$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft File: XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json) Hash identifier: ZyMPHZdF6DOhBHWCdkl9oULaE0K4ms1U1YWj3vIEtBA= Subject key identifier: 52:8C:4D:C5:2F:5A:D4:0C:8D:FE:FB:B3:2E:0E:A7:86:39:EB:C6:84 Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft Manifest number: 076A Signing time: Fri 08 Aug 2025 21:57:43 +0000 Manifest this update: Fri 08 Aug 2025 21:57:42 +0000 Manifest next update: Fri 15 Aug 2025 21:57:42 +0000 Files and hashes: 1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: UzA/2qc1J2x7f2+uEjpS2+PDUdQU/71NSyMopbwKibw=) 2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: eaeoz8RqOSGEC4peCpxGpY2PbARdRPwT9kf9QvE/Y6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Validity Not Before: Aug 8 21:57:42 2025 GMT Not After : Aug 15 21:57:42 2025 GMT Subject: CN=689672d7-f15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:26:92:d1:a7:f9:d2:5b:31:93:19:16:2e: 90:6f:80:47:4d:a2:e7:1f:af:59:fc:3d:96:34:ae: f9:85:bb:2d:5b:b2:1f:da:69:09:e7:b3:25:d3:8b: 70:f1:ad:ce:db:9d:2f:fb:19:99:48:63:90:ca:c2: 6d:c8:fc:d8:50:ae:b8:37:b0:7e:e3:93:e1:02:e6: bb:94:78:43:b4:75:eb:36:5a:36:94:9c:6a:ae:f9: 9b:94:b2:ba:72:0a:ba:aa:b6:59:e7:f0:fb:ab:cb: b2:a8:97:84:96:4c:a7:48:46:02:b4:70:48:94:46: bd:aa:ec:3a:f9:53:61:38:0e:82:8d:6a:71:0e:db: 7c:1c:05:f1:0a:20:84:41:08:7f:19:92:20:37:9e: 32:7c:8e:cf:75:4d:ba:d4:ee:a3:40:91:62:65:dc: 2e:19:8d:3a:42:9c:ff:e6:b7:18:61:a1:df:11:f6: 6c:e5:44:5f:be:f8:57:ca:a9:01:17:06:01:f9:cc: 80:5b:e8:36:03:fd:e3:55:32:ac:64:95:15:5c:0f: 7a:d8:32:ec:8c:c1:d7:e2:95:3b:6a:64:28:19:49: da:6a:3d:f3:06:54:08:e6:f4:0f:21:81:9e:7c:c0: 83:31:74:fd:f5:fa:61:5d:08:86:d8:f7:8c:d4:70: d6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8C:4D:C5:2F:5A:D4:0C:8D:FE:FB:B3:2E:0E:A7:86:39:EB:C6:84 X509v3 Authority Key Identifier: keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:13:44:19:ad:77:e9:56:9b:f4:d4:e2:fa:93:8e:df:cc:68: 77:74:f2:d0:7d:0e:de:36:73:72:0a:55:10:f2:b2:45:7e:d5: 9d:66:0d:2d:e2:75:a5:a0:5d:01:2d:f8:a3:cc:98:f8:eb:eb: 8b:cf:39:65:97:72:5c:13:db:bf:5e:45:37:08:ee:33:0a:f8: c4:76:75:09:45:8b:9c:35:31:69:44:06:7b:27:f6:02:d7:aa: 37:a2:49:25:6e:6e:6c:d1:7f:8e:1e:f8:40:09:00:2f:e0:cc: fc:74:3a:c4:69:67:47:b0:5b:d2:6f:7f:de:59:51:5c:d8:41: 66:e4:a2:3b:32:a0:26:42:4c:4b:10:31:8d:74:47:b8:1c:4b: 8a:65:13:7b:70:42:87:47:89:00:30:0b:ee:b5:0e:d1:b0:4f: 68:81:9d:00:7e:19:dc:1d:5c:1f:28:49:d3:ca:a0:dc:40:5f: dc:fd:cc:99:90:54:14:a5:a4:82:d2:85:a3:8b:90:ab:67:2c: 63:ff:e4:26:c3:31:64:1c:99:d1:86:57:cd:f9:60:ea:e6:10: 72:18:b1:8d:3b:89:2a:06:1b:ce:a4:15:a8:61:0b:9b:28:b1: 9d:bd:1d:01:e0:19:54:85:a9:6c:94:72:66:cf:9e:bd:9f:8d: f3:18:75:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3 QzcyMDVBQTkwHhcNMjUwODA4MjE1NzQyWhcNMjUwODE1MjE1NzQyWjAYMRYwFAYD VQQDEw02ODk2NzJkNy1mMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ekmktGn+dJbMZMZFi6Qb4BHTaLnH69Z/D2WNK75hbstW7If2mkJ57Ml04tw 8a3O250v+xmZSGOQysJtyPzYUK64N7B+45PhAua7lHhDtHXrNlo2lJxqrvmblLK6 cgq6qrZZ5/D7q8uyqJeElkynSEYCtHBIlEa9quw6+VNhOA6CjWpxDtt8HAXxCiCE QQh/GZIgN54yfI7PdU261O6jQJFiZdwuGY06Qpz/5rcYYaHfEfZs5URfvvhXyqkB FwYB+cyAW+g2A/3jVTKsZJUVXA962DLsjMHX4pU7amQoGUnaaj3zBlQI5vQPIYGe fMCDMXT99fphXQiG2PeM1HDW5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKMTcUv WtQMjf77sy4Op4Y568aEMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5 MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3OC9GMUY0RDNDRTI5MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5 TXBncUxMVGVWUE44Y2dXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiE0QZrXfpVpv01OL6k47fzGh3dPLQfQ7eNnNyClUQ8rJFftWdZg0t 4nWloF0BLfijzJj46+uLzzlll3JcE9u/XkU3CO4zCvjEdnUJRYucNTFpRAZ7J/YC 16o3okklbm5s0X+OHvhACQAv4Mz8dDrEaWdHsFvSb3/eWVFc2EFm5KI7MqAmQkxL EDGNdEe4HEuKZRN7cEKHR4kAMAvutQ7RsE9ogZ0AfhncHVwfKEnTyqDcQF/c/cyZ kFQUpaSC0oWji5CrZyxj/+QmwzFkHJnRhlfN+WDq5hByGLGNO4kqBhvOpBWoYQub KLGdvR0B4BlUhalslHJmz569n43zGHXK -----END CERTIFICATE-----Generated at Sun Aug 10 03:55:52 2025 by rpki-client