$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft File: xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json) Hash identifier: B4bOWAWdf9ZxkuqQdWblnBjE+SHH5PraAQU6Q/RwnYI= Subject key identifier: 4C:A3:4C:07:6C:1B:BE:70:F4:2C:16:50:B4:54:08:4C:B1:E9:0D:D6 Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0 Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft Manifest number: 029E Signing time: Sat 19 Jul 2025 02:01:35 +0000 Manifest this update: Sat 19 Jul 2025 02:01:34 +0000 Manifest next update: Sat 26 Jul 2025 02:01:34 +0000 Files and hashes: 1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: 722WR25j4Ajab+mii5vW2eR14esgT2XTsIJT12wzVSw=) 2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: GNWLaVT5bvTFzhKfPjl/RaZJainXlieK9QJZ8Ys4PmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0 Validity Not Before: Jul 19 02:01:34 2025 GMT Not After : Jul 26 02:01:34 2025 GMT Subject: CN=687afc7f-fcc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:06:b0:fa:1b:0b:c0:32:c3:84:19:33:81: 0d:58:e3:72:58:2a:3a:91:14:d0:a9:16:6b:2e:8c: f7:a1:9b:bb:15:43:33:05:31:86:84:c9:b6:38:62: cc:9f:2e:06:68:c9:97:3f:29:7b:49:70:50:a6:72: d3:bb:5d:ee:7a:a9:4b:54:94:54:47:59:72:c9:50: 31:57:81:53:dd:79:14:91:8a:80:9e:dc:94:79:dd: d3:21:bd:77:33:50:57:29:c8:27:03:83:a4:fe:ea: b2:7c:a6:62:fe:e1:cd:8d:ec:ee:48:31:6e:10:83: 2d:c5:28:83:db:1d:60:f5:6e:b8:63:87:55:f9:f1: cf:81:b2:d8:f9:11:bc:29:02:0e:5a:d2:df:6f:c1: 3c:d8:73:f7:46:7c:2c:7d:98:9a:12:08:5c:bc:09: e5:c9:49:63:35:45:21:6f:3a:cf:39:a1:35:21:1e: 78:77:ca:24:8e:4b:ac:ee:a2:4a:30:37:85:45:c4: f5:2e:93:1f:29:47:ec:8c:17:50:e2:40:11:9a:1c: d6:5d:f4:31:ce:71:ae:d7:1c:a3:d8:88:bb:bd:2b: eb:6b:a4:64:41:54:b8:c6:65:9c:48:11:ea:f3:4e: 9b:73:df:f4:b6:71:a8:07:1c:bc:75:bb:28:52:c5: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A3:4C:07:6C:1B:BE:70:F4:2C:16:50:B4:54:08:4C:B1:E9:0D:D6 X509v3 Authority Key Identifier: keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b1:f1:4b:bc:52:14:8b:a8:bd:a4:08:f2:48:cd:0b:fc:fb: 53:f0:1c:be:9e:6e:e4:9e:85:26:71:4e:87:72:21:bf:a9:1a: fc:b5:de:e7:db:30:97:21:03:5e:52:02:9c:bf:78:86:d7:44: cd:d9:2f:ef:0c:fe:43:26:d7:59:00:f7:b9:9a:43:5f:cf:14: 5d:0a:7d:c3:dd:df:bd:d1:df:9d:10:26:fe:11:ae:ec:ba:eb: e6:b6:f0:2a:26:9a:53:3d:30:e8:93:8c:ad:a1:50:47:15:9c: 97:29:51:35:82:8f:84:c8:2b:fb:b6:d5:52:f1:14:45:a0:8f: 46:ad:73:3d:e5:3f:17:d5:f1:03:3d:e1:d5:18:ee:7d:4c:26: 71:97:3b:bc:95:18:84:4a:f7:1f:c3:9b:9b:20:ae:ef:3f:5d: 59:a8:29:87:a8:84:b6:80:d1:aa:1b:a0:5e:2c:f5:d4:eb:0e: ed:c0:22:ba:a8:cc:f7:f8:78:b2:1e:9e:99:43:80:c3:e6:72: 79:d8:e8:28:63:7f:77:02:9f:77:00:20:95:2b:71:2a:a8:66: 4d:34:31:49:47:bb:e3:17:e0:db:99:83:12:42:60:cc:a0:1c: 5e:29:3d:c6:d9:65:5f:48:3e:79:70:10:4d:87:4f:44:b4:47: cf:b6:c1:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyRTIxMTAvBgNVBAUTKEM2NUZGQ0ZCMkNGQ0Q5QkNENjhEQUVCMDY5N0QzMTZD RjM1QjIzRjAwHhcNMjUwNzE5MDIwMTM0WhcNMjUwNzI2MDIwMTM0WjAYMRYwFAYD VQQDEw02ODdhZmM3Zi1mY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4IGsPobC8Ayw4QZM4ENWONyWCo6kRTQqRZrLoz3oZu7FUMzBTGGhMm2OGLM ny4GaMmXPyl7SXBQpnLTu13ueqlLVJRUR1lyyVAxV4FT3XkUkYqAntyUed3TIb13 M1BXKcgnA4Ok/uqyfKZi/uHNjezuSDFuEIMtxSiD2x1g9W64Y4dV+fHPgbLY+RG8 KQIOWtLfb8E82HP3RnwsfZiaEghcvAnlyUljNUUhbzrPOaE1IR54d8okjkus7qJK MDeFRcT1LpMfKUfsjBdQ4kARmhzWXfQxznGu1xyj2Ii7vSvra6RkQVS4xmWcSBHq 806bc9/0tnGoBxy8dbsoUsUduQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyjTAds G75w9CwWULRUCEyx6Q3WMB8GA1UdIwQYMBaAFMZf/Pss/Nm81o2usGl9MWzzWyPw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzJFMi8yRjE5NTM1QzBD QjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6ODJieldqYTZ3YVgweGJQTmJJ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsXzgteXo4MmJ6V2phNndhWDB4YlBOYklfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzJFMi8yRjE5NTM1QzBDQjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6ODJi eldqYTZ3YVgweGJQTmJJX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVsfFLvFIUi6i9pAjySM0L/PtT8By+nm7knoUmcU6HciG/qRr8td7n 2zCXIQNeUgKcv3iG10TN2S/vDP5DJtdZAPe5mkNfzxRdCn3D3d+90d+dECb+Ea7s uuvmtvAqJppTPTDok4ytoVBHFZyXKVE1go+EyCv7ttVS8RRFoI9GrXM95T8X1fED PeHVGO59TCZxlzu8lRiESvcfw5ubIK7vP11ZqCmHqIS2gNGqG6BeLPXU6w7twCK6 qMz3+HiyHp6ZQ4DD5nJ52OgoY393Ap93ACCVK3EqqGZNNDFJR7vjF+DbmYMSQmDM oBxeKT3G2WVfSD55cBBNh09EtEfPtsGp -----END CERTIFICATE-----Generated at Sun Jul 20 03:16:44 2025 by rpki-client