$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json) Hash identifier: VCtix1AJAjRWx7d4Mkad+R5WnyK2Ar1NrzRb1Eju14U= Subject key identifier: DC:8A:44:AC:88:22:4A:1E:F0:76:2A:10:22:66:5D:D6:E6:05:37:07 Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft Manifest number: 069B Signing time: Wed 20 Aug 2025 22:17:26 +0000 Manifest this update: Wed 20 Aug 2025 22:17:26 +0000 Manifest next update: Wed 27 Aug 2025 22:17:26 +0000 Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: 38hytU/ISx87ITXHzAc713Ke4H61Oas1AN+d4DrlUnY=) 2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: LymCYpP9ODjDnMZgIvd8/QCM8E6rGc1JYF+pBCdV8o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Validity Not Before: Aug 20 22:17:26 2025 GMT Not After : Aug 27 22:17:26 2025 GMT Subject: CN=68a64976-7670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:d6:8e:b8:c7:96:9d:94:07:b1:0e:39:00: f0:b0:7d:0a:09:5c:ef:fb:a5:99:e6:c3:f9:61:de: 1c:93:44:d5:81:80:ac:b6:7b:cc:c5:f6:25:73:7c: 15:aa:96:6e:56:5a:8f:62:07:fb:e7:b1:c9:b4:1f: c9:e2:f7:62:39:9e:bb:38:77:95:3e:46:db:df:11: f4:cb:a5:9d:e3:d2:08:3b:ab:7e:8a:3d:09:ee:c4: 22:79:34:e9:06:85:80:0d:dc:3a:7b:3e:23:18:69: de:48:93:4e:99:f5:51:c8:75:d1:5e:f9:76:bb:55: 14:3b:bc:97:32:9c:85:02:cd:26:e3:32:5e:55:54: e6:99:1f:a5:c8:16:b0:5b:bd:3e:e1:14:88:bd:51: d6:e7:97:59:9d:28:64:a2:e0:c6:de:73:38:6e:b0: 79:e6:33:00:e6:8b:33:67:b8:b4:2e:22:97:45:60: f5:7d:7b:ce:cb:af:99:e9:79:05:e2:c3:41:2e:2d: 72:41:b1:11:37:06:6f:63:8b:4e:b5:13:38:5e:1f: 86:9c:96:a7:87:73:7c:cf:82:47:9c:f5:73:e4:9e: ec:e3:30:9a:02:47:cd:23:8b:89:37:4e:4a:17:c6: 97:81:b7:3e:42:bc:20:04:fd:39:36:c1:7a:b8:18: ff:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8A:44:AC:88:22:4A:1E:F0:76:2A:10:22:66:5D:D6:E6:05:37:07 X509v3 Authority Key Identifier: keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:ab:ca:38:7c:e6:39:fa:7e:f5:00:ee:f1:aa:5e:2b:f2:73: 8e:eb:36:64:fa:1e:7f:92:ad:76:48:26:d6:96:b6:47:40:a4: 0c:a4:c8:e5:e9:dd:7a:27:ba:0a:9f:e3:d9:77:5f:0d:f4:17: 8a:f9:d4:a9:4c:fb:13:b9:db:46:71:d9:b6:d0:8e:dc:55:dc: 4a:37:7f:47:ce:db:93:5b:d9:fa:aa:ef:69:ad:47:d6:b6:6a: 7f:8e:d0:fd:22:48:68:ae:32:c5:aa:21:76:64:86:c9:e8:54: e3:06:cb:0e:9a:95:bf:67:67:56:e8:96:cf:83:cf:28:f7:79: 39:b6:33:50:ea:cc:ff:dd:c2:83:b7:b8:9a:29:d8:cf:8b:de: ea:a7:2f:98:b8:95:a0:d7:cf:ac:62:b1:b5:51:08:ac:fa:49: 9c:4d:fb:bd:a6:ec:bc:7a:b4:9b:61:e3:cd:64:a6:35:3d:32: 81:ed:4c:a3:b5:5c:70:3a:37:b2:d3:7a:32:26:22:fc:89:79: c7:9d:12:85:37:b1:ab:0c:7f:f6:1d:d0:bc:8b:ff:db:12:f4: 58:08:a4:63:8e:10:ba:85:1f:58:36:9d:1c:5c:8c:db:b8:11: ee:a7:9c:7f:5e:27:a6:f6:0c:79:2f:e0:ca:20:8e:27:9c:36: 19:17:e4:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2RTE0QjEwMDFD MDgxOUREQTkwHhcNMjUwODIwMjIxNzI2WhcNMjUwODI3MjIxNzI2WjAYMRYwFAYD VQQDEw02OGE2NDk3Ni03NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kbWjrjHlp2UB7EOOQDwsH0KCVzv+6WZ5sP5Yd4ck0TVgYCstnvMxfYlc3wV qpZuVlqPYgf757HJtB/J4vdiOZ67OHeVPkbb3xH0y6Wd49IIO6t+ij0J7sQieTTp BoWADdw6ez4jGGneSJNOmfVRyHXRXvl2u1UUO7yXMpyFAs0m4zJeVVTmmR+lyBaw W70+4RSIvVHW55dZnShkouDG3nM4brB55jMA5oszZ7i0LiKXRWD1fXvOy6+Z6XkF 4sNBLi1yQbERNwZvY4tOtRM4Xh+GnJanh3N8z4JHnPVz5J7s4zCaAkfNI4uJN05K F8aXgbc+QrwgBP05NsF6uBj/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyKRKyI Ikoe8HYqECJmXdbmBTcHMB8GA1UdIwQYMBaAFMaTmbEy4a5rLqMRbhSxABwIGd2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDA1Qy9ERUNFMEYwQTdC RDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJtc3VveEZ1RkxFQUhBZ1oz YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwT1pzVExocm1zdW94RnVGTEVBSEFnWjNhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJt c3VveEZ1RkxFQUhBZ1ozYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHq8o4fOY5+n71AO7xql4r8nOO6zZk+h5/kq12SCbWlrZHQKQMpMjl 6d16J7oKn+PZd18N9BeK+dSpTPsTudtGcdm20I7cVdxKN39HztuTW9n6qu9prUfW tmp/jtD9IkhorjLFqiF2ZIbJ6FTjBssOmpW/Z2dW6JbPg88o93k5tjNQ6sz/3cKD t7iaKdjPi97qpy+YuJWg18+sYrG1UQis+kmcTfu9puy8erSbYePNZKY1PTKB7Uyj tVxwOjey03oyJiL8iXnHnRKFN7GrDH/2HdC8i//bEvRYCKRjjhC6hR9YNp0cXIzb uBHup5x/Xiem9gx5L+DKII4nnDYZF+Sm -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:40 2025 by rpki-client