$ rpki-client -vvf rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft File: xem-kywNTgcfsYgsriUoEEdzKVA.mft (raw, json) Hash identifier: 4SyLuUji2Ua5OO0rA25D0dlxKLKJ8cB84SDEv0DBzt8= Subject key identifier: F5:E1:D0:C1:93:79:78:4A:4C:36:A2:34:7F:04:48:43:3E:DC:E2:FF Authority key identifier: C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 Certificate issuer: /CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft Manifest number: 01FB Signing time: Sat 19 Jul 2025 02:35:01 +0000 Manifest this update: Sat 19 Jul 2025 02:35:00 +0000 Manifest next update: Sat 26 Jul 2025 02:35:00 +0000 Files and hashes: 1: xem-kywNTgcfsYgsriUoEEdzKVA.crl (hash: 3ESlyQYvokDt+exlGTI2OqB6DCzlS35Xx2huyuHEzFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121AB0, serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Validity Not Before: Jul 19 02:35:00 2025 GMT Not After : Jul 26 02:35:00 2025 GMT Subject: CN=687b0454-c31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:d4:b1:c7:c2:41:d2:de:78:12:fc:29:2b: f8:17:07:a3:56:e2:dd:08:6a:43:b3:94:9c:d5:6f: 33:66:ce:4f:06:45:d4:cc:17:ec:1d:95:24:99:ef: a4:f0:ad:4d:dc:a3:21:40:cc:ca:c1:af:3a:a9:15: 81:82:f9:fa:e8:65:fe:6f:b7:a9:ae:30:cd:7e:e5: 48:6e:59:95:a7:30:6b:07:2a:d4:a4:45:e8:29:f1: 64:94:95:2b:e7:40:91:89:38:b1:93:2c:c0:1c:06: b4:20:15:82:ce:73:2a:74:50:10:96:8a:e0:27:9c: ae:a3:b1:58:df:0b:0e:ec:3a:fc:27:b5:cd:9a:59: 6e:75:bc:01:28:19:a3:70:ef:77:77:7b:0b:fa:d6: 40:f8:ce:9f:f8:a4:90:1a:c1:2b:cf:c5:05:6d:59: 46:af:26:37:b4:53:85:e0:5f:5a:2a:b4:72:d2:3e: 2a:39:ac:8e:d3:ae:9b:84:c0:df:16:af:b5:ac:6e: c8:52:08:28:58:41:5c:d3:67:b1:1f:ac:b9:fa:75: 0d:9c:47:80:8b:89:00:c6:35:b8:e1:5b:9d:9b:83: f2:06:6b:e0:01:6a:f3:a3:51:23:55:13:e0:91:22: 28:fd:86:d4:e8:7e:c1:b1:11:65:77:35:86:07:e1: b2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E1:D0:C1:93:79:78:4A:4C:36:A2:34:7F:04:48:43:3E:DC:E2:FF X509v3 Authority Key Identifier: keyid:C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a7:ed:24:8b:e6:28:39:d9:8f:66:6c:87:0a:72:c4:17:62: 72:67:0d:1a:df:31:cf:c1:cf:9a:ce:ae:93:3e:2b:39:f9:5b: 92:01:7e:4e:8c:13:63:46:31:a8:1b:29:c7:41:b7:40:94:46: 86:55:e4:9c:d8:2a:74:19:6d:72:95:8a:b4:70:a9:1d:19:24: 63:f3:60:ff:b8:86:04:91:21:7a:8f:8e:ca:a2:df:06:7d:2f: 96:59:ec:4e:ef:35:ad:2d:81:5a:67:5a:08:a4:0f:6b:40:84: d6:a7:07:4a:f2:06:f6:e2:0d:09:3b:ae:a1:ba:77:2b:91:0e: 2d:48:a1:6e:28:0c:da:96:87:84:ec:31:b7:b2:ed:95:6a:62: 25:80:a3:cf:05:6b:ac:50:6b:d0:fe:f7:47:03:46:c4:d6:78: 1b:bc:56:d9:19:43:d0:cb:63:32:c3:64:c8:5b:fc:59:07:e6: 3a:e0:ef:d8:e5:da:49:eb:d8:25:fe:d0:87:c3:5d:fa:9f:e4: 0a:86:a6:62:16:75:87:93:1e:0e:38:3e:30:81:33:0c:f2:f5: ba:c0:79:f0:9b:ab:88:ab:c0:21:aa:11:af:be:26:51:c7:85: fd:e5:6e:b7:66:45:d5:57:3f:67:4e:91:59:2f:67:65:28:44: 25:c4:f3:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFBQjAxMTAvBgNVBAUTKEM1RTlCRTkzMkMwRDRFMDcxRkIxODgyQ0FFMjUyODEw NDc3MzI5NTAwHhcNMjUwNzE5MDIzNTAwWhcNMjUwNzI2MDIzNTAwWjAYMRYwFAYD VQQDEw02ODdiMDQ1NC1jMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/rUscfCQdLeeBL8KSv4FwejVuLdCGpDs5Sc1W8zZs5PBkXUzBfsHZUkme+k 8K1N3KMhQMzKwa86qRWBgvn66GX+b7eprjDNfuVIblmVpzBrByrUpEXoKfFklJUr 50CRiTixkyzAHAa0IBWCznMqdFAQlorgJ5yuo7FY3wsO7Dr8J7XNmlludbwBKBmj cO93d3sL+tZA+M6f+KSQGsErz8UFbVlGryY3tFOF4F9aKrRy0j4qOayO066bhMDf Fq+1rG7IUggoWEFc02exH6y5+nUNnEeAi4kAxjW44Vudm4PyBmvgAWrzo1EjVRPg kSIo/YbU6H7BsRFldzWGB+GyiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXh0MGT eXhKTDaiNH8ESEM+3OL/MB8GA1UdIwQYMBaAFMXpvpMsDU4HH7GILK4lKBBHcylQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUFCMC8xRkY4ODgzMjVD QkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRnY2ZzWWdzcmlVb0VFZHpL VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hlbS1reXdOVGdjZnNZZ3NyaVVvRUVkektWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUFCMC8xRkY4ODgzMjVDQkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRn Y2ZzWWdzcmlVb0VFZHpLVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANp+0ki+YoOdmPZmyHCnLEF2JyZw0a3zHPwc+azq6TPis5+VuSAX5O jBNjRjGoGynHQbdAlEaGVeSc2Cp0GW1ylYq0cKkdGSRj82D/uIYEkSF6j47Kot8G fS+WWexO7zWtLYFaZ1oIpA9rQITWpwdK8gb24g0JO66huncrkQ4tSKFuKAzaloeE 7DG3su2VamIlgKPPBWusUGvQ/vdHA0bE1ngbvFbZGUPQy2Myw2TIW/xZB+Y64O/Y 5dpJ69gl/tCHw136n+QKhqZiFnWHkx4OOD4wgTMM8vW6wHnwm6uIq8AhqhGvviZR x4X95W63ZkXVVz9nTpFZL2dlKEQlxPOv -----END CERTIFICATE-----Generated at Sun Jul 20 07:17:55 2025 by rpki-client