$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft File: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json) Hash identifier: yXMv+5UcLX7aPNr0vPoxTIBEcvKMJTNeZ1KvJHdasMA= Subject key identifier: 40:22:85:E8:AE:EB:1C:C5:86:07:3E:A2:5F:3D:8F:17:E2:7E:13:A8 Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft Manifest number: 0132 Signing time: Mon 21 Jul 2025 04:41:30 +0000 Manifest this update: Mon 21 Jul 2025 04:41:30 +0000 Manifest next update: Mon 28 Jul 2025 04:41:30 +0000 Files and hashes: 1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: artQXY4EHCC7GRMpQ5wsQyY/dxfOWJyAMi7psjekz14=) 2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Validity Not Before: Jul 21 04:41:30 2025 GMT Not After : Jul 28 04:41:30 2025 GMT Subject: CN=687dc4fa-7c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:18:3a:e4:a2:7e:2f:0e:1f:36:ce:82:48:2d: 1a:a2:51:01:15:4e:d9:15:8e:ab:90:0b:97:60:7a: 2e:17:f1:de:90:ff:bd:fa:ad:00:ea:72:5b:63:c4: 92:67:48:97:38:ed:54:8f:74:87:5c:ce:1f:f6:43: 13:c6:8a:0b:d4:64:e9:09:1b:ce:20:11:38:82:ba: 66:1a:09:59:63:8f:56:4c:cf:2f:2c:91:05:45:ef: 24:98:42:08:85:da:30:97:45:2f:b4:6b:80:66:6f: 07:59:29:c0:9f:66:51:3c:45:1f:bd:9e:eb:85:96: 43:f8:47:a8:24:f3:09:73:83:e8:af:6f:bc:19:e3: 00:c2:7f:7e:6f:9e:15:a2:d7:3a:81:01:93:e1:c5: f1:fc:4e:4b:27:89:a8:ea:76:dc:41:7f:65:a6:cc: 5e:45:6a:59:cd:bd:3c:7e:a1:d9:3b:e5:c2:ef:4e: 4e:1b:81:1a:24:a3:d4:ab:54:cb:2c:ff:14:3e:c4: 3e:a6:77:35:84:45:9d:d9:32:5f:4b:1a:fe:30:81: f9:95:1b:ce:ba:a1:0f:6b:46:b8:40:58:a2:e8:16: 3f:d4:58:e3:61:77:aa:35:a7:82:ab:97:9b:a9:0d: 8e:6e:1c:ae:e5:b4:d7:6d:8c:8d:7c:8f:6a:c1:fd: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:85:E8:AE:EB:1C:C5:86:07:3E:A2:5F:3D:8F:17:E2:7E:13:A8 X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:49:36:07:88:ec:bd:96:44:df:a5:78:33:e0:48:b3:8a:b7: dc:c7:a9:7c:c3:6a:51:08:08:58:e9:3a:66:92:cd:ef:52:8b: c1:07:76:81:51:c0:2b:ae:0b:5f:2f:72:2f:06:ff:79:c9:16: 3a:c1:92:e9:76:d4:df:3f:68:95:cf:c6:3e:21:f1:da:e3:4f: d1:16:39:22:b2:77:49:ff:b7:8f:f9:2e:b6:94:8d:ae:4b:54: 08:49:dc:f3:3a:22:6d:08:0b:bb:d1:87:0c:61:78:f3:66:39: ea:ad:31:18:4c:98:b9:fb:6c:1b:f6:e8:8c:3a:f8:93:ce:ff: 87:41:84:d6:a7:85:16:52:48:db:25:52:63:f1:fd:78:ff:b0: 92:b3:ac:8c:eb:aa:2a:f0:ef:fd:7a:ec:c2:ce:cb:91:9e:12: 82:fd:56:03:43:1d:23:47:03:fe:ef:75:dd:b4:9d:99:f2:5f: fc:a9:c3:c0:23:5c:e0:4c:1a:c1:74:52:c3:78:9b:93:d0:61: 6f:00:47:7c:43:bb:30:56:12:d8:97:ec:5e:9a:d1:b7:ec:34: 98:3e:7d:13:ff:1c:8c:83:ea:49:87:74:29:3b:18:0c:d0:a7: 70:f1:f6:74:60:39:de:cf:f1:47:b9:24:e5:63:57:8d:44:4b: f5:67:cb:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF NzMxMjFGOTcwHhcNMjUwNzIxMDQ0MTMwWhcNMjUwNzI4MDQ0MTMwWjAYMRYwFAYD VQQDEw02ODdkYzRmYS03YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Rg65KJ+Lw4fNs6CSC0aolEBFU7ZFY6rkAuXYHouF/HekP+9+q0A6nJbY8SS Z0iXOO1Uj3SHXM4f9kMTxooL1GTpCRvOIBE4grpmGglZY49WTM8vLJEFRe8kmEII hdowl0UvtGuAZm8HWSnAn2ZRPEUfvZ7rhZZD+EeoJPMJc4Por2+8GeMAwn9+b54V otc6gQGT4cXx/E5LJ4mo6nbcQX9lpsxeRWpZzb08fqHZO+XC705OG4EaJKPUq1TL LP8UPsQ+pnc1hEWd2TJfSxr+MIH5lRvOuqEPa0a4QFii6BY/1FjjYXeqNaeCq5eb qQ2Obhyu5bTXbYyNfI9qwf0q/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAiheiu 6xzFhgc+ol89jxfifhOoMB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3 RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4t Mk1VSjloR0o5RWpuTVNINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuSTYHiOy9lkTfpXgz4Eizirfcx6l8w2pRCAhY6Tpmks3vUovBB3aB UcArrgtfL3IvBv95yRY6wZLpdtTfP2iVz8Y+IfHa40/RFjkisndJ/7eP+S62lI2u S1QISdzzOiJtCAu70YcMYXjzZjnqrTEYTJi5+2wb9uiMOviTzv+HQYTWp4UWUkjb JVJj8f14/7CSs6yM66oq8O/9euzCzsuRnhKC/VYDQx0jRwP+73XdtJ2Z8l/8qcPA I1zgTBrBdFLDeJuT0GFvAEd8Q7swVhLYl+xemtG37DSYPn0T/xyMg+pJh3QpOxgM 0Kdw8fZ0YDnez/FHuSTlY1eNREv1Z8vh -----END CERTIFICATE-----Generated at Mon Jul 21 07:01:27 2025 by rpki-client