$ rpki-client -vvf rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft File: _XRQsRgVCpshTxoL7t8-Oyb-0Es.mft (raw, json) Hash identifier: pPR2atVMRhvL+Dj6OAXifpGrZ2zjdvFiz6vCOMbeels= Subject key identifier: 7B:38:26:76:B1:FD:15:23:33:13:42:F6:B2:9A:20:E7:21:DA:1C:6C Authority key identifier: FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B Certificate issuer: /CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Certificate serial: 1010 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft Manifest number: 1008 Signing time: Wed 20 Aug 2025 17:31:56 +0000 Manifest this update: Wed 20 Aug 2025 17:31:55 +0000 Manifest next update: Wed 27 Aug 2025 17:31:55 +0000 Files and hashes: 1: _XRQsRgVCpshTxoL7t8-Oyb-0Es.crl (hash: AJjfQVQ6R4kyqpShgtptol5W8PBJra9Xqt650AS2wC0=) 2: 378459525C6511E989D03610C4F9AE02.roa (hash: IiQprXM45ceBxjHWm+F/2TXqvKDyfsIZ5gHCOtJkT5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4112 (0x1010) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144160, serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Validity Not Before: Aug 20 17:31:55 2025 GMT Not After : Aug 27 17:31:55 2025 GMT Subject: CN=68a6068b-83cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1b:56:07:c2:36:13:b3:70:cf:c0:5b:f8:be: 62:5f:c7:1d:fb:c9:1a:2e:51:80:bb:a2:19:23:5e: 01:96:0f:ab:7c:43:11:93:91:f9:e0:aa:d6:a3:d8: b0:0f:e6:ac:35:d1:75:06:2e:c8:b2:06:93:71:5a: c2:ab:41:04:d3:f2:f1:f4:c8:d2:8a:86:32:bf:41: 05:47:b6:5e:85:0a:86:f5:c6:0c:c9:19:a5:ec:b2: f1:a3:c6:4d:0d:ec:ae:a2:77:7f:b8:85:84:bc:d3: c9:0e:f9:77:db:4f:72:38:03:f1:2b:70:a6:0b:bd: fb:88:49:2d:e4:d4:1f:9b:4c:ac:e0:ff:62:ed:33: 59:6f:4b:2e:57:46:ff:d6:f7:6c:93:59:6b:04:d9: 6d:c4:9f:ca:76:4d:ed:d5:f4:5c:5c:b7:23:18:cf: 2d:66:83:32:60:f4:aa:72:e2:3d:9d:10:6d:e3:6c: 41:62:d5:49:10:f3:c2:87:4f:49:a9:09:e5:d1:09: de:0b:a5:3d:24:56:05:b8:0a:88:45:79:16:bf:9a: 14:f7:40:5b:9d:c6:42:c4:20:06:0f:ec:68:83:fd: e1:36:c8:e6:95:0f:3b:07:58:df:45:7a:a9:dc:aa: af:2c:ce:aa:52:2f:58:c1:d0:75:0a:68:62:e2:83: fa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:38:26:76:B1:FD:15:23:33:13:42:F6:B2:9A:20:E7:21:DA:1C:6C X509v3 Authority Key Identifier: keyid:FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:98:e8:0c:31:f8:22:81:60:0c:21:36:54:75:37:73:3e:6d: 71:77:5f:78:b6:1c:6f:b6:66:0c:1b:e3:83:46:b0:52:04:a1: f6:63:17:bb:c8:de:1b:fa:34:33:63:42:b5:58:41:bc:97:d0: 49:38:d2:f4:2b:c5:f2:e4:b1:93:30:90:10:81:a3:84:b8:51: 13:d1:69:b1:b2:52:18:54:fc:50:e1:1b:b8:d2:b8:de:bf:48: 33:d1:92:1b:9e:32:e2:9a:b4:46:8c:66:e6:11:c5:23:9d:e0: cf:5b:2a:a6:84:80:58:19:6d:a1:b0:23:d1:3b:f8:6b:ca:2b: 73:cc:78:4a:88:56:d5:2b:11:f1:99:ed:83:3b:76:51:b2:d5: 14:65:cf:70:a2:41:5e:ff:c8:bb:86:5d:90:20:f1:b9:f2:b3: 3c:da:5e:96:81:90:fb:5f:74:43:1a:27:60:c5:15:ed:0d:cb: 8d:d2:a6:63:96:02:16:94:a8:50:41:8b:41:c0:c4:6e:bf:e7: 07:4d:8b:5c:16:68:01:db:60:2b:99:62:4b:ba:77:07:14:fb: 03:56:da:02:b0:19:2c:26:f6:3b:d1:38:07:e5:ea:61:1a:2d: c1:15:cf:63:fe:2b:67:6c:70:82:c1:14:4e:9d:f7:eb:27:0f: 1a:cc:89:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQxNjAxMTAvBgNVBAUTKEZENzQ1MEIxMTgxNTBBOUIyMTRGMUEwQkVFREYzRTNC MjZGRUQwNEIwHhcNMjUwODIwMTczMTU1WhcNMjUwODI3MTczMTU1WjAYMRYwFAYD VQQDEw02OGE2MDY4Yi04M2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBtWB8I2E7Nwz8Bb+L5iX8cd+8kaLlGAu6IZI14Blg+rfEMRk5H54KrWo9iw D+asNdF1Bi7IsgaTcVrCq0EE0/Lx9MjSioYyv0EFR7ZehQqG9cYMyRml7LLxo8ZN Deyuond/uIWEvNPJDvl3209yOAPxK3CmC737iEkt5NQfm0ys4P9i7TNZb0suV0b/ 1vdsk1lrBNltxJ/Kdk3t1fRcXLcjGM8tZoMyYPSqcuI9nRBt42xBYtVJEPPCh09J qQnl0QneC6U9JFYFuAqIRXkWv5oU90BbncZCxCAGD+xog/3hNsjmlQ87B1jfRXqp 3KqvLM6qUi9YwdB1Cmhi4oP6JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHs4Jnax /RUjMxNC9rKaIOch2hxsMB8GA1UdIwQYMBaAFP10ULEYFQqbIU8aC+7fPjsm/tBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDE2MC9ERDY1NzFBNjRG OTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNwc2hUeG9MN3Q4LU95Yi0w RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YUlFzUmdWQ3BzaFR4b0w3dDgtT3liLTBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDE2MC9ERDY1NzFBNjRGOTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNw c2hUeG9MN3Q4LU95Yi0wRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkmOgMMfgigWAMITZUdTdzPm1xd194thxvtmYMG+ODRrBSBKH2Yxe7 yN4b+jQzY0K1WEG8l9BJONL0K8Xy5LGTMJAQgaOEuFET0WmxslIYVPxQ4Ru40rje v0gz0ZIbnjLimrRGjGbmEcUjneDPWyqmhIBYGW2hsCPRO/hryitzzHhKiFbVKxHx me2DO3ZRstUUZc9wokFe/8i7hl2QIPG58rM82l6WgZD7X3RDGidgxRXtDcuN0qZj lgIWlKhQQYtBwMRuv+cHTYtcFmgB22ArmWJLuncHFPsDVtoCsBksJvY70TgH5eph Gi3BFc9j/itnbHCCwRROnffrJw8azInK -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:36 2025 by rpki-client