$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft File: F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json) Hash identifier: GNuKKkTUoeAYC3zWodRi3DQkNME+lYl/ish0czpvNuA= Subject key identifier: B3:B4:2D:11:9C:3B:60:C9:5F:2E:C1:43:DD:B7:56:36:BA:FC:8A:48 Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 Certificate issuer: /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft Manifest number: 0599 Signing time: Tue 05 Aug 2025 00:00:22 +0000 Manifest this update: Tue 05 Aug 2025 00:00:22 +0000 Manifest next update: Tue 12 Aug 2025 00:00:22 +0000 Files and hashes: 1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: oUBi2TxlJ7lW25ATTHFVnS8vHD7+8ef/e2FgIRs9WvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FD40, serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Validity Not Before: Aug 5 00:00:22 2025 GMT Not After : Aug 12 00:00:22 2025 GMT Subject: CN=68914996-861c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:cb:d6:fb:5b:e7:ad:cc:61:32:4c:5b:56: 13:30:80:a1:47:7e:18:a6:23:6c:f9:3a:8c:fe:a6: d0:79:0f:bf:23:2a:bf:35:17:cb:99:a8:4b:06:5a: c8:fc:ea:ed:f5:de:4d:d2:ad:e7:2e:85:77:8b:ec: e3:00:4d:2a:00:f2:f3:cc:c8:14:7a:6f:6c:d4:8b: ca:8d:c8:74:15:c8:76:41:06:48:fa:34:77:fb:11: d6:1c:9e:0b:3f:67:af:05:8d:0f:e5:48:40:98:85: 07:c8:bc:f8:46:74:b0:94:e1:75:4d:cb:a4:11:56: a9:21:4d:71:0f:8d:12:c7:33:ee:d3:61:2c:c9:01: 03:6d:98:40:35:9e:28:af:72:3c:59:71:bc:3f:30: 6e:02:1c:fb:2e:d7:d4:e4:6d:8a:fa:a9:d4:15:b7: 57:93:c7:3e:ee:03:f9:c7:da:7a:be:cf:de:ab:e6: be:3c:ae:d5:04:15:de:d3:27:0a:77:5c:87:9f:3e: 2c:18:ee:b6:c1:07:f7:88:55:e7:5a:c1:7b:5d:94: 48:6b:5a:0f:fa:50:1e:ae:c6:9b:b6:f3:ce:dd:90: 0a:f0:c7:a2:29:11:85:98:dc:72:56:3b:dd:3b:65: e0:3c:a0:93:61:b1:a9:ea:de:45:63:16:33:16:30: d9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B4:2D:11:9C:3B:60:C9:5F:2E:C1:43:DD:B7:56:36:BA:FC:8A:48 X509v3 Authority Key Identifier: keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:7c:65:07:95:f5:0b:6c:71:06:8f:43:18:ca:b8:d2:b1:88: 87:f7:37:6e:09:81:f3:98:d1:8d:f2:bd:4f:9a:c5:2c:e8:dc: f8:04:b4:8d:82:82:56:40:7e:55:39:ff:3c:7a:4d:5d:24:04: 0f:e6:8d:ae:4c:1d:86:87:6a:16:a6:0e:e9:bc:d0:06:92:4a: 42:4a:02:2e:93:26:29:f6:dd:68:4e:ac:f0:72:a7:7c:eb:6f: 8b:ed:2c:77:76:9a:59:a5:eb:3b:d6:15:6a:01:1b:13:d0:1d: 62:09:c8:e0:2a:71:f9:70:9b:03:78:0e:75:c7:c2:ed:3d:32: da:f5:f2:c8:f5:54:95:09:3a:05:3f:b4:61:8c:05:50:75:78: c9:a6:10:6f:bc:5a:27:6c:d2:0f:5d:67:f2:6e:03:19:5f:e2: ae:f1:1e:57:b4:78:7b:d1:22:e0:10:1c:25:6d:7c:b3:96:5b: 3d:8d:5e:87:25:19:73:2a:fb:c3:21:9f:8d:ff:92:36:29:1b: 6c:4f:d3:c6:26:af:49:98:26:f3:ec:0a:ad:1a:b7:7a:65:41: 98:e8:28:57:1c:1a:94:a1:a1:8c:31:d0:97:57:83:f8:72:2c: 6b:6f:37:22:51:39:d9:34:42:9d:11:1e:b8:b4:11:1f:f9:a3: dc:70:ea:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZENDAxMTAvBgNVBAUTKDE3RjVDQjQ5MTgwNDUyQTg5NjdGOUMwRjY2Mzc1QUI3 MDlEMEU3NjgwHhcNMjUwODA1MDAwMDIyWhcNMjUwODEyMDAwMDIyWjAYMRYwFAYD VQQDEw02ODkxNDk5Ni04NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1u3L1vtb563MYTJMW1YTMIChR34YpiNs+TqM/qbQeQ+/Iyq/NRfLmahLBlrI /Ort9d5N0q3nLoV3i+zjAE0qAPLzzMgUem9s1IvKjch0Fch2QQZI+jR3+xHWHJ4L P2evBY0P5UhAmIUHyLz4RnSwlOF1TcukEVapIU1xD40SxzPu02EsyQEDbZhANZ4o r3I8WXG8PzBuAhz7LtfU5G2K+qnUFbdXk8c+7gP5x9p6vs/eq+a+PK7VBBXe0ycK d1yHnz4sGO62wQf3iFXnWsF7XZRIa1oP+lAersabtvPO3ZAK8MeiKRGFmNxyVjvd O2XgPKCTYbGp6t5FYxYzFjDZowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO0LRGc O2DJXy7BQ923Vja6/IpIMB8GA1UdIwQYMBaAFBf1y0kYBFKoln+cD2Y3WrcJ0Odo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkQ0MC9GQzIxOTU1RTBC RDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVxaVdmNXdQWmpkYXR3blE1 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfWExTUmdFVXFpV2Y1d1BaamRhdHduUTUyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkQ0MC9GQzIxOTU1RTBCRDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVx aVdmNXdQWmpkYXR3blE1MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCfGUHlfULbHEGj0MYyrjSsYiH9zduCYHzmNGN8r1PmsUs6Nz4BLSN goJWQH5VOf88ek1dJAQP5o2uTB2Gh2oWpg7pvNAGkkpCSgIukyYp9t1oTqzwcqd8 62+L7Sx3dppZpes71hVqARsT0B1iCcjgKnH5cJsDeA51x8LtPTLa9fLI9VSVCToF P7RhjAVQdXjJphBvvFonbNIPXWfybgMZX+Ku8R5XtHh70SLgEBwlbXyzlls9jV6H JRlzKvvDIZ+N/5I2KRtsT9PGJq9JmCbz7AqtGrd6ZUGY6ChXHBqUoaGMMdCXV4P4 cixrbzciUTnZNEKdER64tBEf+aPccOpP -----END CERTIFICATE-----Generated at Wed Aug 6 14:09:49 2025 by rpki-client