$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: 3MAzvCBcKPLSrnH5eIhHqixylk+7PMYod1MhjT77dNM= Subject key identifier: A7:01:D4:03:B3:8E:DE:00:05:D0:84:3C:87:49:0D:96:0C:CB:C4:48 Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2BC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2BC0 Signing time: Fri 18 Jul 2025 15:36:38 +0000 Manifest this update: Fri 18 Jul 2025 15:36:37 +0000 Manifest next update: Fri 25 Jul 2025 15:36:37 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: os6qDVaUrrCebYjlmR1a9rdzvpKLR/8YwO9UzyuMZ+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11200 (0x2bc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Jul 18 15:36:37 2025 GMT Not After : Jul 25 15:36:37 2025 GMT Subject: CN=687a6a06-8657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:59:c2:c6:56:4e:d3:d0:18:a5:b2:8a:32: ec:f4:b1:fd:9b:11:c3:ac:9a:39:cf:d7:8e:af:3c: 78:07:16:f1:23:2f:bd:1e:a0:a7:a5:8d:94:c8:51: 75:55:56:74:a2:5f:e4:0d:d7:3f:56:cf:1a:6b:a3: e0:72:ab:c3:1a:ac:4b:e7:91:5a:c9:2b:bd:03:9d: a7:f3:1a:fb:95:d4:2f:92:6a:c1:c2:4f:3c:a7:19: 25:19:8d:64:a3:a6:87:2c:fb:2c:cf:73:b1:4c:e0: 8a:16:af:fc:d1:81:79:99:a2:3e:b5:9b:b2:a9:51: 4c:16:4f:52:ab:d7:1d:f9:26:73:c3:49:74:24:02: f9:96:f5:b3:92:ec:d1:4d:45:1e:c0:54:ed:e1:80: 35:1a:9b:79:af:75:59:a8:91:ed:d7:0f:f8:8e:a6: 52:a1:76:41:0a:80:65:0f:7c:d2:93:b8:5d:e5:13: 58:30:b8:ca:57:14:c2:0b:26:15:79:d5:67:0f:73: b9:1c:35:1c:16:3b:01:a6:fe:30:47:43:1d:db:58: bc:00:d1:85:3c:7d:d4:58:28:a9:ba:00:8d:19:c4: 01:b8:9c:2e:6b:6d:18:c2:8a:62:03:bb:a2:81:53: 70:dc:03:7f:f0:1d:ba:83:ee:48:15:d7:54:fd:fd: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:01:D4:03:B3:8E:DE:00:05:D0:84:3C:87:49:0D:96:0C:CB:C4:48 X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:2d:66:29:1b:cb:34:c1:20:15:f3:aa:05:63:0a:ef:69:aa: 82:3c:48:ce:91:de:e9:f3:45:1c:fe:40:6d:b4:5b:53:de:3f: 28:c2:a0:09:8f:f3:75:86:b8:bc:ef:87:a9:0c:20:41:f4:80: b2:be:1d:4b:4b:8a:01:6a:28:01:fc:cd:59:fa:0b:53:bb:91: 36:49:0d:61:95:02:a8:b7:3f:25:6f:40:cb:82:8b:e9:35:7e: bc:85:c3:ed:18:15:e5:c4:eb:3a:fe:a1:b0:a5:3b:0d:9c:ac: 53:52:76:5f:93:2c:ef:c5:3a:91:e2:47:0d:29:2a:59:c9:c7: 01:b2:3a:72:c8:74:16:7a:21:26:f1:89:c0:11:e6:17:aa:97: 97:a8:d3:5b:a6:c5:52:b9:5d:4b:da:25:c6:bb:98:4e:5d:f6: 4b:95:68:4a:c5:7d:4f:11:b7:df:29:79:e5:3a:b0:1f:06:bb: 4e:8c:ba:c2:fe:17:32:50:d4:c4:d7:b1:83:04:79:53:bb:da: 45:30:a0:88:00:a6:f3:3e:3d:51:18:95:f4:28:47:04:ed:13: de:cb:28:ae:f2:da:34:9a:b2:5d:36:a8:c9:de:b2:86:13:71: 15:38:6e:d7:a9:bb:1f:b9:26:9d:fa:07:c8:a8:ea:fb:00:e7: c5:6e:fd:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUwNzE4MTUzNjM3WhcNMjUwNzI1MTUzNjM3WjAYMRYwFAYD VQQDEw02ODdhNmEwNi04NjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvpZwsZWTtPQGKWyijLs9LH9mxHDrJo5z9eOrzx4BxbxIy+9HqCnpY2UyFF1 VVZ0ol/kDdc/Vs8aa6PgcqvDGqxL55FaySu9A52n8xr7ldQvkmrBwk88pxklGY1k o6aHLPssz3OxTOCKFq/80YF5maI+tZuyqVFMFk9Sq9cd+SZzw0l0JAL5lvWzkuzR TUUewFTt4YA1Gpt5r3VZqJHt1w/4jqZSoXZBCoBlD3zSk7hd5RNYMLjKVxTCCyYV edVnD3O5HDUcFjsBpv4wR0Md21i8ANGFPH3UWCipugCNGcQBuJwua20YwopiA7ui gVNw3AN/8B26g+5IFddU/f15vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcB1AOz jt4ABdCEPIdJDZYMy8RIMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABLWYpG8s0wSAV86oFYwrvaaqCPEjOkd7p80Uc/kBttFtT3j8owqAJ j/N1hri874epDCBB9ICyvh1LS4oBaigB/M1Z+gtTu5E2SQ1hlQKotz8lb0DLgovp NX68hcPtGBXlxOs6/qGwpTsNnKxTUnZfkyzvxTqR4kcNKSpZyccBsjpyyHQWeiEm 8YnAEeYXqpeXqNNbpsVSuV1L2iXGu5hOXfZLlWhKxX1PEbffKXnlOrAfBrtOjLrC /hcyUNTE17GDBHlTu9pFMKCIAKbzPj1RGJX0KEcE7RPeyyiu8to0mrJdNqjJ3rKG E3EVOG7XqbsfuSad+gfIqOr7AOfFbv1j -----END CERTIFICATE-----Generated at Sun Jul 20 07:55:30 2025 by rpki-client