$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft File: 0XRFPpVj66_LuzKsxs-Gb72OIvA.mft (raw, json) Hash identifier: emhfdKhe8SETG0mY5JhgO09I5lcbK143QxgMQBGBhVU= Subject key identifier: 20:74:86:19:F9:44:59:50:B1:AF:E8:10:0F:D2:E4:3C:96:09:7C:A0 Authority key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 Certificate issuer: /CN=A9187325/serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft Manifest number: 8A Signing time: Thu 21 Aug 2025 06:45:41 +0000 Manifest this update: Thu 21 Aug 2025 06:45:40 +0000 Manifest next update: Thu 28 Aug 2025 06:45:40 +0000 Files and hashes: 1: 0XRFPpVj66_LuzKsxs-Gb72OIvA.crl (hash: Gt4M9qNxBnzVz/8X14QdCfTMLW2Ct9dAzdykgoXPy5U=) 2: D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa (hash: zhUDBt2wZDhknIJUCNitYM8EJRnUn0t65SOwAtO1PEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325, serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Validity Not Before: Aug 21 06:45:40 2025 GMT Not After : Aug 28 06:45:40 2025 GMT Subject: CN=68a6c095-105d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:9e:b8:be:b0:ca:4a:51:a6:43:37:35:4e: 97:f9:30:17:d7:30:f3:fd:92:4c:99:86:08:90:48: 8d:98:db:b7:d3:01:f2:2d:0e:77:57:34:28:a2:cd: 04:85:25:ce:b0:1a:f4:ea:6e:1b:3a:8b:8e:28:90: 1b:92:7a:a1:f8:7e:17:ee:ef:b2:8a:e1:55:b9:5f: f1:75:14:2e:6b:93:8a:4c:20:f1:3b:0c:94:fe:e6: d2:e7:fa:da:da:a9:17:10:43:4a:4d:ac:21:1a:dc: 3e:b2:20:79:48:1d:fc:3f:8d:6b:61:c5:a2:e3:48: d4:7a:1a:ea:9a:4b:c8:7e:2c:47:37:2f:c8:5a:82: 85:12:9d:3c:fe:86:c0:22:47:1c:69:57:54:b0:3d: 09:2a:05:d2:d3:de:07:33:ff:16:25:fb:2d:73:52: 8c:bb:c7:4c:d2:f5:94:d2:b6:0e:c8:0c:03:f0:1f: f2:ba:86:56:db:95:20:6c:d4:e3:36:f2:d4:20:0f: f0:1b:71:c8:bd:cd:95:f4:bb:77:f7:94:74:04:d9: 2b:36:e1:d8:76:01:cf:86:6c:67:ec:86:c5:fb:95: b6:88:fc:81:72:89:9f:98:8b:a9:e1:3f:8c:fa:70: 57:99:12:23:1a:d3:fb:58:7f:f1:b0:5a:e0:99:7b: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:74:86:19:F9:44:59:50:B1:AF:E8:10:0F:D2:E4:3C:96:09:7C:A0 X509v3 Authority Key Identifier: keyid:D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:6f:e8:24:f4:3d:16:23:de:27:5b:01:2a:04:78:bb:fa:7d: c5:29:8a:40:d4:fb:5c:46:30:86:65:93:9e:d1:70:ca:7e:dc: e6:ce:74:60:40:59:4d:d9:ec:83:80:ef:21:b3:89:49:03:48: 06:fb:bf:7e:16:f2:a1:fb:f2:14:d7:4e:47:e8:72:05:e7:54: c8:18:b8:7b:20:a6:f3:78:fa:f8:27:c3:ec:c8:83:a0:73:db: 4d:1f:1e:45:28:16:54:81:45:55:61:c2:42:7d:14:e6:13:41: 5a:be:53:cc:ce:35:6c:9d:d1:4f:58:6e:ce:81:49:aa:a5:51: 28:13:8a:d9:4d:0f:f7:ff:8e:a8:ae:a3:f8:3c:5c:6a:62:8e: 88:82:22:83:04:fc:a2:a6:f4:2b:f0:1e:d1:93:79:16:51:59: 6e:25:a9:03:b4:f3:e6:74:f9:a3:65:1e:03:41:cb:72:fd:14: 4b:1e:08:10:a5:5c:8c:bc:41:32:aa:fc:57:85:4a:56:22:80: a9:39:85:76:fa:23:a2:b8:50:df:15:bb:96:3d:cd:fc:da:d9: bd:e7:73:fa:7f:07:10:76:2b:f3:ca:69:d3:d5:3a:68:9d:a5: c7:c7:b5:46:32:b2:0b:09:ee:6c:1b:9d:27:41:ba:ad:73:a5: 8b:73:da:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMjUxMTAvBgNVBAUTKEQxNzQ0NTNFOTU2M0VCQUZDQkJCMzJBQ0M2Q0Y4NjZG QkQ4RTIyRjAwHhcNMjUwODIxMDY0NTQwWhcNMjUwODI4MDY0NTQwWjAYMRYwFAYD VQQDEw02OGE2YzA5NS0xMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjueuL6wykpRpkM3NU6X+TAX1zDz/ZJMmYYIkEiNmNu30wHyLQ53VzQoos0E hSXOsBr06m4bOouOKJAbknqh+H4X7u+yiuFVuV/xdRQua5OKTCDxOwyU/ubS5/ra 2qkXEENKTawhGtw+siB5SB38P41rYcWi40jUehrqmkvIfixHNy/IWoKFEp08/obA IkccaVdUsD0JKgXS094HM/8WJfstc1KMu8dM0vWU0rYOyAwD8B/yuoZW25UgbNTj NvLUIA/wG3HIvc2V9Lt395R0BNkrNuHYdgHPhmxn7IbF+5W2iPyBcomfmIup4T+M +nBXmRIjGtP7WH/xsFrgmXsHlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCB0hhn5 RFlQsa/oEA/S5DyWCXygMB8GA1UdIwQYMBaAFNF0RT6VY+uvy7syrMbPhm+9jiLw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMyNS83QjMzNEE0QUFB RTkxMUVGQjcyMUMyNURDNEY5QUUwMi8wWFJGUHBWajY2X0x1ektzeHMtR2I3Mk9J dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBYUkZQcFZqNjZfTHV6S3N4cy1HYjcyT0l2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzMyNS83QjMzNEE0QUFBRTkxMUVGQjcyMUMyNURDNEY5QUUwMi8wWFJGUHBWajY2 X0x1ektzeHMtR2I3Mk9JdkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIb+gk9D0WI94nWwEqBHi7+n3FKYpA1PtcRjCGZZOe0XDKftzmznRg QFlN2eyDgO8hs4lJA0gG+79+FvKh+/IU105H6HIF51TIGLh7IKbzePr4J8PsyIOg c9tNHx5FKBZUgUVVYcJCfRTmE0FavlPMzjVsndFPWG7OgUmqpVEoE4rZTQ/3/46o rqP4PFxqYo6IgiKDBPyipvQr8B7Rk3kWUVluJakDtPPmdPmjZR4DQcty/RRLHggQ pVyMvEEyqvxXhUpWIoCpOYV2+iOiuFDfFbuWPc382tm953P6fwcQdivzymnT1Tpo naXHx7VGMrILCe5sG50nQbqtc6WLc9pF -----END CERTIFICATE-----Generated at Thu Aug 21 16:17:36 2025 by rpki-client