$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json) Hash identifier: gcSAM9lPCTFizCNvGbJUH9JBm/iVh4Ev/uYFnHaksRM= Subject key identifier: BA:6A:17:0F:D1:62:53:63:AF:58:F3:B6:F5:2E:67:FC:7A:AD:5C:14 Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Certificate serial: 1940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft Manifest number: 1935 Signing time: Mon 08 Sep 2025 16:26:12 +0000 Manifest this update: Mon 08 Sep 2025 16:26:11 +0000 Manifest next update: Mon 15 Sep 2025 16:26:11 +0000 Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: WkI3KicOoxWMyXUmsitJEm4J4B3gzaLDfOM7dNSoZqY=) 2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: CF41fEpYfOio5+N+rdP4mHFE/1R/CEvPcYP/7UAC+WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6464 (0x1940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Validity Not Before: Sep 8 16:26:11 2025 GMT Not After : Sep 15 16:26:11 2025 GMT Subject: CN=68bf03a3-c41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4e:7a:7f:7c:fd:56:99:44:ad:81:56:ed:9b: b0:8a:8f:5e:c6:8e:e7:1b:83:aa:77:a6:7b:1f:47: 44:de:7f:e6:e8:4d:1b:1a:91:04:69:cf:9f:53:85: e0:92:ec:88:d7:05:ed:32:d9:8c:b8:f2:a4:56:3b: 26:32:6b:a6:77:20:84:2a:56:19:e0:e1:d3:14:50: 33:19:51:14:59:2b:e8:84:a8:e0:23:37:63:cb:8d: 93:3a:8a:db:de:c9:68:98:18:32:77:0a:7c:d6:d0: 3f:30:56:6a:08:b0:e1:ff:53:cc:34:e6:8a:82:10: 90:5e:90:ae:25:60:e3:f2:d7:ac:48:7e:18:d9:bb: ef:7b:80:2c:b3:2d:c5:38:c6:4b:f9:c5:32:05:ca: bd:78:dc:d8:4c:d1:72:e2:fb:dd:9a:0f:e2:90:1b: 6b:c1:6b:ff:86:6f:03:29:84:62:67:56:d8:78:dd: e9:93:13:7f:30:72:d4:ad:02:ff:26:e1:83:60:9a: 1e:ec:ac:03:45:82:f2:d2:df:ee:b3:2c:77:6f:92: 21:14:07:2f:64:2e:cb:e7:c4:7b:3f:0a:55:06:32: 2b:aa:af:8a:53:2a:59:41:ca:49:27:72:b9:86:b4: 7b:12:9a:45:47:ce:17:ef:61:33:53:f8:98:e2:08: 41:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6A:17:0F:D1:62:53:63:AF:58:F3:B6:F5:2E:67:FC:7A:AD:5C:14 X509v3 Authority Key Identifier: keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a3:1e:1c:d0:90:91:da:6f:6a:f1:b3:43:71:16:fc:91:93: 40:06:08:38:a0:dc:29:03:5a:57:54:f7:bb:0a:58:20:f5:2a: 16:85:7e:e1:5e:c4:f7:b6:d9:d5:11:f0:08:7f:76:be:38:da: 8f:2d:d8:92:ec:ce:d2:fc:a5:7a:b8:94:02:d2:b4:db:b0:ce: 4f:00:6a:d2:e5:ff:13:ae:50:43:f4:94:77:76:71:aa:8c:83: 76:ce:ec:83:32:df:b4:26:ac:fe:9e:5e:ac:49:31:12:54:42: ee:96:93:c0:9a:92:f7:cc:f5:f5:b5:31:3f:b3:b6:a3:a0:b3: 7b:b5:4d:73:9b:a2:7d:04:ac:07:d2:7f:11:02:18:9a:75:51: b5:6e:67:c1:e8:55:72:8f:bb:1d:ac:63:d3:6f:5d:7d:95:8e: be:1a:13:03:21:3a:6b:e8:9f:fb:3b:19:f1:8e:84:ce:76:56: 92:b6:5a:0d:61:c6:e2:00:86:ec:9e:f8:b6:a9:58:1a:86:4f: 41:08:fe:aa:29:62:5f:eb:a6:4b:0f:8e:08:05:05:2b:67:95: f7:ee:7d:99:35:6b:cc:9d:4e:2a:b0:36:2e:8b:6b:b1:96:cc: d5:99:76:77:65:80:9c:df:44:22:4f:a4:fc:4e:df:98:1d:43: 8a:95:23:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNjExMTAvBgNVBAUTKEM0OEFBQ0VCNEREQUVFM0M2MDQyRTY2MjE2QUQ3OTE1 MDdCNDdDNkIwHhcNMjUwOTA4MTYyNjExWhcNMjUwOTE1MTYyNjExWjAYMRYwFAYD VQQDEw02OGJmMDNhMy1jNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAok56f3z9VplErYFW7Zuwio9exo7nG4Oqd6Z7H0dE3n/m6E0bGpEEac+fU4Xg kuyI1wXtMtmMuPKkVjsmMmumdyCEKlYZ4OHTFFAzGVEUWSvohKjgIzdjy42TOorb 3slomBgydwp81tA/MFZqCLDh/1PMNOaKghCQXpCuJWDj8tesSH4Y2bvve4Assy3F OMZL+cUyBcq9eNzYTNFy4vvdmg/ikBtrwWv/hm8DKYRiZ1bYeN3pkxN/MHLUrQL/ JuGDYJoe7KwDRYLy0t/usyx3b5IhFAcvZC7L58R7PwpVBjIrqq+KUypZQcpJJ3K5 hrR7EppFR84X72EzU/iY4ghBFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpqFw/R YlNjr1jztvUuZ/x6rVwUMB8GA1UdIwQYMBaAFMSKrOtN2u48YELmYhateRUHtHxr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY2MS8xNkE2REM2MDgz REExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdqeGdRdVppRnExNUZRZTBm R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJcXM2MDNhN2p4Z1F1WmlGcTE1RlFlMGZHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY2MS8xNkE2REM2MDgzREExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdq eGdRdVppRnExNUZRZTBmR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFox4c0JCR2m9q8bNDcRb8kZNABgg4oNwpA1pXVPe7Clgg9SoWhX7h XsT3ttnVEfAIf3a+ONqPLdiS7M7S/KV6uJQC0rTbsM5PAGrS5f8TrlBD9JR3dnGq jIN2zuyDMt+0Jqz+nl6sSTESVELulpPAmpL3zPX1tTE/s7ajoLN7tU1zm6J9BKwH 0n8RAhiadVG1bmfB6FVyj7sdrGPTb119lY6+GhMDITpr6J/7OxnxjoTOdlaStloN YcbiAIbsnvi2qVgahk9BCP6qKWJf66ZLD44IBQUrZ5X37n2ZNWvMnU4qsDYui2ux lszVmXZ3ZYCc30QiT6T8Tt+YHUOKlSOR -----END CERTIFICATE-----Generated at Tue Sep 9 13:34:01 2025 by rpki-client