$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json) Hash identifier: Dv5p+Axa8JHit5jCDXSg/OCr83oIUOkxONqZN/PetrU= Subject key identifier: A4:E6:27:36:F2:E7:1D:96:72:49:AE:DC:18:CC:99:00:DA:82:FC:F5 Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft Manifest number: F9 Signing time: Thu 21 Aug 2025 05:24:37 +0000 Manifest this update: Thu 21 Aug 2025 05:24:36 +0000 Manifest next update: Thu 28 Aug 2025 05:24:36 +0000 Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: jidbJG+qiUd1RntdcpfzjmEQR398dxJ09grVOykR+38=) 2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: C3Ga1a9eb1Df3VllPQUKdb207TqBrmGNq5XYCS2u3O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: Aug 21 05:24:36 2025 GMT Not After : Aug 28 05:24:36 2025 GMT Subject: CN=68a6ad94-49ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:76:d7:8b:71:47:5d:14:8e:2a:1d:c3:22: 50:ff:5e:eb:52:26:ae:46:8d:80:8c:55:c7:fe:e0: 3f:12:c7:25:a0:05:4b:b3:07:b4:d5:e6:32:34:bb: fc:82:d4:56:61:03:ad:00:a8:ab:d7:7b:de:d2:8c: 34:e9:45:28:2a:8b:85:94:39:e8:d4:c4:ed:2e:d5: 09:04:a2:40:1f:e6:bd:b9:db:ab:1b:f7:71:68:ab: 8f:07:3c:53:1d:b9:a0:4d:12:d1:ff:5b:a4:7b:d8: d2:26:d6:36:66:7f:8e:07:03:cf:f6:64:a6:76:19: 12:99:6d:2e:56:40:aa:de:b7:7c:c7:12:46:98:a6: e5:59:59:b7:35:3f:6a:fd:68:be:9e:a9:33:5a:46: 94:aa:f2:76:f4:98:fa:42:29:81:c8:7b:ac:e2:31: 31:e2:65:b5:39:cb:f6:fd:03:15:45:3e:5d:19:76: 01:19:de:ca:08:71:49:26:e3:e6:0a:88:93:5c:a5: 17:94:c8:9c:66:73:fd:09:c1:41:d3:81:f8:a6:a2: 98:4e:be:ce:ce:26:d1:21:31:2a:c8:82:98:e1:e7: d0:4c:51:5e:97:10:96:76:e8:07:82:3a:fe:ae:71: 2d:11:88:0e:e0:2b:8d:81:bc:b8:06:34:8d:04:7b: 17:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E6:27:36:F2:E7:1D:96:72:49:AE:DC:18:CC:99:00:DA:82:FC:F5 X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:4f:7d:19:59:8f:cf:6c:82:d0:7f:cf:5c:72:21:94:c1:17: d0:59:d0:b0:c5:ed:ce:00:18:54:e7:54:61:df:2d:f9:8f:5d: 36:87:31:c0:21:2e:da:5f:fe:f6:23:d5:55:e6:f9:4d:06:c0: 4f:40:8a:41:ca:57:23:eb:ca:bc:63:17:c6:0f:e9:4f:e6:ba: 14:be:ea:fa:e5:df:c7:29:7a:4b:cb:41:42:1c:35:bf:f7:10: 4c:cf:05:cd:47:a3:32:92:33:fe:a5:e2:70:5e:11:05:be:aa: 7c:02:d9:a6:0a:2b:f0:aa:51:1a:54:10:89:6b:3c:91:04:1e: a2:d7:15:50:1f:f8:94:22:38:7a:c6:7d:03:ad:60:9a:10:d5: b9:71:6c:81:85:35:94:7f:af:84:6b:7d:eb:2e:47:9e:43:22: 39:f0:9b:aa:5a:f7:4e:a7:db:71:ee:f8:be:da:88:c8:b3:49: 11:67:ee:e5:b0:69:22:4a:dd:0d:85:48:e5:58:5a:6f:ff:48: d4:7c:35:be:4b:71:4e:ad:5a:5b:20:24:df:bb:fd:69:e9:4a: 7b:b5:79:80:66:e6:4a:44:49:aa:c4:d9:b0:2c:17:2b:e0:f6: 9e:5d:ad:18:d3:45:20:81:59:7c:7c:a2:77:85:7c:07:9c:ba: 2d:5e:9c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC QUUxMkVDMEEwHhcNMjUwODIxMDUyNDM2WhcNMjUwODI4MDUyNDM2WjAYMRYwFAYD VQQDEw02OGE2YWQ5NC00OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCB214txR10UjiodwyJQ/17rUiauRo2AjFXH/uA/EscloAVLswe01eYyNLv8 gtRWYQOtAKir13ve0ow06UUoKouFlDno1MTtLtUJBKJAH+a9udurG/dxaKuPBzxT HbmgTRLR/1uke9jSJtY2Zn+OBwPP9mSmdhkSmW0uVkCq3rd8xxJGmKblWVm3NT9q /Wi+nqkzWkaUqvJ29Jj6QimByHus4jEx4mW1Ocv2/QMVRT5dGXYBGd7KCHFJJuPm CoiTXKUXlMicZnP9CcFB04H4pqKYTr7OzibRITEqyIKY4efQTFFelxCWdugHgjr+ rnEtEYgO4CuNgby4BjSNBHsXfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTmJzby 5x2Wckmu3BjMmQDagvz1MB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5 RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0 S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0T30ZWY/PbILQf89cciGUwRfQWdCwxe3OABhU51Rh3y35j102hzHA IS7aX/72I9VV5vlNBsBPQIpBylcj68q8YxfGD+lP5roUvur65d/HKXpLy0FCHDW/ 9xBMzwXNR6MykjP+peJwXhEFvqp8AtmmCivwqlEaVBCJazyRBB6i1xVQH/iUIjh6 xn0DrWCaENW5cWyBhTWUf6+Ea33rLkeeQyI58JuqWvdOp9tx7vi+2ojIs0kRZ+7l sGkiSt0NhUjlWFpv/0jUfDW+S3FOrVpbICTfu/1p6Up7tXmAZuZKREmqxNmwLBcr 4PaeXa0Y00UggVl8fKJ3hXwHnLotXpzI -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:13 2025 by rpki-client