$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft File: xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json) Hash identifier: wbv9mTbzQ7z7y9HChRuMPJ7t0QDBCrtdIlNsGXTDkSk= Subject key identifier: 79:38:1B:C7:4E:17:04:A4:58:C3:04:64:8B:99:6C:2F:30:7F:B2:51 Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0 Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0 Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft Manifest number: 02A7 Signing time: Tue 05 Aug 2025 02:11:26 +0000 Manifest this update: Tue 05 Aug 2025 02:11:26 +0000 Manifest next update: Tue 12 Aug 2025 02:11:26 +0000 Files and hashes: 1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: 4gWWfT5ykxxZeT5hwA8dX1d9+5DRE82gJErUwY2ye8s=) 2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: GNWLaVT5bvTFzhKfPjl/RaZJainXlieK9QJZ8Ys4PmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0 Validity Not Before: Aug 5 02:11:26 2025 GMT Not After : Aug 12 02:11:26 2025 GMT Subject: CN=6891684e-11cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a1:95:a3:95:21:93:3b:1b:7e:13:8c:bb:b3: 6e:69:a8:4c:92:e3:9f:3e:4a:d8:9d:bc:96:f9:27: 65:d6:64:49:8f:57:89:f2:ce:62:65:1e:7e:8e:49: d6:fd:11:4f:4e:76:50:16:a5:4e:bd:36:ba:36:7b: 57:82:42:5c:56:e4:2c:ef:43:78:99:62:d5:1f:f5: 4b:b5:d1:09:2c:db:a2:d7:fc:aa:8d:8f:9a:0a:75: c7:16:eb:33:23:1c:3f:62:4a:2d:4e:57:47:d8:e8: 31:4e:55:b6:2e:f5:b5:14:32:83:dc:8d:39:3b:9c: 8d:11:74:64:67:67:05:5a:b8:76:50:aa:63:27:8c: e2:8c:d6:3d:84:92:ac:bf:35:90:64:c6:51:11:0e: 37:12:c0:61:a7:06:9e:1a:25:58:fb:57:a6:60:56: e4:f7:83:a4:e8:43:43:d6:ba:ef:7a:61:09:c4:c4: 0e:87:63:fd:8d:8d:57:5b:fb:9f:1a:dc:0d:10:4a: 2e:d2:34:15:30:ae:29:68:be:be:24:cb:e8:c5:97: e6:a7:72:e8:13:9f:53:6e:ad:25:10:da:c7:ec:78: cf:c7:6f:d9:b0:8b:81:ea:7e:8e:25:18:95:48:97: 77:97:9f:f5:0d:e6:a6:26:57:8a:8e:9c:87:ef:37: 47:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:38:1B:C7:4E:17:04:A4:58:C3:04:64:8B:99:6C:2F:30:7F:B2:51 X509v3 Authority Key Identifier: keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c6:a0:e6:1b:41:8b:c2:77:86:75:fe:1a:27:3f:4c:96:f3: c6:cb:63:9f:9c:6b:b2:f4:21:21:4a:60:99:b5:b8:e9:87:70: 26:10:29:bc:31:bd:85:a8:17:13:da:6b:13:d4:10:b3:1a:40: cd:92:bb:de:f1:96:1e:51:e5:5e:eb:19:d2:42:39:f7:fd:c8: 0d:c4:18:96:8e:70:f2:37:e6:0a:53:85:ff:b1:e4:81:ec:ec: b4:33:36:18:35:7c:e3:ef:2b:d2:b7:29:64:80:6c:ec:2b:d6: 75:b3:71:0a:f7:f7:b8:5a:84:21:54:15:84:d0:7b:82:c3:2f: c1:d7:df:50:3e:87:a7:ca:00:ab:5b:7d:18:5c:2c:9d:a0:dc: be:5f:2b:f5:ed:57:03:09:2d:d4:cc:b3:f4:32:19:1a:8a:63: d9:40:9e:06:a6:18:63:9c:18:93:f1:71:2e:05:ed:25:0d:d7: 79:c8:5c:ab:a5:d9:88:78:5a:ad:9f:3f:a1:fb:59:d3:90:a8: 7a:15:ff:ba:a7:2d:35:61:6c:2b:63:6f:4d:4a:6a:a3:97:9b: 5d:fa:98:6b:07:d6:45:2a:20:84:27:e7:1d:12:5f:2b:0a:eb: 4f:67:70:17:12:98:ca:71:21:63:76:b7:6c:f2:e1:ba:92:f5: 49:33:c6:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyRTIxMTAvBgNVBAUTKEM2NUZGQ0ZCMkNGQ0Q5QkNENjhEQUVCMDY5N0QzMTZD RjM1QjIzRjAwHhcNMjUwODA1MDIxMTI2WhcNMjUwODEyMDIxMTI2WjAYMRYwFAYD VQQDEw02ODkxNjg0ZS0xMWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KGVo5UhkzsbfhOMu7NuaahMkuOfPkrYnbyW+Sdl1mRJj1eJ8s5iZR5+jknW /RFPTnZQFqVOvTa6NntXgkJcVuQs70N4mWLVH/VLtdEJLNui1/yqjY+aCnXHFusz Ixw/YkotTldH2OgxTlW2LvW1FDKD3I05O5yNEXRkZ2cFWrh2UKpjJ4zijNY9hJKs vzWQZMZREQ43EsBhpwaeGiVY+1emYFbk94Ok6END1rrvemEJxMQOh2P9jY1XW/uf GtwNEEou0jQVMK4paL6+JMvoxZfmp3LoE59Tbq0lENrH7HjPx2/ZsIuB6n6OJRiV SJd3l5/1DeamJleKjpyH7zdHRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHk4G8dO FwSkWMMEZIuZbC8wf7JRMB8GA1UdIwQYMBaAFMZf/Pss/Nm81o2usGl9MWzzWyPw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzJFMi8yRjE5NTM1QzBD QjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6ODJieldqYTZ3YVgweGJQTmJJ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsXzgteXo4MmJ6V2phNndhWDB4YlBOYklfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzJFMi8yRjE5NTM1QzBDQjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6ODJi eldqYTZ3YVgweGJQTmJJX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOxqDmG0GLwneGdf4aJz9MlvPGy2OfnGuy9CEhSmCZtbjph3AmECm8 Mb2FqBcT2msT1BCzGkDNkrve8ZYeUeVe6xnSQjn3/cgNxBiWjnDyN+YKU4X/seSB 7Oy0MzYYNXzj7yvStylkgGzsK9Z1s3EK9/e4WoQhVBWE0HuCwy/B199QPoenygCr W30YXCydoNy+Xyv17VcDCS3UzLP0MhkaimPZQJ4GphhjnBiT8XEuBe0lDdd5yFyr pdmIeFqtnz+h+1nTkKh6Ff+6py01YWwrY29NSmqjl5td+phrB9ZFKiCEJ+cdEl8r CutPZ3AXEpjKcSFjdrds8uG6kvVJM8bb -----END CERTIFICATE-----Generated at Wed Aug 6 13:12:23 2025 by rpki-client