$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: 4W0t0UTvkBFL4KFVymfTqkmvNkeu3xFBQxymNot8qyw= Subject key identifier: 58:1D:5E:BA:67:74:0C:21:AF:90:9E:49:DB:2B:C4:B1:9C:B7:AD:B7 Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2BCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2BCC Signing time: Sun 10 Aug 2025 15:29:36 +0000 Manifest this update: Sun 10 Aug 2025 15:29:36 +0000 Manifest next update: Sun 17 Aug 2025 15:29:36 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: eUmefDN95Pha2Cg1X90ySWcjZP2Avjs7Oq1/Q+gEx00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11212 (0x2bcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Aug 10 15:29:36 2025 GMT Not After : Aug 17 15:29:36 2025 GMT Subject: CN=6898bae0-3eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5c:ec:fc:a7:a9:8d:25:c7:4c:6c:95:b2:d7: 0a:52:ae:a0:35:0e:1a:38:b0:0b:16:9d:96:6a:70: ca:83:a0:21:56:3c:58:ee:72:35:19:45:02:42:56: ff:74:c4:2f:82:05:99:01:22:95:ef:ba:05:0e:7e: 75:2b:b0:49:b5:c2:79:bf:1b:cf:6b:06:87:54:e2: 41:39:0e:96:5b:f6:c7:9b:ed:80:a6:e8:14:12:69: 2a:af:d5:bb:5c:f4:70:f0:ea:63:c4:5b:0f:f1:79: 48:7b:06:dc:84:df:11:8a:e9:fb:f6:71:91:47:3a: 35:b8:30:c4:b7:8b:69:c5:8c:6b:61:9e:92:5e:41: 1a:b9:d9:b5:65:c0:c4:02:9e:e4:c6:40:6d:5c:81: 7a:9c:f5:a5:66:22:85:b1:e2:76:0c:b2:7a:a1:c9: 97:5d:14:8b:9c:18:33:76:47:23:9d:e7:2e:4c:c6: c3:ea:2e:ad:02:43:02:5c:50:d7:4b:fe:45:0b:13: d0:fa:74:7d:4c:72:2f:d1:0f:91:c9:fc:e1:64:8f: 47:8a:d0:7f:d7:43:26:6e:9f:78:10:18:9f:98:6e: 0c:87:a6:0c:25:3d:d1:dc:e8:61:99:4b:58:3b:44: 52:ae:c2:ce:b5:97:bf:78:bf:91:bb:44:ef:df:fb: 27:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1D:5E:BA:67:74:0C:21:AF:90:9E:49:DB:2B:C4:B1:9C:B7:AD:B7 X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:1a:cf:80:dc:d4:cc:60:a6:cf:4e:2b:90:4b:5f:95:02:e0: a7:1a:41:fc:42:c7:95:7f:7e:42:b2:b9:2f:68:21:d6:d4:f9: 5a:25:ea:94:cf:f0:78:82:84:87:f7:02:0d:24:45:7b:74:14: 89:38:a0:62:e3:f2:58:19:b1:f8:d9:a6:68:64:eb:50:28:23: d0:70:e9:74:85:aa:65:4f:74:c9:e6:46:ea:9b:e8:92:c5:6b: b1:0b:56:ae:5f:7e:80:21:6b:1f:3f:16:1a:61:72:ba:d9:93: 04:a2:d5:82:07:87:2b:4a:fc:73:64:e9:e7:75:15:fa:bc:76: fe:9d:20:2a:e6:53:1f:53:c4:d0:af:19:4b:76:04:ac:aa:85: cd:1f:5b:25:5a:05:9a:e1:22:c8:46:15:c9:7b:8d:5f:4f:f2: 12:59:9d:30:1c:a3:76:39:21:b6:db:36:43:74:2f:90:a5:34: 60:ff:a6:80:97:3b:cc:8e:4f:ac:0d:2c:0a:85:3a:45:86:e1: 50:d7:53:4d:1a:b0:4d:ad:56:ec:a6:21:1c:2e:00:0b:8a:79: 6b:4a:b4:b4:52:b3:f5:0a:86:5e:c1:06:77:0a:4b:4c:6b:09: 64:53:d4:24:ba:44:6f:e9:0a:15:e3:96:86:78:03:40:6a:55: 3c:22:87:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUwODEwMTUyOTM2WhcNMjUwODE3MTUyOTM2WjAYMRYwFAYD VQQDEw02ODk4YmFlMC0zZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Fzs/KepjSXHTGyVstcKUq6gNQ4aOLALFp2WanDKg6AhVjxY7nI1GUUCQlb/ dMQvggWZASKV77oFDn51K7BJtcJ5vxvPawaHVOJBOQ6WW/bHm+2ApugUEmkqr9W7 XPRw8OpjxFsP8XlIewbchN8Riun79nGRRzo1uDDEt4tpxYxrYZ6SXkEaudm1ZcDE Ap7kxkBtXIF6nPWlZiKFseJ2DLJ6ocmXXRSLnBgzdkcjnecuTMbD6i6tAkMCXFDX S/5FCxPQ+nR9THIv0Q+RyfzhZI9HitB/10Mmbp94EBifmG4Mh6YMJT3R3OhhmUtY O0RSrsLOtZe/eL+Ru0Tv3/snxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgdXrpn dAwhr5CeSdsrxLGct623MB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDGs+A3NTMYKbPTiuQS1+VAuCnGkH8QseVf35CsrkvaCHW1PlaJeqU z/B4goSH9wINJEV7dBSJOKBi4/JYGbH42aZoZOtQKCPQcOl0haplT3TJ5kbqm+iS xWuxC1auX36AIWsfPxYaYXK62ZMEotWCB4crSvxzZOnndRX6vHb+nSAq5lMfU8TQ rxlLdgSsqoXNH1slWgWa4SLIRhXJe41fT/ISWZ0wHKN2OSG22zZDdC+QpTRg/6aA lzvMjk+sDSwKhTpFhuFQ11NNGrBNrVbspiEcLgALinlrSrS0UrP1CoZewQZ3CktM awlkU9QkukRv6QoV45aGeANAalU8Iofo -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:49 2025 by rpki-client