$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: zuw5ePuU/BtqaIVnuGttr9UxYq32RyhdZcjS6a8e71Y= Subject key identifier: 27:DA:04:AB:13:06:CE:65:5D:82:8C:D5:2B:B8:CE:AF:BE:AF:B2:73 Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 04D4 Signing time: Sun 10 Aug 2025 23:54:36 +0000 Manifest this update: Sun 10 Aug 2025 23:54:36 +0000 Manifest next update: Sun 17 Aug 2025 23:54:36 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: etd1ZA+ENwwxpdOsPjh9DCuxnTIJayglk8gmUOvLDVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: Aug 10 23:54:36 2025 GMT Not After : Aug 17 23:54:36 2025 GMT Subject: CN=6899313c-af74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:31:3c:5f:9c:41:75:e6:e7:aa:9b:5f:4c: 46:ff:48:d2:99:72:93:5c:1f:25:0c:2c:8b:02:28: 15:11:43:b9:9c:d3:d2:aa:dd:21:9b:b9:73:73:d6: 81:4a:7b:04:3a:9e:d9:d2:1a:d7:cd:42:9c:bc:8b: fe:7a:09:b1:98:84:fa:3a:b9:9f:e8:17:a0:db:14: fd:21:f4:f7:b4:96:1d:44:ac:a7:9d:7a:f8:17:02: fc:39:ab:9e:98:15:6e:5b:d0:a7:d2:f4:59:06:a8: bd:1e:96:33:5a:55:e6:e9:51:7a:61:db:20:6d:fd: a7:61:58:fc:54:fd:b9:5e:ce:a9:df:72:c2:d5:39: 15:a7:a3:46:9e:d4:ea:09:a1:0c:87:39:ec:82:4c: a4:e7:3a:12:dd:d1:7c:37:e3:85:57:11:5f:0b:f1: 55:2b:8c:da:36:09:6d:50:93:29:e0:94:8b:9e:9d: 30:35:20:a5:cc:ec:67:04:fd:45:dd:e7:87:94:48: 3d:57:51:ae:06:e0:57:b3:8d:7e:b8:5c:80:1e:ac: 53:9d:2f:5d:ec:72:80:40:d0:84:b2:bf:9e:bc:e5: 69:46:d8:1f:d8:0d:09:44:72:4c:71:8d:5b:12:72: 20:4b:db:0d:3e:cc:13:30:7b:d8:94:60:dd:2e:5d: 24:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DA:04:AB:13:06:CE:65:5D:82:8C:D5:2B:B8:CE:AF:BE:AF:B2:73 X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:d4:70:43:0d:ef:27:06:fe:7e:e6:e4:8a:aa:ad:83:d5:e4: ef:dc:1c:e7:bf:97:98:8e:fa:15:b6:85:40:1e:1e:68:fd:81: fb:71:4e:bb:94:49:ba:8e:4b:77:30:77:23:6f:00:8c:49:5d: ec:68:64:3d:c8:71:cf:6c:ac:74:18:a6:f9:77:a6:bf:79:d9: d0:fc:35:18:0a:53:a1:bd:47:4f:79:73:5d:bc:4d:fd:4f:9f: d8:5a:c2:14:16:87:63:ef:1b:6b:0b:47:4f:9a:c9:b8:b8:d1: 34:8b:a8:2b:fa:43:3b:5b:32:82:f3:d9:62:25:25:cf:92:51: fb:9f:ba:19:cc:98:ac:88:33:0c:2b:d0:76:b5:5e:cb:08:3e: 8e:24:23:d6:bd:1b:68:96:6e:ab:3a:35:15:86:ae:be:93:f0: 2c:6f:67:80:3b:aa:09:02:17:c8:d0:70:f8:e7:d7:65:5c:a4: 0f:a3:1c:33:73:72:a9:9b:e1:97:28:fe:aa:e7:28:f2:08:c7: e1:fb:70:23:14:98:fc:83:da:73:b5:53:6d:eb:42:6e:a8:f1: 78:ea:c3:55:f6:98:b9:1e:fc:f0:49:1e:0b:65:69:7e:ee:47: df:ea:4a:82:93:c5:9a:6a:8f:14:e4:d4:d6:c7:b5:aa:84:87: 56:b5:60:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjUwODEwMjM1NDM2WhcNMjUwODE3MjM1NDM2WjAYMRYwFAYD VQQDEw02ODk5MzEzYy1hZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRIxPF+cQXXm56qbX0xG/0jSmXKTXB8lDCyLAigVEUO5nNPSqt0hm7lzc9aB SnsEOp7Z0hrXzUKcvIv+egmxmIT6Ormf6Beg2xT9IfT3tJYdRKynnXr4FwL8Oaue mBVuW9Cn0vRZBqi9HpYzWlXm6VF6Ydsgbf2nYVj8VP25Xs6p33LC1TkVp6NGntTq CaEMhznsgkyk5zoS3dF8N+OFVxFfC/FVK4zaNgltUJMp4JSLnp0wNSClzOxnBP1F 3eeHlEg9V1GuBuBXs41+uFyAHqxTnS9d7HKAQNCEsr+evOVpRtgf2A0JRHJMcY1b EnIgS9sNPswTMHvYlGDdLl0k1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfaBKsT Bs5lXYKM1Su4zq++r7JzMB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC1HBDDe8nBv5+5uSKqq2D1eTv3Bznv5eYjvoVtoVAHh5o/YH7cU67 lEm6jkt3MHcjbwCMSV3saGQ9yHHPbKx0GKb5d6a/ednQ/DUYClOhvUdPeXNdvE39 T5/YWsIUFodj7xtrC0dPmsm4uNE0i6gr+kM7WzKC89liJSXPklH7n7oZzJisiDMM K9B2tV7LCD6OJCPWvRtolm6rOjUVhq6+k/Asb2eAO6oJAhfI0HD459dlXKQPoxwz c3Kpm+GXKP6q5yjyCMfh+3AjFJj8g9pztVNt60JuqPF46sNV9pi5HvzwSR4LZWl+ 7kff6kqCk8Waao8U5NTWx7WqhIdWtWCY -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:16 2025 by rpki-client