$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json) Hash identifier: uhD+8o3ym19ImLlpZDqNgfGePf0ajyrtFtmsY5SNSDo= Subject key identifier: 19:14:0E:FC:D2:67:43:75:E9:AA:E4:F4:36:51:73:87:DC:B4:B9:21 Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Certificate serial: 12D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft Manifest number: 12D6 Signing time: Sun 10 Aug 2025 17:02:42 +0000 Manifest this update: Sun 10 Aug 2025 17:02:41 +0000 Manifest next update: Sun 17 Aug 2025 17:02:41 +0000 Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: 3ZjGT8DgFzp/2DSszjT340BJ82bVBfs1zLD4CA1PZF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4824 (0x12d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Validity Not Before: Aug 10 17:02:41 2025 GMT Not After : Aug 17 17:02:41 2025 GMT Subject: CN=6898d0b1-ee6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:c1:df:3e:71:14:59:f5:87:20:33:9f:5b: 9c:4c:fb:8e:ae:59:8c:59:9d:a7:79:91:55:ae:57: 11:64:93:61:ae:80:3c:59:dc:2a:7b:9c:53:b7:ae: 94:eb:50:bb:8e:6a:b0:12:cb:44:15:f9:ef:4e:66: 57:77:2e:06:a0:f7:2b:87:49:5b:e5:b2:d1:ae:d0: 2b:9e:5e:c1:da:2a:d7:96:17:21:7a:62:52:1f:a6: cd:9c:a4:76:ca:de:59:d8:36:39:ff:58:c9:99:61: 92:8c:1d:1e:21:b7:26:65:d5:62:f8:84:ca:fd:54: 00:56:7f:e8:e1:97:41:43:2a:dc:a9:25:0f:e1:90: 0e:e0:17:57:2d:49:45:f0:61:b5:6e:b5:8f:03:8f: eb:32:16:e3:23:a7:66:ea:1a:d1:90:fc:b8:21:3a: 8c:bb:69:20:c8:05:03:8b:98:ea:0b:ad:26:1b:31: b2:61:a5:59:d7:27:5d:bb:81:31:23:85:a6:97:4e: b6:ad:64:8f:94:d3:4c:12:c1:6c:a1:db:9c:43:46: 8f:8f:d0:9d:04:10:3b:a3:a6:c9:8b:7d:85:f2:1a: 18:d0:2e:f8:9d:ba:6b:e4:31:4e:c9:79:cb:b0:7c: 2f:78:f4:c1:a8:ed:42:6f:15:4b:e4:f6:1b:91:35: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:14:0E:FC:D2:67:43:75:E9:AA:E4:F4:36:51:73:87:DC:B4:B9:21 X509v3 Authority Key Identifier: keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:7b:cf:eb:d0:5d:e3:c7:f7:20:92:30:81:0b:bc:d2:ce:a9: 03:0c:0d:09:73:34:02:f2:02:fb:e8:8f:82:af:08:cb:09:b5: 65:bb:47:c9:b5:db:63:8d:72:6a:9c:af:b3:cf:59:13:37:5f: 80:ee:a2:13:d9:f4:6a:d2:c2:3d:03:bf:d1:d3:1b:c8:4d:da: 1d:d5:25:1c:c7:0e:31:48:37:a9:36:3e:40:4c:24:17:8d:03: d3:80:eb:44:85:66:67:70:7a:ff:3b:f4:d8:c3:0d:ae:e7:cc: c5:60:53:ef:6e:96:b7:ba:65:12:aa:0e:2d:4b:a2:24:45:b0: 60:20:1f:4e:dc:a5:5c:86:fa:4b:27:bf:b5:b6:7f:38:3b:07: fd:22:07:b8:0a:4b:37:e4:c2:37:8c:6c:d4:70:72:e7:c4:c6: c8:1f:ed:87:c2:15:55:16:21:40:3d:01:f5:e7:a0:92:cf:39: 71:60:ef:7a:85:3d:30:4f:31:61:d9:d3:aa:9b:44:2a:81:3e: d0:8e:2a:d1:b6:73:35:c9:9d:d8:33:e4:61:52:7f:c7:39:75: 5e:1b:fc:5a:4e:a3:7f:b3:00:40:38:70:8e:c6:3f:c9:b9:00: b2:30:a2:43:fa:31:eb:1d:8e:73:6f:2f:33:92:0e:f6:48:3b: 16:c9:f1:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy RjdDREZBRUQwHhcNMjUwODEwMTcwMjQxWhcNMjUwODE3MTcwMjQxWjAYMRYwFAYD VQQDEw02ODk4ZDBiMS1lZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsHB3z5xFFn1hyAzn1ucTPuOrlmMWZ2neZFVrlcRZJNhroA8Wdwqe5xTt66U 61C7jmqwEstEFfnvTmZXdy4GoPcrh0lb5bLRrtArnl7B2irXlhchemJSH6bNnKR2 yt5Z2DY5/1jJmWGSjB0eIbcmZdVi+ITK/VQAVn/o4ZdBQyrcqSUP4ZAO4BdXLUlF 8GG1brWPA4/rMhbjI6dm6hrRkPy4ITqMu2kgyAUDi5jqC60mGzGyYaVZ1yddu4Ex I4Wml062rWSPlNNMEsFsoducQ0aPj9CdBBA7o6bJi32F8hoY0C74nbpr5DFOyXnL sHwvePTBqO1CbxVL5PYbkTUkVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkUDvzS Z0N16ark9DZRc4fctLkhMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly RG5PUXN3endwV0l2Zk4tdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWe8/r0F3jx/cgkjCBC7zSzqkDDA0JczQC8gL76I+CrwjLCbVlu0fJ tdtjjXJqnK+zz1kTN1+A7qIT2fRq0sI9A7/R0xvITdod1SUcxw4xSDepNj5ATCQX jQPTgOtEhWZncHr/O/TYww2u58zFYFPvbpa3umUSqg4tS6IkRbBgIB9O3KVchvpL J7+1tn84Owf9Ige4Cks35MI3jGzUcHLnxMbIH+2HwhVVFiFAPQH156CSzzlxYO96 hT0wTzFh2dOqm0QqgT7QjirRtnM1yZ3YM+RhUn/HOXVeG/xaTqN/swBAOHCOxj/J uQCyMKJD+jHrHY5zby8zkg72SDsWyfFi -----END CERTIFICATE-----Generated at Sun Aug 10 18:23:49 2025 by rpki-client