$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json) Hash identifier: +jw83v7jEqnSCnY30M3YI4oXZs+S8nkVuOkHXGLc2k0= Subject key identifier: 98:E1:7D:6E:A3:1A:A0:1A:6C:96:69:80:37:73:93:A8:C6:57:ED:57 Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft Manifest number: 0195 Signing time: Sat 09 Aug 2025 03:46:09 +0000 Manifest this update: Sat 09 Aug 2025 03:46:08 +0000 Manifest next update: Sat 16 Aug 2025 03:46:08 +0000 Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: g0XyYNxL7Y1Nrqxo0NZLhfa5R4taYLnJ6rGzwm2+Pbc=) 2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: eGRq+1XhrILN9pC7Bu29wtZG2xTxwIWpAe96/Tzv+yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Validity Not Before: Aug 9 03:46:08 2025 GMT Not After : Aug 16 03:46:08 2025 GMT Subject: CN=6896c480-8778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:19:4d:8e:b1:1f:fc:ac:2a:f0:a2:81:72:33: a8:32:c8:de:0f:b2:29:3b:38:86:35:dd:9a:19:02: 3b:fc:8b:33:eb:f5:64:9e:40:1c:51:70:a3:5e:9a: 57:79:d7:2b:9e:a6:fa:38:16:30:ef:20:ba:f2:bc: fb:0b:cb:4d:a1:82:47:b9:80:c9:cd:5b:7c:d7:56: 84:76:bc:f6:e4:3e:58:ae:79:e3:7c:92:21:ba:21: 01:06:d3:80:fe:de:8e:74:18:74:d2:b2:1b:e3:d1: be:41:12:c9:23:a0:0c:29:5f:c2:36:d9:a2:52:f1: 3b:51:42:3b:b5:68:60:10:c7:06:70:9c:ae:38:7f: 2b:6b:59:1a:6f:b6:92:37:58:10:eb:a7:70:79:21: 73:9d:65:c9:42:8c:c0:a5:6f:8b:cc:50:2d:f3:f6: cb:c8:14:13:75:b9:28:88:dc:7a:0d:52:17:68:81: a1:db:46:86:b2:b3:2e:f9:98:8b:a8:6c:05:2f:da: b2:88:88:2c:1e:4e:17:c4:27:be:73:7c:c0:20:4b: ee:d6:72:5a:f2:87:83:b6:29:30:e3:80:55:b4:5d: f4:60:81:1a:01:1f:53:f3:ec:03:23:19:37:0c:a5: 55:c4:fc:e1:08:98:fa:dd:e4:f8:f1:af:b2:e1:33: c6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E1:7D:6E:A3:1A:A0:1A:6C:96:69:80:37:73:93:A8:C6:57:ED:57 X509v3 Authority Key Identifier: keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:11:f8:f1:a5:72:3f:ef:fc:5b:d7:70:c9:19:83:93:af:87: 5f:ff:66:ab:7b:2f:04:aa:0d:11:1f:d0:18:bd:4a:cd:91:69: 75:21:49:39:10:f8:f0:b2:9f:ff:3c:fc:f1:5f:55:cb:55:77: ee:75:0f:67:5b:3b:ab:a1:f1:02:f1:21:3b:2a:93:7e:3b:c6: 75:ea:58:82:58:d2:f8:d3:3b:18:84:82:fa:ef:ad:f3:d0:d2: 75:81:b8:01:90:3c:f5:5f:e7:41:35:28:2f:0f:86:56:ad:5d: 7b:e8:b7:d4:2c:d3:29:e2:1f:df:78:60:59:cb:9e:e7:89:c4: 49:9f:7c:6a:f7:dd:e3:77:1a:3d:5c:98:78:16:7c:79:f0:87: cf:72:c6:e5:f3:a2:b2:ad:4a:ff:dc:99:26:ae:a6:19:05:ee: ca:7e:bc:ac:cc:e4:a4:20:cd:50:29:8d:07:58:9e:ff:ed:83: cd:b5:33:71:39:af:81:f7:ab:9a:9d:b3:68:9e:7d:b2:fc:09: cc:42:2c:15:ae:45:c6:53:9e:10:e1:56:49:36:e7:87:d8:dc: cf:c0:d3:92:f8:65:68:f2:a1:7e:14:b4:78:0f:83:b3:ef:68: 79:a8:97:9c:bd:be:3f:75:25:ae:ec:2b:82:c2:e5:46:b2:c9: 7b:65:0b:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcwREFFOTEwNDIz NjExQTMxOTIwHhcNMjUwODA5MDM0NjA4WhcNMjUwODE2MDM0NjA4WjAYMRYwFAYD VQQDEw02ODk2YzQ4MC04Nzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xlNjrEf/Kwq8KKBcjOoMsjeD7IpOziGNd2aGQI7/Isz6/VknkAcUXCjXppX edcrnqb6OBYw7yC68rz7C8tNoYJHuYDJzVt811aEdrz25D5YrnnjfJIhuiEBBtOA /t6OdBh00rIb49G+QRLJI6AMKV/CNtmiUvE7UUI7tWhgEMcGcJyuOH8ra1kab7aS N1gQ66dweSFznWXJQozApW+LzFAt8/bLyBQTdbkoiNx6DVIXaIGh20aGsrMu+ZiL qGwFL9qyiIgsHk4XxCe+c3zAIEvu1nJa8oeDtikw44BVtF30YIEaAR9T8+wDIxk3 DKVVxPzhCJj63eT48a+y4TPGEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjhfW6j GqAabJZpgDdzk6jGV+1XMB8GA1UdIwQYMBaAFMZU/Eds3y4wa+J3Da6RBCNhGjGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTc1MC80NTFENkE2QTA2 QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6ZkxqQnI0bmNOcnBFRUkyRWFN WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsVDhSMnpmTGpCcjRuY05ycEVFSTJFYU1aSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6Zkxq QnI0bmNOcnBFRUkyRWFNWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmEfjxpXI/7/xb13DJGYOTr4df/2arey8Eqg0RH9AYvUrNkWl1IUk5 EPjwsp//PPzxX1XLVXfudQ9nWzurofEC8SE7KpN+O8Z16liCWNL40zsYhIL6763z 0NJ1gbgBkDz1X+dBNSgvD4ZWrV176LfULNMp4h/feGBZy57nicRJn3xq993jdxo9 XJh4Fnx58IfPcsbl86KyrUr/3JkmrqYZBe7KfryszOSkIM1QKY0HWJ7/7YPNtTNx Oa+B96uanbNonn2y/AnMQiwVrkXGU54Q4VZJNueH2NzPwNOS+GVo8qF+FLR4D4Oz 72h5qJecvb4/dSWu7CuCwuVGssl7ZQu7 -----END CERTIFICATE-----Generated at Sun Aug 10 21:16:03 2025 by rpki-client