$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json) Hash identifier: 1XnxckevJRh9PbV/3aor4fLc0GCBozOUQIEeS3tBFg8= Subject key identifier: 6C:AE:B0:FE:D3:E9:AD:E8:88:BF:CC:2F:00:57:FB:EE:CE:0A:43:82 Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft Manifest number: 9F Signing time: Fri 05 Sep 2025 04:34:03 +0000 Manifest this update: Fri 05 Sep 2025 04:34:03 +0000 Manifest next update: Fri 12 Sep 2025 04:34:03 +0000 Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: WWtalQjsPIsr9xgRXyaVvp2mfjqTV8K7Osd2aDJW8Nw=) 2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=) 3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Validity Not Before: Sep 5 04:34:03 2025 GMT Not After : Sep 12 04:34:03 2025 GMT Subject: CN=68ba683b-d826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:8b:34:d3:b5:81:0c:5b:f6:3f:3d:1f:47: ad:42:f7:0a:76:52:29:b9:5a:c4:dd:7d:0e:7c:f7: 8f:dc:ad:2e:5c:8d:e8:62:86:64:9c:d7:e3:62:78: 3f:ee:68:6b:c5:14:47:a3:52:27:1a:70:e0:41:21: ce:6b:cc:82:c7:67:23:04:62:42:87:51:5f:84:39: a3:ef:ac:ff:4b:9c:66:5e:6c:50:7d:1c:76:ea:f6: 9b:8e:5f:67:46:36:5b:a4:cb:9d:35:50:a6:39:6d: 2c:2a:62:81:67:8c:a8:35:12:b9:e0:37:bb:41:cb: 85:9c:39:fe:8b:36:b9:e9:a2:e5:6c:46:5a:57:47: 2c:21:e0:44:04:c5:a9:ed:0a:66:a5:2c:41:0c:43: 10:8e:44:56:32:19:30:dd:ae:11:22:44:93:eb:36: 6e:56:37:6c:42:22:57:d3:90:fe:05:f8:ba:78:78: e1:56:a8:f4:57:6c:53:83:1b:4f:23:20:a8:74:24: 2c:48:53:a7:a4:11:0e:00:f3:4e:26:8a:b3:51:de: 2a:84:26:72:75:50:f7:de:f5:5a:2e:39:81:d8:1b: a6:08:8e:5c:2b:40:5d:f6:2a:75:f4:7a:cc:df:4d: 80:84:57:3d:16:36:14:42:91:e7:68:cd:08:4b:7e: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AE:B0:FE:D3:E9:AD:E8:88:BF:CC:2F:00:57:FB:EE:CE:0A:43:82 X509v3 Authority Key Identifier: keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:0c:11:d5:78:3c:21:7d:c1:86:76:cb:0a:5b:49:34:c5:98: 49:c9:d1:85:d9:2f:07:2a:20:32:88:70:f3:36:73:e5:4f:e9: 96:e4:2e:9e:35:fc:f9:36:93:f2:a7:a5:81:5c:30:f8:96:9e: c4:92:6e:41:05:c0:56:19:8a:c3:30:08:86:0d:10:fe:e2:0e: 8c:96:07:97:42:53:0f:1a:01:3e:08:e7:67:16:05:de:a1:89: ba:90:2c:08:8e:33:bc:01:49:0e:3f:30:d7:4d:0b:d1:ce:15: ac:cf:b5:15:07:f8:20:f4:90:74:a9:3b:72:23:37:65:01:8b: 2c:45:fb:f2:49:b7:13:f3:fe:f9:c2:fd:f0:3d:a2:43:16:c3: d8:25:9a:e4:8a:fe:80:ec:22:95:16:5b:8d:93:76:72:68:42: d3:d9:ae:d2:53:20:40:4b:87:70:e7:17:fa:d3:e5:4a:b2:ce: 2f:19:77:91:06:21:b8:96:3a:3d:e9:ed:c6:88:76:ab:f4:f5: a4:49:51:39:b6:4b:72:33:cc:41:54:75:30:65:7f:2f:24:ae: cd:2e:03:11:0a:34:27:9f:9e:f0:4e:00:90:d0:8a:36:7a:01: 40:54:86:b5:36:c2:2e:b2:42:55:f8:d9:16:29:4c:ad:83:7a: 77:d8:ec:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCODUxMTAvBgNVBAUTKEM1NTY0REVDMTAxNjYzQkY0M0QzRjJFMzQwMzk0QzAw NzY2QTYzRTMwHhcNMjUwOTA1MDQzNDAzWhcNMjUwOTEyMDQzNDAzWjAYMRYwFAYD VQQDEw02OGJhNjgzYi1kODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfGLNNO1gQxb9j89H0etQvcKdlIpuVrE3X0OfPeP3K0uXI3oYoZknNfjYng/ 7mhrxRRHo1InGnDgQSHOa8yCx2cjBGJCh1FfhDmj76z/S5xmXmxQfRx26vabjl9n RjZbpMudNVCmOW0sKmKBZ4yoNRK54De7QcuFnDn+iza56aLlbEZaV0csIeBEBMWp 7QpmpSxBDEMQjkRWMhkw3a4RIkST6zZuVjdsQiJX05D+Bfi6eHjhVqj0V2xTgxtP IyCodCQsSFOnpBEOAPNOJoqzUd4qhCZydVD33vVaLjmB2BumCI5cK0Bd9ip19HrM 302AhFc9FjYUQpHnaM0IS36LNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyusP7T 6a3oiL/MLwBX++7OCkOCMB8GA1UdIwQYMBaAFMVWTewQFmO/Q9Py40A5TAB2amPj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkI4NS9DQ0JCQUJFQTlG NjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3OUQwX0xqUURsTUFIWnFZ LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVktTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkI4NS9DQ0JCQUJFQTlGNjQxMUVGQTkzMTQ3M0NDNEY5QUUwMi94VlpON0JBV1k3 OUQwX0xqUURsTUFIWnFZLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEDBHVeDwhfcGGdssKW0k0xZhJydGF2S8HKiAyiHDzNnPlT+mW5C6e Nfz5NpPyp6WBXDD4lp7Ekm5BBcBWGYrDMAiGDRD+4g6MlgeXQlMPGgE+COdnFgXe oYm6kCwIjjO8AUkOPzDXTQvRzhWsz7UVB/gg9JB0qTtyIzdlAYssRfvySbcT8/75 wv3wPaJDFsPYJZrkiv6A7CKVFluNk3ZyaELT2a7SUyBAS4dw5xf60+VKss4vGXeR BiG4ljo96e3GiHar9PWkSVE5tktyM8xBVHUwZX8vJK7NLgMRCjQnn57wTgCQ0Io2 egFAVIa1NsIuskJV+NkWKUytg3p32Ow1 -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:16 2025 by rpki-client