$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft File: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft (raw, json) Hash identifier: i5UOJOgqHWGoFq2s3VwlpqHfohIFK9XKMDLhySJHOKY= Subject key identifier: 98:17:85:1F:50:D0:32:7E:4A:66:0D:53:39:4B:51:08:AE:52:F2:9E Authority key identifier: C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 Certificate issuer: /CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft Manifest number: 02B2 Signing time: Mon 21 Jul 2025 01:46:53 +0000 Manifest this update: Mon 21 Jul 2025 01:46:53 +0000 Manifest next update: Mon 28 Jul 2025 01:46:53 +0000 Files and hashes: 1: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl (hash: 1XMYxbFTqsN5N0rtfQP2c8WwL8vQz0Ex8Ol/NT1fBWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E62, serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Validity Not Before: Jul 21 01:46:53 2025 GMT Not After : Jul 28 01:46:53 2025 GMT Subject: CN=687d9c0d-8905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:61:87:02:58:b8:8b:68:59:09:a2:c2:05: 11:0b:6d:31:d7:31:69:41:4e:bb:97:88:6c:ba:b0: 6b:37:26:aa:7c:2f:82:16:e9:f5:a8:04:41:b4:0c: 88:1c:c0:fa:7f:4f:8d:e8:74:92:09:b8:11:0c:09: bd:10:55:4f:a3:2e:b4:e9:80:fe:00:7f:bc:dd:a6: f4:1e:4d:33:eb:85:77:f8:ea:8c:e8:1a:52:a8:cd: 4e:b8:73:2b:dc:76:ec:fd:24:08:4f:8b:2b:9b:1e: 35:da:b0:0f:ff:f1:ae:2e:e3:05:dd:90:e8:91:f9: 71:ad:c8:b7:3e:b6:59:69:c3:79:f6:c8:d5:41:5e: b9:2e:a7:2c:d8:6e:28:1a:05:37:26:20:ad:f5:7b: a2:3f:d2:c3:20:9e:4b:17:cf:9c:05:10:06:db:b5: 13:51:8d:fc:f0:30:5b:31:1f:a9:4b:c3:e5:99:61: b6:3d:95:d8:02:39:59:5b:e2:fc:ab:1b:8e:3c:d2: 41:4b:26:66:7c:64:73:4a:9b:4f:f9:c9:dc:ce:ef: 8c:e6:62:d6:9d:3c:d5:18:57:07:c7:69:5f:6d:95: ec:b9:c5:76:0c:57:fa:52:dc:5b:1c:d4:d6:42:75: c6:47:b1:c2:ee:d8:6f:a0:95:9e:c6:84:56:0d:bb: 45:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:17:85:1F:50:D0:32:7E:4A:66:0D:53:39:4B:51:08:AE:52:F2:9E X509v3 Authority Key Identifier: keyid:C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:39:76:02:8c:6e:ef:90:84:68:01:69:a7:a3:7b:6a:1c:27: a1:b9:31:8b:84:29:54:1c:a7:38:ee:58:16:0b:d4:15:15:8b: 57:fb:dc:5f:10:74:bc:c4:57:5a:64:80:d2:51:2f:86:37:c2: 45:8e:89:95:d5:9b:0f:1a:7f:0b:40:46:32:c0:a2:ba:c7:a1: 00:ef:e9:5e:30:b6:61:db:a7:2f:24:cf:21:51:ad:a6:74:23: 5d:a2:bc:c8:76:17:41:4b:a0:32:6f:03:63:f3:3f:11:39:d3: 0e:f7:92:a9:2c:00:d2:bd:01:cb:fc:08:ae:ad:2d:a9:aa:96: 8e:5f:44:a5:bf:7d:1b:94:b3:0a:8d:4f:de:c3:80:61:51:1b: 50:c8:54:b1:5a:cb:d3:af:11:bb:8e:1a:11:0d:cb:a9:90:81: fb:5f:85:56:1a:ad:93:bf:af:b5:e7:7d:3a:01:2f:82:e9:ad: c3:ec:20:bc:6f:22:a4:2f:82:34:a1:1f:d6:19:d1:ae:36:5c: 69:df:63:cf:be:ac:b3:7a:48:23:d0:b7:c6:ad:4a:2a:8e:bb: 63:1e:b4:f9:7f:81:ad:ed:b3:6a:b3:c6:db:4d:e7:9c:b2:82: e4:44:c2:72:86:07:e3:0c:30:a0:b0:b6:94:30:dd:83:33:21: c9:df:a9:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFNjIxMTAvBgNVBAUTKEM2MzA1NjA0MUMwRjkwQjkyQjJCODdEQkZGQTk3RTNF OURBMDI4RDQwHhcNMjUwNzIxMDE0NjUzWhcNMjUwNzI4MDE0NjUzWjAYMRYwFAYD VQQDEw02ODdkOWMwZC04OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJthhwJYuItoWQmiwgURC20x1zFpQU67l4hsurBrNyaqfC+CFun1qARBtAyI HMD6f0+N6HSSCbgRDAm9EFVPoy606YD+AH+83ab0Hk0z64V3+OqM6BpSqM1OuHMr 3Hbs/SQIT4srmx412rAP//GuLuMF3ZDokflxrci3PrZZacN59sjVQV65Lqcs2G4o GgU3JiCt9XuiP9LDIJ5LF8+cBRAG27UTUY388DBbMR+pS8PlmWG2PZXYAjlZW+L8 qxuOPNJBSyZmfGRzSptP+cnczu+M5mLWnTzVGFcHx2lfbZXsucV2DFf6UtxbHNTW QnXGR7HC7thvoJWexoRWDbtF7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgXhR9Q 0DJ+SmYNUzlLUQiuUvKeMB8GA1UdIwQYMBaAFMYwVgQcD5C5KyuH2/+pfj6doCjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU2Mi9ENkI5Nzk2MjAy QTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtMa3JLNGZiXzZsLVBwMmdL TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqQldCQndQa0xrcks0ZmJfNmwtUHAyZ0tOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU2Mi9ENkI5Nzk2MjAyQTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtM a3JLNGZiXzZsLVBwMmdLTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAOXYCjG7vkIRoAWmno3tqHCehuTGLhClUHKc47lgWC9QVFYtX+9xf EHS8xFdaZIDSUS+GN8JFjomV1ZsPGn8LQEYywKK6x6EA7+leMLZh26cvJM8hUa2m dCNdorzIdhdBS6AybwNj8z8ROdMO95KpLADSvQHL/AiurS2pqpaOX0Slv30blLMK jU/ew4BhURtQyFSxWsvTrxG7jhoRDcupkIH7X4VWGq2Tv6+15306AS+C6a3D7CC8 byKkL4I0oR/WGdGuNlxp32PPvqyzekgj0LfGrUoqjrtjHrT5f4Gt7bNqs8bbTeec soLkRMJyhgfjDDCgsLaUMN2DMyHJ36nO -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:35 2025 by rpki-client