$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json) Hash identifier: t125t/wgrnfr8scwZIB3Pd7j/t1UHlwIxV/MJL7r2LQ= Subject key identifier: 1C:C4:54:51:32:17:03:0C:31:B4:F9:34:AC:E5:EE:2E:11:64:B8:14 Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft Manifest number: 0111 Signing time: Wed 17 Sep 2025 05:31:46 +0000 Manifest this update: Wed 17 Sep 2025 05:31:45 +0000 Manifest next update: Wed 24 Sep 2025 05:31:45 +0000 Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: c5XYPiXwizttrXHed44mZDdl+rm+nETkVga2V3rqXGE=) 2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: 7SbZ0PPfP01/krVCYjuDJBwjpFWYv8lnua4LUAxlPx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Validity Not Before: Sep 17 05:31:45 2025 GMT Not After : Sep 24 05:31:45 2025 GMT Subject: CN=68ca47c2-5991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:b0:4f:49:49:e6:aa:ec:4f:a6:7f:66:2e: 6b:07:be:99:49:87:60:3b:f0:6c:87:61:87:62:81: 39:cb:e8:ad:89:b8:95:ac:dc:68:2f:a8:ef:a7:3a: f9:f1:ee:7f:02:43:b8:6a:6f:db:a3:35:1f:68:3e: 9e:c1:11:39:dc:61:fc:fe:99:5d:4d:87:7c:50:55: 74:44:dd:79:a9:8b:9b:e3:01:52:d2:72:d1:69:93: e1:28:53:16:b9:1b:ab:a9:f5:af:86:c0:f5:4d:d9: fa:e2:83:37:86:c5:2d:77:17:2d:c6:c1:6b:f7:21: c6:c9:a4:08:e7:17:eb:7f:6b:67:c0:58:d0:7a:09: af:ad:79:7b:bd:2f:f3:87:5d:f5:02:c7:98:b3:ff: 06:72:74:3b:54:57:a0:a3:d9:aa:fe:f2:2b:e0:de: 1f:2f:b0:c0:b2:9c:ca:19:29:c9:c3:13:e0:5f:80: 25:bf:80:2e:85:50:34:2f:35:fe:4b:8f:1c:1f:26: e2:2e:d3:56:90:03:f8:2d:1a:7a:82:51:d6:2a:46: 0f:41:85:48:1a:d4:29:c5:b3:87:de:ab:3c:6a:1e: 93:ea:c6:8e:a3:67:c7:78:b1:75:cd:92:82:b3:9e: b6:85:a4:bf:94:fd:c4:67:1d:68:7a:e5:f3:f4:4c: 4d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C4:54:51:32:17:03:0C:31:B4:F9:34:AC:E5:EE:2E:11:64:B8:14 X509v3 Authority Key Identifier: keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:60:2e:b3:0a:7d:ac:90:35:0a:24:ff:ee:08:81:aa:6f:41: 62:f1:71:f4:6f:f0:48:00:fa:6b:3e:1b:62:f3:4a:10:67:96: f0:b8:8d:c6:50:c9:c2:34:07:e5:b2:ff:3c:a5:d9:5d:e6:d6: ac:a7:96:c0:56:dd:ac:5e:33:f2:25:73:22:dc:22:ab:4d:95: d4:4f:f5:80:e3:31:16:52:f1:f6:bb:ef:f2:4d:75:e1:ab:0d: 8b:62:35:2e:39:f1:af:de:f5:58:1f:b8:89:3f:00:dd:16:b6: 93:19:99:a9:76:d6:c2:07:9e:e3:81:a7:24:90:d6:af:67:39: d5:b0:cd:97:9c:a2:93:06:19:d7:f7:e2:69:44:3f:7c:c5:2b: ae:c8:7c:54:8b:05:de:b3:73:a3:1b:7b:8c:98:80:85:73:eb: 1d:e5:56:af:16:7a:27:5a:9b:e8:3d:94:f9:30:5b:10:44:78: b6:78:7f:87:96:9e:14:17:2f:80:a0:66:55:3b:45:6f:e3:cc: 8e:a8:16:ec:db:fe:cf:fe:ee:63:7b:14:a7:03:6b:cf:94:bb: 18:ac:cd:cf:64:22:b7:1a:44:09:ad:0c:93:27:41:35:3e:76: 2b:50:7d:b5:64:da:bc:1b:70:3d:15:c6:83:17:6c:b6:1f:a3: a0:be:9c:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy MTg1MzBDNjUwHhcNMjUwOTE3MDUzMTQ1WhcNMjUwOTI0MDUzMTQ1WjAYMRYwFAYD VQQDEw02OGNhNDdjMi01OTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdywT0lJ5qrsT6Z/Zi5rB76ZSYdgO/Bsh2GHYoE5y+itibiVrNxoL6jvpzr5 8e5/AkO4am/bozUfaD6ewRE53GH8/pldTYd8UFV0RN15qYub4wFS0nLRaZPhKFMW uRurqfWvhsD1Tdn64oM3hsUtdxctxsFr9yHGyaQI5xfrf2tnwFjQegmvrXl7vS/z h131AseYs/8GcnQ7VFego9mq/vIr4N4fL7DAspzKGSnJwxPgX4Alv4AuhVA0LzX+ S48cHybiLtNWkAP4LRp6glHWKkYPQYVIGtQpxbOH3qs8ah6T6saOo2fHeLF1zZKC s562haS/lP3EZx1oeuXz9ExNHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzEVFEy FwMMMbT5NKzl7i4RZLgUMB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH a2t1N2xsWG40UGdoaFRER1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPYC6zCn2skDUKJP/uCIGqb0Fi8XH0b/BIAPprPhti80oQZ5bwuI3G UMnCNAflsv88pdld5tasp5bAVt2sXjPyJXMi3CKrTZXUT/WA4zEWUvH2u+/yTXXh qw2LYjUuOfGv3vVYH7iJPwDdFraTGZmpdtbCB57jgackkNavZznVsM2XnKKTBhnX 9+JpRD98xSuuyHxUiwXes3OjG3uMmICFc+sd5VavFnonWpvoPZT5MFsQRHi2eH+H lp4UFy+AoGZVO0Vv48yOqBbs2/7P/u5jexSnA2vPlLsYrM3PZCK3GkQJrQyTJ0E1 PnYrUH21ZNq8G3A9FcaDF2y2H6Ogvpzf -----END CERTIFICATE-----Generated at Thu Sep 18 23:04:23 2025 by rpki-client