$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json) Hash identifier: CJZbLZbTILc+r5XSmb8/fgOBg5dZtB/lgJD99K+jaDw= Subject key identifier: F9:1A:AF:B4:51:C9:27:99:5D:AA:72:62:51:AA:68:93:84:0E:EE:62 Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft Manifest number: 0204 Signing time: Wed 23 Jul 2025 02:41:55 +0000 Manifest this update: Wed 23 Jul 2025 02:41:54 +0000 Manifest next update: Wed 30 Jul 2025 02:41:54 +0000 Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: DgVJtKoo3ShSZiG2kdRrB81wHEPTvPMsRxrAxq3fdDQ=) 2: D98071A44F4411F0AF01D40FC4F9AE02.roa (hash: bPBsCe6a2VFWcNMWeHmOx+7VTXSQy1aeyYkZxcsxaxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Validity Not Before: Jul 23 02:41:54 2025 GMT Not After : Jul 30 02:41:54 2025 GMT Subject: CN=68804bf3-0b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:50:d1:21:4c:f7:8c:9e:4d:e3:1f:ff:09: 19:63:29:b8:4f:e1:5f:d9:99:77:7c:04:8b:40:d6: 52:0c:96:8c:4a:59:10:be:db:d0:e7:97:72:29:e8: 7d:e0:15:c6:f2:3e:67:c2:df:6a:12:6b:e8:3d:55: 5b:84:30:14:ae:99:24:b1:76:a0:81:06:d0:8d:9d: 3f:41:77:2a:bc:94:d5:79:ff:eb:36:72:52:2a:91: b9:d2:d4:a1:cd:70:f2:e6:3c:37:e2:7a:b8:3b:9b: e8:e5:dd:35:0e:52:f7:5f:0c:8f:91:31:38:c5:a8: 11:2e:01:7d:30:1d:5e:1d:0d:b7:0a:78:70:1f:64: e7:cf:27:b5:91:2c:25:23:ee:e8:52:c6:20:fe:1f: 0d:a9:46:0e:c1:16:79:d4:7c:65:13:6c:75:e0:60: 06:2a:eb:f4:d0:71:92:4b:10:7c:34:fc:2e:35:25: 98:db:54:3f:48:95:ee:17:b8:bd:0a:e9:30:1a:73: 47:fc:48:d1:55:5a:0c:fa:18:42:05:fb:49:7c:d1: a9:89:da:59:c7:8b:49:90:3d:9a:81:2c:54:d3:fc: 40:cd:d6:08:e7:34:59:48:b4:6b:04:92:0b:35:fa: c3:f8:40:fb:31:f3:91:a2:c4:1d:36:3c:f8:1e:83: dd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1A:AF:B4:51:C9:27:99:5D:AA:72:62:51:AA:68:93:84:0E:EE:62 X509v3 Authority Key Identifier: keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:30:80:dc:5d:6b:11:0e:f9:dc:27:c3:94:95:2f:3c:5e:c7: 7c:97:36:d0:e4:a1:d1:c7:ed:d9:67:1c:40:fa:68:c8:87:f0: 39:fa:89:41:0e:ee:1a:3c:a6:b6:9a:14:8c:6c:25:23:32:48: 94:b2:8a:29:7b:ed:ac:bb:97:d9:2a:ed:c1:7b:04:92:27:be: b1:e7:60:09:2d:cb:1a:eb:56:8a:8c:f6:6d:da:4e:37:29:82: 4f:43:28:ee:ec:b1:d3:ed:f2:6b:6a:d1:e2:c8:ad:4b:7c:37: c1:3d:8a:c1:b7:fb:ad:ed:20:d8:df:01:a3:97:59:8b:0c:cd: 4e:e6:b4:a1:32:ed:4e:a3:98:fa:63:b4:99:af:47:fe:c9:08: 55:ae:69:a4:d5:3a:e2:f4:a3:af:d9:6b:e7:f6:a8:a9:02:5b: 74:22:1f:29:24:28:d9:cd:ff:38:1b:d0:40:9e:ee:83:4b:59: 93:51:da:c4:45:f1:8f:63:3f:a0:ac:cc:a3:2e:f9:e4:31:c8: 89:bf:be:b2:d6:40:07:ff:cf:56:d3:19:bd:23:48:0b:57:88: 9a:1c:e9:90:a3:30:68:88:e5:ed:14:dd:ba:05:3f:a1:66:c4: 22:54:01:bf:68:86:ec:fc:b8:e2:82:c4:0d:c9:08:1b:b1:6c: 47:41:15:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0 RTIyRTk0NDUwHhcNMjUwNzIzMDI0MTU0WhcNMjUwNzMwMDI0MTU0WjAYMRYwFAYD VQQDEw02ODgwNGJmMy0wYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOxQ0SFM94yeTeMf/wkZYym4T+Ff2Zl3fASLQNZSDJaMSlkQvtvQ55dyKeh9 4BXG8j5nwt9qEmvoPVVbhDAUrpkksXaggQbQjZ0/QXcqvJTVef/rNnJSKpG50tSh zXDy5jw34nq4O5vo5d01DlL3XwyPkTE4xagRLgF9MB1eHQ23CnhwH2Tnzye1kSwl I+7oUsYg/h8NqUYOwRZ51HxlE2x14GAGKuv00HGSSxB8NPwuNSWY21Q/SJXuF7i9 CukwGnNH/EjRVVoM+hhCBftJfNGpidpZx4tJkD2agSxU0/xAzdYI5zRZSLRrBJIL NfrD+ED7MfORosQdNjz4HoPdiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkar7RR ySeZXapyYlGqaJOEDu5iMB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2 RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM2QS9CMEYzM0QyQTY2RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRX RE5tZkJ1WGRBdDVPSXVsRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAMIDcXWsRDvncJ8OUlS88Xsd8lzbQ5KHRx+3ZZxxA+mjIh/A5+olB Du4aPKa2mhSMbCUjMkiUsoope+2su5fZKu3BewSSJ76x52AJLcsa61aKjPZt2k43 KYJPQyju7LHT7fJratHiyK1LfDfBPYrBt/ut7SDY3wGjl1mLDM1O5rShMu1Oo5j6 Y7SZr0f+yQhVrmmk1Tri9KOv2Wvn9qipAlt0Ih8pJCjZzf84G9BAnu6DS1mTUdrE RfGPYz+grMyjLvnkMciJv76y1kAH/89W0xm9I0gLV4iaHOmQozBoiOXtFN26BT+h ZsQiVAG/aIbs/LjigsQNyQgbsWxHQRWR -----END CERTIFICATE-----Generated at Thu Jul 24 12:15:28 2025 by rpki-client