$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft File: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft (raw, json) Hash identifier: CYwNc3OPVOAgAR5W7FL4BaKsQT7See3CDiRcg+1qgCM= Subject key identifier: 3B:53:BB:87:E1:EC:A4:5E:AE:A3:F5:B7:8C:97:FF:B2:70:D9:C6:31 Authority key identifier: C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 Certificate issuer: /CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft Manifest number: 02BD Signing time: Mon 11 Aug 2025 01:40:29 +0000 Manifest this update: Mon 11 Aug 2025 01:40:28 +0000 Manifest next update: Mon 18 Aug 2025 01:40:28 +0000 Files and hashes: 1: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl (hash: kAlTJwruaT6HIC96tagmVYCLFYELt379+3MBj259UKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 01:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E62, serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Validity Not Before: Aug 11 01:40:28 2025 GMT Not After : Aug 18 01:40:28 2025 GMT Subject: CN=68994a0d-280a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3e:29:e5:89:e8:52:e1:97:e7:39:bf:71:a1: 7e:67:db:70:24:bb:52:71:dd:8a:cd:45:b3:24:e3: 32:5e:97:11:d6:b4:a5:59:17:d6:e5:e8:2e:b3:6a: 2f:7d:8b:fc:e2:ae:08:1c:4e:f4:57:4d:d9:8b:3e: cd:05:01:19:7c:e5:db:03:27:19:75:5f:28:ce:9a: 08:2b:e8:22:a3:ec:24:2f:a5:61:25:d9:ce:a9:7a: 26:cd:76:2b:66:e7:3b:65:91:b7:f8:f3:3b:e3:dc: f4:3d:ca:64:79:c7:76:e4:5f:63:79:c4:84:ee:b2: d9:fb:02:a2:40:fc:35:dd:b9:5b:7d:9e:3d:e8:76: 7d:3a:6a:5e:29:30:29:eb:14:b3:72:86:74:fb:56: 06:69:26:f8:ac:d9:4a:33:7b:c1:72:bc:ef:f6:e3: f8:ed:83:08:af:a4:77:22:83:d3:87:3c:9d:79:b5: be:34:57:8e:b5:fd:07:26:bf:81:d9:09:c9:17:e5: 4c:09:96:74:af:d8:82:f4:d9:2a:0e:cd:89:83:bc: 57:aa:1f:88:9b:44:2d:b4:a9:54:4e:67:16:ee:18: 4a:da:f5:31:b9:7a:37:a7:43:d9:ea:96:c5:94:04: 1a:b0:24:5c:f1:77:eb:86:1a:d2:a7:71:be:38:5d: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:53:BB:87:E1:EC:A4:5E:AE:A3:F5:B7:8C:97:FF:B2:70:D9:C6:31 X509v3 Authority Key Identifier: keyid:C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5c:be:98:f5:22:27:ea:2e:05:c4:fe:36:f5:a1:80:38:55: fd:b1:90:35:5d:81:d7:9a:e5:38:fe:18:99:b3:d9:7e:95:f1: 38:86:fb:6a:f5:4b:76:7a:70:09:89:dd:61:af:6e:07:23:c3: 25:a1:b4:d2:3a:8d:99:2d:6f:5f:1a:49:55:23:ca:ec:c2:f7: cf:21:4f:01:6f:73:e3:ad:9b:d1:3c:2d:1b:b9:5b:dd:4a:f6: a6:58:84:87:b1:a4:3e:a0:09:6b:fc:7a:5c:45:bb:d6:3d:41: 3c:c0:f9:fc:6f:b0:0f:ca:ce:77:18:24:6b:32:37:48:b6:ea: a3:49:ae:02:9e:ca:76:23:e5:d6:b9:90:e3:51:e5:ab:fb:f7: 50:8d:74:13:91:24:f9:fb:f6:74:e6:62:fb:89:9c:c6:4e:c3: c1:00:51:63:ac:74:ac:f9:16:ca:5c:cd:ad:18:18:cd:27:e6: 27:0d:b5:0a:24:df:31:45:4f:6a:b1:94:05:f9:82:32:3e:e0: 79:59:e5:58:22:eb:9f:0e:c5:b2:5e:8a:4e:ec:11:82:2d:90: 9c:cf:fd:6a:83:82:ef:bc:63:8c:2a:4b:82:ad:bc:ec:7d:b3: 3e:90:e3:93:fc:26:12:6f:dc:dc:cd:37:43:ed:a5:1a:d7:ac: 37:bf:f6:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFNjIxMTAvBgNVBAUTKEM2MzA1NjA0MUMwRjkwQjkyQjJCODdEQkZGQTk3RTNF OURBMDI4RDQwHhcNMjUwODExMDE0MDI4WhcNMjUwODE4MDE0MDI4WjAYMRYwFAYD VQQDEw02ODk5NGEwZC0yODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2T4p5YnoUuGX5zm/caF+Z9twJLtScd2KzUWzJOMyXpcR1rSlWRfW5egus2ov fYv84q4IHE70V03Ziz7NBQEZfOXbAycZdV8ozpoIK+gio+wkL6VhJdnOqXomzXYr Zuc7ZZG3+PM749z0Pcpkecd25F9jecSE7rLZ+wKiQPw13blbfZ496HZ9OmpeKTAp 6xSzcoZ0+1YGaSb4rNlKM3vBcrzv9uP47YMIr6R3IoPThzydebW+NFeOtf0HJr+B 2QnJF+VMCZZ0r9iC9NkqDs2Jg7xXqh+Im0QttKlUTmcW7hhK2vUxuXo3p0PZ6pbF lAQasCRc8XfrhhrSp3G+OF0VuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtTu4fh 7KRerqP1t4yX/7Jw2cYxMB8GA1UdIwQYMBaAFMYwVgQcD5C5KyuH2/+pfj6doCjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU2Mi9ENkI5Nzk2MjAy QTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtMa3JLNGZiXzZsLVBwMmdL TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqQldCQndQa0xrcks0ZmJfNmwtUHAyZ0tOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU2Mi9ENkI5Nzk2MjAyQTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtM a3JLNGZiXzZsLVBwMmdLTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeXL6Y9SIn6i4FxP429aGAOFX9sZA1XYHXmuU4/hiZs9l+lfE4hvtq 9Ut2enAJid1hr24HI8MlobTSOo2ZLW9fGklVI8rswvfPIU8Bb3PjrZvRPC0buVvd SvamWISHsaQ+oAlr/HpcRbvWPUE8wPn8b7APys53GCRrMjdItuqjSa4Cnsp2I+XW uZDjUeWr+/dQjXQTkST5+/Z05mL7iZzGTsPBAFFjrHSs+RbKXM2tGBjNJ+YnDbUK JN8xRU9qsZQF+YIyPuB5WeVYIuufDsWyXopO7BGCLZCcz/1qg4LvvGOMKkuCrbzs fbM+kOOT/CYSb9zczTdD7aUa16w3v/ZH -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:45 2025 by rpki-client