$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json) Hash identifier: 76N0GciHW/GeSC5xxHF+2RsJfSy3smVrrxEdZaMJfpc= Subject key identifier: B7:60:15:58:D0:45:36:F1:E4:18:0C:E6:37:B5:81:FC:9D:33:D5:8F Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft Manifest number: 77 Signing time: Tue 09 Sep 2025 06:56:10 +0000 Manifest this update: Tue 09 Sep 2025 06:56:09 +0000 Manifest next update: Tue 16 Sep 2025 06:56:09 +0000 Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: UoebXT2VohIEvxKEyVVGNDcYiINuc9HrtrB7p1aUPTM=) 2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: OADH0Zf3ANJ0fVSGo4++5SGmG3UFA33H5Jy/cHOt0/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC Validity Not Before: Sep 9 06:56:09 2025 GMT Not After : Sep 16 06:56:09 2025 GMT Subject: CN=68bfcf89-4274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:f3:9e:ce:f4:8b:5f:6f:98:cd:4f:49:20: da:c2:0c:aa:41:32:77:07:3e:1f:37:a7:7f:a1:96: ca:fe:6c:20:31:3a:ad:6a:7c:69:21:89:29:f7:18: 90:20:58:be:44:f6:65:9f:05:4b:1a:e2:f3:2f:1b: fd:18:81:09:3b:5f:7b:eb:66:72:48:21:37:5c:d2: 1f:37:10:ba:c4:f1:6b:d1:5f:48:75:fa:a1:a6:2a: 73:82:19:a5:60:a5:eb:92:f5:c8:3e:06:66:2f:5c: 4a:5e:f2:04:4d:29:cf:b9:d6:5d:02:d4:9e:ca:d0: 83:0e:91:47:ac:3a:47:e7:e3:47:c4:74:50:24:0e: f3:ee:7d:1f:31:45:b5:e3:39:3d:2e:c9:d4:ca:e2: c2:14:9c:a9:70:d8:6b:7e:72:03:02:62:cd:1c:07: a3:33:c2:d5:2d:9f:34:3d:5c:77:71:24:ef:6f:e8: 66:62:93:54:f9:12:ce:57:02:72:9e:c6:dc:68:40: b8:f3:24:68:57:5e:6a:f2:b4:47:b4:a4:ac:dc:b1: d6:58:7d:86:86:fb:9b:12:d3:45:84:fa:2a:f5:ef: 46:83:55:30:45:9b:cd:00:e7:e5:2b:ca:df:16:1a: 50:26:db:f3:6f:fa:09:4e:ac:a3:06:68:16:55:a8: eb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:60:15:58:D0:45:36:F1:E4:18:0C:E6:37:B5:81:FC:9D:33:D5:8F X509v3 Authority Key Identifier: keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2e:63:6c:9c:c8:de:ea:89:dc:ea:ff:63:d7:b1:46:47:ce: f1:f4:99:b5:c2:49:97:f9:8a:f1:16:74:13:a6:0d:38:c9:2a: 21:6e:aa:68:af:0f:97:bb:9e:d0:21:79:e6:b9:cc:c2:43:80: df:9f:74:53:12:78:b5:5e:88:15:1d:07:7a:03:70:a3:cb:e5: 2a:77:fc:d2:7c:e2:b1:81:fb:ee:43:cc:45:67:55:fc:74:22: 45:86:bf:92:f1:4c:0c:64:17:03:aa:06:c2:99:89:38:ed:ef: 31:94:f1:1e:c9:1e:d1:62:29:cb:1f:11:54:74:ea:b8:7e:7a: 8c:ef:03:87:27:f1:5f:a8:34:c3:27:7f:32:87:a1:48:aa:03: b5:86:85:0a:98:70:34:dd:2e:ea:25:cb:71:15:a2:f4:3a:0e: da:97:21:af:1d:0d:6f:cc:17:fb:53:9d:6e:27:c6:e2:92:32: 18:9b:90:18:5d:4a:cb:02:65:a9:b6:71:9b:01:be:06:f4:53: 7a:34:a7:2e:ec:60:1c:22:eb:c8:44:9b:aa:af:1c:dc:cb:85: 10:02:67:18:35:f8:18:d2:e1:81:ad:87:8d:01:a3:af:5e:e1: c3:c9:fa:69:8e:24:7b:f7:48:a5:53:a4:48:5e:c6:f6:ea:7c: 88:7d:e0:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Rjg3MDExMC8GA1UEBRMoNUQ1NUYxNTA5QjZGMDM0MjREMjk0NEY4MTFGODY5OTM4 MDk5QkJCQzAeFw0yNTA5MDkwNjU2MDlaFw0yNTA5MTYwNjU2MDlaMBgxFjAUBgNV BAMTDTY4YmZjZjg5LTQyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMKvOezvSLX2+YzU9JINrCDKpBMncHPh83p3+hlsr+bCAxOq1qfGkhiSn3GJAg WL5E9mWfBUsa4vMvG/0YgQk7X3vrZnJIITdc0h83ELrE8WvRX0h1+qGmKnOCGaVg peuS9cg+BmYvXEpe8gRNKc+51l0C1J7K0IMOkUesOkfn40fEdFAkDvPufR8xRbXj OT0uydTK4sIUnKlw2Gt+cgMCYs0cB6MzwtUtnzQ9XHdxJO9v6GZik1T5Es5XAnKe xtxoQLjzJGhXXmrytEe0pKzcsdZYfYaG+5sS00WE+ir170aDVTBFm80A5+Uryt8W GlAm2/Nv+glOrKMGaBZVqOvvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt2AVWNBF NvHkGAzmN7WB/J0z1Y8wHwYDVR0jBBgwFoAUXVXxUJtvA0JNKUT4Efhpk4CZu7ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGODcwL0M5MjQyNDZBRDdF MjExRUZBRjBCM0I3REM0RjlBRTAyL1hWWHhVSnR2QTBKTktVVDRFZmhwazRDWnU3 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFZYeFVKdHZBMEpOS1VUNEVmaHBrNENadTd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG ODcwL0M5MjQyNDZBRDdFMjExRUZBRjBCM0I3REM0RjlBRTAyL1hWWHhVSnR2QTBK TktVVDRFZmhwazRDWnU3dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD0uY2ycyN7qidzq/2PXsUZHzvH0mbXCSZf5ivEWdBOmDTjJKiFuqmiv D5e7ntAheea5zMJDgN+fdFMSeLVeiBUdB3oDcKPL5Sp3/NJ84rGB++5DzEVnVfx0 IkWGv5LxTAxkFwOqBsKZiTjt7zGU8R7JHtFiKcsfEVR06rh+eozvA4cn8V+oNMMn fzKHoUiqA7WGhQqYcDTdLuoly3EVovQ6DtqXIa8dDW/MF/tTnW4nxuKSMhibkBhd SssCZam2cZsBvgb0U3o0py7sYBwi68hEm6qvHNzLhRACZxg1+BjS4YGth40Bo69e 4cPJ+mmOJHv3SKVTpEhexvbqfIh94J8= -----END CERTIFICATE-----Generated at Wed Sep 10 10:28:19 2025 by rpki-client