$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: 04pv9sfj5amuT1p5Xw3ZtAfdp05VCkebkLj67ZVzuMo= Subject key identifier: BD:20:62:C8:6C:61:00:6C:47:CF:FC:B6:E7:3B:45:49:9E:C9:C2:23 Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: BF Signing time: Mon 11 Aug 2025 06:01:39 +0000 Manifest this update: Mon 11 Aug 2025 06:01:38 +0000 Manifest next update: Mon 18 Aug 2025 06:01:38 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: XRz8de1KiUwiwK3/+7M3HUXZmYmK0itCNEntNZ3CDeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Aug 11 06:01:38 2025 GMT Not After : Aug 18 06:01:38 2025 GMT Subject: CN=68998742-a557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:49:57:ff:28:b0:59:ba:91:ad:e3:bb:2a:50: a3:75:f7:d8:59:c1:9e:8a:be:60:28:10:16:3a:f7: 30:98:c5:ec:65:c6:30:cd:dc:01:aa:7b:11:a9:a8: ca:c6:fe:9e:44:bb:a7:d6:f2:f4:2f:33:35:05:6e: ea:78:d3:81:44:f9:62:36:6e:4a:d1:bb:47:17:95: b8:74:24:2c:c6:1f:07:1a:cc:08:22:f3:47:2e:61: f1:e1:0c:da:c0:ad:f4:80:a1:69:76:a7:11:20:fd: e7:fc:98:b8:8d:39:9d:1d:1a:19:c1:43:36:e5:7c: c1:84:72:62:72:9d:0c:d1:93:01:16:1b:43:1f:32: 68:22:79:69:10:8d:4e:08:67:87:68:3b:e1:64:da: b0:35:4e:e8:0c:e8:f4:b3:94:8e:1a:96:09:b1:57: 22:ec:07:07:65:78:9a:63:23:f5:56:25:3b:ac:d0: ae:4d:a6:fb:34:04:02:6d:0c:14:a0:90:f9:a0:11: 57:c7:4f:18:33:39:f7:ab:e0:fa:b5:46:6e:64:c9: 6c:66:e2:aa:d6:a3:f4:86:30:4e:f2:c0:70:30:b1: 7a:fa:52:df:43:e1:b2:da:a3:d8:21:af:6e:a9:2e: 4a:3c:bb:6b:be:e7:02:e6:6c:20:f6:ec:dd:c7:4c: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:20:62:C8:6C:61:00:6C:47:CF:FC:B6:E7:3B:45:49:9E:C9:C2:23 X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f2:3c:22:ad:5d:14:99:58:35:86:9b:32:2d:21:0d:a0:b8: 6b:2d:cf:77:65:2e:bf:0d:98:36:db:22:f7:e3:2d:3f:f0:c6: 25:3b:be:92:07:e5:bc:b3:16:4a:c2:a4:3d:08:48:7f:b9:e1: 22:1c:a1:73:6c:92:dd:68:09:72:ae:54:b6:1a:48:cd:90:5c: 40:60:7e:af:34:d5:bf:bc:51:ac:a3:99:4f:27:c4:c4:c5:89: 9c:e6:98:24:e0:8f:f4:99:3e:9f:5c:b4:c0:04:84:86:fb:76: a9:f7:83:07:51:c7:8b:cb:c3:e0:d1:05:03:4d:5e:09:ff:9b: c1:86:22:50:3f:79:41:f6:b9:56:e8:8a:ba:31:5f:ad:19:3b: a5:64:97:c1:b0:5f:d0:43:9e:01:ed:c0:5f:1e:5b:bd:db:92: f4:a9:2a:8a:78:04:f1:ba:09:af:a1:58:56:30:c8:0c:e2:7e: 50:b7:9f:63:ce:72:28:55:21:c4:e2:1c:47:52:74:b5:32:1e: a0:ee:5a:4f:76:ee:6b:ed:33:a2:10:59:0a:9c:22:44:11:97: a0:fb:99:6d:f4:db:16:e4:37:4c:9d:2b:f6:de:79:c5:cb:ed: a5:fa:9a:1b:85:21:b9:35:16:df:bc:e3:31:95:61:04:f2:7b: 32:c6:15:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjUwODExMDYwMTM4WhcNMjUwODE4MDYwMTM4WjAYMRYwFAYD VQQDEw02ODk5ODc0Mi1hNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0lX/yiwWbqRreO7KlCjdffYWcGeir5gKBAWOvcwmMXsZcYwzdwBqnsRqajK xv6eRLun1vL0LzM1BW7qeNOBRPliNm5K0btHF5W4dCQsxh8HGswIIvNHLmHx4Qza wK30gKFpdqcRIP3n/Ji4jTmdHRoZwUM25XzBhHJicp0M0ZMBFhtDHzJoInlpEI1O CGeHaDvhZNqwNU7oDOj0s5SOGpYJsVci7AcHZXiaYyP1ViU7rNCuTab7NAQCbQwU oJD5oBFXx08YMzn3q+D6tUZuZMlsZuKq1qP0hjBO8sBwMLF6+lLfQ+Gy2qPYIa9u qS5KPLtrvucC5mwg9uzdx0wJQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0gYshs YQBsR8/8tuc7RUmeycIjMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ8jwirV0UmVg1hpsyLSENoLhrLc93ZS6/DZg22yL34y0/8MYlO76S B+W8sxZKwqQ9CEh/ueEiHKFzbJLdaAlyrlS2GkjNkFxAYH6vNNW/vFGso5lPJ8TE xYmc5pgk4I/0mT6fXLTABISG+3ap94MHUceLy8Pg0QUDTV4J/5vBhiJQP3lB9rlW 6Iq6MV+tGTulZJfBsF/QQ54B7cBfHlu925L0qSqKeATxugmvoVhWMMgM4n5Qt59j znIoVSHE4hxHUnS1Mh6g7lpPdu5r7TOiEFkKnCJEEZeg+5lt9NsW5DdMnSv23nnF y+2l+pobhSG5NRbfvOMxlWEE8nsyxhUM -----END CERTIFICATE-----Generated at Wed Aug 13 02:14:56 2025 by rpki-client