$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: EwTgktOkGkrnNAwuiyk7+uPMIDYA/h9CcGEy1A20TDk= Subject key identifier: 8A:88:C4:E7:7E:C7:2B:71:A6:D6:C8:ED:E7:2D:EB:0B:81:05:92:A2 Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 0426 Signing time: Tue 09 Sep 2025 00:28:08 +0000 Manifest this update: Tue 09 Sep 2025 00:28:07 +0000 Manifest next update: Tue 16 Sep 2025 00:28:07 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: IQbBQY3lKXpzn/dkfJfcYTdDUDuu6uWe1zccsxG5HSQ=) 2: 07C047B28BE911EF9DF25F0BC4F9AE02.roa (hash: w8f9UqJ79XDQJmoeSep+AfxKgamdRq1+8fZXwOXv2As=) 3: 50F671067CC411EF8589DF32C4F9AE02.roa (hash: OIx3I5y70K4lhigPdUK9t3VwKVKzekhTxytvaT3fL4k=) 4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: tt0v+KBQPMpXrI1DE3BSU9iXmppEt61/W7+0e5BehNo=) 5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: SS7LsXp/x71VoteuW8pTuBwbWh8OyBISF5BhDwIPz/Q=) 6: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: +SD5oyeqwCVbJIR3Rca7WRwH9ic0DsTEAz6kXO4nmEw=) 7: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PcnJ0SQLHGsAHxXxj0qo8jDhyNqxoXVPvv8v+GYk0TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: Sep 9 00:28:07 2025 GMT Not After : Sep 16 00:28:07 2025 GMT Subject: CN=68bf7497-7006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:42:79:f7:1a:00:a3:7b:c6:08:2f:19:d8: 08:b8:22:f6:6b:e2:72:9d:8e:01:eb:ed:f9:3e:94: 8f:e3:bb:8e:17:c7:b4:43:e6:1e:92:82:ce:d7:63: f4:00:d1:6f:c0:bf:47:1e:72:b0:01:14:08:2f:f9: a1:02:6a:33:91:0c:83:ca:1d:73:65:d3:53:02:02: 00:87:d9:a8:1b:08:35:c0:09:b7:d2:b5:d2:06:ac: 52:e4:5f:50:58:75:37:a7:8c:c7:9e:80:08:9d:02: 79:29:18:01:e0:80:32:cd:69:18:68:5b:30:f0:32: 0d:9f:40:7d:f5:19:38:66:7d:89:dd:f1:b7:8d:6c: 56:10:1d:59:13:e8:d4:fb:5b:bc:53:40:31:71:7e: 04:e0:b6:36:4d:ee:c9:be:4e:79:62:8f:bb:33:56: 31:5d:d8:c0:1a:e6:95:92:92:0c:59:a0:e3:c7:85: be:e4:0f:1a:ca:00:e7:8a:2d:a6:90:3e:30:66:69: 05:57:7f:77:56:50:79:5a:fc:d4:83:e3:12:1a:a2: 2f:72:e3:93:4c:8e:cb:6a:20:ee:be:2e:93:a8:e0: ce:f7:5d:28:9c:cd:6c:82:9f:ee:77:b0:89:25:99: 18:7a:fa:5f:1a:ab:33:b6:25:5b:81:de:02:54:89: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:88:C4:E7:7E:C7:2B:71:A6:D6:C8:ED:E7:2D:EB:0B:81:05:92:A2 X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5f:6b:9e:06:80:bd:b3:9d:4a:26:d3:ad:ed:dd:75:07:a2: d3:83:56:32:db:9f:0b:fc:fb:43:e4:50:79:52:e4:ca:03:56: 99:d7:b7:35:f0:2d:c1:ac:f1:38:28:b9:a1:18:7c:ef:f9:98: 85:39:36:e1:a9:29:3a:23:de:b2:dc:0c:f8:5d:20:42:bf:72: c7:21:66:14:8f:f5:a6:c2:a9:b6:fb:6d:93:8c:55:17:41:10: 60:83:9b:4f:c3:9f:aa:b3:7b:09:aa:12:1a:aa:f6:1d:42:ae: 75:8a:af:f3:8f:97:58:da:ba:cc:fe:c8:2f:02:da:62:57:19: a6:38:67:e5:a5:dc:52:1c:b5:33:90:0f:68:e2:fb:6c:3e:6c: 94:fd:af:0b:b5:8c:10:6a:c0:76:8f:6d:1f:45:1e:52:6b:24: d2:9e:db:76:a2:ae:ca:ea:b5:ec:ad:9b:ad:a0:b4:b9:f1:fd: 67:0b:b7:20:14:c0:43:f3:83:bf:df:39:01:a7:08:27:dc:ac: 27:50:35:ee:bd:0e:44:0d:86:0a:61:99:04:ee:d8:fb:93:f7: 2f:ba:bc:63:fc:17:a8:29:fe:b6:c7:8e:1b:32:49:e3:3a:60: 20:21:57:b1:ae:12:87:ad:54:78:d9:9c:09:37:05:ea:ca:55: ce:06:e8:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUwOTA5MDAyODA3WhcNMjUwOTE2MDAyODA3WjAYMRYwFAYD VQQDEw02OGJmNzQ5Ny03MDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6JCefcaAKN7xggvGdgIuCL2a+JynY4B6+35PpSP47uOF8e0Q+YekoLO12P0 ANFvwL9HHnKwARQIL/mhAmozkQyDyh1zZdNTAgIAh9moGwg1wAm30rXSBqxS5F9Q WHU3p4zHnoAInQJ5KRgB4IAyzWkYaFsw8DINn0B99Rk4Zn2J3fG3jWxWEB1ZE+jU +1u8U0AxcX4E4LY2Te7Jvk55Yo+7M1YxXdjAGuaVkpIMWaDjx4W+5A8aygDnii2m kD4wZmkFV393VlB5WvzUg+MSGqIvcuOTTI7LaiDuvi6TqODO910onM1sgp/ud7CJ JZkYevpfGqsztiVbgd4CVIkCeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqIxOd+ xytxptbI7ect6wuBBZKiMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbX2ueBoC9s51KJtOt7d11B6LTg1Yy258L/PtD5FB5UuTKA1aZ17c1 8C3BrPE4KLmhGHzv+ZiFOTbhqSk6I96y3Az4XSBCv3LHIWYUj/Wmwqm2+22TjFUX QRBgg5tPw5+qs3sJqhIaqvYdQq51iq/zj5dY2rrM/sgvAtpiVxmmOGflpdxSHLUz kA9o4vtsPmyU/a8LtYwQasB2j20fRR5SayTSntt2oq7K6rXsrZutoLS58f1nC7cg FMBD84O/3zkBpwgn3KwnUDXuvQ5EDYYKYZkE7tj7k/cvurxj/BeoKf62x44bMknj OmAgIVexrhKHrVR42ZwJNwXqylXOBugz -----END CERTIFICATE-----Generated at Tue Sep 9 13:50:10 2025 by rpki-client