$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json) Hash identifier: tyMGgsGjqdlH0CQxmT9MY6CZ4Mhuu1TE1/1QIc5aw4M= Subject key identifier: 8D:28:02:10:17:EB:EB:03:BC:B3:62:9B:BE:79:1F:A5:7F:0C:82:8F Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft Manifest number: 2D Signing time: Thu 07 Aug 2025 08:20:10 +0000 Manifest this update: Thu 07 Aug 2025 08:20:09 +0000 Manifest next update: Thu 14 Aug 2025 08:20:09 +0000 Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: Z3oLLs6oUlNmfuvb29zIcKejZSt7yapCvkAYYNYU/vY=) 2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Validity Not Before: Aug 7 08:20:09 2025 GMT Not After : Aug 14 08:20:09 2025 GMT Subject: CN=689461b9-89d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:2d:ae:50:d9:e1:43:f5:2d:87:d9:9e:bd: 89:15:22:26:bd:f1:31:e9:99:83:0a:44:2f:c0:0f: 1e:75:a9:ce:5e:62:17:4a:07:7d:8e:69:ca:bc:f5: 85:00:7d:08:2a:e6:fe:cd:88:eb:2c:46:cd:de:96: 74:a3:b1:4c:1a:4f:3b:50:a8:44:6f:01:29:b3:fd: e6:72:1c:87:72:41:57:6e:a5:5c:ff:1f:1f:fb:4c: 90:d6:3a:cf:6d:d0:eb:bc:f1:12:af:18:ce:88:a2: bb:96:f8:86:68:23:f6:ff:cc:16:46:76:a0:0a:8e: 95:bc:ac:18:b4:15:50:6e:a5:bf:f0:c0:6c:e7:92: ec:37:83:73:cd:b6:81:59:94:a6:92:95:be:b1:91: cf:f8:94:5f:d1:e0:4f:fb:28:4c:28:95:84:9a:95: 90:ff:bf:61:ec:e9:fb:ba:1c:12:9c:71:3a:d8:24: fa:cd:20:9e:c1:e9:ea:c0:af:d6:c9:f5:e2:0e:9d: 4b:fe:f4:80:07:32:64:59:ce:d1:33:b1:5a:ba:5d: b0:8c:2a:ab:7e:2e:cf:6f:2d:1d:e3:9d:ed:e8:87: 39:83:94:00:b5:79:09:c6:8f:b9:06:6a:4a:9b:9b: a1:3f:2c:7b:8f:d2:2c:6a:1f:7b:7d:4f:5b:78:2e: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:28:02:10:17:EB:EB:03:BC:B3:62:9B:BE:79:1F:A5:7F:0C:82:8F X509v3 Authority Key Identifier: keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d5:4e:6e:8e:76:8c:f0:e5:d0:05:f4:d2:7e:8f:ea:ac:7f: c7:62:72:96:16:7d:d7:52:42:c2:a8:ff:7f:c8:35:8e:f1:6f: 8f:2b:f0:d3:e7:c9:31:63:67:d5:3b:f9:94:70:06:4d:6b:e1: 3b:b8:02:27:de:a7:b0:3b:3d:46:2b:77:d9:36:17:dc:e0:fe: 54:8a:86:9b:fe:21:ac:e6:9e:6a:20:f0:40:bf:0b:71:6d:f1: ef:21:3b:54:52:ef:fa:47:1c:25:9d:93:7d:7f:a2:dd:52:05: e2:51:e3:7c:16:03:51:08:8f:b6:18:14:03:12:2b:a5:2f:6f: 61:d2:d9:95:8a:3d:0f:46:75:1d:83:8f:fc:eb:d3:c3:f1:d0: 2c:fa:f6:53:d6:14:9c:e8:84:74:c0:4f:9f:30:2e:bd:c7:65: d5:12:90:f5:12:04:43:25:8b:b0:6c:51:9c:6e:9e:e3:6f:4c: 8c:3f:d8:3a:73:d5:2b:74:22:59:e0:5a:23:b1:83:70:2d:36: 48:47:48:6e:7c:a8:f8:b0:c6:bf:b0:b2:c3:fd:d5:d5:16:c9: c3:55:75:13:0b:9d:d1:38:1e:3d:c0:6a:0d:15:fe:49:7f:a8: ba:2f:51:49:df:4d:9d:89:1f:0c:c0:c8:f0:2c:1b:04:f3:b2: e4:43:9c:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzMxMTExMC8GA1UEBRMoQzZERTM2QTRFNDVFN0E5OTFGQzQ0NEY4Q0IxQjQ1NUYx NzQ2MkM4RDAeFw0yNTA4MDcwODIwMDlaFw0yNTA4MTQwODIwMDlaMBgxFjAUBgNV BAMTDTY4OTQ2MWI5LTg5ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+oy2uUNnhQ/Uth9mevYkVIia98THpmYMKRC/ADx51qc5eYhdKB32Oacq89YUA fQgq5v7NiOssRs3elnSjsUwaTztQqERvASmz/eZyHIdyQVdupVz/Hx/7TJDWOs9t 0Ou88RKvGM6IoruW+IZoI/b/zBZGdqAKjpW8rBi0FVBupb/wwGznkuw3g3PNtoFZ lKaSlb6xkc/4lF/R4E/7KEwolYSalZD/v2Hs6fu6HBKccTrYJPrNIJ7B6erAr9bJ 9eIOnUv+9IAHMmRZztEzsVq6XbCMKqt+Ls9vLR3jne3ohzmDlAC1eQnGj7kGakqb m6E/LHuP0ixqH3t9T1t4LllBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjSgCEBfr 6wO8s2KbvnkfpX8Mgo8wHwYDVR0jBBgwFoAUxt42pOReepkfxET4yxtFXxdGLI0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMzExL0YxRjdBRjI2MkZC RjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHQ0MnBPUmVlcGtmeEVUNHl4dEZYeGRHTEkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MzExL0YxRjdBRjI2MkZCRjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBr ZnhFVDR5eHRGWHhkR0xJMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGjVTm6Odozw5dAF9NJ+j+qsf8dicpYWfddSQsKo/3/INY7xb48r8NPn yTFjZ9U7+ZRwBk1r4Tu4Aifep7A7PUYrd9k2F9zg/lSKhpv+Iazmnmog8EC/C3Ft 8e8hO1RS7/pHHCWdk31/ot1SBeJR43wWA1EIj7YYFAMSK6Uvb2HS2ZWKPQ9GdR2D j/zr08Px0Cz69lPWFJzohHTAT58wLr3HZdUSkPUSBEMli7BsUZxunuNvTIw/2Dpz 1St0IlngWiOxg3AtNkhHSG58qPiwxr+wssP91dUWycNVdRMLndE4Hj3Aag0V/kl/ qLovUUnfTZ2JHwzAyPAsGwTzsuRDnPI= -----END CERTIFICATE-----Generated at Fri Aug 8 20:59:34 2025 by rpki-client