$ rpki-client -vvf rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft File: XfVm12I2fCjH8_ElYbRxa4yhuWY.mft (raw, json) Hash identifier: MarYnnEilqWjEdXZyQje0Lx8x3aHnomIKZPKGN4o8PM= Subject key identifier: C1:A3:D0:C0:E2:03:57:F5:9B:BB:25:12:C7:A4:E6:10:87:C2:45:00 Authority key identifier: 5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 Certificate issuer: /CN=A9133B47/serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft Manifest number: E1 Signing time: Sat 19 Jul 2025 05:41:34 +0000 Manifest this update: Sat 19 Jul 2025 05:41:33 +0000 Manifest next update: Sat 26 Jul 2025 05:41:33 +0000 Files and hashes: 1: XfVm12I2fCjH8_ElYbRxa4yhuWY.crl (hash: RowCdqKQ9prb+MOAGxlx+DP7fkv8v4dPDcwWjx9HmOg=) 2: 23B1A0120FA511EFB28F5235C4F9AE02.roa (hash: 1j2rFTty2/H954Iwvk/ZWmtqptjhE7lYs+ZEPtYw42E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133B47, serialNumber=5DF566D762367C28C7F3F12561B4716B8CA1B966 Validity Not Before: Jul 19 05:41:33 2025 GMT Not After : Jul 26 05:41:33 2025 GMT Subject: CN=687b300d-ff4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:8a:8e:f2:cc:c5:f8:26:19:26:58:82:d5: a6:4b:b0:d9:f3:c6:fc:84:53:e4:e3:c6:fb:f2:fa: 38:ce:58:0c:63:c5:f6:99:25:07:3b:41:b0:80:92: b7:ed:41:a1:d8:04:11:2c:56:8f:6b:aa:f0:8f:20: 45:66:53:c3:6a:ba:72:2d:ac:fd:be:ac:fe:3b:25: 4d:41:ca:4f:8a:14:b9:34:cf:99:79:ac:fb:6f:ae: 26:e0:e3:52:c0:59:34:6e:c9:f9:c5:f7:b6:49:2e: a1:d0:e0:34:7b:53:ff:ef:ed:5d:a4:df:1e:2a:3f: 72:09:4b:7b:76:a6:03:cf:bd:c1:1a:d9:f4:c0:3f: eb:60:dd:6c:9e:68:1a:18:ef:8b:7b:30:c5:39:e4: 2f:1f:64:a8:86:af:73:c0:ae:82:aa:f6:eb:37:9a: 6d:1f:8c:29:08:49:28:8c:a2:5f:24:67:ad:fe:a8: 5d:d2:5b:d3:da:c0:a7:c1:62:9a:a8:2c:0b:d9:62: ab:4d:5b:e4:8c:bf:f5:05:50:75:f1:cf:60:32:6b: f2:34:4e:a3:30:a6:7a:ed:5d:da:09:dd:31:72:1e: 37:7f:e0:21:41:74:b3:94:b5:69:e4:79:34:0f:9e: 8d:8d:13:07:c7:9a:05:63:04:24:bf:9a:59:be:f4: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A3:D0:C0:E2:03:57:F5:9B:BB:25:12:C7:A4:E6:10:87:C2:45:00 X509v3 Authority Key Identifier: keyid:5D:F5:66:D7:62:36:7C:28:C7:F3:F1:25:61:B4:71:6B:8C:A1:B9:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfVm12I2fCjH8_ElYbRxa4yhuWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133B47/871B92940FA411EFA1A16934C4F9AE02/XfVm12I2fCjH8_ElYbRxa4yhuWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f8:6b:bf:da:a1:40:ff:24:40:ea:0f:64:a2:55:c1:9e:d7: