$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: HzXL449AYjj13aOTmlzUOyXIAxB+lzGa1UNEf1Nqupg= Subject key identifier: 8B:93:3E:8E:8C:50:32:CE:93:0A:A2:C3:9D:FF:21:57:19:85:82:10 Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 07EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 07DF Signing time: Mon 04 Aug 2025 21:22:53 +0000 Manifest this update: Mon 04 Aug 2025 21:22:53 +0000 Manifest next update: Mon 11 Aug 2025 21:22:53 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: 7yjoPbXmqITmAPFzAs+zRFM7QiSK9DhZYSavdJAexSw=) 2: FC4EA8D8918511EDB3CBB378C4F9AE02.roa (hash: 4bMonkEILF31i3rwXcmiWVxlZY8L3ObeZ0NQ0u78bEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2026 (0x7ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Aug 4 21:22:53 2025 GMT Not After : Aug 11 21:22:53 2025 GMT Subject: CN=689124ad-d6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:c7:85:d2:c9:5b:53:ea:5a:ee:3f:ca:54: 2a:d2:12:ec:e1:20:cf:98:d5:db:d5:80:c1:ff:73: af:58:e9:b8:96:07:57:54:51:4e:27:f1:cf:2a:3f: f2:96:2c:19:de:85:6e:2a:61:87:cd:3f:6b:34:5c: c5:d4:84:4b:61:e0:5a:e9:dc:bc:75:19:d1:d1:ad: f7:1f:7c:97:c6:b7:da:0b:92:28:07:b5:af:a9:28: f4:59:a5:a2:b1:cc:18:66:9e:c1:09:8e:bb:09:13: 61:73:9d:83:6b:dd:df:44:b3:6f:e4:d0:a0:d9:72: 93:f8:21:b4:a0:b4:cc:df:f7:fa:4a:32:cd:45:5e: 6a:a9:ef:13:a1:bb:e6:75:81:d6:f7:e0:13:ea:0a: ae:a6:f3:4b:49:33:18:32:d8:64:3f:a4:bd:92:27: bd:07:bf:6c:6a:1f:ae:2b:8c:73:fb:d3:3f:e3:30: d4:b6:98:17:cf:5d:64:74:66:9b:63:b6:e9:7d:0e: 29:1b:ea:78:30:0b:b6:52:4f:6c:79:19:93:13:75: ff:f6:c7:0d:23:e6:95:95:b3:37:77:51:70:aa:2a: a0:8a:80:fd:92:2f:24:fd:aa:34:c7:0c:9f:fd:23: 0f:3b:51:6b:20:ff:5e:f8:7b:2d:74:36:eb:ad:36: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:93:3E:8E:8C:50:32:CE:93:0A:A2:C3:9D:FF:21:57:19:85:82:10 X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:a2:72:df:18:a0:8b:74:df:12:91:3d:67:a4:c5:eb:ca:d2: 24:c2:1a:7a:7d:fe:5d:37:ca:7c:38:a8:04:c4:89:d0:ff:fb: 41:2e:30:49:25:16:fe:c8:19:34:11:e1:e2:4e:cf:a2:51:6c: 0c:30:15:09:cf:3d:6e:4a:55:eb:4c:8a:55:2d:4d:c2:6f:45: 7f:00:a8:6c:98:13:94:f0:89:15:7c:99:46:85:ef:90:bb:1f: f2:8c:df:40:2d:a9:56:44:2c:58:23:4f:49:08:e6:45:eb:7f: 2c:5f:4b:53:f3:c0:c9:96:4d:ab:2e:75:1c:b2:51:1c:ae:b5: 01:ee:a0:54:5c:45:f1:b8:ed:78:f3:49:61:a1:80:6a:90:f3: e8:6f:53:95:3f:c9:13:10:72:41:33:6d:31:87:6d:8d:51:8a: 46:9c:ed:9a:29:0e:f5:da:ea:28:dd:63:bd:34:39:cc:ff:d5: b9:0c:9f:dc:99:8e:8e:25:d6:a1:36:8c:07:eb:48:07:1d:5b: a2:15:16:15:af:60:e0:b1:fb:7e:3a:23:88:76:d3:8d:fd:3c: c7:58:cf:a8:3d:3d:42:e4:59:95:ce:65:bf:68:31:db:52:7d: a9:8e:c6:42:c6:d2:f3:7d:73:1b:80:72:ab:c8:66:6a:c5:a1: c4:52:a3:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjUwODA0MjEyMjUzWhcNMjUwODExMjEyMjUzWjAYMRYwFAYD VQQDEw02ODkxMjRhZC1kNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAfHhdLJW1PqWu4/ylQq0hLs4SDPmNXb1YDB/3OvWOm4lgdXVFFOJ/HPKj/y liwZ3oVuKmGHzT9rNFzF1IRLYeBa6dy8dRnR0a33H3yXxrfaC5IoB7WvqSj0WaWi scwYZp7BCY67CRNhc52Da93fRLNv5NCg2XKT+CG0oLTM3/f6SjLNRV5qqe8Tobvm dYHW9+AT6gqupvNLSTMYMthkP6S9kie9B79sah+uK4xz+9M/4zDUtpgXz11kdGab Y7bpfQ4pG+p4MAu2Uk9seRmTE3X/9scNI+aVlbM3d1FwqiqgioD9ki8k/ao0xwyf /SMPO1FrIP9e+HstdDbrrTYOmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuTPo6M UDLOkwqiw53/IVcZhYIQMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvonLfGKCLdN8SkT1npMXrytIkwhp6ff5dN8p8OKgExInQ//tBLjBJ JRb+yBk0EeHiTs+iUWwMMBUJzz1uSlXrTIpVLU3Cb0V/AKhsmBOU8IkVfJlGhe+Q ux/yjN9ALalWRCxYI09JCOZF638sX0tT88DJlk2rLnUcslEcrrUB7qBUXEXxuO14 80lhoYBqkPPob1OVP8kTEHJBM20xh22NUYpGnO2aKQ712uoo3WO9NDnM/9W5DJ/c mY6OJdahNowH60gHHVuiFRYVr2Dgsft+OiOIdtON/TzHWM+oPT1C5FmVzmW/aDHb Un2pjsZCxtLzfXMbgHKryGZqxaHEUqPV -----END CERTIFICATE-----Generated at Wed Aug 6 16:12:50 2025 by rpki-client