$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json) Hash identifier: N7BBqj1ICYRUBcZ5zp8GMvMYOhypOA64CvV4t1z+pW4= Subject key identifier: BC:DD:5B:0C:EB:F9:B7:4C:C7:39:C5:A8:9C:2B:2F:5B:3E:09:4B:61 Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft Manifest number: 065B Signing time: Sat 09 Aug 2025 00:13:22 +0000 Manifest this update: Sat 09 Aug 2025 00:13:22 +0000 Manifest next update: Sat 16 Aug 2025 00:13:22 +0000 Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: u1Rjg7A5NDjnPo+doe7c+k5YAFT+DTyzJPFKuNexqCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Validity Not Before: Aug 9 00:13:22 2025 GMT Not After : Aug 16 00:13:22 2025 GMT Subject: CN=689692a2-56b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:7f:43:62:79:7e:63:7b:16:bc:e0:69:c4: f8:ae:87:8b:00:4d:46:40:dd:99:c4:8e:9a:3f:2e: c0:2d:89:69:6e:26:28:30:38:15:5f:44:3c:76:f5: a2:90:63:32:d6:a6:a1:c6:fc:05:84:c4:92:0e:0c: d7:a2:60:6d:fd:be:e8:c7:a2:03:73:55:50:af:d4: 9d:e6:ba:de:ca:40:4d:83:6d:b4:18:9b:91:bd:2d: 54:da:30:6a:62:cf:cf:36:de:bc:15:e3:0c:b4:09: 95:0f:b7:1b:44:23:fe:59:e2:d5:8c:be:2c:48:d8: ca:8a:14:bc:df:2d:39:67:ab:dd:0e:0e:7e:28:b6: 92:90:8a:79:d8:c4:41:18:06:10:ba:9d:1a:36:cb: 34:dc:8e:f0:f8:7a:a4:1a:21:98:3a:7b:ab:a1:2c: 0f:ec:ff:80:c0:ad:28:e6:a1:33:c5:53:8c:bc:06: 24:78:a4:9a:8d:34:51:19:5c:fc:08:bb:0a:9d:e6: 03:0a:70:ec:93:94:59:e3:3c:b8:2a:e2:63:c5:95: ca:68:8f:35:10:f0:2f:72:4c:1c:58:c3:6e:97:ad: ba:0e:9d:4b:43:47:85:0f:be:c9:44:cc:08:7b:44: f4:a3:05:ee:7d:d3:4f:87:4e:67:ed:c5:c4:ad:60: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DD:5B:0C:EB:F9:B7:4C:C7:39:C5:A8:9C:2B:2F:5B:3E:09:4B:61 X509v3 Authority Key Identifier: keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:22:fb:14:63:70:94:98:0f:7c:f7:d0:7b:05:69:86:51:40: 3e:0a:7b:28:10:91:ab:39:96:ec:a4:7b:f9:f5:cc:40:4a:3f: e4:3e:eb:18:a7:5f:2c:ff:52:5c:9e:f8:32:30:da:2c:1f:9b: ba:09:c4:a8:08:90:91:a6:20:52:d7:51:cb:0c:41:ba:c4:63: 6c:46:85:d1:23:db:61:93:a3:e3:6a:e5:44:81:d0:e5:65:30: 3d:71:82:25:73:f0:a9:c9:0e:c9:ec:cb:a6:8c:25:10:70:97: a6:ae:f2:42:3d:d2:15:e5:48:f3:3c:57:99:88:a5:85:61:d7: a3:c3:f3:30:35:5a:5a:5c:4f:ea:cf:8e:56:42:e6:7b:bf:d1: 27:c2:ae:80:09:a0:5d:a0:f2:f2:af:0d:37:c5:ab:89:cb:aa: a1:27:07:aa:31:a2:34:10:b6:1a:f2:aa:6d:82:e1:3d:51:d5: 27:37:52:72:68:f2:02:03:2a:c9:13:34:e4:6a:24:05:a7:6d: 7e:3d:44:96:8f:75:3a:47:45:63:b6:72:87:4e:89:5f:4c:26: f1:91:dc:24:c5:81:2f:e0:23:6b:a7:85:26:4b:0a:f8:2c:66: c2:60:c1:0b:64:01:10:fc:c4:1c:6e:89:10:c6:77:b4:a2:2c: 1d:9b:9a:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF MUIyM0JDMjcwHhcNMjUwODA5MDAxMzIyWhcNMjUwODE2MDAxMzIyWjAYMRYwFAYD VQQDEw02ODk2OTJhMi01NmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzB/Q2J5fmN7FrzgacT4roeLAE1GQN2ZxI6aPy7ALYlpbiYoMDgVX0Q8dvWi kGMy1qahxvwFhMSSDgzXomBt/b7ox6IDc1VQr9Sd5rreykBNg220GJuRvS1U2jBq Ys/PNt68FeMMtAmVD7cbRCP+WeLVjL4sSNjKihS83y05Z6vdDg5+KLaSkIp52MRB GAYQup0aNss03I7w+HqkGiGYOnuroSwP7P+AwK0o5qEzxVOMvAYkeKSajTRRGVz8 CLsKneYDCnDsk5RZ4zy4KuJjxZXKaI81EPAvckwcWMNul626Dp1LQ0eFD77JRMwI e0T0owXufdNPh05n7cXErWBHoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzdWwzr +bdMxznFqJwrL1s+CUthMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2 NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5IvsUY3CUmA9899B7BWmGUUA+CnsoEJGrOZbspHv59cxASj/kPusY p18s/1JcnvgyMNosH5u6CcSoCJCRpiBS11HLDEG6xGNsRoXRI9thk6PjauVEgdDl ZTA9cYIlc/CpyQ7J7MumjCUQcJemrvJCPdIV5UjzPFeZiKWFYdejw/MwNVpaXE/q z45WQuZ7v9Enwq6ACaBdoPLyrw03xauJy6qhJweqMaI0ELYa8qptguE9UdUnN1Jy aPICAyrJEzTkaiQFp21+PUSWj3U6R0VjtnKHTolfTCbxkdwkxYEv4CNrp4UmSwr4 LGbCYMELZAEQ/MQcbokQxne0oiwdm5rI -----END CERTIFICATE-----Generated at Sun Aug 10 21:01:55 2025 by rpki-client