$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: dMER0TelwMUCxzLoNBkWpbofJHYKmugZ3t4xQ/DaCXc= Subject key identifier: 77:45:45:8F:18:A1:5C:D7:5E:D7:16:42:1D:F9:CD:E8:26:88:F7:02 Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 36 Signing time: Fri 05 Sep 2025 08:08:02 +0000 Manifest this update: Fri 05 Sep 2025 08:08:02 +0000 Manifest next update: Fri 12 Sep 2025 08:08:02 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: COssfOgZKdiTAcENljYfETRUdi1/KA3Neic56njdlV0=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: rIKd0p3e0QLGiCh3oOuC0PziP82slPgSfQtsZGWJI0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Sep 5 08:08:02 2025 GMT Not After : Sep 12 08:08:02 2025 GMT Subject: CN=68ba9a62-7953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e8:bf:45:0b:c6:d9:3b:d7:af:14:9f:f6:6e: 20:41:3d:c1:4d:be:6d:a2:20:09:a7:49:2a:1d:bc: 11:ac:e1:ab:1d:52:03:15:f7:61:7d:53:fa:80:40: a9:92:3b:96:47:56:80:1f:db:e7:b7:ff:0c:89:14: e5:fa:5e:ff:1c:57:36:b6:08:a7:df:3c:52:41:1d: bc:b4:1f:98:dc:dc:2e:93:eb:f1:85:f4:6e:e2:0b: 53:04:fe:9e:a3:68:02:cf:57:bd:a0:0e:9e:0f:99: 5c:1a:cf:36:c4:4a:72:f3:7a:23:66:e0:f1:80:e1: d8:14:8c:6d:b8:70:18:5f:74:12:21:52:eb:06:ef: 33:df:34:5e:2e:c7:23:2a:29:6c:b9:12:fc:96:dd: 96:86:ee:a7:c2:13:ff:73:93:32:71:9e:ca:c3:5d: bf:f5:88:f0:52:38:1a:62:ed:98:7c:5f:02:6c:94: 0c:5e:f9:08:01:b3:76:1f:fe:44:7d:3a:1b:cf:f3: d5:ab:06:a9:b0:56:4c:a5:bb:36:2a:02:47:ec:d7: e4:ca:7d:f5:fe:f6:05:7a:b4:72:72:07:d7:1e:d0: ba:8a:9a:86:0c:09:d2:31:f7:76:e5:9e:b5:21:0d: 45:69:2d:b0:a1:5f:3b:49:a0:1c:72:7e:56:6c:03: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:45:45:8F:18:A1:5C:D7:5E:D7:16:42:1D:F9:CD:E8:26:88:F7:02 X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:28:04:e7:fd:a0:de:60:ea:21:9a:bc:07:14:ee:ea:64:26: 9c:53:34:37:52:3a:ac:0f:ed:0d:df:e8:60:47:ef:c1:7d:1f: f1:49:4c:75:4f:71:c7:95:de:d0:e7:f8:ea:3c:e5:45:a0:33: d2:e8:40:58:1e:14:c2:5f:e2:0d:08:8f:70:46:9d:5f:79:26: 6c:8a:9c:bf:27:12:0c:ec:ec:62:8d:dc:c8:4f:a9:88:04:c6: 81:e3:0c:00:ff:6d:da:8c:bd:51:88:b7:4c:4a:19:18:86:b0: 63:1e:f0:d2:de:77:64:e5:e9:ca:f9:24:e6:cd:38:c2:57:19: bb:5e:f4:55:2d:f4:67:10:d9:7e:9a:1f:36:49:ef:af:09:bf: 7e:e2:b1:26:b9:04:38:06:07:5f:f3:95:d1:b8:58:4d:36:7f: e2:2f:49:06:2d:65:b2:3f:0a:0a:46:dd:ef:ea:3d:75:87:98: 80:d5:8b:c0:31:b3:9a:40:d4:b6:72:71:da:d4:31:0f:80:49: 7c:a9:85:4c:0a:6a:b5:1c:ef:83:f7:0e:4e:a4:c1:7d:02:06: ce:3b:9d:35:30:b1:e3:d6:22:d0:dd:8b:ef:72:3c:de:4c:0b: f4:dd:57:16:e5:c3:bb:22:4f:e5:90:e8:6c:96:b5:0c:25:47: 5e:36:07:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoQzQyNkQ0MjY0MDA2NzY1NTU5NzNERkVERTRFQjI2NDRC RUVEMjg3MzAeFw0yNTA5MDUwODA4MDJaFw0yNTA5MTIwODA4MDJaMBgxFjAUBgNV BAMTDTY4YmE5YTYyLTc5NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj6L9FC8bZO9evFJ/2biBBPcFNvm2iIAmnSSodvBGs4asdUgMV92F9U/qAQKmS O5ZHVoAf2+e3/wyJFOX6Xv8cVza2CKffPFJBHby0H5jc3C6T6/GF9G7iC1ME/p6j aALPV72gDp4PmVwazzbESnLzeiNm4PGA4dgUjG24cBhfdBIhUusG7zPfNF4uxyMq KWy5EvyW3ZaG7qfCE/9zkzJxnsrDXb/1iPBSOBpi7Zh8XwJslAxe+QgBs3Yf/kR9 OhvP89WrBqmwVkyluzYqAkfs1+TKffX+9gV6tHJyB9ce0LqKmoYMCdIx93blnrUh DUVpLbChXztJoBxyflZsA8lDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd0VFjxih XNde1xZCHfnN6CaI9wIwHwYDVR0jBBgwFoAUxCbUJkAGdlVZc9/t5OsmRL7tKHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0MxRjczMDcyM0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveENiVUprQUdkbFZaYzlfdDVPc21STDd0S0hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0MxRjczMDcyM0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxW WmM5X3Q1T3NtUkw3dEtITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF4oBOf9oN5g6iGavAcU7upkJpxTNDdSOqwP7Q3f6GBH78F9H/FJTHVP cceV3tDn+Oo85UWgM9LoQFgeFMJf4g0Ij3BGnV95JmyKnL8nEgzs7GKN3MhPqYgE xoHjDAD/bdqMvVGIt0xKGRiGsGMe8NLed2Tl6cr5JObNOMJXGbte9FUt9GcQ2X6a HzZJ768Jv37isSa5BDgGB1/zldG4WE02f+IvSQYtZbI/CgpG3e/qPXWHmIDVi8Ax s5pA1LZycdrUMQ+ASXyphUwKarUc74P3Dk6kwX0CBs47nTUwsePWItDdi+9yPN5M C/TdVxblw7siT+WQ6GyWtQwlR142B9w= -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:17 2025 by rpki-client