$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: X9xR9ZvueypTX7iFc3uW6XjdzLAYy1MOWmJk9czNSpo= Subject key identifier: 0D:FC:39:99:69:AD:07:0F:06:E8:A7:F9:23:57:E7:31:84:69:4C:71 Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: 2A Signing time: Fri 18 Jul 2025 17:52:22 +0000 Manifest this update: Fri 18 Jul 2025 17:52:22 +0000 Manifest next update: Fri 25 Jul 2025 17:52:22 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: BEZo8yyYBzwKFQbWraKUhIVvwoEUOrPezcDZCxncPyw=) 2: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: Je+up3kY6qu1B3So3Vnq/xOYjMIPNymqMCzCxvb8aL4=) 3: 87087F00267E11F09183092AC4F9AE02.roa (hash: vPD3MBlV+VYxtTk5npGCIsRmwvlSAFp0uTh8dXUbHV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Jul 18 17:52:22 2025 GMT Not After : Jul 25 17:52:22 2025 GMT Subject: CN=687a89d6-2620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:82:08:6c:9a:18:41:c8:c8:92:83:e1:c1: ff:21:f8:a7:db:68:93:ae:55:6a:be:ba:0a:7b:33: 9c:75:64:a6:95:1c:98:92:1f:b6:90:06:57:4f:2b: bb:02:02:c2:fb:76:c4:9b:2d:d5:36:03:44:05:0f: 54:90:0d:dd:43:fa:ad:f7:13:4b:93:4b:ea:94:c8: 09:45:5b:c6:cf:42:f7:52:c6:96:d6:d0:17:74:23: 07:62:24:2d:f3:f4:30:8b:29:f5:ef:08:d7:17:2a: 13:db:54:c1:6e:4d:be:c9:89:92:6e:fe:1d:38:88: ce:48:97:82:dd:4b:f3:46:bc:4d:8a:a9:19:d9:8e: 2b:84:cb:f8:bc:2d:1b:e5:a0:06:a6:6c:74:7d:f3: 6e:d3:a3:30:3b:03:82:77:52:ea:80:eb:63:90:6f: 5c:ca:fd:a9:e9:c5:0b:b6:b5:51:66:8a:9d:2f:5a: 25:d3:ee:99:6a:bc:c0:94:08:ab:79:5b:ad:2e:ba: 4f:c3:05:a0:2f:55:50:52:38:83:ff:9e:63:ec:f4: 54:20:29:5d:02:f2:f6:cd:86:07:c1:1a:b9:c2:7d: 4e:fe:4f:b3:44:4b:c5:fd:5d:39:fa:10:91:14:52: 19:e9:2c:5d:3a:21:ad:10:d9:b4:a4:76:8a:bc:c3: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FC:39:99:69:AD:07:0F:06:E8:A7:F9:23:57:E7:31:84:69:4C:71 X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c6:8e:69:a4:44:53:6c:cc:b2:8c:60:e0:73:e1:74:8c:24: e3:ad:f5:ed:a3:52:7f:d5:af:ee:bd:fb:ed:20:a9:c5:91:2a: f5:02:13:51:1c:21:5d:f2:31:a9:27:7a:d6:7c:86:16:3f:73: 51:60:6d:60:19:81:47:15:a2:a3:d6:7e:01:6a:73:02:9f:29: 41:7d:4b:33:7d:45:55:39:55:b4:a8:0d:5a:72:4b:36:e4:6f: 3a:1e:4f:ab:d7:68:42:af:aa:cb:ff:6c:05:98:c4:45:df:95: 37:d1:2c:32:0a:1d:5d:1f:12:9d:5e:08:e6:f8:9b:e6:8c:57: d7:d7:30:88:f8:22:44:73:80:bd:ac:45:48:b7:01:36:68:4a: fc:e6:05:d3:07:e1:9a:05:e3:f8:91:63:f0:3c:ba:54:4d:fb: 15:4b:0f:66:e1:cb:89:c2:2c:96:d2:c0:17:e2:a1:fd:76:fb: 72:67:f7:f1:54:59:2d:b7:a0:29:44:bf:85:44:c2:7b:c9:f7: 55:af:0b:01:5b:8c:62:47:3e:5d:58:97:32:ce:d8:ab:cb:9e: 9d:13:49:aa:22:80:a8:39:11:ae:c7:b7:c5:88:82:b7:e5:9b: f7:74:be:a8:f7:41:e8:2d:4a:54:59:4d:f2:2f:24:ed:53:45: d9:f0:c6:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Njk4RTExMC8GA1UEBRMoNURCNzVCMkRGOTREMDQ0NzRBNkU1RTJENEI3OENDMDg0 QkZDMkE2QzAeFw0yNTA3MTgxNzUyMjJaFw0yNTA3MjUxNzUyMjJaMBgxFjAUBgNV BAMTDTY4N2E4OWQ2LTI2MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJv4IIbJoYQcjIkoPhwf8h+KfbaJOuVWq+ugp7M5x1ZKaVHJiSH7aQBldPK7sC AsL7dsSbLdU2A0QFD1SQDd1D+q33E0uTS+qUyAlFW8bPQvdSxpbW0Bd0IwdiJC3z 9DCLKfXvCNcXKhPbVMFuTb7JiZJu/h04iM5Il4LdS/NGvE2KqRnZjiuEy/i8LRvl oAambHR9827TozA7A4J3UuqA62OQb1zK/anpxQu2tVFmip0vWiXT7plqvMCUCKt5 W60uuk/DBaAvVVBSOIP/nmPs9FQgKV0C8vbNhgfBGrnCfU7+T7NES8X9XTn6EJEU UhnpLF06Ia0Q2bSkdoq8w5GJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDfw5mWmt Bw8G6Kf5I1fnMYRpTHEwHwYDVR0jBBgwFoAUXbdbLflNBEdKbl4tS3jMCEv8Kmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2OThFLzA5NUY2QzhDMjY3 QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEtt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGJkYkxmbE5CRWRLYmw0dFMzak1DRXY4S213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 OThFLzA5NUY2QzhDMjY3QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVk S2JsNHRTM2pNQ0V2OEttdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ3GjmmkRFNszLKMYOBz4XSMJOOt9e2jUn/Vr+69++0gqcWRKvUCE1Ec IV3yMaknetZ8hhY/c1FgbWAZgUcVoqPWfgFqcwKfKUF9SzN9RVU5VbSoDVpySzbk bzoeT6vXaEKvqsv/bAWYxEXflTfRLDIKHV0fEp1eCOb4m+aMV9fXMIj4IkRzgL2s RUi3ATZoSvzmBdMH4ZoF4/iRY/A8ulRN+xVLD2bhy4nCLJbSwBfiof12+3Jn9/FU WS23oClEv4VEwnvJ91WvCwFbjGJHPl1YlzLO2KvLnp0TSaoigKg5Ea7Ht8WIgrfl m/d0vqj3QegtSlRZTfIvJO1TRdnwxr4= -----END CERTIFICATE-----Generated at Sun Jul 20 10:29:16 2025 by rpki-client