$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft File: XrCY701WVcxmtq-Bw83kBi2ALzs.mft (raw, json) Hash identifier: ybs26LpJeRrBhxiML/oWWuCQVbo0xpdZg6curB3Wuy4= Subject key identifier: 0E:01:F6:6A:0D:9C:39:FB:41:7E:CF:FC:75:84:FF:C2:A3:21:BF:62 Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B Certificate issuer: /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Certificate serial: 04EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft Manifest number: 04EA Signing time: Sun 10 Aug 2025 23:50:40 +0000 Manifest this update: Sun 10 Aug 2025 23:50:39 +0000 Manifest next update: Sun 17 Aug 2025 23:50:39 +0000 Files and hashes: 1: XrCY701WVcxmtq-Bw83kBi2ALzs.crl (hash: IBFA3KWZ+TEmmW4/XM9VB2yjcFMdfuiJpzWG8ffHVyA=) 2: B4D8E692267111ECA0546981C4F9AE02.roa (hash: APl5b4vCPo52FjFgWioqB5D0vfXVOhLUTwuTuf6xSiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3FB, serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Validity Not Before: Aug 10 23:50:39 2025 GMT Not After : Aug 17 23:50:39 2025 GMT Subject: CN=6899304f-4b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:61:eb:f9:77:8a:8d:ac:cc:86:17:86:f7:93: 7a:8e:0e:71:b4:e2:23:ee:96:26:0e:c4:60:ec:72: 8a:a4:af:3b:a5:a9:a5:0b:f4:f4:2c:63:a8:a1:03: 7c:c8:98:9e:b4:da:d8:e4:0d:21:4e:ca:4a:6e:4d: c0:45:fb:0f:99:a0:81:19:9c:eb:b8:e1:46:c2:1e: c9:29:b7:77:ce:94:76:9a:15:15:38:11:a8:18:2a: 7c:c3:e9:67:b1:ab:e4:2c:ee:f7:d8:1b:7f:a3:de: cc:bc:fa:8f:ff:95:7a:6a:8e:24:2f:19:f0:f8:c9: 0d:1e:0c:67:1d:11:a8:b1:59:fb:0b:dd:2d:c0:f8: 78:cd:8d:32:59:2e:13:02:c3:3d:ac:b7:da:c6:87: 43:b8:cb:81:87:e0:09:bc:d0:90:8d:13:9e:b7:33: bd:aa:98:ab:2d:2b:08:07:a2:77:11:67:e2:a6:4d: 57:5e:e8:7b:14:62:cd:96:2f:c4:cb:54:d2:65:f1: 8c:3a:aa:02:91:ef:bc:dd:11:64:d3:44:11:c5:9e: 05:c1:ac:65:13:dd:95:c5:b1:ee:e3:56:e2:34:32: f7:7f:31:c3:c7:a5:36:1f:a8:28:bf:f7:54:ee:5b: 79:13:bf:9f:32:7c:93:f8:06:02:8b:df:82:b3:23: 60:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:01:F6:6A:0D:9C:39:FB:41:7E:CF:FC:75:84:FF:C2:A3:21:BF:62 X509v3 Authority Key Identifier: keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:50:40:c9:dc:8f:ee:07:96:33:c5:70:ee:dd:88:6a:ba:d0: 28:e1:20:ff:6a:37:c2:f4:93:30:0f:de:95:c6:bf:b5:35:31: e7:aa:c6:06:0a:2b:21:39:34:7c:4b:ab:df:8f:f1:fe:ab:89: e1:68:e7:c8:41:24:4b:57:22:2c:2e:e2:88:27:41:55:0b:a9: 0c:23:d4:8e:4d:27:5c:de:2c:17:b9:84:96:c5:69:41:54:3f: 69:96:a6:67:a2:33:a4:1f:2a:f1:19:34:b3:43:2e:f5:6d:57: bd:d7:19:8d:b4:44:3b:c3:c4:2a:63:b3:27:c0:0e:b3:86:1c: e8:2d:6e:01:0a:45:4b:ef:b5:88:19:e6:ab:fd:d2:c5:3f:3a: f2:3b:a3:6c:fa:c4:6b:f5:59:87:95:38:1b:7c:b0:b2:9e:d5: b7:59:fe:c0:e3:bf:a2:57:2c:4c:87:29:d6:5c:6e:16:ac:c6: 59:04:95:cc:aa:92:aa:b1:d9:4d:46:f7:39:2f:04:e6:a5:20: c5:0a:02:fe:05:29:77:0f:c4:e3:4c:d3:33:c0:4d:df:ce:69: c6:ac:ae:28:a1:56:e3:36:e3:d1:f1:dc:54:8c:3a:7d:a8:b2: 62:7a:23:f5:bd:e5:c1:09:87:52:34:39:0e:74:bd:a7:76:8f: 97:2d:76:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRkIxMTAvBgNVBAUTKDVFQjA5OEVGNEQ1NjU1Q0M2NkI2QUY4MUMzQ0RFNDA2 MkQ4MDJGM0IwHhcNMjUwODEwMjM1MDM5WhcNMjUwODE3MjM1MDM5WjAYMRYwFAYD VQQDEw02ODk5MzA0Zi00YjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62Hr+XeKjazMhheG95N6jg5xtOIj7pYmDsRg7HKKpK87pamlC/T0LGOooQN8 yJietNrY5A0hTspKbk3ARfsPmaCBGZzruOFGwh7JKbd3zpR2mhUVOBGoGCp8w+ln savkLO732Bt/o97MvPqP/5V6ao4kLxnw+MkNHgxnHRGosVn7C90twPh4zY0yWS4T AsM9rLfaxodDuMuBh+AJvNCQjROetzO9qpirLSsIB6J3EWfipk1XXuh7FGLNli/E y1TSZfGMOqoCke+83RFk00QRxZ4FwaxlE92VxbHu41biNDL3fzHDx6U2H6gov/dU 7lt5E7+fMnyT+AYCi9+CsyNggwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4B9moN nDn7QX7P/HWE/8KjIb9iMB8GA1UdIwQYMBaAFF6wmO9NVlXMZravgcPN5AYtgC87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNGQi9GREQ0NEMyMjI2 NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1ZjeG10cS1Cdzgza0JpMkFM enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyQ1k3MDFXVmN4bXRxLUJ3ODNrQmkyQUx6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNGQi9GREQ0NEMyMjI2NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1Zj eG10cS1Cdzgza0JpMkFMenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9UEDJ3I/uB5YzxXDu3YhqutAo4SD/ajfC9JMwD96Vxr+1NTHnqsYG CishOTR8S6vfj/H+q4nhaOfIQSRLVyIsLuKIJ0FVC6kMI9SOTSdc3iwXuYSWxWlB VD9plqZnojOkHyrxGTSzQy71bVe91xmNtEQ7w8QqY7MnwA6zhhzoLW4BCkVL77WI Gear/dLFPzryO6Ns+sRr9VmHlTgbfLCyntW3Wf7A47+iVyxMhynWXG4WrMZZBJXM qpKqsdlNRvc5LwTmpSDFCgL+BSl3D8TjTNMzwE3fzmnGrK4ooVbjNuPR8dxUjDp9 qLJieiP1veXBCYdSNDkOdL2ndo+XLXbL -----END CERTIFICATE-----Generated at Mon Aug 11 01:49:40 2025 by rpki-client