$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft File: xDfVjxI6auBXxgjiFrtr_WWER2o.mft (raw, json) Hash identifier: ptl76LRFF9r+Ra01aBSoran8vNWgrEF1uVEgazIZ92o= Subject key identifier: F6:E2:E0:71:9B:14:1E:8F:0C:33:FF:4A:7C:B9:2E:3F:C8:6B:58:7E Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A Certificate issuer: /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Certificate serial: 05E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft Manifest number: 05DE Signing time: Wed 20 Aug 2025 23:06:44 +0000 Manifest this update: Wed 20 Aug 2025 23:06:43 +0000 Manifest next update: Wed 27 Aug 2025 23:06:43 +0000 Files and hashes: 1: xDfVjxI6auBXxgjiFrtr_WWER2o.crl (hash: zsyIeQVK4kG2P7uB/CiDphzKZFwGZVO4/CXjVpaq7ys=) 2: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (hash: bXFPKdh1DOKKzF1VDrO1xVCyooUJXcE+RZoWJywL3IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1508 (0x5e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169903, serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Validity Not Before: Aug 20 23:06:43 2025 GMT Not After : Aug 27 23:06:43 2025 GMT Subject: CN=68a65503-9fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ba:aa:7b:4b:d4:d1:73:32:ea:31:c0:ef:32: ca:9b:4d:53:33:24:93:04:eb:34:53:1a:c1:0b:76: ec:ec:2c:94:15:99:44:d9:09:2c:19:ab:ec:92:f7: 7a:c9:fc:63:1e:06:c6:b3:f4:36:71:32:82:f4:e7: 36:d2:cf:50:7c:ef:0d:c5:df:a8:de:45:6d:b5:13: 34:03:29:2e:36:62:3e:e5:e4:f9:cf:a0:df:76:bd: 7f:0a:8d:2b:9d:fe:ee:c3:7e:ea:1c:d8:f7:81:e8: 91:dd:18:d5:b6:b2:87:da:17:f7:9c:8d:4c:57:31: c1:dd:ad:a1:c0:7c:f2:f7:f4:09:d2:5c:06:e2:cc: 05:b8:cb:e4:95:c6:71:50:91:71:23:73:8b:01:49: be:53:44:fc:53:dd:d2:a4:9b:54:99:12:42:a6:7a: 9b:e8:ca:a5:4d:2a:d8:a1:23:15:18:a5:0f:0a:46: 0f:02:34:8a:56:e5:56:71:ae:4a:e8:b7:53:ff:0e: 97:db:19:2e:4d:24:83:20:50:28:22:94:32:03:ec: 9a:f8:ed:85:32:27:26:86:3b:78:8f:99:51:45:06: 6f:85:92:0d:76:06:21:e9:44:70:36:50:e2:f5:a1: ce:04:4f:9c:63:18:23:98:31:1f:68:9b:9c:17:40: a4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E2:E0:71:9B:14:1E:8F:0C:33:FF:4A:7C:B9:2E:3F:C8:6B:58:7E X509v3 Authority Key Identifier: keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:46:b3:59:14:c6:83:29:95:66:6f:85:0c:ca:8d:c9:0f:29: 49:c1:ee:a7:57:b5:c4:d8:73:b2:59:1c:3b:ea:4d:31:6a:b0: c4:ee:b4:53:dc:40:01:bb:7d:91:d5:3a:dd:87:2a:54:ca:a4: 33:25:22:da:2c:56:fc:46:61:f8:7f:02:81:2f:70:df:8a:13: 11:0c:f7:bc:cf:be:71:83:1f:bc:b4:91:1c:81:f0:6e:09:96: a2:f6:1d:88:86:e6:7c:25:9e:1e:41:dc:2c:58:b5:94:24:64: 41:9e:74:da:58:31:a2:ff:2b:f8:93:38:76:cf:be:be:0b:e7: 0d:c1:b4:69:f8:d5:91:1c:88:e5:40:a8:a5:f8:89:ff:7e:e1: 38:d0:06:e0:8f:91:5a:70:1c:ea:a0:15:ab:d0:a7:f0:d2:10: 87:8e:a0:0b:e7:f6:59:6c:7d:a5:98:43:7a:af:75:bd:a2:e3: e9:fa:81:b7:8b:15:61:e5:ad:d7:85:ae:af:f0:6e:79:9c:80: e0:34:e1:40:6b:c5:10:a3:53:ba:02:8b:a0:71:0d:00:73:af: d0:d5:32:16:c4:87:aa:54:72:e7:f9:4b:b0:04:88:bf:1b:07: 61:12:38:cc:a1:60:11:ca:18:c4:c3:79:b1:e0:be:cd:1d:9b: 34:a8:cd:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk5MDMxMTAvBgNVBAUTKEM0MzdENThGMTIzQTZBRTA1N0M2MDhFMjE2QkI2QkZE NjU4NDQ3NkEwHhcNMjUwODIwMjMwNjQzWhcNMjUwODI3MjMwNjQzWjAYMRYwFAYD VQQDEw02OGE2NTUwMy05ZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Lqqe0vU0XMy6jHA7zLKm01TMySTBOs0UxrBC3bs7CyUFZlE2QksGavskvd6 yfxjHgbGs/Q2cTKC9Oc20s9QfO8Nxd+o3kVttRM0AykuNmI+5eT5z6Dfdr1/Co0r nf7uw37qHNj3geiR3RjVtrKH2hf3nI1MVzHB3a2hwHzy9/QJ0lwG4swFuMvklcZx UJFxI3OLAUm+U0T8U93SpJtUmRJCpnqb6MqlTSrYoSMVGKUPCkYPAjSKVuVWca5K 6LdT/w6X2xkuTSSDIFAoIpQyA+ya+O2FMicmhjt4j5lRRQZvhZINdgYh6URwNlDi 9aHOBE+cYxgjmDEfaJucF0CkFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbi4HGb FB6PDDP/Sny5Lj/Ia1h+MB8GA1UdIwQYMBaAFMQ31Y8SOmrgV8YI4ha7a/1lhEdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTkwMy9FRTZCNzQxOEM4 MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1Qlh4Z2ppRnJ0cl9XV0VS Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEZlZqeEk2YXVCWHhnamlGcnRyX1dXRVIyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTkwMy9FRTZCNzQxOEM4MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1 Qlh4Z2ppRnJ0cl9XV0VSMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+RrNZFMaDKZVmb4UMyo3JDylJwe6nV7XE2HOyWRw76k0xarDE7rRT 3EABu32R1TrdhypUyqQzJSLaLFb8RmH4fwKBL3DfihMRDPe8z75xgx+8tJEcgfBu CZai9h2IhuZ8JZ4eQdwsWLWUJGRBnnTaWDGi/yv4kzh2z76+C+cNwbRp+NWRHIjl QKil+In/fuE40Abgj5FacBzqoBWr0Kfw0hCHjqAL5/ZZbH2lmEN6r3W9ouPp+oG3 ixVh5a3Xha6v8G55nIDgNOFAa8UQo1O6AougcQ0Ac6/Q1TIWxIeqVHLn+UuwBIi/ GwdhEjjMoWARyhjEw3mx4L7NHZs0qM2k -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:39 2025 by rpki-client