$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: PnyeFhl4erq6bjeNuzxvTpRZ5saU5EY8IWBebgWVWkM= Subject key identifier: 41:19:9C:E2:B9:41:85:EE:5D:41:C1:13:FF:D8:FA:F8:65:D8:64:38 Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0D07 Signing time: Sun 10 Aug 2025 18:04:40 +0000 Manifest this update: Sun 10 Aug 2025 18:04:39 +0000 Manifest next update: Sun 17 Aug 2025 18:04:39 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: GcwT0NyHJfqyAsregSj7a4QAzB9pFxVLbr8hIaoCWNY=) 2: 41A8E738045111EA9C7DF516C4F9AE02.roa (hash: 549cEJi0czWRyHHS6o5u4NQ6YCs80VKq9MH5xptp8mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: Aug 10 18:04:39 2025 GMT Not After : Aug 17 18:04:39 2025 GMT Subject: CN=6898df38-ed6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:ec:bd:86:5a:cd:f1:d3:95:38:2c:43:15: ff:8b:16:3c:ab:9f:67:a8:01:f0:4f:66:c7:c8:6b: 03:49:7c:32:ca:a7:10:9e:69:aa:30:6e:7b:f8:08: 8b:d2:64:96:b0:7b:52:89:99:57:a7:88:39:c3:ea: 2b:d6:5d:ce:e0:ec:0e:aa:37:ed:b1:b4:e4:76:97: 36:04:bb:ef:cb:17:e5:f0:33:8c:bc:8b:8c:07:e3: d8:91:79:ac:2c:9a:f7:1c:e5:2c:7a:6c:f3:c9:c4: 21:7b:95:d3:70:cb:6d:90:2c:09:a3:36:e0:b0:dc: b8:f9:ef:72:0b:ed:56:7e:dc:5f:a0:ce:c3:a0:62: 08:7d:ff:88:22:aa:f7:60:8a:05:fb:b9:b2:ef:6f: f3:19:50:03:e5:dc:43:51:6f:5e:e2:be:70:e9:c2: d9:73:0a:1b:58:f2:83:ef:0d:1b:7c:d1:9a:70:85: 2f:98:c9:0c:a0:35:87:12:a0:15:1a:0c:1b:5e:a8: de:88:78:ce:55:dd:f5:af:f8:c1:46:02:cd:41:1d: 41:f0:38:b7:4a:1e:4c:65:fe:93:64:3a:78:67:6d: cb:f3:75:cf:2b:74:47:76:6e:33:80:46:3f:6d:d5: d1:c9:f5:1a:20:7a:20:7e:fe:91:dd:c0:a8:b2:dc: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:19:9C:E2:B9:41:85:EE:5D:41:C1:13:FF:D8:FA:F8:65:D8:64:38 X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:52:8e:d6:05:47:9c:3a:54:6e:65:f6:a1:ff:ce:5d:88:97: 1f:ca:35:ba:ce:7c:95:b4:94:0e:17:5c:b7:5a:4f:19:3e:29: eb:e2:8b:8b:16:4f:26:64:d7:d6:b9:53:e3:a9:54:04:df:30: 07:bf:66:0a:b4:64:b5:bc:24:e1:a2:24:70:17:0c:54:f0:10: 97:d5:5f:cc:88:19:f6:3e:2a:db:33:6d:1e:89:66:66:ba:ab: a3:e8:31:ae:18:32:3f:c0:21:fa:a7:72:a9:da:75:9b:9c:4f: e4:9d:d3:2c:9a:c9:91:c7:05:41:48:e7:a8:8c:6c:7b:ed:54: c4:3f:f1:91:ce:34:20:01:8d:e1:9a:89:cf:d7:14:c4:32:df: 41:e1:88:c5:cb:6c:71:9b:35:4e:1c:07:d5:d5:df:17:7b:21: d4:16:bb:4e:38:4a:8d:16:cf:70:63:bc:dd:1f:1e:38:52:bf: ad:e9:73:5c:5f:14:b8:d2:81:c2:8a:b1:48:1a:ff:93:f0:c3: 1a:97:75:1e:f9:a3:02:71:6c:63:f3:31:82:9f:6e:18:6a:f3: 4f:ec:12:79:52:06:7c:18:fc:40:12:76:5b:8c:3b:b0:08:a9: c1:4b:14:e4:46:e6:50:c8:51:04:80:a3:e5:1f:79:bb:7f:2e: 19:a3:55:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjUwODEwMTgwNDM5WhcNMjUwODE3MTgwNDM5WjAYMRYwFAYD VQQDEw02ODk4ZGYzOC1lZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFXsvYZazfHTlTgsQxX/ixY8q59nqAHwT2bHyGsDSXwyyqcQnmmqMG57+AiL 0mSWsHtSiZlXp4g5w+or1l3O4OwOqjftsbTkdpc2BLvvyxfl8DOMvIuMB+PYkXms LJr3HOUsemzzycQhe5XTcMttkCwJozbgsNy4+e9yC+1WftxfoM7DoGIIff+IIqr3 YIoF+7my72/zGVAD5dxDUW9e4r5w6cLZcwobWPKD7w0bfNGacIUvmMkMoDWHEqAV GgwbXqjeiHjOVd31r/jBRgLNQR1B8Di3Sh5MZf6TZDp4Z23L83XPK3RHdm4zgEY/ bdXRyfUaIHogfv6R3cCostwDAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEZnOK5 QYXuXUHBE//Y+vhl2GQ4MB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBUo7WBUecOlRuZfah/85diJcfyjW6znyVtJQOF1y3Wk8ZPinr4ouL Fk8mZNfWuVPjqVQE3zAHv2YKtGS1vCThoiRwFwxU8BCX1V/MiBn2PirbM20eiWZm uquj6DGuGDI/wCH6p3Kp2nWbnE/kndMsmsmRxwVBSOeojGx77VTEP/GRzjQgAY3h monP1xTEMt9B4YjFy2xxmzVOHAfV1d8XeyHUFrtOOEqNFs9wY7zdHx44Ur+t6XNc XxS40oHCirFIGv+T8MMal3Ue+aMCcWxj8zGCn24YavNP7BJ5UgZ8GPxAEnZbjDuw CKnBSxTkRuZQyFEEgKPlH3m7fy4Zo1Xk -----END CERTIFICATE-----Generated at Mon Aug 11 09:29:06 2025 by rpki-client