9:b2:98:a3:87:3b:a5:68:14:49:04:22: 43:37:32:e9:58:2f:3c:75:f8:2d:ec:59:d9:a2:10: 91:4e:f5:51:83:de:42:62:65:4c:d9:d1:c7:a8:00: 5f:5e:a3:7c:df:95:10:e2:b8:5b:48:b4:c9:f6:a8: ff:0e:c9:ac:42:7b:b0:1f:d7:fc:69:f5:0e:19:84: 85:02:d2:4f:fe:d7:93:a0:30:bf:44:ba:80:86:c5: bc:c1:5e:2c:8c:c8:81:53:94:19:ef:7a:a7:cb:7b: 32:42:da:ae:0a:92:5f:dd:a7:50:f0:8a:57:a7:bd: 2a:24:07:ed:a6:74:61:e8:3f:6c:9a:06:5b:47:e1: 40:a0:3d:47:34:17:35:ce:7e:af:33:67:3c:7b:46: b6:de:34:d7:c8:57:8f:1a:4f:23:79:1c:73:e1:f5: 1a:99:d8:2e:f3:1c:f8:ed:58:47:ed:0b:f4:46:dc: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CE:E2:E0:16:FB:A2:18:8E:D6:FA:D0:D9:66:04:68:AB:B9:2F:77 X509v3 Authority Key Identifier: keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:52:28:38:f2:39:5c:4f:fe:be:0f:f1:60:a9:11:21:62:cb: 7e:a6:bc:f6:01:f0:3e:4f:a7:27:d3:1b:cb:fd:91:22:9a:61: 01:42:c2:b0:76:20:5f:c2:be:26:c2:c7:4e:73:8c:4e:0b:df: e9:1c:10:df:b3:f7:47:56:2f:7c:35:5e:d3:3d:f0:e1:ab:f1: 94:f6:54:af:ef:5f:b1:0f:d7:be:be:10:37:4e:e6:05:91:a0: 56:f7:23:74:87:44:69:71:cb:45:51:b4:d6:a2:56:2b:8e:f2: 92:f8:3c:66:be:cb:7c:9e:d8:cb:75:2a:e0:b2:2a:7a:26:68: da:4b:9d:4a:1f:75:43:dd:bf:7e:c7:e8:35:76:09:b8:6c:12: 34:07:ac:c8:0f:10:79:67:a4:73:c3:d0:1c:e5:ab:b4:0d:a5: db:02:de:7f:4a:ab:e4:9e:2b:fa:21:b9:14:af:a2:4e:ad:c3: da:de:57:f5:6d:32:50:b5:e1:03:38:51:d9:7b:68:88:b7:32: 2c:1a:82:9d:66:ee:79:1f:24:fd:2e:22:28:ba:1f:15:84:91: cb:66:91:1e:bd:8f:f0:7e:cc:53:48:ca:41:4a:95:10:5f:3f: 55:69:2f:a9:87:d5:20:a7:30:81:33:dd:ee:46:4d:59:13:85: 64:47:a2:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKDVDRTU5QkVBNDA0OTNGQ0M1NzQ2NzE2OTIyRjE5ODhE OTYyOTFGQkUwHhcNMjUwOTE4MTc0NTQ4WhcNMjUwOTI1MTc0NTQ4WjAYMRYwFAYD VQQDEw02OGNjNDU0Yy05ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZctISwceXQhLGLuROxXaG12qfv0TuyuJVFNCY/sYPX17VxnKWeAFE2qRrA6 9PDMDrAYi0ZDSy9mZ7eu8K/GZfWHxVTSboqVG3UssLypspijhzulaBRJBCJDNzLp WC88dfgt7FnZohCRTvVRg95CYmVM2dHHqABfXqN835UQ4rhbSLTJ9qj/DsmsQnuw H9f8afUOGYSFAtJP/teToDC/RLqAhsW8wV4sjMiBU5QZ73qny3syQtquCpJf3adQ 8IpXp70qJAftpnRh6D9smgZbR+FAoD1HNBc1zn6vM2c8e0a23jTXyFePGk8jeRxz 4fUamdgu8xz47VhH7Qv0Rtx+HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnO4uAW +6IYjtb60NlmBGiruS93MB8GA1UdIwQYMBaAFFzlm+pAST/MV0ZxaSLxmI2WKR++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4eFhSbkZwSXZHWWpaWXBI NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPV2I2a0JKUDh4WFJuRnBJdkdZalpZcEg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4 eFhSbkZwSXZHWWpaWXBINzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdUig48jlcT/6+D/FgqREhYst+prz2AfA+T6cn0xvL/ZEimmEBQsKw diBfwr4mwsdOc4xOC9/pHBDfs/dHVi98NV7TPfDhq/GU9lSv71+xD9e+vhA3TuYF kaBW9yN0h0RpcctFUbTWolYrjvKS+Dxmvst8ntjLdSrgsip6JmjaS51KH3VD3b9+ x+g1dgm4bBI0B6zIDxB5Z6Rzw9Ac5au0DaXbAt5/Sqvkniv6IbkUr6JOrcPa3lf1 bTJQteEDOFHZe2iItzIsGoKdZu55HyT9LiIouh8VhJHLZpEevY/wfsxTSMpBSpUQ Xz9VaS+ph9UgpzCBM93uRk1ZE4VkR6Jg -----END CERTIFICATE-----Generated at Fri Sep 19 02:30:27 2025 by rpki-client