$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft File: XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json) Hash identifier: ErK48lBo8Vxy2AV2EN7juuCGSCGx4RZSKniIza1TUsM= Subject key identifier: 20:05:80:66:4F:1A:EE:10:14:52:2E:72:32:A5:64:1B:CF:AF:BA:63 Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C Certificate issuer: /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft Manifest number: CF Signing time: Sat 09 Aug 2025 05:39:56 +0000 Manifest this update: Sat 09 Aug 2025 05:39:55 +0000 Manifest next update: Sat 16 Aug 2025 05:39:55 +0000 Files and hashes: 1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: 1GbomsHup/4IRUXIAjeho//j9INunwJZYf+t7aCL4Cc=) 2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: jYgy4yMQyKQf5VxNbJ2NKQFUgnsZsFyOqLwxVUIrb0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C Validity Not Before: Aug 9 05:39:55 2025 GMT Not After : Aug 16 05:39:55 2025 GMT Subject: CN=6896df2b-351f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:ba:97:fa:25:f8:0f:82:86:d5:18:a5:19: 4d:11:b5:69:28:22:1f:9d:bb:13:ee:07:41:b8:25: db:b3:80:bd:0e:15:06:87:ab:58:a5:bc:44:0b:39: 5d:78:c2:af:d7:06:e8:66:c4:c1:d3:28:51:f2:9f: 5a:d3:c3:26:68:f0:11:9d:d9:f7:cc:ee:56:f4:3e: 9c:f0:7a:2d:9d:5c:81:42:75:d5:9b:55:2f:d5:9a: 66:16:13:25:18:92:a9:f8:54:ed:b3:16:62:05:59: 64:61:1d:35:1f:ad:61:c2:d5:8c:67:c1:a9:39:f4: e7:fa:fa:2d:5e:0d:6d:e9:cc:47:96:ae:98:75:bd: db:0a:bb:d0:b5:6d:74:e5:c5:68:83:64:46:a9:0d: a0:1f:0f:ed:23:35:bc:21:53:fd:fd:64:ad:78:b1: 0f:02:ae:9b:74:b0:1a:87:12:f1:dd:eb:72:7f:69: 95:9c:ff:3f:fc:4b:7f:79:a9:77:bd:70:0c:cd:60: a6:e8:f4:4b:37:aa:64:fc:86:4c:a0:28:61:86:de: 93:41:ff:bc:17:db:9a:b5:fc:23:05:d7:11:07:23: 6c:52:04:21:8e:76:a6:47:bb:27:3a:98:ac:14:9c: c5:7d:a8:89:b7:0f:65:a0:72:f6:ea:f0:52:c5:7b: d9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:05:80:66:4F:1A:EE:10:14:52:2E:72:32:A5:64:1B:CF:AF:BA:63 X509v3 Authority Key Identifier: keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:08:3c:71:d7:41:2a:22:68:1b:9e:03:60:40:38:d0:55:1e: 73:09:ae:3b:bd:11:83:d7:35:a9:a8:63:e6:95:b0:2b:d2:25: d8:8e:6b:e7:bd:f7:cd:7d:b6:6b:8e:e2:5c:eb:60:9f:e1:28: de:6e:f5:45:93:4b:82:1b:0c:c8:8a:ac:96:6c:9c:36:91:41: d7:37:f4:52:61:2c:8e:74:ba:61:ba:00:73:b9:25:12:c2:95: 5a:45:51:cf:d1:2d:1e:8e:03:a5:0b:ff:f0:1b:a0:aa:5c:fc: 96:1a:34:70:31:32:ec:5d:ee:d0:9f:bb:d8:0f:2f:b5:5a:e4: 8e:f0:38:aa:da:cd:b2:48:b4:b4:47:dd:07:75:ce:2e:ec:17: 2e:7a:33:4b:4a:96:f7:a1:27:3d:eb:f0:16:25:7f:0a:05:07: 1e:4f:e0:e9:e4:79:7f:5b:e1:49:bb:9b:4c:d7:7e:a0:31:c2: 4a:74:0d:08:cb:ed:96:51:9a:aa:a2:f8:fc:4c:5a:6e:fb:e2: 81:d4:ea:c1:ee:64:11:28:e7:31:64:3d:41:65:18:77:0e:a3: f3:26:4a:94:1a:a2:ee:b3:3e:5d:3e:2c:7b:5d:f7:ab:01:ec: 05:c8:6e:ae:9c:b4:75:ac:01:dd:c6:eb:72:a4:b3:71:89:70: fb:46:90:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRkIxMTAvBgNVBAUTKDVGMDRDMDA1RjI4QzI4NTZDN0JCRjQ3NkI5MUM2MkEw MkYyRkM1MUMwHhcNMjUwODA5MDUzOTU1WhcNMjUwODE2MDUzOTU1WjAYMRYwFAYD VQQDEw02ODk2ZGYyYi0zNTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0866l/ol+A+ChtUYpRlNEbVpKCIfnbsT7gdBuCXbs4C9DhUGh6tYpbxECzld eMKv1wboZsTB0yhR8p9a08MmaPARndn3zO5W9D6c8HotnVyBQnXVm1Uv1ZpmFhMl GJKp+FTtsxZiBVlkYR01H61hwtWMZ8GpOfTn+votXg1t6cxHlq6Ydb3bCrvQtW10 5cVog2RGqQ2gHw/tIzW8IVP9/WSteLEPAq6bdLAahxLx3etyf2mVnP8//Et/eal3 vXAMzWCm6PRLN6pk/IZMoChhht6TQf+8F9uatfwjBdcRByNsUgQhjnamR7snOpis FJzFfaiJtw9loHL26vBSxXvZawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAFgGZP Gu4QFFIucjKlZBvPr7pjMB8GA1UdIwQYMBaAFF8EwAXyjChWx7v0drkcYqAvL8Uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi9FMTcxOTM2MjNE OEQxMUVGODcwNTNCMEZDNEY5QUUwMi9Yd1RBQmZLTUtGYkh1X1IydVJ4aW9DOHZ4 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h3VEFCZktNS0ZiSHVfUjJ1Unhpb0M4dnhSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGQi9FMTcxOTM2MjNEOEQxMUVGODcwNTNCMEZDNEY5QUUwMi9Yd1RBQmZLTUtG Ykh1X1IydVJ4aW9DOHZ4UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSCDxx10EqImgbngNgQDjQVR5zCa47vRGD1zWpqGPmlbAr0iXYjmvn vffNfbZrjuJc62Cf4SjebvVFk0uCGwzIiqyWbJw2kUHXN/RSYSyOdLphugBzuSUS wpVaRVHP0S0ejgOlC//wG6CqXPyWGjRwMTLsXe7Qn7vYDy+1WuSO8Diq2s2ySLS0 R90Hdc4u7BcuejNLSpb3oSc96/AWJX8KBQceT+Dp5Hl/W+FJu5tM136gMcJKdA0I y+2WUZqqovj8TFpu++KB1OrB7mQRKOcxZD1BZRh3DqPzJkqUGqLusz5dPix7Xfer AewFyG6unLR1rAHdxutypLNxiXD7RpDp -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:58 2025 by rpki-client