c7:10:41:d7:72:85:ce:fe:6d:00:16:f3:51:41:a2:85:61:ea: 38:1a:29:70:0c:79:13:5a:56:e1:96:61:68:94:0c:3c:de:40: b3:da:79:28:18:09:df:6a:c7:7c:bf:92:fd:be:b5:06:1e:95: a9:50:9e:ff:0c:f2:2e:fc:a8:b6:87:cb:f8:1d:05:d9:ff:44: 62:e4:d8:69:d2:c5:1c:91:d8:a5:b3:5d:09:62:f6:d9:43:3d: a3:fd:72:7a:d1:08:dc:13:8d:9e:56:71:10:ee:04:80:37:95: 05:33:dd:30:52:29:2f:15:6b:ca:38:00:8b:85:8e:67:b9:08: 9b:03:9c:f2:79:b8:6d:8b:d1:27:5f:37:bd:08:f7:fb:ed:da: bc:a7:f2:bf:a3:bf:07:35:d9:86:04:d5:f9:44:21:ca:8c:d3: 70:e2:5c:98:22:87:ce:f1:31:bf:e7:92:55:69:b6:96:a2:1b: ae:11:58:c2:0d:1d:b2:f6:97:d5:17:4d:c3:be:07:35:7c:70: 07:7e:37:71:23:55:ec:98:02:80:cb:ff:ef:f1:7a:af:bb:85: 60:02:d5:b3:cb:d7:88:69:d4:c6:1e:62:d0:72:65:de:43:55: 67:37:dc:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCNDcxMTAvBgNVBAUTKDVERjU2NkQ3NjIzNjdDMjhDN0YzRjEyNTYxQjQ3MTZC OENBMUI5NjYwHhcNMjUwNzE5MDU0MTMzWhcNMjUwNzI2MDU0MTMzWjAYMRYwFAYD VQQDEw02ODdiMzAwZC1mZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoqKjvLMxfgmGSZYgtWmS7DZ88b8hFPk48b78vo4zlgMY8X2mSUHO0GwgJK3 7UGh2AQRLFaPa6rwjyBFZlPDarpyLaz9vqz+OyVNQcpPihS5NM+Zeaz7b64m4ONS wFk0bsn5xfe2SS6h0OA0e1P/7+1dpN8eKj9yCUt7dqYDz73BGtn0wD/rYN1snmga GO+LezDFOeQvH2Sohq9zwK6CqvbrN5ptH4wpCEkojKJfJGet/qhd0lvT2sCnwWKa qCwL2WKrTVvkjL/1BVB18c9gMmvyNE6jMKZ67V3aCd0xch43f+AhQXSzlLVp5Hk0 D56NjRMHx5oFYwQkv5pZvvR/HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGj0MDi A1f1m7slEsek5hCHwkUAMB8GA1UdIwQYMBaAFF31ZtdiNnwox/PxJWG0cWuMoblm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0I0Ny84NzFCOTI5NDBG QTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZDakg4X0VsWWJSeGE0eWh1 V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmVm0xMkkyZkNqSDhfRWxZYlJ4YTR5aHVXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0I0Ny84NzFCOTI5NDBGQTQxMUVGQTFBMTY5MzRDNEY5QUUwMi9YZlZtMTJJMmZD akg4X0VsWWJSeGE0eWh1V1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp+Gu/2qFA/yRA6g9kolXBntfHEEHXcoXO/m0AFvNRQaKFYeo4Gilw DHkTWlbhlmFolAw83kCz2nkoGAnfasd8v5L9vrUGHpWpUJ7/DPIu/Ki2h8v4HQXZ /0Ri5Nhp0sUckdils10JYvbZQz2j/XJ60QjcE42eVnEQ7gSAN5UFM90wUikvFWvK OACLhY5nuQibA5zyebhti9EnXze9CPf77dq8p/K/o78HNdmGBNX5RCHKjNNw4lyY IofO8TG/55JVabaWohuuEVjCDR2y9pfVF03Dvgc1fHAHfjdxI1XsmAKAy//v8Xqv u4VgAtWzy9eIadTGHmLQcmXeQ1VnN9yq -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:44 2025 by rpki-client