$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json) Hash identifier: iUSlDai04eeAOGmHbF2pmnCSsK/Xsvrj3ov4bHmYnbM= Subject key identifier: 07:1F:2A:B6:18:3C:F4:8D:05:15:63:CF:A5:3A:96:06:63:A8:7B:5D Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft Manifest number: 0203 Signing time: Mon 21 Jul 2025 02:31:39 +0000 Manifest this update: Mon 21 Jul 2025 02:31:38 +0000 Manifest next update: Mon 28 Jul 2025 02:31:38 +0000 Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: g9kIYcmr9arp62IiJRq+HGgA777+HhKxnRuQk8x5FBY=) 2: D98071A44F4411F0AF01D40FC4F9AE02.roa (hash: bPBsCe6a2VFWcNMWeHmOx+7VTXSQy1aeyYkZxcsxaxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Validity Not Before: Jul 21 02:31:38 2025 GMT Not After : Jul 28 02:31:38 2025 GMT Subject: CN=687da68b-19cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:b0:8f:ad:5a:65:de:5a:18:a3:13:c6:3a: 71:aa:2b:83:d0:7e:73:7e:94:3d:a2:3f:38:07:78: 51:a4:e5:a4:ed:8f:93:ec:4c:63:4d:09:05:49:9f: c9:02:11:4b:0a:23:6d:a6:c6:42:08:13:60:09:52: ca:e3:79:74:b2:68:cc:ad:9a:f2:b5:2e:fa:2a:dd: 7a:32:96:31:93:2a:7a:ae:ec:d0:8e:04:0f:c5:ab: 1d:25:f5:b0:ea:ff:8c:8f:59:f6:f8:3e:b9:b4:7c: a4:21:7b:c3:2a:69:34:e9:b2:d9:41:eb:09:c9:1d: 0d:e8:fc:bd:47:26:0e:b4:93:ae:30:f4:e2:45:f2: 72:62:82:e0:b4:7f:76:b3:4f:80:f6:1d:2b:8a:31: e1:12:74:99:7e:b1:5b:3e:35:59:dc:99:af:73:f3: 02:70:14:a3:8c:7e:72:74:50:53:51:99:c5:46:30: 79:70:52:00:1a:4d:0c:70:8c:ff:70:ae:56:2c:eb: f4:ae:ea:13:a9:f8:e7:81:61:2c:5d:14:6f:57:96: eb:ac:ed:f6:7d:4c:3f:6b:c1:4a:22:95:22:da:f5: bf:c6:5f:6b:37:6b:cb:c2:9c:0b:20:9e:b3:0a:52: bf:00:55:2f:06:f6:fc:a3:7a:ec:51:fc:f4:ca:c5: 94:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1F:2A:B6:18:3C:F4:8D:05:15:63:CF:A5:3A:96:06:63:A8:7B:5D X509v3 Authority Key Identifier: keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:34:2f:45:2e:37:4c:63:a4:cd:7b:08:4a:a3:66:76:c2:9a: 5c:a2:25:9a:0b:56:e7:23:2e:e9:f6:4d:9b:fb:63:47:1a:30: e8:6b:31:08:e0:b1:a7:08:cc:e9:32:bb:4f:be:20:5a:ca:6d: 50:5c:25:77:7f:62:26:85:3f:34:6c:45:0b:de:5d:31:94:10: e6:0b:d9:4a:36:33:be:ea:52:df:44:6d:8c:10:b1:27:2c:bf: 52:be:28:29:e9:f4:c8:b1:d4:30:1a:98:ed:75:06:fb:1e:21: e0:5c:e2:9c:09:80:25:cb:75:98:ce:81:ba:86:e0:24:25:3d: 67:3c:b5:ef:b0:0e:61:fa:84:15:f0:05:83:0a:f4:4e:5b:a2: 34:1e:35:e7:69:76:60:6c:d4:b5:ae:fe:78:84:42:2b:10:a3: b1:3d:be:29:29:d5:2e:70:ee:65:e5:cb:c8:e0:7e:35:85:a3: c1:97:d0:25:0e:6e:e2:54:9b:50:2d:13:cb:f6:c0:b8:0c:18: 85:83:30:a6:c9:dc:c2:08:27:a2:c3:e9:07:4f:ec:bd:0b:34: c4:be:10:d3:aa:da:02:a9:49:4a:b3:03:2f:07:9b:11:95:82: 2c:0e:cc:b2:e7:8f:44:b1:31:1e:9c:27:15:fa:ff:6f:31:c4: cb:d8:4f:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0 RTIyRTk0NDUwHhcNMjUwNzIxMDIzMTM4WhcNMjUwNzI4MDIzMTM4WjAYMRYwFAYD VQQDEw02ODdkYTY4Yi0xOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d2wj61aZd5aGKMTxjpxqiuD0H5zfpQ9oj84B3hRpOWk7Y+T7ExjTQkFSZ/J AhFLCiNtpsZCCBNgCVLK43l0smjMrZrytS76Kt16MpYxkyp6ruzQjgQPxasdJfWw 6v+Mj1n2+D65tHykIXvDKmk06bLZQesJyR0N6Py9RyYOtJOuMPTiRfJyYoLgtH92 s0+A9h0rijHhEnSZfrFbPjVZ3Jmvc/MCcBSjjH5ydFBTUZnFRjB5cFIAGk0McIz/ cK5WLOv0ruoTqfjngWEsXRRvV5brrO32fUw/a8FKIpUi2vW/xl9rN2vLwpwLIJ6z ClK/AFUvBvb8o3rsUfz0ysWUdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcfKrYY PPSNBRVjz6U6lgZjqHtdMB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2 RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM2QS9CMEYzM0QyQTY2RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRX RE5tZkJ1WGRBdDVPSXVsRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5NC9FLjdMY6TNewhKo2Z2wppcoiWaC1bnIy7p9k2b+2NHGjDoazEI 4LGnCMzpMrtPviBaym1QXCV3f2ImhT80bEUL3l0xlBDmC9lKNjO+6lLfRG2MELEn LL9Svigp6fTIsdQwGpjtdQb7HiHgXOKcCYAly3WYzoG6huAkJT1nPLXvsA5h+oQV 8AWDCvROW6I0HjXnaXZgbNS1rv54hEIrEKOxPb4pKdUucO5l5cvI4H41haPBl9Al Dm7iVJtQLRPL9sC4DBiFgzCmydzCCCeiw+kHT+y9CzTEvhDTqtoCqUlKswMvB5sR lYIsDsyy549EsTEenCcV+v9vMcTL2E/U -----END CERTIFICATE-----Generated at Wed Jul 23 02:22:56 2025 by rpki-client