$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json) Hash identifier: TB52Hl/2bwWZ+rEo32Vh7D5MmDZLHkg7tWFtup6kyjk= Subject key identifier: E2:AC:3C:27:3D:C4:D6:33:C3:69:BF:16:4D:3C:87:60:49:4D:8D:18 Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft Manifest number: 0821 Signing time: Thu 18 Sep 2025 21:05:55 +0000 Manifest this update: Thu 18 Sep 2025 21:05:54 +0000 Manifest next update: Thu 25 Sep 2025 21:05:54 +0000 Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: /VuGk2BM+i/1GkjuS3C45YcVQlv8pTw2DwhHRNfWvEg=) 2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: 8MctpWGtN4TB9CaLOxK2lVRFp6WdGzpjql1y9Hz4Ctk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EAD, serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Validity Not Before: Sep 18 21:05:54 2025 GMT Not After : Sep 25 21:05:54 2025 GMT Subject: CN=68cc7432-b949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:25:c3:69:58:7c:b3:46:2a:c4:ef:c0:f6: 47:e6:45:c3:aa:5d:12:ea:90:96:da:4b:e4:89:ce: a5:4d:32:75:ad:2c:9c:80:b1:5a:74:c6:22:42:b7: 01:e5:fb:fc:3d:26:5f:f7:53:b4:1b:3c:ee:40:31: d0:96:eb:8c:f2:c7:f9:5c:64:7e:fa:ce:1c:b2:38: 4c:be:96:4a:67:cc:2a:1a:1f:9b:a8:7a:b5:58:8a: 30:32:ff:55:c1:c2:29:7f:ad:05:57:59:a7:d2:4c: d2:f0:14:cb:27:a1:3f:63:b6:53:30:30:0c:29:af: c8:ef:29:21:70:b7:02:29:8c:35:e8:d7:64:6d:f4: 4a:5c:ad:d0:86:0f:38:ee:c0:f1:87:36:10:e6:ee: b6:bf:c0:9c:f4:dd:cb:30:a1:19:9e:16:4e:d6:37: b4:98:e7:51:9a:42:da:a5:fd:c5:65:e6:5c:d1:25: 94:a2:b7:7f:f3:7f:80:5b:10:28:91:4f:4e:3c:68: 32:82:92:3c:39:cd:7d:79:7a:a4:2e:fb:bf:45:d5: ea:94:3f:6d:4c:a7:3c:61:53:e1:3d:0c:45:e7:d9: 92:af:4a:d3:91:16:fc:79:0a:41:ce:f1:9a:c2:53: 4c:8d:d8:df:0d:eb:40:d8:7b:4c:8d:a5:8d:0e:2c: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AC:3C:27:3D:C4:D6:33:C3:69:BF:16:4D:3C:87:60:49:4D:8D:18 X509v3 Authority Key Identifier: keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:99:8e:4b:d0:b9:52:bc:75:c5:34:dd:a5:bb:ba:d6:59:6b: 76:a3:0f:58:cf:4a:71:fe:0d:16:94:59:bf:12:0b:95:ab:a0: 7e:f9:26:5f:cd:d5:58:ad:2f:e5:2c:6c:14:7b:d7:ed:25:b1: 06:f7:08:78:9f:9a:4e:23:93:ad:66:6d:5c:46:92:f1:6a:3e: 9e:c0:6f:b9:83:3a:ff:0b:25:78:33:87:cd:c7:b8:ba:74:20: 59:42:d5:df:5d:9e:f2:50:a1:2c:4c:97:bf:d4:dc:4e:43:2c: e7:b0:44:07:ed:3d:61:c2:53:f0:fa:86:7e:f8:23:70:cc:3e: 01:3f:64:01:b4:45:24:ca:8d:4b:31:c4:9a:d0:16:71:1c:3d: 1e:e0:da:ec:f8:50:b6:20:4b:89:03:ed:5d:a9:d6:cb:2d:2e: 38:f8:01:8a:58:81:1c:59:0c:0a:ac:e9:dd:9e:1b:6e:c6:2a: 50:2c:06:c6:c9:eb:ce:15:af:63:90:2a:bb:43:67:da:b4:1d: 05:b6:e5:57:32:60:a5:17:8d:e9:1c:53:07:d5:3e:f2:a4:b5: 99:92:47:79:35:17:c9:6c:2e:9f:63:6c:5d:9e:2f:fd:f4:c6: c4:3b:88:93:c1:08:0b:e1:e9:ae:63:25:0b:13:bb:55:ee:29: c8:68:10:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG QjA3NEE1OEUwHhcNMjUwOTE4MjEwNTU0WhcNMjUwOTI1MjEwNTU0WjAYMRYwFAYD VQQDEw02OGNjNzQzMi1iOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNYlw2lYfLNGKsTvwPZH5kXDql0S6pCW2kvkic6lTTJ1rSycgLFadMYiQrcB 5fv8PSZf91O0GzzuQDHQluuM8sf5XGR++s4csjhMvpZKZ8wqGh+bqHq1WIowMv9V wcIpf60FV1mn0kzS8BTLJ6E/Y7ZTMDAMKa/I7ykhcLcCKYw16NdkbfRKXK3Qhg84 7sDxhzYQ5u62v8Cc9N3LMKEZnhZO1je0mOdRmkLapf3FZeZc0SWUord/83+AWxAo kU9OPGgygpI8Oc19eXqkLvu/RdXqlD9tTKc8YVPhPQxF59mSr0rTkRb8eQpBzvGa wlNMjdjfDetA2HtMjaWNDixItwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKsPCc9 xNYzw2m/Fk08h2BJTY0YMB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VBRC9FOUI3MDY2NkVBMjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1RO M2ZMei1iNkM0eF83QjBwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCmY5L0LlSvHXFNN2lu7rWWWt2ow9Yz0px/g0WlFm/EguVq6B++SZf zdVYrS/lLGwUe9ftJbEG9wh4n5pOI5OtZm1cRpLxaj6ewG+5gzr/CyV4M4fNx7i6 dCBZQtXfXZ7yUKEsTJe/1NxOQyznsEQH7T1hwlPw+oZ++CNwzD4BP2QBtEUkyo1L McSa0BZxHD0e4Nrs+FC2IEuJA+1dqdbLLS44+AGKWIEcWQwKrOndnhtuxipQLAbG yevOFa9jkCq7Q2fatB0FtuVXMmClF43pHFMH1T7ypLWZkkd5NRfJbC6fY2xdni/9 9MbEO4iTwQgL4emuYyULE7tV7inIaBDU -----END CERTIFICATE-----Generated at Fri Sep 19 08:51:38 2025 by rpki-client