$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: 7veQQtJUgUzoUtHidI4BePNtFiA/10durp8/dl8x+tk= Subject key identifier: 9D:69:3E:2D:CC:DE:38:BB:C2:F8:97:72:68:65:1D:E4:E0:41:46:8D Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 07FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 07F1 Signing time: Mon 08 Sep 2025 21:02:15 +0000 Manifest this update: Mon 08 Sep 2025 21:02:15 +0000 Manifest next update: Mon 15 Sep 2025 21:02:15 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: mHNBYybXAkUUAejTm+ZUWcMScBZyZ8LoJotqql0/9Es=) 2: FC4EA8D8918511EDB3CBB378C4F9AE02.roa (hash: 4bMonkEILF31i3rwXcmiWVxlZY8L3ObeZ0NQ0u78bEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 21:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2044 (0x7fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Sep 8 21:02:15 2025 GMT Not After : Sep 15 21:02:15 2025 GMT Subject: CN=68bf4457-097c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:30:7a:ec:17:26:8e:29:c6:a7:bd:27:83:0e: cc:30:94:5e:9a:27:16:57:22:10:01:b6:a2:14:d0: 99:0f:7f:3d:99:c1:d9:5e:c6:6f:73:28:68:65:70: 07:2b:6c:a5:84:05:07:bd:84:bc:ef:42:62:f8:67: d6:60:0d:bd:03:29:29:9a:51:d3:7e:26:da:dc:14: 12:34:bf:35:21:d3:74:ea:3c:31:fd:4a:be:1c:ec: b1:9b:11:94:b2:4f:43:ab:c7:a6:3a:72:64:51:dd: 5e:53:9b:1c:a5:75:9f:0b:5e:28:89:40:c4:08:f5: 8f:12:4a:c6:26:56:26:07:8a:ea:d1:68:9f:91:c2: f7:bf:d8:1b:14:ba:3e:1b:67:9b:fe:77:23:39:bf: fa:15:75:e8:cf:83:df:17:de:d3:6e:ec:10:f1:35: c0:1d:01:f7:8b:e1:4e:ad:54:d9:1b:b3:aa:27:6c: ef:05:07:0d:f8:93:80:5c:6d:77:3d:61:f5:50:63: fb:66:95:bd:69:42:8d:72:c5:b9:fc:52:4e:ff:07: 06:ef:1f:56:11:d1:17:74:f9:fb:be:aa:28:f4:cf: 4f:81:b4:5b:f2:47:ad:ec:97:49:60:49:30:d2:09: 00:22:bf:e5:54:08:c5:41:bc:b1:72:d9:ed:a5:18: 0f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:69:3E:2D:CC:DE:38:BB:C2:F8:97:72:68:65:1D:E4:E0:41:46:8D X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:6d:31:2f:02:89:f2:73:71:56:ec:2c:b8:3e:9f:66:af:38: ba:1f:25:32:95:b8:31:35:7f:e8:c5:fc:41:a2:33:98:06:dd: 5f:c5:d8:9d:35:42:c6:22:77:38:e6:18:cf:2c:a0:62:11:87: d8:fb:89:5f:7a:b1:40:7a:86:65:54:20:a3:1c:0e:7c:f3:84: d7:4c:7c:f2:cf:f0:3a:df:dc:2d:11:21:96:71:fb:60:db:95: 20:a5:bc:1a:82:1b:ad:ff:d9:2f:dc:20:2a:86:f7:b2:4a:f2: 38:02:77:9d:f3:16:74:62:fd:80:d4:4d:5b:63:98:a8:b7:d9: 89:bd:48:70:96:c1:d0:c5:a0:ff:da:6f:80:7c:b0:76:1e:fe: e2:e3:7e:36:a1:f8:43:55:59:d1:a8:88:6e:05:2c:c3:7f:ed: 4e:2c:bb:d5:ef:ce:19:71:0a:4c:ed:09:9a:c0:e6:04:86:f0: d7:a5:49:3c:56:38:06:e7:5f:75:f6:fb:05:76:50:35:52:d1: 27:87:ab:14:9c:c1:ac:99:26:b2:dd:7f:19:8a:48:98:ec:34: 29:41:37:72:04:dd:80:d9:ac:28:70:f5:8f:97:5f:a0:68:07: 66:9a:cf:c3:8e:e4:da:00:c6:e3:bf:9c:9d:b9:1c:66:6f:ed: fe:b1:4f:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjUwOTA4MjEwMjE1WhcNMjUwOTE1MjEwMjE1WjAYMRYwFAYD VQQDEw02OGJmNDQ1Ny0wOTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8DB67BcmjinGp70ngw7MMJRemicWVyIQAbaiFNCZD389mcHZXsZvcyhoZXAH K2ylhAUHvYS870Ji+GfWYA29AykpmlHTfiba3BQSNL81IdN06jwx/Uq+HOyxmxGU sk9Dq8emOnJkUd1eU5scpXWfC14oiUDECPWPEkrGJlYmB4rq0WifkcL3v9gbFLo+ G2eb/ncjOb/6FXXoz4PfF97TbuwQ8TXAHQH3i+FOrVTZG7OqJ2zvBQcN+JOAXG13 PWH1UGP7ZpW9aUKNcsW5/FJO/wcG7x9WEdEXdPn7vqoo9M9PgbRb8ket7JdJYEkw 0gkAIr/lVAjFQbyxctntpRgPJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1pPi3M 3ji7wviXcmhlHeTgQUaNMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxbTEvAonyc3FW7Cy4Pp9mrzi6HyUylbgxNX/oxfxBojOYBt1fxdid NULGInc45hjPLKBiEYfY+4lferFAeoZlVCCjHA5884TXTHzyz/A639wtESGWcftg 25Ugpbwaghut/9kv3CAqhveySvI4Aned8xZ0Yv2A1E1bY5iot9mJvUhwlsHQxaD/ 2m+AfLB2Hv7i4342ofhDVVnRqIhuBSzDf+1OLLvV784ZcQpM7QmawOYEhvDXpUk8 VjgG51919vsFdlA1UtEnh6sUnMGsmSay3X8ZikiY7DQpQTdyBN2A2awocPWPl1+g aAdmms/DjuTaAMbjv5yduRxmb+3+sU+R -----END CERTIFICATE-----Generated at Tue Sep 9 03:01:05 2025 by rpki-client