$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: 9EqxefpVk98bmLycllOS6URW0AYYK+S+tCQ1jkzH95k= Subject key identifier: 24:85:EB:20:89:2C:8E:49:25:DC:9F:D6:1E:59:17:FB:B8:66:82:E1 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 011B Signing time: Sat 09 Aug 2025 05:11:16 +0000 Manifest this update: Sat 09 Aug 2025 05:11:16 +0000 Manifest next update: Sat 16 Aug 2025 05:11:16 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: MoDkqQV3S50nNUl4b4YEDaRCK/+NSNR/LKYF7xxrb50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Aug 9 05:11:16 2025 GMT Not After : Aug 16 05:11:16 2025 GMT Subject: CN=6896d874-c473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:f0:a9:71:39:6c:07:64:da:38:80:f7:22: ee:e9:60:25:77:6d:5b:c4:34:bb:a4:23:f8:9e:9a: ec:9a:3e:fd:d1:f3:ec:14:79:ed:76:26:d9:fa:79: 88:f2:ce:e3:a0:e0:15:e1:38:8f:7a:40:f2:d0:2e: ff:0c:5e:43:67:6a:f8:f7:9d:6c:b2:2d:25:65:1d: a8:2c:ae:04:84:6c:ac:61:98:f6:26:2b:b2:31:ed: 01:38:df:ad:c4:d2:9b:21:a3:1b:52:9a:76:b8:28: bc:c9:65:19:4d:6d:04:c2:45:10:71:69:8a:1e:cc: f0:eb:04:10:55:01:c4:64:92:bc:e6:1e:3a:ed:b0: ee:0c:30:57:b3:a6:21:34:c2:af:a9:8e:52:53:41: a0:89:4f:a9:60:76:62:36:22:fa:8f:bf:ba:77:fb: 95:5a:ad:c4:49:8f:3f:72:0e:88:02:a8:53:74:61: dc:be:82:84:be:45:22:c6:a0:8f:b2:8f:fb:3d:d7: 90:e6:33:c3:f6:f7:be:28:06:77:30:30:c5:e3:c5: 12:8c:9e:18:a3:d4:ed:13:64:27:53:21:cb:e4:68: 41:5f:11:03:45:ac:58:0f:57:76:64:9d:80:9d:05: 5b:0c:1b:d5:7a:91:b7:7b:01:27:e5:6c:81:58:9d: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:85:EB:20:89:2C:8E:49:25:DC:9F:D6:1E:59:17:FB:B8:66:82:E1 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:96:16:2f:8d:e4:8a:d3:6d:4f:5d:a2:32:c1:77:db:27:11: 66:c0:1c:d6:ac:0e:e2:27:90:d1:b3:5c:b0:05:3e:fa:e7:61: ae:58:98:ac:95:9b:66:6f:0a:09:80:2f:a3:75:55:fa:ef:26: 74:6a:b3:56:91:9d:b8:7f:95:b8:cf:43:f7:46:32:24:62:84: 6f:53:07:86:a3:ba:91:0d:ef:56:f3:bb:42:a9:dc:10:04:fb: 2b:f0:f9:e1:b4:30:e2:00:83:72:2d:69:1b:a6:59:19:e0:4a: a6:72:ec:70:bb:ff:47:50:d5:d8:7e:3d:a5:d4:71:20:eb:61: e6:8b:16:b9:6d:ab:98:d7:37:32:f8:5d:15:52:6f:7f:4d:84: e2:59:99:5e:c0:6d:12:1c:85:c1:0f:6e:44:a9:a4:6c:f1:4b: f9:ad:76:9b:34:91:ac:40:6d:cf:2f:cc:b1:a2:5c:e1:e9:39: 32:6d:2b:df:e7:75:f5:15:f8:b3:9f:f1:ed:77:42:24:e8:3c: e4:28:4c:f3:29:b4:a1:6b:46:db:11:25:01:36:74:b2:82:ad: 89:5c:f6:27:07:07:22:c3:20:c9:1e:2f:f8:2b:79:d6:59:28: c5:29:5b:e5:fc:b7:a9:70:c5:d0:9f:55:bb:18:b7:6c:79:e6: 3f:27:08:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUwODA5MDUxMTE2WhcNMjUwODE2MDUxMTE2WjAYMRYwFAYD VQQDEw02ODk2ZDg3NC1jNDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/jwqXE5bAdk2jiA9yLu6WAld21bxDS7pCP4nprsmj790fPsFHntdibZ+nmI 8s7joOAV4TiPekDy0C7/DF5DZ2r4951ssi0lZR2oLK4EhGysYZj2JiuyMe0BON+t xNKbIaMbUpp2uCi8yWUZTW0EwkUQcWmKHszw6wQQVQHEZJK85h467bDuDDBXs6Yh NMKvqY5SU0GgiU+pYHZiNiL6j7+6d/uVWq3ESY8/cg6IAqhTdGHcvoKEvkUixqCP so/7PdeQ5jPD9ve+KAZ3MDDF48USjJ4Yo9TtE2QnUyHL5GhBXxEDRaxYD1d2ZJ2A nQVbDBvVepG3ewEn5WyBWJ33IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSF6yCJ LI5JJdyf1h5ZF/u4ZoLhMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4lhYvjeSK021PXaIywXfbJxFmwBzWrA7iJ5DRs1ywBT7652GuWJis lZtmbwoJgC+jdVX67yZ0arNWkZ24f5W4z0P3RjIkYoRvUweGo7qRDe9W87tCqdwQ BPsr8PnhtDDiAINyLWkbplkZ4Eqmcuxwu/9HUNXYfj2l1HEg62Hmixa5bauY1zcy +F0VUm9/TYTiWZlewG0SHIXBD25EqaRs8Uv5rXabNJGsQG3PL8yxolzh6TkybSvf 53X1Ffizn/Htd0Ik6DzkKEzzKbSha0bbESUBNnSygq2JXPYnBwciwyDJHi/4K3nW WSjFKVvl/LepcMXQn1W7GLdseeY/Jwgg -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:50 2025 by rpki-client