$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: VIMAgvYTCVoLugA7po+2FSh8VQSfwXiZOQuM8s8vm9A= Subject key identifier: BC:35:5A:09:EA:9D:AE:FC:6C:27:BC:F4:95:A9:96:90:BF:A0:4C:94 Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 77 Signing time: Wed 03 Sep 2025 07:29:46 +0000 Manifest this update: Wed 03 Sep 2025 07:29:46 +0000 Manifest next update: Wed 10 Sep 2025 07:29:46 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: wGWtZncGHHOi6yqT8QQUJIp7FicMH7lTn+E/BIWhqZU=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Sep 3 07:29:46 2025 GMT Not After : Sep 10 07:29:46 2025 GMT Subject: CN=68b7ee6a-42a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:65:9d:d8:d4:82:e0:66:75:51:dc:94:40: 54:59:5d:46:dc:ba:be:49:b6:53:7e:e8:96:ec:22: 75:01:23:a4:fa:09:2c:c4:7f:ec:8a:46:14:a3:c5: 7a:9d:56:d3:26:12:2f:dc:ac:fd:47:7d:43:f3:69: 69:81:d5:ce:ab:1a:07:07:f8:c3:53:22:f9:88:7f: 72:44:90:7b:6b:2b:e2:db:9e:28:53:0a:b6:4f:f3: 3b:e9:e7:09:97:95:cd:8f:43:55:2e:ee:83:23:6d: 8d:83:9e:2d:fe:1d:b4:f7:d8:31:9e:d6:2e:d3:e1: 80:2d:cc:13:88:d3:05:53:2e:a0:67:34:e2:17:ce: f4:af:75:94:cf:f2:23:0d:49:ef:29:a1:89:aa:cd: 03:cf:81:cb:31:43:df:cc:f1:d9:cf:8e:b2:c1:69: 6d:3c:ad:26:d1:f0:c2:8f:53:55:cc:be:86:02:70: 4b:61:cb:da:40:42:df:e1:35:ff:92:9d:63:ff:f0: c1:ef:ef:70:42:24:55:f4:80:8c:ef:2c:d2:4c:bc: ff:88:97:42:12:4c:e0:3a:c6:05:29:19:67:b4:3a: 99:a2:eb:51:c1:f3:74:35:6e:87:80:62:ca:ad:90: eb:90:b7:b2:ce:af:71:1b:97:a3:bc:d4:1d:e8:12: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:35:5A:09:EA:9D:AE:FC:6C:27:BC:F4:95:A9:96:90:BF:A0:4C:94 X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:45:02:57:d1:ae:3c:5b:42:2e:11:1b:e9:9b:7e:21:58:44: be:01:9f:a7:e5:6c:3e:c5:ff:c3:17:26:22:73:61:5e:bd:7c: 85:5d:0d:b6:97:0c:ea:63:98:7c:1a:d5:a6:06:d5:8b:9f:65: 56:08:37:57:cb:aa:20:3d:d1:2b:7e:c9:ca:60:7b:36:71:3a: 24:fe:a6:b8:57:a6:d1:5b:9a:37:7e:22:78:36:ec:bd:d0:c7: da:7f:37:33:d3:3d:5c:79:62:7e:5e:80:06:7d:16:af:9c:3f: ce:bf:6c:41:08:53:49:62:60:78:fb:8d:d6:64:f3:28:fb:33: d6:22:0a:99:dc:e4:8e:59:ae:d4:46:23:0a:c8:7e:54:e4:05: 97:6a:42:49:0c:1b:34:d4:04:bc:32:1f:6e:21:01:c7:cf:fb: 3b:bd:e6:1f:b3:0d:b3:eb:2b:11:05:71:4f:e9:43:a7:a2:02: 4d:c0:d5:24:87:6d:fc:87:a7:5a:72:db:f4:23:98:dd:cb:94: af:c1:8d:fa:36:c2:7f:09:8f:43:12:0b:35:32:9f:d4:7a:42: ce:44:50:d3:d4:26:58:ea:de:5c:53:2a:9b:12:65:02:d0:6f: 62:a2:9d:cc:59:e5:01:f9:31:87:7c:d6:55:b0:c3:5a:44:81: a4:c9:55:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThFQkM4MUYwNjI1 QjI5MzE2MDAeFw0yNTA5MDMwNzI5NDZaFw0yNTA5MTAwNzI5NDZaMBgxFjAUBgNV BAMTDTY4YjdlZTZhLTQyYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9hmWd2NSC4GZ1UdyUQFRZXUbcur5JtlN+6JbsInUBI6T6CSzEf+yKRhSjxXqd VtMmEi/crP1HfUPzaWmB1c6rGgcH+MNTIvmIf3JEkHtrK+LbnihTCrZP8zvp5wmX lc2PQ1Uu7oMjbY2Dni3+HbT32DGe1i7T4YAtzBOI0wVTLqBnNOIXzvSvdZTP8iMN Se8poYmqzQPPgcsxQ9/M8dnPjrLBaW08rSbR8MKPU1XMvoYCcEthy9pAQt/hNf+S nWP/8MHv73BCJFX0gIzvLNJMvP+Il0ISTOA6xgUpGWe0Opmi61HB83Q1boeAYsqt kOuQt7LOr3Ebl6O81B3oEu5NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvDVaCeqd rvxsJ7z0lamWkL+gTJQwHwYDVR0jBBgwFoAUXv3pjE+/jRGHtoWOvIHwYlspMWAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzIwQkUxQTMwRDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1X QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHYzcGpFLV9qUkdIdG9XT3ZJSHdZbHNwTVdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzIwQkUxQTMwRDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJH SHRvV092SUh3WWxzcE1XQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALhFAlfRrjxbQi4RG+mbfiFYRL4Bn6flbD7F/8MXJiJzYV69fIVdDbaX DOpjmHwa1aYG1YufZVYIN1fLqiA90St+ycpgezZxOiT+prhXptFbmjd+Ing27L3Q x9p/NzPTPVx5Yn5egAZ9Fq+cP86/bEEIU0liYHj7jdZk8yj7M9YiCpnc5I5ZrtRG IwrIflTkBZdqQkkMGzTUBLwyH24hAcfP+zu95h+zDbPrKxEFcU/pQ6eiAk3A1SSH bfyHp1py2/QjmN3LlK/Bjfo2wn8Jj0MSCzUyn9R6Qs5EUNPUJljq3lxTKpsSZQLQ b2KincxZ5QH5MYd81lWww1pEgaTJVWE= -----END CERTIFICATE-----Generated at Thu Sep 4 14:06:17 2025 by rpki-client