$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: tCjkmgbg4IjqoByEYFajV0jWFZGYaf05k/z4N61hA28= Subject key identifier: 3C:A8:93:EB:F0:9D:3D:78:D5:20:C0:FB:30:C2:E0:0E:8E:6B:E4:4C Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 06A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 066A Signing time: Tue 16 Sep 2025 23:07:30 +0000 Manifest this update: Tue 16 Sep 2025 23:07:30 +0000 Manifest next update: Tue 23 Sep 2025 23:07:29 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: ZUoTU4l1nNRMQyUJuH6x4h2PwZMEJU3B5rKAdmBSlck=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: oyubRpGqXRPhXUbHGDMN11nyLcbaEyRpquXs/6vcD1s=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: 4DBjk9RooSzZolI3F0wRR+UkFptKPPbZZIJnu5t3sTc=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: q5An5IejOkRYWLTS2K7o5KZUOm0z/1pEEu1xwJZBWV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1700 (0x6a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Sep 16 23:07:30 2025 GMT Not After : Sep 23 23:07:29 2025 GMT Subject: CN=68c9edb2-01c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:ae:90:12:83:09:7a:a9:8c:be:fe:d9:9e: 5e:0b:ef:df:ca:18:ec:65:af:a3:7d:be:9a:29:0d: a7:43:d3:c7:a0:40:50:08:78:b7:dc:1f:aa:60:4c: a2:15:95:28:57:2b:5d:74:16:6e:8e:0b:50:3b:c0: 1e:59:0b:32:78:a6:2b:d8:5d:f3:b6:3e:f8:28:bf: aa:65:02:07:e3:55:ae:1c:e2:fe:53:62:87:8b:ca: 0b:46:be:4a:41:b0:b7:17:d4:38:cd:b1:5b:e4:df: 67:89:a3:c7:87:0c:c9:2e:d6:7f:5e:1f:84:d2:3e: 73:a7:e1:9a:ea:7d:3d:f9:a2:b6:7e:c6:5a:5c:32: f4:9c:fa:72:ab:8d:d7:76:cd:c9:52:cc:34:ec:2a: 81:8c:3b:44:af:0b:1c:55:28:84:7d:71:70:59:de: a6:d3:8f:b6:6c:d9:04:4b:74:77:fe:ea:88:34:dc: 42:63:28:68:34:d4:e3:c7:ea:77:1a:8e:af:30:47: 2e:3c:93:79:c0:59:44:d4:bd:5d:94:b6:24:aa:c5: 86:fd:ad:5f:4f:48:88:e5:3f:51:03:ec:1a:dc:82: c3:a0:cd:69:30:dd:c3:c6:21:dc:77:dd:70:92:45: 3c:16:d2:34:82:16:c7:64:d1:6a:82:0e:10:45:9b: 74:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A8:93:EB:F0:9D:3D:78:D5:20:C0:FB:30:C2:E0:0E:8E:6B:E4:4C X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b9:75:94:9e:e2:e8:e3:57:a8:f4:d4:1c:3c:39:61:61:da: 4a:7e:7a:1e:f6:ac:a2:8f:b2:63:00:fb:0a:40:37:92:59:6c: fb:f1:2c:88:eb:72:d6:35:19:7a:ea:8e:e6:6d:08:b7:3e:15: 84:21:3a:08:83:b8:b2:61:19:c0:92:1c:08:a8:c8:7c:eb:25: 9c:fc:a2:e8:8d:d1:ac:68:bf:93:77:e7:90:d8:37:38:82:ed: a3:9d:86:fa:21:e4:f8:ce:58:2a:fc:dc:ac:a4:33:f6:44:02: 73:0d:e1:45:01:c5:b5:12:5b:38:5c:30:55:a0:7b:84:a2:41: 2f:6c:15:84:db:a0:0c:d5:80:58:30:08:0e:ba:58:23:a6:44: 93:3c:7a:1b:13:18:99:e8:cf:64:c6:cc:50:44:89:35:e0:d1: 78:fe:2f:b9:2b:3f:3e:c1:9d:92:ab:7f:ab:62:94:f5:88:80: 39:ef:a2:d4:b1:e3:73:02:a6:1b:26:29:d8:ef:07:83:b9:cc: 05:a3:31:32:eb:79:45:17:55:5d:ba:f1:9e:1a:68:33:8e:c9: 9b:31:2f:f4:89:80:db:24:35:31:bc:36:bf:2d:08:63:f0:5f: 0a:38:09:a6:a3:3d:69:7b:b0:36:03:42:32:bb:02:7f:e6:b3: 81:22:7e:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUwOTE2MjMwNzMwWhcNMjUwOTIzMjMwNzI5WjAYMRYwFAYD VQQDEw02OGM5ZWRiMi0wMWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeOukBKDCXqpjL7+2Z5eC+/fyhjsZa+jfb6aKQ2nQ9PHoEBQCHi33B+qYEyi FZUoVytddBZujgtQO8AeWQsyeKYr2F3ztj74KL+qZQIH41WuHOL+U2KHi8oLRr5K QbC3F9Q4zbFb5N9niaPHhwzJLtZ/Xh+E0j5zp+Ga6n09+aK2fsZaXDL0nPpyq43X ds3JUsw07CqBjDtErwscVSiEfXFwWd6m04+2bNkES3R3/uqINNxCYyhoNNTjx+p3 Go6vMEcuPJN5wFlE1L1dlLYkqsWG/a1fT0iI5T9RA+wa3ILDoM1pMN3DxiHcd91w kkU8FtI0ghbHZNFqgg4QRZt0gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyok+vw nT141SDA+zDC4A6Oa+RMMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfuXWUnuLo41eo9NQcPDlhYdpKfnoe9qyij7JjAPsKQDeSWWz78SyI 63LWNRl66o7mbQi3PhWEIToIg7iyYRnAkhwIqMh86yWc/KLojdGsaL+Td+eQ2Dc4 gu2jnYb6IeT4zlgq/NyspDP2RAJzDeFFAcW1Els4XDBVoHuEokEvbBWE26AM1YBY MAgOulgjpkSTPHobExiZ6M9kxsxQRIk14NF4/i+5Kz8+wZ2Sq3+rYpT1iIA576LU seNzAqYbJinY7weDucwFozEy63lFF1VduvGeGmgzjsmbMS/0iYDbJDUxvDa/LQhj 8F8KOAmmoz1pe7A2A0IyuwJ/5rOBIn7a -----END CERTIFICATE-----Generated at Thu Sep 18 02:05:28 2025 by rpki-client