$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json) Hash identifier: c8naceX+rV9N5L4gWrEpKNamnTwFn/DXZW0yi9Duc1A= Subject key identifier: CF:AF:8B:95:6A:D4:33:65:78:77:4B:FB:6B:FB:3C:6D:AA:25:29:A4 Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft Manifest number: 049E Signing time: Fri 05 Sep 2025 00:16:02 +0000 Manifest this update: Fri 05 Sep 2025 00:16:01 +0000 Manifest next update: Fri 12 Sep 2025 00:16:01 +0000 Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: GO3XdP2D5SLi+LjIOGBYqbXwITkAHPSlgLUMRg3pdvs=) 2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: 9zlcNMp71CcrKhJ6RcgbQ3pW8nUmE/ShM6R3qPGEpIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Validity Not Before: Sep 5 00:16:01 2025 GMT Not After : Sep 12 00:16:01 2025 GMT Subject: CN=68ba2bc1-56a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:f8:4b:be:ce:70:63:97:bd:11:de:5f:d3: 11:32:ee:2b:19:4a:5f:a1:b4:42:25:64:72:70:07: fa:79:1c:5d:bb:6d:fd:0b:70:30:e6:73:6d:ad:d3: d0:23:b8:ae:67:96:47:21:0e:e1:09:5a:1a:dd:43: ad:0f:5f:6e:67:76:f9:eb:93:03:a7:8e:f3:f4:a8: 13:13:96:56:a7:50:a0:0e:43:7c:98:59:56:18:e2: 9e:31:24:c9:4f:3c:63:ee:69:f3:4e:c9:10:73:e1: 15:87:ab:1d:0b:89:70:ed:ea:30:cc:30:f9:5c:35: d7:1f:40:59:1c:77:1a:c1:e3:53:b4:34:2d:2d:ad: 7e:01:43:a4:f3:ac:b1:7d:66:66:fc:04:2b:aa:fc: 3f:8f:fe:bf:31:d2:20:3f:5e:1c:61:dc:80:81:00: 6e:70:f6:9f:bd:3c:7d:7e:b6:32:93:52:9d:9d:f8: 79:57:5f:4d:65:d3:88:a1:02:49:26:c4:d3:02:2a: a6:0d:b9:a7:4e:46:a6:34:a7:d2:04:aa:16:93:31: f5:5d:c7:ee:e2:8f:01:b3:09:f4:2a:cc:1d:fd:e5: c6:b2:a9:f1:cb:fc:7b:32:95:14:70:70:11:32:c1: a3:a2:b5:7c:68:66:77:2b:11:03:b1:2b:43:ea:dc: 65:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AF:8B:95:6A:D4:33:65:78:77:4B:FB:6B:FB:3C:6D:AA:25:29:A4 X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f5:e8:a3:69:b9:19:b8:1b:25:42:f4:42:03:90:47:fb:fe: b8:d0:bc:d1:21:8e:cc:b8:73:59:06:c4:b3:cb:db:3d:7e:74: 5c:9d:fc:05:3a:e7:c4:42:1a:ba:d8:e2:07:df:8f:e1:a9:48: 67:f5:72:1d:01:a5:85:b1:ed:3e:5e:25:ae:5d:3a:a3:bc:d1: 2e:f4:21:73:f8:f7:04:ac:fa:9e:63:e1:90:fb:10:ad:17:f2: ac:66:ae:e4:94:13:f8:31:00:3b:0d:5b:61:12:d5:c7:a1:4b: c9:d2:3b:72:64:0d:9b:0e:dc:64:7d:a2:7d:da:bb:6a:e4:34: ef:c6:25:3c:ee:b9:55:0c:ea:b1:9c:5b:62:5f:63:da:94:8e: 10:92:f5:20:b6:9f:30:80:c1:d9:8d:2c:c8:ea:16:af:81:6b: cf:21:56:1d:02:7a:cc:77:1a:c2:67:53:5d:cc:5a:a0:2d:16: 37:7f:64:9b:18:29:5b:56:9b:07:91:63:bb:28:b9:a8:51:ce: 58:af:1d:fd:01:6c:fa:7d:ef:50:1f:97:0b:fe:f9:b1:a7:b9: 03:d4:b0:94:12:13:c5:a1:de:f2:e1:96:c3:28:77:7a:2d:77: 68:40:aa:51:cc:a5:63:d8:39:a3:c7:77:95:14:3e:0b:82:91: 44:67:e0:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjUwOTA1MDAxNjAxWhcNMjUwOTEyMDAxNjAxWjAYMRYwFAYD VQQDEw02OGJhMmJjMS01NmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZf4S77OcGOXvRHeX9MRMu4rGUpfobRCJWRycAf6eRxdu239C3Aw5nNtrdPQ I7iuZ5ZHIQ7hCVoa3UOtD19uZ3b565MDp47z9KgTE5ZWp1CgDkN8mFlWGOKeMSTJ Tzxj7mnzTskQc+EVh6sdC4lw7eowzDD5XDXXH0BZHHcaweNTtDQtLa1+AUOk86yx fWZm/AQrqvw/j/6/MdIgP14cYdyAgQBucPafvTx9frYyk1Kdnfh5V19NZdOIoQJJ JsTTAiqmDbmnTkamNKfSBKoWkzH1Xcfu4o8Bswn0Kswd/eXGsqnxy/x7MpUUcHAR MsGjorV8aGZ3KxEDsStD6txlvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+vi5Vq 1DNleHdL+2v7PG2qJSmkMB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUI0My9FNUI4Mzk4MjRCM0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1O YVdwY0dwLW5ncDlsSnp5bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi9eijabkZuBslQvRCA5BH+/640LzRIY7MuHNZBsSzy9s9fnRcnfwF OufEQhq62OIH34/hqUhn9XIdAaWFse0+XiWuXTqjvNEu9CFz+PcErPqeY+GQ+xCt F/KsZq7klBP4MQA7DVthEtXHoUvJ0jtyZA2bDtxkfaJ92rtq5DTvxiU87rlVDOqx nFtiX2PalI4QkvUgtp8wgMHZjSzI6havgWvPIVYdAnrMdxrCZ1NdzFqgLRY3f2Sb GClbVpsHkWO7KLmoUc5Yrx39AWz6fe9QH5cL/vmxp7kD1LCUEhPFod7y4ZbDKHd6 LXdoQKpRzKVj2Dmjx3eVFD4LgpFEZ+C3 -----END CERTIFICATE-----Generated at Sat Sep 6 07:09:22 2025 by rpki-client