$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json) Hash identifier: IU7svFfwCvltAz+xkmd4iu8MEsr+fEeHr1sBGMQqZDg= Subject key identifier: 72:E4:C0:CC:EF:B3:52:38:60:9B:08:38:C3:8D:AD:B3:4C:CB:03:FE Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft Manifest number: 020E Signing time: Sat 09 Aug 2025 02:43:57 +0000 Manifest this update: Sat 09 Aug 2025 02:43:57 +0000 Manifest next update: Sat 16 Aug 2025 02:43:57 +0000 Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: UdW8zB6kwwCjhAP8cLGmw2Z8ZU7l2rD+Mmpa8JTbm7E=) 2: D98071A44F4411F0AF01D40FC4F9AE02.roa (hash: bPBsCe6a2VFWcNMWeHmOx+7VTXSQy1aeyYkZxcsxaxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Validity Not Before: Aug 9 02:43:57 2025 GMT Not After : Aug 16 02:43:57 2025 GMT Subject: CN=6896b5ed-a853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:e7:b1:02:9b:21:9f:f9:7e:a5:f5:1f:a8: ac:1c:42:e0:c4:e2:76:eb:90:81:7e:f9:d8:1a:69: 19:a0:ee:88:bf:5c:1c:73:8e:a1:20:03:ca:5d:a5: 42:c4:64:c2:c6:4d:99:1a:d3:95:63:b8:18:06:29: 7c:61:c1:f3:85:de:14:6c:00:1a:cd:b6:8d:76:b2: 37:42:da:05:08:ad:03:df:ee:47:b4:cf:21:f1:6d: b2:71:9d:ff:cc:be:c2:a1:49:2e:fc:bd:c4:3c:4c: aa:19:f5:32:c0:00:41:68:50:97:f1:2d:8d:db:81: e2:c2:3d:66:3a:ad:ea:b1:31:0e:63:09:62:94:04: c7:51:4e:b2:df:62:3e:97:b2:39:f1:95:9b:4b:46: 74:c3:8c:cb:b5:2a:f1:1c:f5:c2:16:fc:88:6e:83: 84:70:2f:68:21:61:88:d9:d2:e8:25:39:c0:02:4f: ab:df:b6:04:6c:ec:a2:6b:6f:07:ff:e8:a4:6a:63: 8a:ac:a0:1d:48:55:b2:fa:ca:61:b1:fa:de:2b:5f: cf:4c:ac:92:7b:5c:d8:cb:90:76:77:b1:67:83:8e: 8e:bc:3c:83:e6:bd:55:2c:12:7e:45:e6:91:c6:39: 7d:4d:7b:5b:16:b3:22:fc:83:6d:3b:2b:f5:fd:00: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E4:C0:CC:EF:B3:52:38:60:9B:08:38:C3:8D:AD:B3:4C:CB:03:FE X509v3 Authority Key Identifier: keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:4d:67:de:02:b5:ec:39:53:02:96:8e:11:0f:2a:5c:20:fb: 62:ae:a3:d5:81:d6:31:d1:57:da:28:70:2c:8c:3a:fc:2b:f0: 0a:4b:21:89:35:08:cf:6a:10:38:ab:a4:6b:a7:0b:eb:3a:91: f4:8c:f4:6a:a2:2e:a2:c2:9b:03:07:b8:56:1e:44:a7:7b:db: e7:16:d8:de:b1:10:e7:75:19:7e:3e:20:3a:87:c9:ce:50:f0: a6:a2:ca:a9:b0:65:40:a6:76:75:a9:d1:8c:30:5e:81:dc:48: f0:6a:54:b0:3f:4a:21:4d:5b:a3:31:ac:a6:fd:20:c0:ac:eb: 27:c0:47:d0:48:12:b2:12:11:6a:7d:fa:67:d0:39:dd:cf:bb: 71:b3:b5:7b:5b:c9:bd:a5:a9:1e:38:3e:93:0b:03:09:41:6d: 61:68:0f:63:b0:92:39:08:ad:bd:f6:05:e7:be:fe:13:dc:65: aa:77:85:17:f4:81:7a:7c:f2:db:2b:53:a7:e6:fe:8c:f4:ff: b6:d4:e9:62:c2:5c:6a:8d:57:93:82:d8:82:58:4a:6d:0b:ec: 9e:d6:aa:68:10:3c:a2:0b:a1:7b:46:8d:77:71:4a:33:4c:b2: 1a:3c:5a:7e:9c:da:bc:9d:20:67:06:db:6e:a4:f2:ec:21:8f: 85:02:1c:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0 RTIyRTk0NDUwHhcNMjUwODA5MDI0MzU3WhcNMjUwODE2MDI0MzU3WjAYMRYwFAYD VQQDEw02ODk2YjVlZC1hODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ODnsQKbIZ/5fqX1H6isHELgxOJ265CBfvnYGmkZoO6Iv1wcc46hIAPKXaVC xGTCxk2ZGtOVY7gYBil8YcHzhd4UbAAazbaNdrI3QtoFCK0D3+5HtM8h8W2ycZ3/ zL7CoUku/L3EPEyqGfUywABBaFCX8S2N24Hiwj1mOq3qsTEOYwlilATHUU6y32I+ l7I58ZWbS0Z0w4zLtSrxHPXCFvyIboOEcC9oIWGI2dLoJTnAAk+r37YEbOyia28H /+ikamOKrKAdSFWy+sphsfreK1/PTKySe1zYy5B2d7Fng46OvDyD5r1VLBJ+ReaR xjl9TXtbFrMi/INtOyv1/QByVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLkwMzv s1I4YJsIOMONrbNMywP+MB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2 RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM2QS9CMEYzM0QyQTY2RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRX RE5tZkJ1WGRBdDVPSXVsRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5TWfeArXsOVMClo4RDypcIPtirqPVgdYx0VfaKHAsjDr8K/AKSyGJ NQjPahA4q6RrpwvrOpH0jPRqoi6iwpsDB7hWHkSne9vnFtjesRDndRl+PiA6h8nO UPCmosqpsGVApnZ1qdGMMF6B3EjwalSwP0ohTVujMaym/SDArOsnwEfQSBKyEhFq ffpn0Dndz7txs7V7W8m9pakeOD6TCwMJQW1haA9jsJI5CK299gXnvv4T3GWqd4UX 9IF6fPLbK1On5v6M9P+21OliwlxqjVeTgtiCWEptC+ye1qpoEDyiC6F7Ro13cUoz TLIaPFp+nNq8nSBnBttupPLsIY+FAhzu -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:12 2025 by rpki-client