$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: CLmBDm8XpZgwXGqjuHhO8SiFkLFtOEeu+SD6qEL+Wmo= Subject key identifier: 09:28:1E:FA:CA:F5:6B:5B:E3:F6:A1:BB:82:C6:85:CF:14:F0:4E:D2 Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 07EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 07E6 Signing time: Mon 08 Sep 2025 21:03:44 +0000 Manifest this update: Mon 08 Sep 2025 21:03:44 +0000 Manifest next update: Mon 15 Sep 2025 21:03:44 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: pAlKbZMBoVkn4pWsVjUvxYFPCzt6Cn/WhqmeV+XjWMo=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: pS3E0icAhyYawyxkXSLUFbWuAzA0NV/jlalvE1DTh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 21:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Sep 8 21:03:44 2025 GMT Not After : Sep 15 21:03:44 2025 GMT Subject: CN=68bf44b0-814b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:da:9c:1f:6f:d0:9d:b3:8f:1f:60:a3:03: de:44:2d:e0:e6:08:d8:48:b4:a0:1c:ae:29:39:90: d3:1a:c1:e5:4c:77:b5:52:7a:25:8d:6c:0a:c7:09: da:20:bb:79:ef:b6:0a:4e:fa:81:cd:8b:ba:80:61: 83:46:38:b7:ea:31:0d:46:da:26:36:5a:66:a7:a6: 78:28:53:ee:57:f1:6d:82:65:60:a0:e9:f1:2f:7e: 06:c3:8b:cf:e7:5e:6c:77:4a:66:44:34:37:23:b6: 0d:77:38:92:7e:0d:d0:51:e4:22:af:e9:47:ed:f1: 27:ab:c4:c8:66:9f:c7:93:e1:5b:b5:25:95:06:ff: 9c:85:26:09:3a:58:df:26:b3:cf:1f:f4:07:5f:86: ff:ab:69:ec:79:8b:8b:b5:4a:44:df:d7:e8:43:df: 8c:aa:07:5a:86:ae:8e:0b:7b:ef:58:a2:9b:51:c7: 3a:40:60:14:fa:d4:37:a9:d5:b0:10:78:bf:47:08: 6a:16:12:ab:c3:c3:5f:7b:36:34:3f:01:ae:64:c4: dc:89:bb:0c:2f:dc:6f:b1:e0:61:bb:68:f8:a6:8c: 0a:18:d5:76:4b:9f:a7:2b:e7:cb:a1:2e:09:09:dc: 9c:d4:98:9f:e4:d5:a2:7d:06:31:6a:93:d0:77:19: d7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:28:1E:FA:CA:F5:6B:5B:E3:F6:A1:BB:82:C6:85:CF:14:F0:4E:D2 X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:f1:83:71:3b:94:b1:cc:46:32:ee:0d:a7:b0:29:54:1d:74: 89:e2:9b:9f:ab:be:90:0e:4a:79:c8:95:0a:66:64:20:a1:59: 89:40:75:4d:09:92:3c:f3:d2:58:84:4c:24:e0:ce:ca:e1:69: 3b:70:91:c0:0d:1d:90:52:09:83:e4:a9:8b:7b:34:25:08:d7: 60:2e:fc:1a:e4:21:1c:0b:c0:e0:f9:95:0d:e4:56:49:3a:ca: c9:6e:d1:d9:79:1f:81:e9:b2:d2:31:42:b3:41:c0:ce:70:87: 47:1c:a3:0d:f9:48:36:7e:6d:d1:3f:75:c0:a2:01:73:91:ea: 26:e1:2e:14:7a:69:6b:91:2c:65:08:f8:92:4a:8f:11:6f:93: 4f:27:6c:2c:af:7a:9c:1c:ed:8b:43:cb:f8:6a:8f:9d:ea:f2: 68:47:53:ee:46:93:4a:d0:f3:75:cb:be:45:dc:de:2a:b1:e1: af:31:33:ac:2c:a0:9e:c5:a4:e4:d6:3c:17:9c:1b:66:0f:f0: 79:8a:a9:f0:e1:2f:6f:d2:13:d6:fe:e9:d7:83:00:fa:28:62: 6d:21:a8:8f:e0:bf:14:ca:69:13:ba:6f:5c:22:fd:56:50:70: f6:17:f7:36:a3:ec:7a:cd:56:b3:88:c7:71:70:18:05:e8:a4: e4:8d:cb:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUwOTA4MjEwMzQ0WhcNMjUwOTE1MjEwMzQ0WjAYMRYwFAYD VQQDEw02OGJmNDRiMC04MTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNfanB9v0J2zjx9gowPeRC3g5gjYSLSgHK4pOZDTGsHlTHe1UnoljWwKxwna ILt577YKTvqBzYu6gGGDRji36jENRtomNlpmp6Z4KFPuV/FtgmVgoOnxL34Gw4vP 515sd0pmRDQ3I7YNdziSfg3QUeQir+lH7fEnq8TIZp/Hk+FbtSWVBv+chSYJOljf JrPPH/QHX4b/q2nseYuLtUpE39foQ9+Mqgdahq6OC3vvWKKbUcc6QGAU+tQ3qdWw EHi/RwhqFhKrw8NfezY0PwGuZMTcibsML9xvseBhu2j4powKGNV2S5+nK+fLoS4J Cdyc1Jif5NWifQYxapPQdxnXvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkoHvrK 9Wtb4/ahu4LGhc8U8E7SMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJ8YNxO5SxzEYy7g2nsClUHXSJ4pufq76QDkp5yJUKZmQgoVmJQHVN CZI889JYhEwk4M7K4Wk7cJHADR2QUgmD5KmLezQlCNdgLvwa5CEcC8Dg+ZUN5FZJ OsrJbtHZeR+B6bLSMUKzQcDOcIdHHKMN+Ug2fm3RP3XAogFzkeom4S4UemlrkSxl CPiSSo8Rb5NPJ2wsr3qcHO2LQ8v4ao+d6vJoR1PuRpNK0PN1y75F3N4qseGvMTOs LKCexaTk1jwXnBtmD/B5iqnw4S9v0hPW/unXgwD6KGJtIaiP4L8UymkTum9cIv1W UHD2F/c2o+x6zVaziMdxcBgF6KTkjct5 -----END CERTIFICATE-----Generated at Wed Sep 10 07:07:10 2025 by rpki-client