$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: 5tQBbOxf0YV8hwUqTXcB95x1hWpOPj/b+uZ0ZNHbAlc= Subject key identifier: F2:7C:C9:B6:19:F4:28:0E:19:E1:B3:15:D5:DD:F0:BA:C1:53:93:BF Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 07EA Signing time: Sat 06 Sep 2025 21:14:44 +0000 Manifest this update: Sat 06 Sep 2025 21:14:43 +0000 Manifest next update: Sat 13 Sep 2025 21:14:43 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: qTzDzq2iXieROMq3+NYem0VhPI4SAo62v3yeCVaFxJ4=) 2: 799C6AD8149711EFB0CB9E0AC4F9AE02.roa (hash: Z6c5AlKVKf/klPMN7KddRfh49KHTtioUb3aQg5mvfg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Sep 6 21:14:43 2025 GMT Not After : Sep 13 21:14:43 2025 GMT Subject: CN=68bca443-f75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3d:ab:91:0d:e5:de:e5:50:88:16:c8:35:31: 5c:1f:07:d2:1a:06:92:69:3c:72:5e:bb:e0:12:85: 04:7d:52:f7:34:a7:ef:fe:70:00:78:a9:a1:1d:4f: 31:14:a2:30:f5:7c:8c:46:a6:29:fc:0a:fa:6b:94: 85:1d:74:b0:29:4f:dc:f1:e5:b8:84:6b:36:b4:94: 56:84:0b:83:7e:14:14:3f:66:b9:fb:48:9d:e8:e7: 60:a7:ea:b1:63:c9:c7:dc:f7:63:eb:66:c1:dd:cd: c9:68:76:58:4b:50:e8:63:46:00:93:f9:4f:45:a7: 49:b3:c3:70:1b:04:64:88:f6:37:36:a7:a6:49:cd: f1:72:95:ab:8b:a4:97:17:1e:04:1f:25:35:8b:af: 92:b7:a0:bd:6f:8c:75:fb:1a:39:1d:cc:27:52:24: b5:11:a4:d2:11:1a:8d:dc:0f:b0:49:fe:4a:1d:3a: 56:1f:de:19:bf:56:c4:d4:a4:80:81:f2:22:21:02: d1:d2:11:aa:5a:1c:58:68:88:44:07:52:ba:58:d7: 73:58:4f:07:4c:4b:e3:31:32:1a:01:96:90:09:2a: fd:76:16:4e:5b:6f:f7:b1:b9:af:93:fe:fb:ba:31: db:9f:86:3f:c3:7c:92:93:b9:3a:2c:db:85:cc:12: a3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7C:C9:B6:19:F4:28:0E:19:E1:B3:15:D5:DD:F0:BA:C1:53:93:BF X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:00:73:f5:c1:da:99:b8:99:14:09:36:83:03:12:29:5f:b3: be:78:7d:d0:66:4a:18:b6:1d:0c:c9:70:e8:4f:a2:0a:06:53: c9:57:a0:fd:e0:f6:88:c4:b1:c8:17:10:96:9c:be:e6:24:03: e5:68:f4:9f:d7:0c:6d:3b:52:54:b2:27:be:a6:1b:ea:8e:1c: f2:73:6a:da:ea:99:d2:ae:cc:89:dd:5c:74:9e:bc:f3:26:84: 3e:06:6e:7c:a4:26:35:42:ee:ab:46:c6:95:0d:b3:29:4a:e6: b8:f2:2b:1d:71:c9:95:5c:f2:51:c0:f5:75:15:42:d1:95:83: ae:08:b4:02:8b:17:65:f0:95:91:c0:d6:47:15:1d:95:aa:f7: f8:ed:0a:bd:4f:fc:53:73:6c:50:83:f5:4f:e0:f4:22:74:98: 80:18:2f:89:12:4d:61:b4:80:fc:4e:10:24:7a:22:ec:82:c6: 91:bb:6a:d1:d8:51:91:60:51:2d:57:8c:be:8e:0e:7b:4e:58: a8:15:8e:71:b0:b4:95:70:32:6e:e6:4b:23:ed:4d:ca:35:da: 24:3a:4f:85:95:78:a9:dc:7f:de:ca:80:49:ab:9c:96:24:7e: c5:41:5a:e9:f9:70:d2:1a:6a:8c:72:43:ad:8f:d2:17:13:5d: d8:6b:fb:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjUwOTA2MjExNDQzWhcNMjUwOTEzMjExNDQzWjAYMRYwFAYD VQQDEw02OGJjYTQ0My1mNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7T2rkQ3l3uVQiBbINTFcHwfSGgaSaTxyXrvgEoUEfVL3NKfv/nAAeKmhHU8x FKIw9XyMRqYp/Ar6a5SFHXSwKU/c8eW4hGs2tJRWhAuDfhQUP2a5+0id6Odgp+qx Y8nH3Pdj62bB3c3JaHZYS1DoY0YAk/lPRadJs8NwGwRkiPY3NqemSc3xcpWri6SX Fx4EHyU1i6+St6C9b4x1+xo5HcwnUiS1EaTSERqN3A+wSf5KHTpWH94Zv1bE1KSA gfIiIQLR0hGqWhxYaIhEB1K6WNdzWE8HTEvjMTIaAZaQCSr9dhZOW2/3sbmvk/77 ujHbn4Y/w3ySk7k6LNuFzBKjRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJ8ybYZ 9CgOGeGzFdXd8LrBU5O/MB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAAHP1wdqZuJkUCTaDAxIpX7O+eH3QZkoYth0MyXDoT6IKBlPJV6D9 4PaIxLHIFxCWnL7mJAPlaPSf1wxtO1JUsie+phvqjhzyc2ra6pnSrsyJ3Vx0nrzz JoQ+Bm58pCY1Qu6rRsaVDbMpSua48isdccmVXPJRwPV1FULRlYOuCLQCixdl8JWR wNZHFR2Vqvf47Qq9T/xTc2xQg/VP4PQidJiAGC+JEk1htID8ThAkeiLsgsaRu2rR 2FGRYFEtV4y+jg57TlioFY5xsLSVcDJu5ksj7U3KNdokOk+FlXip3H/eyoBJq5yW JH7FQVrp+XDSGmqMckOtj9IXE13Ya/tQ -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:12 2025 by rpki-client