$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft File: xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json) Hash identifier: VmMQCaHd+lZvfagP7zjSGPDXCfknfpA8D2F2SpHMpDc= Subject key identifier: 19:BC:99:87:54:CA:CC:0F:04:29:4D:C9:00:3A:F3:30:84:D4:7E:3A Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Certificate serial: 073F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft Manifest number: 0733 Signing time: Mon 30 Jun 2025 22:07:15 +0000 Manifest this update: Mon 30 Jun 2025 22:07:14 +0000 Manifest next update: Mon 07 Jul 2025 22:07:14 +0000 Files and hashes: 1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: NJjNMyuPyoeZwUlQMlQVsBqjY3nzAQ8Wd4qTZCwh5hY=) 2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: Xmj6Hu3XamtN1TfoLFF4zTOGMT8EY6KW6APUipxbG/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1855 (0x73f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Validity Not Before: Jun 30 22:07:14 2025 GMT Not After : Jul 7 22:07:14 2025 GMT Subject: CN=68630a92-5f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:eb:18:83:b9:65:4c:5c:1b:e0:be:59:9c: 60:ea:cb:62:0b:ac:ab:e6:4f:ab:4c:fd:0c:2a:94: 89:31:47:ea:94:f5:fb:d1:fe:06:f6:32:a4:ac:81: b0:9d:9d:e0:09:0a:fb:63:a9:6e:7b:e4:b2:fa:42: d1:2c:c9:cd:1e:34:ba:a8:32:ec:f1:70:b9:10:df: 65:cd:2b:f7:0c:e2:42:57:51:74:2f:e5:5c:a1:5e: 6c:34:d5:0d:e4:85:6e:a7:e4:5f:ea:df:19:f7:85: 49:ea:4c:2c:55:5e:84:07:99:52:82:e2:00:3f:a5: d3:b1:cd:d9:a9:9f:14:25:d4:5b:28:8c:78:f2:79: f0:49:20:75:95:ae:71:d8:a6:39:98:0d:d0:51:b2: ab:14:f4:c3:b5:63:0a:3e:23:d1:27:af:57:18:d3: 93:8b:28:c6:1b:86:8b:7d:06:25:c7:ca:fa:03:0c: ac:d2:b9:b6:6f:a6:fb:be:5d:a8:67:43:3d:a4:c5: 37:85:53:ac:18:10:ba:3e:12:08:43:e5:d5:bd:17: 4b:3c:a0:3a:42:08:d3:86:83:ad:a9:18:c8:ad:af: 26:95:45:16:05:da:17:a4:bb:bc:a9:37:52:85:5a: 3e:92:9a:af:56:8f:77:64:97:62:f7:91:80:a1:52: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BC:99:87:54:CA:CC:0F:04:29:4D:C9:00:3A:F3:30:84:D4:7E:3A X509v3 Authority Key Identifier: keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:06:a0:69:4d:e0:1e:e0:4d:10:a5:b9:d2:34:0b:98:86:93: 28:89:d8:95:f7:c2:b9:2b:70:1b:90:83:e8:17:8b:ef:6c:f1: 03:9f:9a:e2:f9:f9:20:21:b4:c8:3d:21:35:3a:8e:7a:29:9c: ed:71:63:2c:bd:2b:f8:b5:28:9c:18:48:98:79:69:12:bc:6f: 55:6b:1a:7b:f9:05:0b:dd:8e:51:0c:fc:9b:91:f0:f6:52:63: 9d:1f:17:de:85:44:a2:60:1f:09:bf:0b:8a:67:1d:9b:5a:be: b5:02:f5:a8:4d:1d:7b:0b:ea:9a:76:56:c5:ee:36:49:e6:b4: 90:d3:43:19:31:54:01:6a:54:ac:7d:a6:fc:51:3d:09:71:85: ee:df:8f:cf:34:d2:73:7b:98:f4:df:b2:90:22:36:07:e4:4d: 93:72:dc:73:92:7c:4a:64:99:46:cf:f7:b2:7a:1b:06:84:84: 2e:ae:55:fb:e6:20:0e:35:ee:15:7f:14:8c:d1:23:60:69:b8: fd:97:aa:11:45:47:e7:bf:75:d9:f9:c7:b0:db:20:3a:ad:ef: 6c:83:89:d3:24:10:cc:ec:45:c5:ff:19:a5:2d:34:95:51:d5: ec:d1:67:79:83:0c:d5:f6:af:23:e2:65:f0:7f:08:84:e0:9c: c6:7f:a4:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBREYxMTAvBgNVBAUTKEM3MEJGNzlFODhFMzExOUFFOTZCQjc2MUEyOTNCQjUx QTQ4NjE3M0MwHhcNMjUwNjMwMjIwNzE0WhcNMjUwNzA3MjIwNzE0WjAYMRYwFAYD VQQDEw02ODYzMGE5Mi01ZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPbrGIO5ZUxcG+C+WZxg6stiC6yr5k+rTP0MKpSJMUfqlPX70f4G9jKkrIGw nZ3gCQr7Y6lue+Sy+kLRLMnNHjS6qDLs8XC5EN9lzSv3DOJCV1F0L+VcoV5sNNUN 5IVup+Rf6t8Z94VJ6kwsVV6EB5lSguIAP6XTsc3ZqZ8UJdRbKIx48nnwSSB1la5x 2KY5mA3QUbKrFPTDtWMKPiPRJ69XGNOTiyjGG4aLfQYlx8r6Awys0rm2b6b7vl2o Z0M9pMU3hVOsGBC6PhIIQ+XVvRdLPKA6QgjThoOtqRjIra8mlUUWBdoXpLu8qTdS hVo+kpqvVo93ZJdi95GAoVLijQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBm8mYdU yswPBClNyQA68zCE1H46MB8GA1UdIwQYMBaAFMcL956I4xGa6Wu3YaKTu1Gkhhc8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFERi9CODVGMEU4QzNB Q0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVacnBhN2Rob3BPN1VhU0dG encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3djNub2pqRVpycGE3ZGhvcE83VWFTR0Z6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFERi9CODVGMEU4QzNBQ0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVa cnBhN2Rob3BPN1VhU0dGencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmBqBpTeAe4E0QpbnSNAuYhpMoidiV98K5K3AbkIPoF4vvbPEDn5ri +fkgIbTIPSE1Oo56KZztcWMsvSv4tSicGEiYeWkSvG9Vaxp7+QUL3Y5RDPybkfD2 UmOdHxfehUSiYB8JvwuKZx2bWr61AvWoTR17C+qadlbF7jZJ5rSQ00MZMVQBalSs fab8UT0JcYXu34/PNNJze5j037KQIjYH5E2TctxzknxKZJlGz/eyehsGhIQurlX7 5iAONe4VfxSM0SNgabj9l6oRRUfnv3XZ+cew2yA6re9sg4nTJBDM7EXF/xmlLTSV UdXs0Wd5gwzV9q8j4mXwfwiE4JzGf6RE -----END CERTIFICATE-----Generated at Tue Jul 1 19:47:45 2025 by rpki-client