$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json) Hash identifier: PsdbE77cc0LUJogVqWxQ0V2cN14c47b9SWRoLel9+q0= Subject key identifier: 0C:B9:07:B7:CC:C5:95:6D:11:71:BA:57:11:C5:30:02:A2:58:36:A6 Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Certificate serial: 02A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft Manifest number: 02A1 Signing time: Mon 11 Aug 2025 01:48:08 +0000 Manifest this update: Mon 11 Aug 2025 01:48:08 +0000 Manifest next update: Mon 18 Aug 2025 01:48:08 +0000 Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: yZ0BEraRpPQaTfrj1S5F1MIEmo2Nu6m46UA51TmBfjw=) 2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: yP2d46I6eQAvhpe/ALVhIcW2d8YQgRGFzGAw4LWLaPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 678 (0x2a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Validity Not Before: Aug 11 01:48:08 2025 GMT Not After : Aug 18 01:48:08 2025 GMT Subject: CN=68994bd8-3b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b0:fc:45:56:52:a6:c2:ec:24:12:a1:62:22: 4a:1c:e3:3e:82:63:86:e8:67:9f:79:e5:b0:a3:83: 56:8f:6e:fc:0e:04:f1:4a:37:56:11:95:a1:06:11: 28:e0:e8:f8:ff:38:27:7f:f8:3f:dd:b5:25:8d:0c: a9:9d:85:2d:14:64:3a:cc:8a:fa:ea:8b:96:4f:0e: 93:58:ce:4d:89:1c:c3:b9:91:15:60:1a:8d:0c:7b: 0e:61:68:5e:7d:eb:36:c5:a7:a4:ad:a2:2c:61:12: b5:33:be:69:eb:83:ae:33:59:aa:c2:de:08:cb:0f: fa:b8:b7:47:e3:a5:ec:d4:a7:fe:0e:9e:7e:c4:73: 0d:05:7a:be:35:e8:bd:30:a7:ab:9c:67:63:55:9c: 36:b8:a1:08:22:4f:5b:9b:3f:38:3a:d4:e3:b2:b0: 45:c9:e2:98:48:31:aa:7c:d2:80:07:a7:ec:ac:1d: f7:3f:2a:36:63:35:63:18:f8:8b:2e:ec:9d:9d:c1: 14:8e:b7:cd:e2:d4:32:a8:79:6e:a1:41:dd:69:6a: 24:11:c2:81:1a:3c:4e:9f:3b:e3:0d:a0:aa:4f:45: ec:f6:93:0f:bd:b6:91:ac:14:80:22:fb:ac:6e:32: 44:ec:50:39:7f:86:33:6b:c6:fa:cf:52:db:2b:e4: ce:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B9:07:B7:CC:C5:95:6D:11:71:BA:57:11:C5:30:02:A2:58:36:A6 X509v3 Authority Key Identifier: keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:87:4c:88:21:1f:86:43:5c:c2:31:02:dd:1c:14:8c:b2:45: f5:0c:97:9d:79:d7:13:44:b6:b9:64:9b:87:01:40:03:9f:c4: 1f:a9:07:a5:3c:c1:ca:3d:ed:53:dc:15:63:33:43:ac:fd:fd: e4:32:dd:f0:38:d1:24:b5:1d:6b:a0:50:10:a2:4f:97:a0:0c: 51:f2:5d:7b:e8:d5:0f:43:e8:62:6c:66:c5:01:68:1a:35:6e: 74:ea:d3:04:f7:0f:44:3d:3c:70:ac:9b:52:20:91:46:77:c5: 8f:e4:49:36:c8:29:f7:ab:2d:51:fc:4e:3e:8e:0b:a1:b1:0f: f2:5e:b6:75:e1:64:3a:db:7e:60:50:c0:77:18:36:ac:1d:ce: 6f:b3:4e:7d:ca:4a:0b:ac:b6:52:7c:d3:4a:b6:fe:82:ee:ec: 48:71:36:bd:4d:ca:62:9d:18:69:3c:81:d8:5b:6c:b1:4d:61: 06:b6:26:e4:62:6b:0a:bd:3a:a0:9a:e1:78:6a:35:45:8f:71: b5:e2:fe:55:53:15:cd:56:c1:a9:79:4a:d1:b6:af:67:43:40: 18:d3:2a:65:30:00:35:9b:5c:da:0e:46:02:7d:e2:15:55:ed: b5:3d:3c:df:05:7e:f0:9e:52:3e:d1:a4:48:ed:47:7c:0f:e4: 4a:c1:80:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1OUUxMTAvBgNVBAUTKDVFNzNFREQ5NkZGMjdBODg1RjYxMzU2RUE3N0IxRjU0 MzVDODRGQ0MwHhcNMjUwODExMDE0ODA4WhcNMjUwODE4MDE0ODA4WjAYMRYwFAYD VQQDEw02ODk5NGJkOC0zYjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8LD8RVZSpsLsJBKhYiJKHOM+gmOG6GefeeWwo4NWj278DgTxSjdWEZWhBhEo 4Oj4/zgnf/g/3bUljQypnYUtFGQ6zIr66ouWTw6TWM5NiRzDuZEVYBqNDHsOYWhe fes2xaekraIsYRK1M75p64OuM1mqwt4Iyw/6uLdH46Xs1Kf+Dp5+xHMNBXq+Nei9 MKernGdjVZw2uKEIIk9bmz84OtTjsrBFyeKYSDGqfNKAB6fsrB33Pyo2YzVjGPiL LuydncEUjrfN4tQyqHluoUHdaWokEcKBGjxOnzvjDaCqT0Xs9pMPvbaRrBSAIvus bjJE7FA5f4Yza8b6z1LbK+TO2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy5B7fM xZVtEXG6VxHFMAKiWDamMB8GA1UdIwQYMBaAFF5z7dlv8nqIX2E1bqd7H1Q1yE/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU5RS9DQjBFQTc3NjBD Q0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVvaGZZVFZ1cDNzZlZEWElU OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huUHQyV195ZW9oZllUVnVwM3NmVkRYSVQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU5RS9DQjBFQTc3NjBDQ0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVv aGZZVFZ1cDNzZlZEWElUOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqh0yIIR+GQ1zCMQLdHBSMskX1DJededcTRLa5ZJuHAUADn8QfqQel PMHKPe1T3BVjM0Os/f3kMt3wONEktR1roFAQok+XoAxR8l176NUPQ+hibGbFAWga NW506tME9w9EPTxwrJtSIJFGd8WP5Ek2yCn3qy1R/E4+jguhsQ/yXrZ14WQ6235g UMB3GDasHc5vs059ykoLrLZSfNNKtv6C7uxIcTa9TcpinRhpPIHYW2yxTWEGtibk YmsKvTqgmuF4ajVFj3G14v5VUxXNVsGpeUrRtq9nQ0AY0yplMAA1m1zaDkYCfeIV Ve21PTzfBX7wnlI+0aRI7Ud8D+RKwYBC -----END CERTIFICATE-----Generated at Mon Aug 11 10:39:28 2025 by rpki-client