$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json) Hash identifier: zO8zVA8R4Ks6ENjuEBBKH8Njzy2rpzBqQN2YsfuZC8I= Subject key identifier: E9:C0:D1:4B:56:55:1E:51:44:B2:CF:46:FC:E7:4E:86:DC:7A:A6:6F Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft Manifest number: 82 Signing time: Fri 11 Jul 2025 04:51:16 +0000 Manifest this update: Fri 11 Jul 2025 04:51:16 +0000 Manifest next update: Fri 18 Jul 2025 04:51:16 +0000 Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: +6OmYe8/ZHSQBzzlwPs9AfnyOk2P5Iqg4NJY6Mm30+k=) 2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=) 3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Jul 2025 04:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Validity Not Before: Jul 11 04:51:16 2025 GMT Not After : Jul 18 04:51:16 2025 GMT Subject: CN=68709844-e4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:01:dc:32:b8:c3:d6:cf:e2:ba:3e:53:0c:39: 71:b7:ec:5b:ad:65:24:57:8c:f7:2d:97:44:98:74: 24:08:7a:64:31:bc:4d:d4:79:24:e6:d5:a3:9e:68: b2:b9:74:99:a4:fc:5d:08:53:10:6d:20:8c:5a:33: ce:65:df:ef:7b:80:2e:8e:a4:8c:d7:40:e4:48:61: b7:32:9d:31:0e:f7:dc:0a:35:42:c7:29:1a:f9:b7: 01:10:4e:3d:64:94:58:47:6f:19:ff:95:dd:b2:ab: 37:94:cb:b8:f2:ef:85:80:b2:bc:1a:fc:44:b0:eb: 95:e6:33:14:06:16:4a:d4:5a:89:27:70:06:27:e1: 6f:54:17:fb:87:96:10:b8:08:ec:7d:59:59:ea:98: 78:7e:3c:91:c4:be:27:54:aa:1e:bb:12:b6:66:9b: b8:62:cd:be:85:12:44:1a:20:92:a1:0b:aa:de:b5: 20:bf:d7:b8:88:b9:f8:94:0c:42:06:60:28:37:63: e7:d9:45:d8:8d:d2:3a:e4:a2:c3:49:cb:7d:fd:0b: 6d:76:4b:43:51:51:9b:88:83:98:ea:17:f9:90:5c: 82:47:bc:f2:bd:ff:4c:6e:5e:11:73:dd:34:b4:7b: b7:9c:62:de:bb:29:6c:37:08:31:73:05:ea:2f:67: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C0:D1:4B:56:55:1E:51:44:B2:CF:46:FC:E7:4E:86:DC:7A:A6:6F X509v3 Authority Key Identifier: keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ed:5a:20:8c:ae:4b:4d:f0:60:de:2b:b0:5f:04:45:64:28: 10:c2:8b:9f:d5:dd:7c:ae:cb:5e:c0:4e:b8:62:5d:d0:d8:bc: 6b:96:c9:13:92:d6:41:5d:5a:62:51:88:13:ca:a6:2b:f2:89: 95:8f:33:35:5b:fb:87:49:38:0d:77:71:7d:45:72:e4:9c:b3: 94:96:94:e1:1f:16:9c:3a:46:bf:2f:c0:ad:82:e6:46:78:d7: cc:4b:fd:24:ff:63:8b:cc:62:e7:f7:92:86:63:0e:96:2e:ef: 8d:c9:30:d7:84:72:c7:69:15:fe:a4:f6:c6:8c:d4:da:0b:d1: 3d:d2:09:d3:41:df:84:8e:90:3b:84:44:c2:57:9f:a4:ce:d2: 72:5e:29:65:de:fa:2c:ec:46:61:08:8c:7e:ec:13:3f:e3:88: 0c:81:75:d9:aa:3f:45:c2:d3:fc:b0:10:c3:12:f6:2b:b9:cd: 61:8c:3b:23:0c:9f:ca:80:b0:22:58:7f:b0:11:e2:c2:04:9c: e6:62:8e:03:f2:c5:f6:36:8f:15:0a:2d:58:94:04:62:0c:68: 4c:80:c4:f4:de:0f:ff:e9:77:40:cf:69:31:b8:bd:15:a0:aa: da:4d:50:4d:12:5c:ca:04:19:b1:25:e2:29:c1:ce:e6:b5:f3: fe:60:5e:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCODUxMTAvBgNVBAUTKEM1NTY0REVDMTAxNjYzQkY0M0QzRjJFMzQwMzk0QzAw NzY2QTYzRTMwHhcNMjUwNzExMDQ1MTE2WhcNMjUwNzE4MDQ1MTE2WjAYMRYwFAYD VQQDEw02ODcwOTg0NC1lNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wHcMrjD1s/iuj5TDDlxt+xbrWUkV4z3LZdEmHQkCHpkMbxN1Hkk5tWjnmiy uXSZpPxdCFMQbSCMWjPOZd/ve4AujqSM10DkSGG3Mp0xDvfcCjVCxyka+bcBEE49 ZJRYR28Z/5Xdsqs3lMu48u+FgLK8GvxEsOuV5jMUBhZK1FqJJ3AGJ+FvVBf7h5YQ uAjsfVlZ6ph4fjyRxL4nVKoeuxK2Zpu4Ys2+hRJEGiCSoQuq3rUgv9e4iLn4lAxC BmAoN2Pn2UXYjdI65KLDSct9/QttdktDUVGbiIOY6hf5kFyCR7zyvf9Mbl4Rc900 tHu3nGLeuylsNwgxcwXqL2dq0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnA0UtW VR5RRLLPRvznTobceqZvMB8GA1UdIwQYMBaAFMVWTewQFmO/Q9Py40A5TAB2amPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS9DQ0JCQUJFQTlG NjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3OUQwX0xqUURsTUFIWnFZ LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkI4NS9DQ0JCQUJFQTlGNjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3 OUQwX0xqUURsTUFIWnFZLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh7VogjK5LTfBg3iuwXwRFZCgQwouf1d18rstewE64Yl3Q2LxrlskT ktZBXVpiUYgTyqYr8omVjzM1W/uHSTgNd3F9RXLknLOUlpThHxacOka/L8CtguZG eNfMS/0k/2OLzGLn95KGYw6WLu+NyTDXhHLHaRX+pPbGjNTaC9E90gnTQd+EjpA7 hETCV5+kztJyXill3vos7EZhCIx+7BM/44gMgXXZqj9FwtP8sBDDEvYruc1hjDsj DJ/KgLAiWH+wEeLCBJzmYo4D8sX2No8VCi1YlARiDGhMgMT03g//6XdAz2kxuL0V oKraTVBNElzKBBmxJeIpwc7mtfP+YF4o -----END CERTIFICATE-----Generated at Sat Jul 12 15:40:42 2025 by rpki-client