$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: VpkOVMfCGydZows0Da0cDVVHmm6tuaaDIJKhH/ZXfxk= Subject key identifier: E9:35:1D:A4:EB:7A:D8:C6:E1:DC:B9:F2:9A:C8:B4:98:DE:0A:80:3F Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 0176 Signing time: Wed 17 Sep 2025 04:16:35 +0000 Manifest this update: Wed 17 Sep 2025 04:16:35 +0000 Manifest next update: Wed 24 Sep 2025 04:16:35 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: UyLPb0JbDjwUklOKdiMK5GX+VMkXWARwdT+hBXzjGAs=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: fQ0Wv2YD60Yo4ln05PtaRg2v4/R5zwKrC/7wYHWQM3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Sep 17 04:16:35 2025 GMT Not After : Sep 24 04:16:35 2025 GMT Subject: CN=68ca3623-870d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:24:f9:88:97:36:b5:18:f9:23:4b:5a:88:03: ee:32:4c:86:f0:11:23:5e:1c:bf:4b:d3:a7:fc:98: 84:78:e2:5c:12:bb:9a:ee:3c:4c:0b:0a:2c:7c:98: 91:5a:41:d0:15:b9:f0:7b:9c:bb:bf:48:6f:8f:be: 60:50:b2:d4:f0:7c:39:02:50:5c:47:63:e1:f3:5d: 62:80:be:87:07:ea:fa:33:cf:e9:68:fe:af:f0:c2: c3:15:65:a5:ff:0e:40:79:7f:3d:5b:08:c9:9f:5c: ff:fc:26:2d:25:d4:39:e2:ab:35:b1:b4:c3:4b:12: b6:91:e7:2b:8c:38:f7:30:3a:bf:4a:14:89:8c:5e: 43:16:ec:3f:5f:25:b0:12:83:45:0c:66:40:05:79: 9c:63:98:b8:36:a4:19:49:31:4e:4d:d7:0d:b6:82: b5:7c:6e:14:1a:24:75:45:5a:db:af:64:71:47:e7: 49:d0:13:8e:41:e1:26:c2:9d:24:69:b4:a6:11:0a: 4b:af:8e:ce:8b:f4:f5:b9:ea:a8:30:a4:52:ea:f8: 04:8c:9f:27:3f:a5:24:ec:8b:c9:86:b3:78:e7:fc: 3c:38:6d:d2:0b:6a:1f:cb:fd:6b:86:a5:46:7c:13: cd:80:34:1f:d3:17:9e:bc:2b:85:8b:ff:80:4c:71: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:35:1D:A4:EB:7A:D8:C6:E1:DC:B9:F2:9A:C8:B4:98:DE:0A:80:3F X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:86:a6:2b:85:89:76:a8:2b:2b:b5:70:24:d5:e4:c1:06:ee: 34:a9:b1:69:56:8e:55:fd:6c:1a:32:ad:47:6d:41:15:bb:75: 13:53:74:9d:3e:86:d0:1e:dd:ea:75:cd:a8:38:5d:fb:ba:08: 5b:15:17:f3:0d:cf:59:8f:fd:5b:21:45:dd:52:61:19:08:83: ed:dd:99:c9:66:57:83:76:62:55:a5:7f:f5:73:98:ac:26:01: b9:31:81:28:91:bc:93:62:51:c8:37:18:65:d9:4f:b0:17:89: 9b:7c:49:7e:ae:33:ad:f8:de:bb:b8:04:a0:42:ac:06:50:4f: 3f:ff:67:b8:2b:35:9d:e9:1b:ef:99:24:8a:9e:d2:99:55:f5: 0a:4d:c1:2d:46:ff:66:5f:5d:d3:38:f3:19:f6:08:54:4c:d5: fd:35:2f:cd:81:8a:9d:6d:e6:e7:44:a0:05:58:9a:76:9d:b5: 6d:92:91:0e:88:5b:75:f2:00:d4:48:f1:5f:ab:15:c8:f6:f3: d5:1c:83:5d:cb:56:cd:eb:53:63:6c:9e:fd:3a:9e:21:30:ef: f5:5c:ea:d8:86:08:8a:6c:86:fc:4d:f3:99:2d:26:1a:08:90: 89:b0:58:1d:53:68:61:8c:57:c2:c7:16:ce:1d:3b:5e:df:59: 85:f4:72:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjUwOTE3MDQxNjM1WhcNMjUwOTI0MDQxNjM1WjAYMRYwFAYD VQQDEw02OGNhMzYyMy04NzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzST5iJc2tRj5I0taiAPuMkyG8BEjXhy/S9On/JiEeOJcErua7jxMCwosfJiR WkHQFbnwe5y7v0hvj75gULLU8Hw5AlBcR2Ph811igL6HB+r6M8/paP6v8MLDFWWl /w5AeX89WwjJn1z//CYtJdQ54qs1sbTDSxK2kecrjDj3MDq/ShSJjF5DFuw/XyWw EoNFDGZABXmcY5i4NqQZSTFOTdcNtoK1fG4UGiR1RVrbr2RxR+dJ0BOOQeEmwp0k abSmEQpLr47Oi/T1ueqoMKRS6vgEjJ8nP6Uk7IvJhrN45/w8OG3SC2ofy/1rhqVG fBPNgDQf0xeevCuFi/+ATHFDZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk1HaTr etjG4dy58prItJjeCoA/MB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjhqYrhYl2qCsrtXAk1eTBBu40qbFpVo5V/WwaMq1HbUEVu3UTU3Sd PobQHt3qdc2oOF37ughbFRfzDc9Zj/1bIUXdUmEZCIPt3ZnJZleDdmJVpX/1c5is JgG5MYEokbyTYlHINxhl2U+wF4mbfEl+rjOt+N67uASgQqwGUE8//2e4KzWd6Rvv mSSKntKZVfUKTcEtRv9mX13TOPMZ9ghUTNX9NS/NgYqdbebnRKAFWJp2nbVtkpEO iFt18gDUSPFfqxXI9vPVHINdy1bN61NjbJ79Op4hMO/1XOrYhgiKbIb8TfOZLSYa CJCJsFgdU2hhjFfCxxbOHTte31mF9HIN -----END CERTIFICATE-----Generated at Fri Sep 19 02:28:43 2025 by rpki-client