$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: oDQkIV3R1IGi1streTI9jV3uuVIl8QrDkYw3gQDf4/E= Subject key identifier: C0:56:CE:67:9F:EC:85:13:59:1A:00:F2:FB:86:E9:AB:FA:09:30:22 Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: 33 Signing time: Mon 04 Aug 2025 17:54:18 +0000 Manifest this update: Mon 04 Aug 2025 17:54:17 +0000 Manifest next update: Mon 11 Aug 2025 17:54:17 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: C9Olcq/X7xQPgROzLZ3y0iKEqS5KiWKxpR0jpXhrlWs=) 2: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: Je+up3kY6qu1B3So3Vnq/xOYjMIPNymqMCzCxvb8aL4=) 3: 87087F00267E11F09183092AC4F9AE02.roa (hash: vPD3MBlV+VYxtTk5npGCIsRmwvlSAFp0uTh8dXUbHV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Aug 4 17:54:17 2025 GMT Not After : Aug 11 17:54:17 2025 GMT Subject: CN=6890f3c9-946d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:1d:e9:d0:2a:bd:c9:ad:88:86:dc:22:8b: e8:c8:80:2f:f3:90:fe:25:b4:e8:26:52:e1:68:de: fe:cc:ca:04:60:86:b4:e9:41:41:5b:13:8c:bb:a7: 54:21:12:39:da:71:9f:00:7b:4c:58:5a:58:be:65: 45:5e:f5:0f:d4:ca:a0:c0:18:bd:66:e2:4f:98:9d: a1:ac:62:ca:48:18:54:8a:63:9e:66:90:8a:08:2c: 8e:98:14:f1:5b:4c:b6:17:d2:91:f6:92:a8:02:2c: bd:d9:a9:a6:58:29:b2:dc:96:46:33:0b:4a:dc:cc: 8d:f3:d4:70:d3:95:1a:02:e1:ec:b2:5d:2e:b6:86: d9:79:66:72:c1:e5:af:68:9c:d9:79:1b:c0:c5:46: 83:9f:13:21:22:91:10:83:85:f2:5f:4c:b9:f3:95: 5c:6f:cb:9d:b1:c5:eb:c0:d1:ac:2b:68:83:57:a4: 12:97:c8:e0:4a:b8:49:35:da:d3:f2:08:74:4a:bd: 83:bf:13:2d:63:86:52:74:58:5d:e5:6f:44:73:90: 00:4a:3a:43:a7:16:b2:67:fe:bc:70:16:e3:1e:51: 87:f3:32:b1:d7:49:e7:00:18:fd:f3:5f:81:e2:89: a9:47:03:59:0a:a3:3c:7b:f7:ee:2d:fe:0f:ed:3b: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:56:CE:67:9F:EC:85:13:59:1A:00:F2:FB:86:E9:AB:FA:09:30:22 X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:84:d6:1d:ed:ff:e4:bd:b1:50:38:a1:55:69:11:23:6e:7a: 11:78:64:7b:1a:79:72:a9:45:f1:dc:ab:fd:45:ee:90:e1:b4: 85:bf:e6:c2:88:f3:14:ee:7c:53:1f:e0:fc:c1:d6:5f:e8:22: ef:4d:55:68:97:cc:80:95:b1:08:5e:1b:54:69:9b:13:76:2b: f1:4f:4a:ae:3a:fe:8e:63:9f:9a:4a:82:ac:73:06:dd:cf:c5: 6c:bd:50:9c:fd:78:27:f2:0f:58:20:78:56:d1:13:1b:cb:8e: 3e:90:d9:41:3a:9e:c2:de:c6:f4:f2:76:09:9c:dc:34:3f:b8: 40:86:65:d1:88:b4:fb:da:dc:a7:81:4c:6d:23:19:3c:da:a4: a7:c2:9b:7d:1f:92:30:1c:87:ce:a6:32:cb:12:eb:4f:10:2f: 2f:5c:90:ad:3f:f4:41:46:1d:fa:d2:3d:9b:0e:d5:6d:58:d2: 70:53:1d:63:f4:2e:71:a6:c0:ba:b7:9b:dd:58:ed:a7:d2:21: ea:fa:95:84:29:32:d5:1d:2e:3b:98:72:05:0b:46:4a:62:c0: 42:06:98:b0:fc:06:34:92:84:8c:68:be:b7:de:fa:4c:f6:68: dc:e6:d6:d1:4d:b9:19:de:6b:7f:67:61:10:7d:1f:00:43:3e: cb:9d:4e:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Njk4RTExMC8GA1UEBRMoNURCNzVCMkRGOTREMDQ0NzRBNkU1RTJENEI3OENDMDg0 QkZDMkE2QzAeFw0yNTA4MDQxNzU0MTdaFw0yNTA4MTExNzU0MTdaMBgxFjAUBgNV BAMTDTY4OTBmM2M5LTk0NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHGh3p0Cq9ya2Ihtwii+jIgC/zkP4ltOgmUuFo3v7MygRghrTpQUFbE4y7p1Qh EjnacZ8Ae0xYWli+ZUVe9Q/UyqDAGL1m4k+YnaGsYspIGFSKY55mkIoILI6YFPFb TLYX0pH2kqgCLL3ZqaZYKbLclkYzC0rczI3z1HDTlRoC4eyyXS62htl5ZnLB5a9o nNl5G8DFRoOfEyEikRCDhfJfTLnzlVxvy52xxevA0awraINXpBKXyOBKuEk12tPy CHRKvYO/Ey1jhlJ0WF3lb0RzkABKOkOnFrJn/rxwFuMeUYfzMrHXSecAGP3zX4Hi ialHA1kKozx79+4t/g/tO6HfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwFbOZ5/s hRNZGgDy+4bpq/oJMCIwHwYDVR0jBBgwFoAUXbdbLflNBEdKbl4tS3jMCEv8Kmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2OThFLzA5NUY2QzhDMjY3 QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEtt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGJkYkxmbE5CRWRLYmw0dFMzak1DRXY4S213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 OThFLzA5NUY2QzhDMjY3QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVk S2JsNHRTM2pNQ0V2OEttdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGGE1h3t/+S9sVA4oVVpESNuehF4ZHsaeXKpRfHcq/1F7pDhtIW/5sKI 8xTufFMf4PzB1l/oIu9NVWiXzICVsQheG1RpmxN2K/FPSq46/o5jn5pKgqxzBt3P xWy9UJz9eCfyD1ggeFbRExvLjj6Q2UE6nsLexvTydgmc3DQ/uECGZdGItPva3KeB TG0jGTzapKfCm30fkjAch86mMssS608QLy9ckK0/9EFGHfrSPZsO1W1Y0nBTHWP0 LnGmwLq3m91Y7afSIer6lYQpMtUdLjuYcgULRkpiwEIGmLD8BjSShIxovrfe+kz2 aNzm1tFNuRnea39nYRB9HwBDPsudTs8= -----END CERTIFICATE-----Generated at Wed Aug 6 14:18:32 2025 by rpki-client